Edit tour

Windows Analysis Report
http://mylovelybluesky.com

Overview

General Information

Sample URL:	http://mylovelybluesky.com
Analysis ID:	1374750
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Creates files inside the system directory

Detected non-DNS traffic on DNS port

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5532 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1644 --field-trial-handle=1984,i,912001148016824484,8178260461963803595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3624 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mylovelybluesky.com MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for domain / URL

Source: mylovelybluesky.com

Virustotal: Detection: 5%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://mylovelybluesky.com

Virustotal: Detection: 5%

Perma Link

Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btv...

HTTP Parser: Base64 decoded: https://id.rlcdn.com/466606.gif?cparams=google_push%3DAXcoOmSvKXZnvXfDrlT_RpDfYTKoihT2dQUcpUM0tTWPukGCIw5SZab1d2x4Q-u5TJRdVvdGsExcrZSw0axhlJPcFXdH-ewHQ8N7PJU&google_gid=CAESEFnPY-kHMZNLMEj40Iiq_Tg&google_cver=1

Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20190131/zrt_lookup_fy2021.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btv...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btv...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btv...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btv...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://tpc.googlesyndication.com/sodar/62bHydCX.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-1-&adk=1812271801&client=ca-pub-6163292317333011&fa=1&ifi=10&uci=a!a&btvi=4	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-0-&adk=1812271808&client=ca-pub-6163292317333011&fa=8&ifi=9&uci=a!9	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-0-&adk=1812271808&client=ca-pub-6163292317333011&fa=8&ifi=9&uci=a!9	HTTP Parser: No favicon
Source: https://contextual.media.net/sr/2722522032/SAFEFRAME.html?ule=2967&&kkdd=HA%7C3%7CAnH9&-y=5iS(.R(Sl.RYli(S!!S&CEa_=S&A~ac=S&VE-=55lY&b~Vu=d.iW&VyE=YI2ifii56&VaVE=fVzC)JQMp96Qt5ppr__9VT%3D%3D&V_yE=i!l!!!WSl&~yBu=..!JRYS&VV=21&~V=eI&V8jA=~AApAyC_cby)jpbu~b&ayE=Yx!iFK.1&bayE=D56.!!Y&8bba~=5&___=faYut*l~YF5IalKP)i_(fqa~kZ(oA8kfED!qQ9C6Aq)%3D&j~u=(&3T=5&MCE=l&cEb5=YI22W90Yn&cEbR=Y.WRYY!l.&UEcbc=~ER%3DjM33OyM_3p3%3D5SO)Cu_aA%3DSLSWOE)ApU%3DSL(.O~VE%3DEVO_cu%3DS%2CSOE)Ap3%3DRSO-3R_p~E%3DRSRlS55lR5OyM_3pU%3Di!5L(.OM_3pbvV%3DSOM_3p_RcpU%3DSO~bE%3D!5Yl5iW(SOAjpUu8pU))~b%3DSL!5O_cb%3DSLSSS%2CSOya%3D51JdvfOPUU%3D5!OU8pyA%3DRS.O_yyaMc%3DS%2CSO_V%3D5O_y~MyE%3DS%2CSO_a~p~E%3DRSRlS55(SlO_cE-%3DSLSSS%2CSOM_3pU%3D5L.5O-3R_pM_3pU%3DSO~AApT_%3D!LiSilOM_3p3%3D5SO~3-%3DRiL.iOCVcb%3Dr5SOUU%3D5RYO~AApAM3%3DSLlWOu_aA%3DSLSWO-3R_pM_3pvV%3DS6SOa~ypV%3DR%2CR%2CS%2CS%2CS%2CS%2CS%2CSOUA%3D5Oa~ypE%3D5O_vu%3DS%2CSOc.apU%3D.Li!%2CYSL5O~E%3D5OMyE%3DRqcH3iHncCj03am-U9OV-3R_pU%3DiLW.OUbE%3D!i5W.SRYlWRYWW5il(W5(.(SYWWl5ll.!S..SRWYi!(5W!((i!55l...	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUU9JF8H&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C3...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C3...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C3...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-3-&adk=1812271801&client=ca-pub-6163292317333011&fa=1&ifi=12&uci=a!c&btvi=7	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-2-&adk=1812271804&client=ca-pub-6163292317333011&fa=4&ifi=11&uci=a!b&btvi=6	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-1-&adk=1812271803&client=ca-pub-6163292317333011&fa=3&ifi=10&uci=a!a&btvi=5	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNX4Exj-q2X1Lg9idKOL6uFr9t97MflTFaeqVz7mzqzF0FfgNqUyFFb9S1VsEdNaWK-cPGfL9m0WyIoBauYdfxBhnasaeQ	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejo	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNWVFmmYsV3u6gVaHonNMWgEEib1xMVcUmBc8ORWNWZDuk-TRhPMIQheD4Si9E96Sm_LjCegR_KqH35hk9vKdv0cWcMk-w	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXiYm1YXrfnFjUvJubGg5pw3v2O47jrwf3r9y31kIOzL7zGB4mz_9ZWas5ICwawGQFAU2gPDyPIJdsP1zXg25sPc5T8pIcYNLX79j0BEyTRl4Wd1lM	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=t4gr2hmzo6q0	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C3...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C9532...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C9532...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C9532...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-0-&adk=1812271801&client=ca-pub-6163292317333011&fa=1&ifi=10&uci=a!a&btvi=4	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/2024815875537436803/index.html?e=69&leftOffset=0&topOffset=0&c=Dy5dGanKQr&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://s0.2mdn.net/sadbundle/2024815875537436803/index.html?e=69&leftOffset=0&topOffset=0&c=Dy5dGanKQr&t=1&renderingType=2&ev=01_250	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C447959...	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6yzty5mqq4q2	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6yzty5mqq4q2	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C953202...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C953202...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C953202...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C953202...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-0-&adk=1812271801&client=ca-pub-6163292317333011&fa=1&ifi=10&uci=a!a&btvi=5	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C3108...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C3108...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C3108...	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: about:srcdoc	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=alrjcjeq8qxb	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C953...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-0-&adk=1812271801&client=ca-pub-6163292317333011&fa=1&ifi=5&uci=a!5	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49964 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.5:49742 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:50742 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49964 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.50.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.63
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.63
Source: unknown	TCP traffic detected without corresponding DNS query: 50.31.142.63
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:51 GMTcontent-type: text/csslast-modified: Thu, 14 Dec 2017 02:59:34 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 726date: Mon, 15 Jan 2024 13:23:51 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 55 cb 6e db 30 10 3c 5b 5f b1 45 51 a0 35 aa 58 76 52 34 90 2f 49 73 68 0f 3d 04 6d 80 1c 0d 8a 5a cb 8b 50 24 41 6e 62 3b 81 ff bd 20 25 d9 52 1c 03 e9 cd 5a ee 63 76 66 48 4f c6 e3 04 c6 f0 e3 fe 2f dc 5c df de dd fc ba 86 0a 35 3a a1 60 e9 8c e6 14 75 09 9e b7 0a 7d c8 bb b2 42 3e 88 0a e1 46 58 96 2b 01 b7 ce 40 b1 85 7a eb a9 b6 0a d7 36 66 79 d2 12 e1 e2 6c 76 76 9e c0 78 92 24 93 38 e5 67 db 79 df 6f 92 9c c9 d0 67 51 28 23 1f 40 89 02 15 bc 24 a3 b5 71 65 ba 76 c2 e6 50 38 14 0f 69 08 cc 93 5d 32 19 c3 92 36 a4 2b 90 2d 00 69 34 a3 66 28 c9 5b 25 b6 e1 88 34 dc 1b 73 b7 c2 1a fd d1 8c c2 85 01 6d 76 0e da 68 84 0f 54 5b e3 58 68 0e 33 da f4 08 26 5f 99 27 8c 15 f2 d1 79 e3 72 b0 86 34 a3 0b 89 4b e3 6a 20 6d 1f b9 2d 89 bf 43 b2 15 65 49 ba 4a 15 2e 39 87 4b bb 99 1f 62 8e aa 55 17 dc 0f 5b af 88 51 91 e7 45 8d de 07 82 5f 92 d1 32 f0 1f b9 ca 81 58 28 92 f3 64 24 8d 0a 30 3e 66 d9 65 96 65 f3 36 6b 8d 4d 57 6d 5c 2d d4 db 0b 35 fb f7 97 6f 22 fd e4 d1 9a 4a 5e e5 30 cd b2 4f f3 64 54 8b 4d 3a 8c 14 66 93 7a 7a 26 5d e5 50 18 57 a2 4b 0b 13 d6 8b 92 79 2b 64 3c 7a 03 c7 88 71 c3 a9 50 54 e9 1c 02 31 3d 68 4c ac f0 18 da fc a4 13 f6 6c 16 86 d9 d4 39 7c 8b 1c 4b 85 c2 05 60 bc ea 93 eb 84 1d 34 67 51 28 4c 9d 59 0f 01 5a e3 89 c9 e8 1c 1c 2a c1 f4 84 27 5b 46 73 7c ed be 1c 2a 23 ca 45 f1 c8 6c f4 a9 71 12 95 8a 94 ba 8a 74 04 0c d9 70 fe 13 3a 26 29 54 47 52 4d 65 a9 02 06 45 1a d3 55 2b f1 74 c0 5b 8d 0b 45 35 f1 42 1b 26 89 47 de 3e 38 c6 61 d9 b9 c5 d3 33 e6 30 9d 0d 2c e8 ad d0 83 72 d2 71 6e a7 c4 bb d1 bd c9 e3 ee c0 95 34 95 8e e7 f0 6a 72 43 4d 77 41 02 3a 08 75 8e 15 fc 6f 71 16 ed d0 c6 9a 5b 38 dc 96 ea 2a 3e 34 8d b9 2f ba fc bd dd 43 64 a8 4e b7 61 9b cb c6 e6 10 ee df 73 4a ba c4 cd 50 98 81 23 7a 83 66 0e eb 5e af f6 b3 27 4a 1b e9 5c 92 c1 b4 71 f6 6b f6 e3 65 6a cc 7f 6a 6c 5e e0 d2 b8 68 89 f7 56 1f b1 4b b5 a8 d0 1f 5b ba 33 45 cb 70 77 0b cf 1b 8e 93 49 f3 af f2 e7 ee f7 e0 ad ef 29 d9 7b 8c 1c ca d6 2d ac 5e 3d 13 51 cd d8 f1 aa c6 92 04 18 ad b6 e0 a5 43 d4 20 74 09 9f a1 a7 d9 f7 cb 99 dd c0 97 d0 f5 94 0c 7b c1 9b 37 f9 20 6a fb dd 53 a2 0d ed 92 dd 3f 79 6a a6 dc 24 07 00 00 Data Ascii: Un0<[_EQ5XvR4/Ish=mZP$Anb; %RZcvfHO/\5:`u}B>FX+@z6fylvvx$8gyogQ(#@$qevP8i]26+-i4f([%4smvhT[Xh3&_'yr4Kj m-CeIJ.9KbU[QE_2X(d$0>fee6kMWm\-5o"J^0OdTM:fzz&]PWKy+d<zqPT1=hLl9\|K`4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:51 GMTcontent-type: text/csslast-modified: Thu, 14 Dec 2017 02:59:34 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 411date: Mon, 15 Jan 2024 13:23:51 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 94 c1 4e 83 40 10 86 cf ec 53 cc c5 a4 35 52 31 8d 51 e1 e2 63 78 6b 46 18 da 51 d8 21 cb b4 6a 9b be bb 59 ac d5 6a 81 12 13 6f b0 fb fd 33 f9 ff dd 9d 49 5a 69 ba 98 e1 13 be ce 5e 1c 56 b0 31 41 2a 85 b8 18 1c 65 89 d9 9a c9 07 c1 e5 3c 5e c8 8a 5c 43 2c 5d ed 91 8c 72 5c 16 9a 98 a0 92 9a 95 c5 7a 59 81 ca 2b 4a 4c b0 0e d9 66 f4 1a c3 55 94 98 20 7c a1 c7 67 d6 50 1d da 4f 78 1a 45 65 0d 84 35 85 6c 43 59 fa 52 61 29 eb 7e 48 7a 91 9e fd bd b3 82 72 fd b2 76 79 0e a5 ac 08 54 40 17 04 8e e7 0b 05 b4 19 b0 4d 9d 2f d0 2c d7 bc 26 90 1c b8 c4 39 c1 f9 e5 0f 77 b9 b8 32 86 e6 b3 40 a5 87 d1 55 14 9d 8d a1 4e b1 a0 d1 f4 02 a6 e3 03 9f a7 e1 32 a8 76 3d 80 3e 99 dc 67 d6 c4 d2 1a 9a 4f f4 ef 99 85 03 43 6b e1 db 82 38 8e b7 85 7c 94 3e 1d dd 07 97 92 55 72 07 c9 0d 0f a9 3b 92 2e 47 9d e1 b4 9a 6b b9 03 54 08 66 b3 c7 a5 aa d8 5f b3 a1 12 f6 4e 13 13 48 85 29 eb 5b 0c d1 e4 a6 4d be 5b c3 d4 4f 0e 5f e5 50 14 a0 e5 12 3f 9e f2 4e 2d da fc c3 6d f3 b2 d9 e6 6c 59 09 0a b6 84 ee db b4 19 ac dc 9a fb 4f ed 33 bd e5 0e 4b aa 7f 4a 37 26 88 ce 60 73 e4 68 1a 84 46 51 46 f3 71 b2 35 81 bf 0b 5d e0 f4 fa 6e 87 fa be fe 24 ff bd a9 fc 7b cb be 7e bd 7d 3a eb bf 03 51 48 31 e7 d3 06 00 00 Data Ascii: N@S5R1QcxkFQ!jYjo3IZi^V1A*e<^\C,]r\zY+JLfU \|gPOxEe5lCYRa)~HzrvyT@M/,&9w2@UN2v=>gOCk8\|>Ur;.GkTf_NH)[M[O_P?N-mlYO3KJ7&`shFQFq5]n${~}:QH1
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:51 GMTcontent-type: text/csslast-modified: Wed, 15 Nov 2023 18:57:00 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 1016date: Mon, 15 Jan 2024 13:23:51 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 51 6f db 36 10 7e b6 7f 05 97 22 68 52 84 ae ac c4 69 26 63 c3 30 0c e8 cb 80 01 7d 2b 82 3c 50 e2 d1 39 84 22 b9 23 15 c7 2d fa df 07 92 76 2c a5 52 90 21 70 20 89 c7 bb fb be bb ef c8 c5 d6 35 ea 13 5b f8 86 00 0c 27 10 12 88 13 78 67 8d 07 f6 7d 3e 73 d6 63 40 6b 2a 26 6a 6f 75 17 60 3d 9f d9 47 20 a5 ed b6 62 f7 28 25 98 f5 7c d6 68 74 15 23 68 c2 d9 d2 3d 5d b0 c1 bf f3 bd 01 77 22 dc 57 0c 8d 87 70 b6 2a 4e e3 f7 7b c0 cd 7d a8 a2 d9 7a 3e db a2 8c 16 f9 a5 15 b4 41 53 31 9e 5f 9d 90 12 cd a6 62 c5 7a 3e ab 2d 49 a0 fc bc b5 24 f9 96 84 ab 98 b1 d4 0a cd 7e c1 d6 59 0a c2 84 f5 fc c7 7c be c8 30 95 a5 96 e5 e7 67 8c dc 76 c1 75 21 42 3d 84 2b a1 65 c5 62 05 2d 5b 42 3b 88 bb 28 9f 3f 1e e2 97 ee 89 79 ab 51 b2 77 45 21 0a 59 ae d9 c7 0f ec 4f dd 01 fb f0 f1 45 ec 05 1a 0c 13 09 5c 0c 0c 09 3c 84 80 66 f3 26 6b df d5 2d be 66 1e d1 49 f4 4e 8b 5d a4 c8 c0 4b 56 16 1e cc 54 66 71 73 46 cb 1b ab 2d 55 ec dd d5 75 7d b5 2a 12 d2 cf b1 71 46 a0 2a 81 1a e4 9b d2 17 b5 a5 30 69 3b 12 5e 36 97 e5 65 26 fa 0b c8 91 e0 de 89 d7 0a fd c2 9d 5a 5d 43 79 93 dc fd 43 c2 6c c6 2b f7 28 62 91 df 82 a7 33 a2 69 c0 4d 43 1a 9a 3b b1 6b c1 04 4e f0 6f 87 f4 7f 78 50 aa fe b5 c8 65 f8 0a 5a db ed 20 71 1e bd f3 c6 9a 40 56 27 79 0c f5 4c a0 45 c0 c7 7e 2f 70 63 03 4f 40 79 c0 64 3e 4d f9 4c 59 13 b8 c7 6f 50 ed 25 91 3e 6c f7 72 ce 42 5c f7 fa ae d6 b6 79 c8 c1 3a 0f 5c 69 2b 62 cb e6 78 22 e6 94 82 4e 65 32 96 f8 2c 58 57 31 5e 42 1c 0f 1a 54 38 a4 f2 8d a3 91 f0 54 b1 65 d1 1f 16 cb a3 58 f7 80 e6 b3 5a 34 0f 1b b2 9d 91 89 51 d5 17 7c d2 fb e2 26 b9 dc 4f a6 f2 2a be 1d 19 d3 e8 03 c7 00 ed 40 63 68 34 1a e0 7b c8 cf 93 a5 48 7f cb 09 0f 5c 8b 1a 74 55 d5 a0 2c c1 c5 e4 ba 50 01 28 17 c7 04 30 a1 62 27 ec a4 ef d1 3b 34 26 9b 3c a2 c7 1a 35 86 5d 6f 56 4f a5 79 a4 e2 b9 c5 ca cb f2 a6 94 a9 ee 7f 09 7a 60 9f 49 ec d8 4d 51 a4 0e b0 4e 34 c9 73 b1 f8 b4 ea 53 94 c6 f5 61 b0 ef 5f 0f 35 c8 e3 e7 d0 ca 24 24 76 3e d5 e9 f4 e5 88 3f b2 b6 77 31 d1 bb 13 33 70 82 85 f4 ac 61 84 af 03 f3 03 6a df bf 5f 4f 1c 82 23 6c a9 5a d5 aa 49 6c fd 1d c1 67 ba 96 7b ba 52 b3 66 24 b9 57 af fa 47 de f5 80 b4 eb b7 73 16 48 18 9f b4 6e 09 13 61 37 ee 29 fe d6 f3 99 30 d8 66 69 19 d1 42 c5 22 d2 c1 67 d9 91 c8 c8 96 45 51 b4 7e b0 18 b0 8d 02 55 9d 69 b2 4d ec 16 41 03 1b 0c 90 3d f0 c6 76 91 30 34 2a 1e 73 99 e0 3f 5a 90 28 d8 99 23 50 40 9e 13 c8 ae 01 c9 5b 7b a8 63 7c 3f 8f 8c 4f d7 e2 27 14 b5 46 13 fb 75 14 47 79 c0 f1 23 25 f0 00 3b 45 a2 05 9f b0 47 77 8a 6c 12 eb 91 b8 8a 91 0d 22 c0 59 21 61 73 9e b6 c6 6a 4d 18 5d 5e 1f cd 86 11 52 5e 83 10 47 85
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/csslast-modified: Thu, 20 Dec 2018 14:44:34 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 1667date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 eb 6f db 36 10 ff 1c ff 15 44 8a a2 71 16 3a 92 f3 84 8c 01 5b 3b 0c 18 b0 61 5b 07 ec cb 36 14 b4 74 b6 89 52 24 4b 52 71 dc 22 ff fb 40 52 b2 de b6 ec a4 6d 81 d6 e2 e3 ee 77 ef e3 5d 9e a3 9f 05 37 e8 2f fa 19 f4 08 1f f2 07 9d 5f 8e 46 13 e0 46 6d 70 2c b8 01 6e 90 9c ac 88 c6 3a 25 8c e1 85 e0 06 6b fa 19 d0 97 d1 c9 f6 23 42 e1 54 3e ce 46 4f 3d 77 15 2c 33 46 54 ff ed db 5d b7 19 51 4b e8 bd 3b 0d f6 de ed 67 3c bd ce 2f 5f 9e a3 9f 94 90 e8 1d 91 07 6a ec 68 85 26 4a 48 1c 13 19 71 61 ce a2 85 88 33 3d 8e a2 05 55 da 60 06 c6 80 6a 80 bd 9b dc 41 3a 1b 9d a4 44 2d 29 8f 50 30 09 21 45 c1 24 b8 b7 ff 21 ec 7f 0d d7 c5 40 14 17 83 fc e1 00 91 3c 7e ac e8 72 65 ac 14 c1 55 8e da 5a e1 2d 89 3f 2e 95 c8 78 82 de 09 26 d4 4b b9 ef bc a4 fb 65 74 22 49 92 50 be 8c d0 f4 46 3e a2 ab 9d 2e 54 de 9c cc c5 23 d6 2b 92 88 b5 25 52 7e 45 28 40 81 f3 44 a4 96 73 72 16 5c b8 bf 93 70 3c 88 2c b3 9a c0 06 1e 0d 22 96 70 6c 05 8f d0 ab c5 62 31 1b 9d d8 75 9c 40 2c 14 31 54 f0 08 65 3c 01 c5 28 87 83 89 7b 93 f4 18 b4 ef ce 4a 3c 78 bb b5 80 70 31 0c 03 22 3d 2c 1d 45 27 6d 4d 70 ca 57 a0 a8 19 46 7a a0 4c 85 20 03 90 ec a4 58 3b b8 55 4d 13 f8 3e a3 5d 9e a3 1f 19 5d f2 14 b8 39 c6 c3 d7 12 cf 99 88 3f e2 79 66 8c e0 13 62 89 31 58 98 8b ca 5e 6c d1 75 6f d1 94 2c 01 95 7b ed b0 9c 16 99 a4 93 95 3b d4 c3 ab b5 57 65 e6 36 2b dc 2c f3 2e 66 90 ce 21 f1 57 16 19 63 17 dd 5b 6b 9a 40 8b 53 f7 ad ca 96 bd 55 81 30 17 c6 88 34 aa 64 01 7b 17 af 69 62 56 5b e3 37 7c a1 e4 d1 92 25 26 2c 3e 43 38 0c 82 87 35 ba 44 53 f4 1d 0a 83 e0 b5 fb 39 9e 35 d5 bc ff f4 a3 47 12 21 77 c6 03 cc 61 60 4d 13 98 13 d5 8f ee 62 34 c9 cf 1c 22 49 9e ce 5c b1 29 99 bf f6 bc 25 59 02 36 90 4a 46 0c 60 fb f5 81 11 6e b3 e9 11 7a db 0a 77 1f 38 ed 77 aa d2 ed 0d 56 65 df e9 a7 d1 e8 87 14 12 4a 90 e0 6c 83 74 ac 00 38 22 3c 41 67 55 1c d7 a1 7c 1c 5b 70 2f 29 68 c3 8c af 67 6e a9 a9 ea a7 9d 18 29 ff 3a 18 8b 68 a8 ab 1e db c2 58 c2 2c 74 5c 2e 97 70 ee 7c e0 0c 86 1f 5e 5d 07 05 fe 67 82 0c 73 af 69 a2 2c d7 9b 6c 0b 9c 97 e7 b6 bd c8 52 fe 02 fd 71 35 0b 3a 92 16 69 42 b5 64 64 13 21 b7 33 db 91 6d f6 10 ab 7b d2 b6 71 09 4a 0a 4e 16 5b 88 7e b1 39 ee 18 79 06 98 a1 2b d3 17 a0 da 09 6a e7 e5 e6 b7 6f 34 ea bd ee f5 7d 29 dc 5b 57 78 8e 32 54 1b 81 af 62 ad 85 0f 1f 18 e5 1f 5d 57 b7 6d 19 70 d1 87 4d a7 d3 99 6d f7 54 02 aa e8 7a f2 4f ac 48 42 33 1d 21 1f 17 f5 ce 2d ce 94 b6 9f 52 50 6e 40 cd 72 09 17 24 a5 6c 13 a1 37 ef 09 83 35 d9 bc b9 40 9a 70 8d 35 28 6a af 6d 6d 6c 9f 45 f9 13 c5 37 14 46 11 ae 17 42 a5 11 ca a4 04 15 13 6d a1 ac 57 d4 00 d6 92 c4 60
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/csslast-modified: Thu, 16 Nov 2023 03:35:32 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 438date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 53 c1 6e db 30 0c 3d db 5f a1 e5 b4 0d 55 d0 ee b0 83 83 9e f6 19 c3 06 c8 12 ed 10 a1 45 41 62 12 a7 c5 fe 7d 90 ed 66 4e 67 07 05 74 21 df 23 f9 48 91 db 84 5d 20 d0 89 2d 1a d2 68 d9 27 95 4e ed 4f 4b 26 a5 df cf 9b 09 d8 fc 7a 28 b7 77 b9 5f 9f 37 ea 4a 56 af 65 e1 30 05 32 97 4a a1 27 f4 a0 6b 62 7b d8 95 c5 19 9d ec 2b f5 04 dd ae 2c f6 80 ed 5e de ac 24 91 0f a0 27 c6 e3 d5 53 29 7b 8c 11 bc fc 60 e2 b8 2b 8b 06 89 de 3b ff 94 cb 0a 5f cb 82 4f 10 1b e2 73 a5 f6 e8 1c f8 75 f2 91 32 bf 33 b1 45 3f 2a 08 c6 39 f4 ed 60 dc 89 22 cc 81 b5 b1 87 36 f2 d1 bb 4a 79 f6 a0 3e 61 17 38 8a f1 b2 2b 8b 9a a3 83 b8 84 34 c4 46 2a 45 d0 64 8b 30 89 4e 72 21 d0 72 09 b0 14 70 55 a8 be 87 5e 3d 7d 0b fd 2d fe 4f f5 8d ff 7e 03 66 68 61 55 a4 ee f8 45 d7 dc eb 84 2f 43 6e cb 5e c0 4b f6 65 f8 0c f5 01 e5 0e 63 1d 59 db 95 86 fd 34 89 2c 28 76 86 de cd 2d e3 27 13 d1 78 b9 c3 38 4f 5b b6 44 b8 dd c0 a1 fa ad 4b a0 17 6d 08 5b 5f 29 0b 5e 20 be 39 1d 58 8e 46 90 fd d2 b8 06 8a 44 e3 53 c3 b1 5b 62 cc 2f 61 fd 67 b6 43 ed b1 72 fe a0 25 3d 1f 8c 1e 97 74 75 d8 e3 12 66 9d eb 19 b7 c9 46 00 af 23 18 07 51 67 31 39 67 e0 84 e3 20 4c 9d 98 8e 02 b3 fe 42 3f 9f f3 60 cd af ea ba cc 7a c4 fe bf d6 c2 12 86 4a 45 b0 f2 f9 f1 41 4d ef cb ec a4 f2 71 fe 05 6a bc 46 38 cc 04 00 00 Data Ascii: Sn0=_UEAb}fNgt!#H] -h'NOK&z(w_7JVe02J'kb{+,^$'S){`+;_Osu23E?9`"6Jy>a8+4FEd0Nr!rpU^=}-O~fhaUE/Cn^KecY4,(v-'x8O[DKm[_)^ 9XFDS[b/agCr%=tufF#Qg19g LB?`zJEAMqjF8
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/csslast-modified: Tue, 11 Jul 2023 18:07:28 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 533date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 55 ed 8e 9b 30 10 7c 15 7a bf ee a4 80 72 b9 aa 95 8c da 17 a9 5a b4 e0 05 56 31 5e 64 2f f9 28 ba 77 af 30 c9 25 81 84 eb 1f 24 ec f1 ce ee ec ac 9d 80 d6 c2 60 8f 59 c1 56 d0 4a 5f 18 04 a7 72 96 3a 6d c0 55 64 d5 eb b7 f6 10 41 27 fc 9e 7c a0 6b 04 8d ae 3f 21 d6 d1 3a 1a 50 57 00 43 5e 7a 4d be 35 70 54 64 0d 59 4c 87 4f 5c 23 55 b5 a8 13 7c 03 d9 96 24 02 85 4d 2b c7 d5 65 e1 57 61 c0 fb 3f 3f 9e 86 95 bc 13 61 9b 3d fd 56 35 f8 e7 00 f2 59 67 35 96 64 51 bf 7c f0 58 b6 38 c9 21 82 55 b2 27 5d a1 44 d3 8d 3e 67 a7 d1 a9 75 9a f3 21 f6 35 68 de 87 10 e9 6d de 71 6e b8 d8 a6 25 5b 89 3d fd c5 90 7b da 82 d6 64 2b b5 8e be b6 87 74 87 4e a8 00 13 83 a1 ca aa 86 b4 36 f3 54 22 6a aa 0b eb 5d 16 6e a1 20 39 aa d7 94 77 e8 4a c3 7b 55 93 d6 68 a7 14 39 78 1c ce cd 49 7c 0b b6 bf 5f 82 61 90 7b 2a 9d 75 cf 86 fa b2 b7 4d 04 fd a5 dc b7 cd ac b3 73 bc b2 2c cf 17 90 6f b1 20 30 99 47 b7 a3 02 5f 7e 86 a4 4e bd 1f 02 de 98 21 2c ec 49 4b 7d 8f ec 3f 83 8f ba c6 0e 34 75 5e 0d 4d 59 16 78 2e 5c a8 aa e0 ce 4a df b2 27 21 b6 ca a1 01 a1 1d 4e e5 17 6e df 13 4f 82 d1 59 8b 59 d2 25 17 9d 5f cd 96 eb a1 b1 0f 4d 39 6e f7 39 14 db ca 71 67 f5 e8 c8 47 56 9d 4b 15 ce 0f 46 7b c0 3c da e3 ac 42 f2 7d 16 e1 a1 ce 0b a1 3f 3b 73 c3 79 ad fc 04 7e df b6 9f 0d d7 24 c8 30 f2 0f f7 34 ed 96 77 93 32 cf a8 74 d0 60 36 b6 68 01 3e e2 16 00 a1 ee f3 25 f9 68 82 bf 50 d3 b2 13 b0 b2 50 d3 48 35 bd 51 1b 38 c4 e3 dc 04 33 5c f7 a1 06 87 97 5f cb 19 15 6c 43 42 c1 b0 d4 54 99 e0 41 6e ef ce 69 80 db 0b 6b 64 1a 5e 82 f4 34 b8 e1 55 f8 07 0f b8 f5 19 44 06 00 00 Data Ascii: U0\|zrZV1^d/(w0%$`YVJ_r:mUdA'\|k?!:PWC^zM5pTdYLO\#U\|$M+eWa??a=V5Yg5dQ\|X8!U']D>gu!5hmqn%[={d+tN6T"j]n 9wJ{Uh9xI\|_a{*uMs,o 0G_~N!,IK}?4u^MYx.\J'!NnOYY%_M9n9qgGVKF{<B}?;sy~$04w2t`6h>%hPPH5Q83\_lCBTAnikd^4UD
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Thu, 20 Dec 2018 14:44:34 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 322date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f cd 6a c3 30 10 84 cf d6 53 ec c1 e0 1f 62 b9 f4 1a 0a 2d 85 16 4a 0b 29 e9 b1 97 ad b5 b6 37 91 25 23 c9 81 34 e4 dd 8b e5 b4 a1 17 c1 7c bb 9a 9d a9 cb 52 40 09 1f 3d 7b f0 8d e3 31 00 2a e5 21 f4 04 64 82 3b 82 c2 40 10 6c 24 6f d8 e1 37 1b 82 8d 8b 60 20 29 20 1a dc 8f d8 ec b1 bb ae 7c be 6c 23 c7 29 f4 d6 c1 36 4c 8a ed c6 91 f7 11 6b 6e c8 78 82 e7 cd 6b 75 2b 6f 2a eb 2a 8d 81 9c 80 b2 16 62 f7 3e 91 3b e6 ed 64 9a c0 d6 e4 90 42 71 12 22 a9 6b 78 50 0a 76 1e be ac 3a 42 a3 d1 7b 29 92 34 cf 66 9d 15 12 95 7a 9c 61 9e ed 7c 56 ac 97 2f 4f 6c 14 04 1e 08 5a eb 80 b0 e9 2f d5 d0 28 18 ec 81 80 03 b0 f1 ac 28 b6 e4 61 2e a2 d9 ec 17 6f d9 db 81 aa 81 95 d2 04 e8 02 37 9a 56 b0 d0 60 c7 5f 94 15 72 f6 be a6 2e 4e 22 49 0e e8 20 8d c7 ef 20 cd 43 cf be 90 2d 1b 95 67 32 86 a8 e6 d9 12 35 f9 3f 47 89 9a 3b a3 a9 0d 2b b8 08 63 0d fd 09 c7 5d 1f e6 d2 e3 48 46 e5 f1 4a 34 3a cf ef b9 58 ff 00 fd 7f bb 03 dd 01 00 00 Data Ascii: Uj0Sb-J)7%#4\|R@={1!d;@l$o7` ) \|l#)6Lknxku+o*b>;dBq"kxPv:B{)4fza\|V/OlZ/((a.o7V`_r.N"I C-g25?G;+c]HFJ4:X
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Wed, 15 Nov 2023 18:57:00 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 3226date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 5a 8d 8e db 38 92 7e 15 5b 9b f3 91 69 5a 76 3a b9 1d c4 dd 8a 2f 77 93 05 02 ec cc 2c 76 6f b1 c0 b9 9d 39 b6 54 b2 99 48 a4 86 a4 6d 75 5b da 67 5f 90 fa 97 a5 9e 74 76 b0 b8 00 69 93 fc aa 8a c5 aa 62 91 22 39 0d 0f dc d7 4c 70 84 cf ce 41 c1 44 69 c9 7c ed dc 1c a9 9c 68 ef 1c ac 6a 02 20 1c 9f 43 21 91 81 d8 84 f1 09 c7 da 15 88 13 86 67 b3 a9 29 82 2d fe 74 ff 19 7c ed 06 10 32 0e 7f 92 22 01 a9 1f 0c 46 ce c0 0f 31 48 7a 1f c1 6a ba 24 3b d0 2b be 61 db 1c e7 44 34 1d 69 02 f8 2c 41 1f 24 9f 94 b2 12 29 b4 d0 0f 09 b8 7b aa 7e 3a f1 4a aa eb d3 28 b2 0c 39 91 2d 09 66 30 bc 50 20 70 a6 9e e1 14 e1 e4 2f 0f f1 bd 88 66 b3 e2 d7 d5 e2 2f 5a 32 be fb 1f ba 1b 53 5a 93 4b 5a 72 3e d2 e8 00 2b e7 07 11 1c 22 70 72 4c c6 98 9d 9f 7f 06 55 92 55 6c d3 65 8e f3 9c 80 77 ce 6f 2a 85 27 56 65 16 22 bd 67 ca 0d 85 8c bf a7 9a 7a e7 9c d8 06 2d c1 90 93 29 d2 13 c6 95 a6 dc 37 c3 f9 43 49 87 71 69 2c 43 7c d3 15 a1 6f 7c c1 95 9e 80 87 b0 f7 ee 5c 54 b4 c7 e1 34 f9 81 26 37 15 a3 1b 51 b9 03 a5 3f f2 00 52 6f 49 b4 ab 40 7b 5d d7 3b 8e e7 79 b0 06 af 4b 7d 75 b5 5a 7c da 2c e7 6f b7 57 2f 16 ae 06 a5 11 e0 d9 0c 81 97 50 a9 e0 23 37 75 d2 e5 b9 f5 60 36 43 bd 5e e1 ea 15 c6 e4 07 9a b4 bc ad 40 d7 2e 26 1c e7 44 e7 37 8d 49 00 e1 72 78 dc 5b 7c 42 eb 5b 4e 63 78 b7 a1 f3 c7 ed 66 4e e7 8f cb f9 db 9f 57 db 97 18 ad 6f a9 94 f4 e1 1d 5a af ee 36 68 bd ba 20 c9 ec 00 5e e2 bb 2d 7e 89 17 ec c6 84 b9 95 bc d1 84 6d 45 38 e9 58 15 97 76 54 9e 76 63 aa fd 3d e2 f8 86 85 48 61 16 22 6b 26 e5 ee a4 38 24 ca b5 fd e2 5a 65 33 20 54 83 46 5d c2 f0 0d 44 0a 6a d7 6c 5c d7 ed b2 17 7d bc 8f 22 b4 b8 db a0 27 74 5f ec 18 de ba 31 4d 10 42 1b 4d 60 8b bd 77 80 f1 8d 76 0f 5c ed 59 d8 eb ba 31 9e 76 13 91 20 43 28 21 38 f8 80 10 d2 84 9b 80 61 21 ea 7b 97 1b ef f2 c6 bb 1c 1b f7 ee c0 94 5a d1 f9 03 4d ea b8 2c d1 b2 3f 66 1d 57 63 c6 24 26 87 10 96 e3 26 de 71 dd 9e e7 b9 76 65 11 44 01 02 72 0e a8 86 55 2b 6f 95 92 c2 9c 04 f4 41 84 27 80 2f 03 f0 3e 27 10 53 16 0d 40 34 27 26 31 0d 20 87 9c 84 2c 1a ea 2d ce 49 4c d3 11 55 1e 2d 68 38 15 7b 1c 22 f8 68 09 98 86 58 0d a0 47 8b 46 c0 77 7a 3f 00 a7 16 e6 87 f8 1e e4 00 7c 9f 93 98 f1 11 cd de 5b f0 09 cd 5e 58 82 31 cd 76 16 1d d5 ec 64 e1 51 cd 1e 72 32 8a f9 39 91 f0 cb 81 49 08 06 50 d1 a0 23 fe 90 39 d1 30 e4 dc 28 27 9a c5 43 2c 41 4e 0e 72 88 25 c9 73 4c 78 2b 0d 01 d7 92 81 f2 2e 49 9b 99 5d d2 20 9c 77 58 77 ed 3c aa 07 f8 cc d4 d0 97 4c ef a3 a8 c3 c7 42 34 b5 4c 7b aa 90 ae 52 fe 66 5b e7 77 5d a7 77 ee 6d b6 26 1d 75 16 0b 33 1d 9b ac c6 88 b2 59 0d 73 37 39 a8 3d 72 5d 17 90 c2 4
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Tue, 08 Nov 2022 14:57:18 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 1891date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 57 5b 8f db 36 16 7e de f9 15 32 b1 30 c8 0c 87 b6 f7 65 0b 19 aa 91 36 c5 26 45 83 cc 22 29 fa 30 9d 02 14 79 24 31 91 49 95 a4 c6 31 66 f4 df 17 14 25 5b 1a 67 da 7d b1 c5 73 48 9e db 77 2e 5c bd ba 4a 5e 25 9f ff db 82 3d 26 1f db 06 6c a1 5c 95 bc 07 dd 26 b7 75 5b 2a 9d dc 24 0f 1b f6 6f b6 59 87 9d 3f 9a e6 68 55 59 f9 04 0b 92 fc 6b bd f9 2e f9 d9 40 9d fc a0 ac a8 ae 92 fe b6 37 2d af 93 5a 09 d0 0e 64 d2 6a 09 36 f1 15 24 ef df 7d 4a b8 96 c9 7f 6e 7f 19 d9 2e bd 4a 5e fd a3 f2 be 49 57 ab c3 e1 c0 4c 03 da 99 d6 0a 60 c6 96 ab 71 db 6a af fc cd b0 60 4d d5 3c 3b 55 ea 76 be bd 6c 6a 56 f9 7d 7d 95 bc 5a 5d 5d 6d 17 45 ab 85 57 46 63 4e 73 f2 88 5a 07 89 f3 56 09 8f b6 0f dc 26 22 3b 6d 20 8f 91 f0 98 8b 1f 6b ee 5c 8a 5c 71 93 5b e0 52 d8 76 9f 23 ba 07 dd 9e 39 9f dd 0d 68 9e d7 20 11 e5 5a 54 c6 9e 79 07 e5 ab 9b b6 8e 47 5e 5b 6b 0e 67 1e 0f 4b 87 3a 2a 9f 8b ce b3 d5 1f 78 b7 b8 fb fd f0 fb 6f f7 af 7e 53 5a 9a 83 4b 6e 2b a3 81 0c 44 ac fa e5 93 ba e5 f2 49 dd 1a 49 56 8a 79 70 1e 6b fe a0 4a ee 8d 65 ad 03 fb ba 04 ed c9 d6 82 6f ad 4e f2 e5 92 63 14 bc 82 08 13 ce 61 24 5a eb 8c 45 14 35 46 69 0f 16 11 66 34 46 a2 56 e2 0b a2 9c 69 63 1a 42 f3 0e 13 0a cf d5 e4 99 34 a2 dd 83 f6 6c fc f8 a9 86 7e ed fc b1 86 41 2a ca a1 e2 0f ca 58 a4 74 c2 97 4b 54 a8 ba 1e be 57 0a f6 26 57 35 fc 95 f6 41 78 31 15 1e ef 5d 2c 72 76 1b b5 fe e9 01 b4 0f db ca 6c 1a 66 2a a3 a2 40 8b 4c b0 53 d4 b6 79 b0 bd 8f 86 5b 2e 71 71 9d a1 04 5d c7 0d e7 18 05 83 e5 0e 71 29 fb 25 4a 91 85 bd 79 80 b8 a2 fc 0e ee 71 41 3a 5a 9d 45 f6 02 47 57 b3 42 69 89 51 ad 18 ba 96 ac e1 be 8a d7 32 17 20 8a d7 34 12 7f 81 07 a8 1d 61 a3 1c 2c 59 65 1e 20 62 e8 3a 2a 36 e0 90 b0 42 d5 1e 2c be 70 45 c2 b1 af 94 23 4c 54 aa 96 16 34 96 ac 31 cd af cd 47 a8 41 78 63 09 ab 94 04 4c 98 ab cc 01 13 56 83 2e 7d d5 11 36 b1 09 4f b5 ec a8 ca e6 19 13 1c 29 b3 fc 45 8f 6c f9 59 3a e2 88 dc c9 7b 2c d8 24 21 48 47 3f 4f ee 1c a1 ce 23 10 f7 ee c6 9b 56 54 37 bc e7 23 42 c5 c8 9a d3 b7 22 13 4f 4f 39 15 19 6a b8 be 39 a2 2c cb c4 0e f1 d6 1b 94 0e 24 1a 4f 3e 5e dc 9a 0a 8a 9e 11 3a d2 d1 2f 33 bd 46 9f 32 51 1b 17 40 89 d8 08 8f d1 90 fa 5b 07 be 60 4e 98 e4 9e 63 e4 8a 0f 4d e0 3a 44 3a ba bf cc ef 21 5e 54 64 35 ce c9 56 d4 c0 ed 27 b5 07 d3 7a 2c 98 2b c2 b7 25 34 67 4e e5 b5 d2 a5 0b a1 1b 4b 33 46 21 98 88 30 d0 72 4e 0f d1 0d 12 f5 04 93 e4 31 67 16 3c 57 fa 96 fb 2a e3 4c e9 d7 d6 f2 63 af c1 dd fa 9e e6 ec 9f 21 ee e4 fb 9b 0d 0d b4 4b 41 91 dc 70 0b da bb de 1b f9 04 a4 23 9a 9e 9e 70 ce 8c 7e 27 6b 60 82 d7 35 fe 12 8d 24 a3 84 61 df 72 c9 59 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Tue, 08 Nov 2022 14:57:18 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 249date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 75 90 c1 6a c3 30 0c 40 7f 25 0d 23 d8 90 b9 e4 da 60 0a 65 3d 04 c6 3e 61 43 b1 95 c4 34 95 4b 2c b7 1d 4d ff 7d 78 6b 59 2f bd 49 8f f7 0e 52 17 c9 b0 f3 94 f5 f0 15 76 ee 30 3a da 05 21 2f 79 0c 98 05 9e 9c e1 bc 3e c2 94 75 13 f4 7b 24 6e de f4 e8 0d a4 46 0d 10 06 15 62 9b 3c ea 45 25 6b d7 89 7f 51 5e 52 88 23 a6 55 5b 6f 62 1a 54 8f bc fd 63 9b ef c6 3e fa f5 cd 2d 0a b1 a8 b4 d6 cb 4f b1 5e c1 1c 70 44 c3 b3 a3 43 e4 b9 8d cc 9e 66 c6 33 c3 84 20 5f 96 4e 31 06 16 b7 56 31 f4 1f b0 47 59 14 0f a8 6d c8 e2 59 bf 56 b2 bc c3 ce 9b 18 84 94 d7 eb c9 91 f5 27 05 d6 6e 8f 48 fc ee 02 23 e1 b4 7e c2 45 9e ee 36 03 50 8f 79 f9 f8 b7 72 51 c9 d5 bd 62 06 33 fc 86 22 f7 f4 2c 91 f5 0f ba e8 64 54 82 01 00 00 Data Ascii: uj0@%#`e=>aC4K,M}xkY/IRv0:!/y>u{$nFb<E%kQ^R#U[obTc>-O^pDCf3 _N1V1GYmYV'nH#~E6PyrQb3",dT
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Thu, 20 Dec 2018 14:44:34 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 1425date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 57 5b 6f db 36 14 7e f7 af 70 38 c0 25 6b 4a 71 da 37 2b 44 80 15 c3 56 60 c3 3a b4 db 4b 92 15 14 79 64 b1 91 29 55 a4 7c 99 eb ff 3e 1c eb ea 4b ba 6e d8 4b 12 91 e7 c6 73 be f3 9d 93 eb 97 a3 f1 8f ef 7e 0e 5e 85 b3 20 2f 83 4c 7a 28 47 2f af 47 34 a9 ac f2 26 b7 b4 e0 31 df b2 5d fb 3d fe 4c d9 6e 25 cb b1 14 31 7d 11 57 de e7 f6 de e8 3f 1f 36 af 35 59 80 05 67 5c b0 cc 63 93 41 40 1e 5f b0 50 7a 5f 52 62 34 61 91 49 28 a9 ac 86 c4 58 d0 e4 4a 08 bf 2d 20 4f c6 92 ed 88 cd 2d 10 21 44 46 25 9b 4c 68 4c 49 b8 04 5b 05 3e 5f 2c 32 e0 e3 b0 b5 5d 82 2b 72 eb cc 0a 02 14 18 87 ae 8a 83 81 28 61 61 09 cb 7c 05 6f 32 e9 1c 25 52 79 b3 92 1e 34 69 63 91 a5 91 01 6c 0a 69 35 68 c2 af 6e 8e 2e 8a 12 9c 6b ce 39 86 f1 8c e3 6f 09 a9 73 e9 fc 36 03 c2 09 61 2c c2 e4 29 f1 15 cb e3 f0 93 0b 5c 55 40 99 18 97 12 c6 b5 20 1a 9c 2f f3 2d 89 48 5b 08 4c 56 93 3f 15 76 d2 93 09 3d 4d a5 16 3b 0d 99 dc ce 6f 66 33 2e ad 59 4a 54 9f ef f2 42 2a e3 b7 73 e2 d2 7c 4d 78 0a 66 91 fa e6 6b cf 47 ba cc 8b f7 a9 d4 f9 da cd af 6e b8 2b 00 f4 9c 24 d2 79 b2 67 7c e0 92 6a c6 a2 92 4a 16 79 2a d9 7e df 21 a5 1a 20 c5 a7 c6 31 ae 84 0c 2d 6c 3c 25 56 ae 08 8b 64 8f 0e 7e 06 9e 69 4c 55 9b 3f 85 b5 24 2c 5c 4a af 52 7a 6d e5 2a 78 58 bf 7c 88 af 19 eb fd a1 fb 9d 49 a8 ad b2 ec 4a 24 b5 73 25 92 fb d9 23 d7 22 a6 09 0b 13 93 79 28 7b 70 d7 0a b3 5b c9 4a f0 55 69 c7 72 cf a2 3a 81 57 75 02 ef 68 1c 82 54 29 d5 bc d7 e2 9a ed 62 aa d1 9e d5 0d 52 c7 0f 9b d7 30 ce 0c d6 5c eb 06 7c 88 43 1d 18 0f cb 80 4c 75 58 42 91 49 05 94 84 35 16 42 59 14 60 f5 87 9c aa 29 19 57 59 87 08 7c 60 0d a0 3d 82 f0 09 73 1c a6 46 03 65 6c 4e db 03 2c 15 65 fc d9 00 49 f8 cd fe f5 73 fe 8f 9b e9 c8 de e8 dc e0 9e 0d 01 b0 3a 05 40 b4 a4 92 1f b7 d9 f0 ac eb 49 44 46 dd cd e7 4d 1c 1d 41 28 74 99 d1 f0 e1 20 4b 6b 74 0e 10 b1 be 88 40 95 e5 0e 9c 6f 19 06 5f 83 86 4c 9c 19 bb 70 f4 ff 8d 72 c8 05 17 62 8d 54 8b a1 ff 46 63 1d 5b 91 44 66 0e 2e 19 6c 1d ff 5e 9c 27 08 db b6 69 13 4b 59 34 bb 1d 5f 1d ba 2e 03 bb f0 e9 97 2f 0d b4 54 0f 2d cd 47 aa 56 01 a1 4e eb 1f 69 d1 b5 31 99 c2 81 ea 52 71 de d9 10 b5 24 d5 71 d4 05 21 9e 1e 59 63 11 e0 c8 e9 30 ea 9e 4c 11 64 c6 3e 8d e5 7d 5a 42 72 98 40 df bd 98 ea e9 0b 1c 3c 51 4d 03 22 99 4c 14 fe ba 9f 3d 4e 26 70 5c b0 ce 44 90 1a ad c1 12 4c 01 34 af 9f 4c a8 12 d0 24 1b 1d 10 84 4f ff 66 cd 53 c6 8f ee b9 c2 0e e8 b3 8b 8f db 49 51 84 0b f0 3f 64 b0 04 eb bf df be d5 48 95 0d dd ac 8d d5 f9 1a ef df e4 cb a2 f2 a0 df e3 a4 a0 92 e1 d9 bb 32 2f a0 f4 db 3f 64 56 01 25 da b8 22 93 db 61 fd 10 95 31 db 35 3c 1a 0f 19 20 66 b
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Wed, 15 Nov 2023 18:57:00 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 484date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 7d 52 4d 6f dc 20 14 fc 2b 5e 0e 0e 28 04 e5 56 c9 2e 89 a2 b4 b7 56 3d f4 b8 5a ad 08 3c af ad d8 0f 17 3f 6f ba b2 f8 ef 15 de cf 6c 9b de e0 c1 0c c3 cc 38 6f c7 0e 90 94 71 ee eb 16 90 be 35 03 01 42 e0 ec cb 8f ef cf 1e 29 cd bc 71 e0 98 e4 a0 1f a6 ad 09 19 95 6f bd ad 3e ad 03 58 d3 93 ad 8d 9e 94 52 38 b6 ed 42 6b 4e fa ea 54 e4 f9 d6 37 2e bb 5f 68 4d 8f 54 4c 31 96 d6 e3 40 99 bd be aa 86 86 e0 15 76 72 aa 7d 07 bd d9 40 81 d2 7a 24 63 a9 f2 a1 2b 4c fc 0b 62 2c 35 1e 07 e9 75 d2 37 13 4f fb 59 41 b2 1a d1 16 28 7b 13 4c 37 24 34 94 9b 33 14 7e 83 1d 09 b8 95 27 44 14 8a 6a 40 ce 4f 64 99 d5 08 6f d9 f3 38 90 ef 66 93 38 9b 35 9c 89 0e 3c 8e c9 c9 01 99 a6 2d ce 0a c8 bf 02 16 10 a3 28 dd d1 6d d7 0c bd 21 5b ef d9 ac 88 e2 f8 2a 17 fa 61 62 49 75 82 33 ad 69 d7 83 af 32 cc 73 e4 4a 29 33 df b5 09 3c 4b 4c 0a 7d 0b 0a 42 f0 81 83 10 22 96 4d c5 2f fe 18 c0 b8 dd 81 d8 f3 a3 2e 8c 89 48 ba 8f f3 b7 b5 c1 0d 1c 52 3f 03 cd 1e c8 46 74 50 35 08 8e 2d 8e 1a 67 53 f2 fc 1f ea e7 13 35 8c 2f 5d 43 e2 e0 2a e8 cb 69 79 b9 d1 9c a4 d5 53 7c 2f d9 ec c3 84 63 98 4b 92 76 15 45 8c ff f9 c4 87 39 5d c4 4b fa 44 f0 6b 84 b0 fb 09 2d 58 f2 e1 a9 6d f9 4d 2a 9d 9a 59 ee d2 32 6b b0 1f 69 89 a6 03 cd d6 57 4d 5c 07 18 7a 8f 03 b0 d5 8d 28 2b 1f 78 0b a9 3d f7 a5 fd 4c aa 05 dc 50 5d da db 5b 41 4b bb 52 03 d0 13 51 68 5e 52 01 d9 d6 b4 23 30 09 6a df 1f 35 b7 26 39 1d 85 28 ff 00 66 4f 1b 95 a6 03 00 00 Data Ascii: }RMo +^(V.V=Z<?ol8oq5B)qo>XR8BkNT7._hMTL1@vr}@z$c+Lb,5u7OYA({L7$43~'Dj@Odo8f85<-(m![abIu3i2sJ)3<KL}B"M/.HR?FtP5-gS5/]CiyS\|/cKvE9]KDk-XmM*Y2kiWM\z(+x=LP][AKRQh^R#0j5&9(fO
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:52 GMTcontent-type: text/javascriptlast-modified: Mon, 06 Jul 2015 02:10:46 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 498date: Mon, 15 Jan 2024 13:23:52 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 94 41 6f 9b 30 14 c7 ef 95 fa 1d 5e 73 28 46 22 56 ab 69 dd 92 2a db 21 bd 4d 93 b6 b2 9d a6 1d 8c 79 04 82 b1 2b db 34 61 29 df 7d 72 80 94 90 a6 cd 75 f3 09 bf f7 7f 4f fe ff 9e cd f2 7b 89 ba a2 89 a4 4b ce d5 43 15 09 c5 73 98 41 52 4a 6e 33 25 09 f3 61 73 7e 06 00 c0 60 06 cb 46 8e 6b 8b 32 26 6d c2 ad 6d dd 7d b6 48 ed 5c 64 3c 9f 42 c2 84 c1 60 20 b8 53 fc 07 ae 6d 88 02 b7 dd 0f 65 a5 c1 79 18 1e 29 ff c6 16 18 b2 47 3c 4c 33 81 da fe 34 a8 8f a4 be a2 31 6c 81 53 18 85 4a eb ea 02 e6 4a 5a 94 16 9c 67 c8 0c 48 65 81 09 a1 56 18 7f 1e f5 aa 39 13 22 62 5b 43 1d 11 1f 36 75 23 a8 03 60 fe 6d f3 9d 25 40 18 1d 60 d8 b1 73 ab 61 47 62 c5 cb 02 a5 f5 29 77 67 58 db 02 65 49 76 dd a3 bd 9a e7 ce 3b 87 70 79 09 ed b6 75 45 05 ca 85 4d e1 13 5c 1d 14 ef 08 90 fd 1a 7f 5f 56 ef 6f 23 fa a0 f1 11 a5 bd c3 84 95 c2 92 ce 65 b7 34 da 52 cb 86 f5 73 a6 6e bb d6 07 48 86 83 77 26 2e 18 6d a6 fd 2a a5 5f 57 bf a9 92 66 5b 68 2c d3 b6 7f 39 ff 69 58 2d 2b 40 61 f0 2d 56 af a1 1a a5 b6 10 41 a4 e2 6a e4 53 6e 0c 19 b8 f2 c6 85 fa 33 2e 0d ea 71 83 d1 9b 36 21 a9 24 7a c1 db e2 97 75 ea 24 55 ee 0e 77 92 72 85 51 9e d9 93 a4 85 39 45 f6 82 a4 7f 55 69 94 c9 98 78 bd 9b e5 05 bd 47 be d9 1b db 2d d4 dd 54 db b9 b5 f0 3d c7 3d 70 26 3d 9f e6 58 c5 6a 25 8f 3d e6 de 8c bb 3f 99 9b 6d 44 b9 d5 e2 0b 56 6e 43 22 ba 4a 33 9e c2 6c 06 1f df c1 d3 13 f4 02 d7 d7 ef 07 91 c9 87 41 e0 66 a8 b8 19 2a 26 13 ff 3f 78 35 fe f9 59 fd 17 c3 33 8b 9f bc 06 00 00 Data Ascii: Ao0^s(F"Vi!My+4a)}ruO{KCsARJn3%as~`Fk2&mm}H\d<B` Smey)G<L341lSJJZgHeV9"b[C6u#`m%@`saGb)wgXeIv;pyuEM\_Vo#e4RsnHw&.m_Wf[h,9iX-+@a-VAjSn3.q6!$zu$UwrQ9EUixG-T==p&=Xj%=?mDVnC"J3lAf*&?x5Y3
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: public, max-age=2592000expires: Wed, 14 Feb 2024 13:23:53 GMTcontent-type: text/javascriptlast-modified: Sat, 07 Oct 2023 20:10:24 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 634date: Mon, 15 Jan 2024 13:23:53 GMTserver: LiteSpeedData Raw: 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 8f da 30 10 fd 2b e0 4a d1 4c e5 b5 40 bd 41 bd 7b e9 a5 97 95 2a 71 8f bc c9 44 b8 35 76 e4 4c a0 08 f2 df 2b 27 7c a4 c0 ee 5e a2 d8 f3 e6 cd 7b f6 8c a1 6a 7d c1 36 78 c0 c3 f9 77 c2 c0 78 d8 9a 38 f1 3a 80 f8 b2 ab ab 18 3c 3f 35 45 0c ce 3d 71 a8 9f 8a e0 d9 58 4f 51 a0 24 3d 9d 4b ab 67 d2 e8 11 59 e1 c8 c4 95 dd 50 68 19 2c 4a af 6c 03 62 b1 b5 8d 7d 73 24 30 cb bc 6a 38 d4 80 aa 32 25 ad 02 b0 7a 6b 99 83 cf d3 3a 2f db 68 12 95 9c c9 11 ab 57 6b 5b 12 0c 45 3b ec 64 31 ae c9 ca b4 1c f2 04 c9 32 b8 55 60 75 43 7c 5e 8f b2 0c 60 27 e7 f4 ed eb 28 3d 37 15 53 44 ec a4 4b ee e2 b8 8a 3b 1e c1 e9 e9 4c 06 d8 59 5f 86 1d aa e1 64 56 c9 cd 33 9f 56 79 a8 aa 86 f8 05 2e 3e 8b a6 01 11 6a 53 58 de 0b 49 2f f3 c5 c5 f2 69 17 55 b3 0e bb 64 ef 78 2c 00 71 61 00 7b 05 d8 2d af d5 82 07 31 d4 10 32 a2 0c 50 86 a2 dd 90 e7 bb 90 ef 37 36 a1 6d 88 3c 53 14 f2 83 1b a2 c1 13 af 6d 73 ab 75 8e 1d 5e a9 1c 99 2d fd 47 f5 38 eb ce dd d0 2a 05 9c d9 0a 67 8b 3f 23 22 8f 07 5b 81 68 a3 13 5a eb 4b ba e9 a3 18 89 db e8 a7 b3 65 c2 90 a3 e4 f8 11 ee e0 55 1d 69 4b 9e 7f 50 65 5a c7 80 cb d4 cc a4 47 3d 36 60 f3 13 4d 9e 4c 15 1c 22 aa ca c6 86 21 75 cb 3d fa d2 f5 57 bc 34 9a d4 70 d3 80 49 99 6f 9d d3 da 9c d5 ce fb d2 85 b6 ca 99 c4 fb 00 5b 5c b1 ef c9 1b 92 74 6d 62 43 3f 3d bf 6b 63 c0 a1 b4 cd ab 79 fd 0c 95 65 9f 20 f4 6c 38 38 a7 8d ea 87 be ff 7e 9c b3 1c bc 4c ac 32 de 6e 0c 13 1c 2e c3 b1 70 9d bc 4c c7 79 be 51 4e e7 dd 29 e9 fe e2 64 00 b1 e6 8d 93 93 b7 50 ee 05 3e 62 9d bd c7 8a 5d 52 1f f4 ef 5f 2d c5 fd cd 00 b9 60 ca ff 7a f8 f2 fa f5 7d e8 55 69 d8 f4 af 4d 6e ab 68 36 94 65 57 02 c3 1c 41 34 e4 2a 81 53 ad 6f 03 1c 6a 81 c7 23 04 10 df 1b de 3b 7a 16 a8 98 fe 32 f8 34 22 a8 4c 5d 93 2f 57 c9 1c 99 52 f4 36 cf 06 fb 10 78 95 6c a3 4c 29 49 09 62 e7 e1 f4 10 e7 27 b3 1c ea bc 57 d9 03 3a ec 10 70 f9 0f 4e af e3 bb d1 05 00 00 Data Ascii: TM0+JL@A{qD5vL+'\|^{j}6xwx8:<?5E=qXOQ$=KgYPh,Jlb}s$0j82%zk:/hWk[E;d12U`uC\|^`'(=7SDK;LY_dV3Vy.>jSXI/iUdx,qa{-12P76m<Smsu^-G8g?#"[hZKeUiKPeZG=6`ML"!u=W4pIo[\tmbC?=kcye l88~L2n.pLyQN)dP>b]R_-`z}UiMnh6eWA4*Soj#;z24"L]/WR6xlL)Ib'W:pN

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/css/dashicons.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/css/wpp.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp/plugins/cookie-notice/tags/2.4.13/css/front.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/jquery@3.7.0/dist/jquery.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/js/wpp.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/hoverIntent.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&ver=3.0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp/plugins/cookie-notice/tags/2.4.13/js/front.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/page.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/modules/core.KJQApO2n.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/sm.25.html HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240109/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zh_CN/all.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325035&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=1&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325034192&bpp=3&bdt=3599&idt=1676&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=4342792276688&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1739 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/wp-emoji-release.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons.37.svg.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxW4QFj6GFJvUFhyMCoQBqmQk9xVQfsmiAxpwZ-Hyhj2F-iAJGvA9pU-6J_xoodfRyEUYWzzm7aM4lrmjuFfb-16enC2tszdw4WU_WfhdSHq1xVpwaa6uLBmZy8Zguykwe8toi77Ww==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQwLDIyOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20vIixudWxsLFtbOCwiMTVtTHB6cndMckEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /simgad/11229060083375947527 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activeview/js/current/ufs_web_display.js?cache=r20110914 HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dcm/dcmads.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/resources/release-20231121-135-adperformance.js HTTP/1.1Host: warp.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nmedianet.js?cid=8CU7Q771E&ydspr=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXcbOESlzFb2BQZEBaPRI5Eh-Ra2y0KQ8RutN9w3j0zsyd6zJkt4EHBxD6A6bE3XR2R70dbKvVTY4FDLa80TkGWkkGw330In6Fo2vJoSLFHAlkc7D36ucEoeWXDiCwPWqatYKqdwXfdSDwZOsKG8pe6wGLugz6JVv3mDYWEenZWqCy2CRhWbB4jCnUr/_/ad_300_/googleadiframe_/adsfiles./ads?spaceid-160x600- HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaR2gw74vdegPbBiZvpyeb6dIzwm5tAUqnWTH0QOv5yWHnHoBnOhYVu61dewbnvCPKgoh09VPY4MH1lj512VHV-ctHh1NA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRkIvQ3YKlGcxklsNq5mmXDtntNFs4_mQfgNoJK81k_olyrKv9owRbDTq1ZswOI5NRMypK9SCWTtaJzphH5mfbH4TqZxA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRmGN7qeEvMzj6QO_sqLAc4lqJrtU2EWFBt_Bo92JvoAP2qPrKGbtZ71NCrnSJpEUrGc3AtxN_Q7UbebTJFIdxJ65-cJw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /dcm/impl_v99.js HTTP/1.1Host: www.googletagservices.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/s?v=r20120211 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxW4STNfN8cv0B5qoXtk-_2e7H0oQsXOHpe6zQ_vmgPggJwTYBjx4vYSDfbwn2TU1UzCMNtgAywxKTUuGMqe_5_OUZVdKlCxhwtcyRZmMBEGGCdhbLRMv9FlHw9sAHJ_Qo2DerOT5A==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQyLDM0MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHA6Ly9teWxvdmVseWJsdWVza3kuY29tLyIsbnVsbCxbWzgsIjE1bUxwenJ3THJBIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004000;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=155288948;ord=862oyo;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE%26ase%3D2%26gclid%3DEAIaIQobChMIg6PX6r7fgwMVzorRBB2MfQWDEAEYASAAEgK6nvD_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xhgB%26sig%3DAOD64_3JV_ze2I2VX1gDHVU4ZIx9eGzMiQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=826;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=4026222152;ord=3lxc7t;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMI597V6r7fgwMV1IN3AR2cmQuLEAEYASAAEgJWU_D_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYBgB%26sig%3DAOD64_2GiJB1vOZBCkjo8FmWG9nkmmarNw%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=1045;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=ClOO88TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNYBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQ1f6fHkv4xflgf82TXS-NuyNMevUHP4V6QE6otKUFvd05cmEVUIAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=TK9izpmdiJQ&uach_m=%5BUACH%5D&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6RgB&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
Source: global traffic	HTTP traffic detected: GET /bping.php?vgd_len=2604&&vgd_cdv=1148&vgd_cage=0&vgd_tsce=L379&vgd_mcf=76592&gdpr=0&mspa=0&prid=8PRVCXX19&cid=8CU7Q771E&crid=764666904&vi=1705325043284750660&ugd=4&lf=6&cc=US&sc=DC&lper=100&wsip=170785157&r=1705325042823&rrr=Qp8eyO4s8R1Cp4Yfo7r5QIpsZX5WmhZQdT6IBJgEmIo%3D&requrl=http%3A%2F%2Fmylovelybluesky.com%2F&vgde_bdata=QOfvzxjj~8xLjMjvu9~myJLEYv9.9i~OmYMGv9.XA~QNOvON~L1Jv9%2C9~OmYMjvf9~ejfLMQOvf9fH9uuHfu~8xLjMGvhFu.XA~xLjM7UNv9~xLjMLf1MGv9~Q7OvFuWHuhiX9~YzMGJwMGmmQ7v9.Fu~L17v9.999%2C9~8Evub-TUg~kGGvuF~GwM8Yvf9A~L88Ex1v9%2C9~LNvu~L8Qx8Ov9%2C9~LEQMQOvf9fH9uuX9H~L1Oev9.999%2C9~xLjMGvu.Au~ejfLMxLjMGv9~QYYMBLvF.h9hH~xLjMjvu9~Qjevfh.Ah~yN17vou9~GGvufW~QYYMYxjv9.Hi~JLEYv9.9i~ejfLMxLjMUNv949~EQ8MNvf%2Cf%2C9%2C9%2C9%2C9%2C9%2C9~GYvu~EQ8MOvu~LUJv9%2C9~1AEMGvA.hF%2CW9.u~QOvu~x8OvfV1ZjhZq1yzsjEIeG6~NejfLMGvh.iA~G7OvFhuiA9fWHifWiiuhHXiuXAX9WiiHuHHAF9AA9fiWhFXuiFXXhFuuHuuhFFWWHFXuXHuH9HFFf9WfWWFihFHFuFXFi9uH9WFXAWH9AWH~x8Yv9~LU7v9.999%2C9~myOfEMGv9.iW~QQvIK~NNvPb~UGMOjvzS1~x8Bvou~NJv9~LNevAX.Fu~%3DVvA9i9~UGMxNv9~z7QvA~UGMxjvzS1~UGMNNUQv9~N7vB1Qw8zy7mz~GQQMC_pvIK%2CIK~GO7vuh9XAfX9Hu~UGM77v9~GwMQOvf9fH9uuH9f~ONvW~ejfLMGvA.hF~77vfWWWW~xjYMEv9.9iA~eBMJ-Nv9.Hi~QYYMG8Ov9.9H~e8QMQOvAXh~xLjMLEQMGvi.if~GwMNmvA~QmGdv9~ONfvu~eM1QzvuhH~j1Q7v~Nemyvh.iA~e8QMxLjMGv9.Xh~ejfLM8MQOvf9fH9uuHfu~e8QMxLjMjv9~J7vAu~ejfLM8MGv9.9f~e8QMGvHhh.fW~ejfLMxLjMe8vu4ouF~xLjM7e8v9~eev9~NejfLMQOvAXh~LkevAX.Fu~jfLMGvu999~QYYMQOvf9fH9uuX9u~L1OEv9.999%2C9~Q8OvhFHFFFi9H~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.Hi~OfEMjvu9~Nejfvh.iA~AENkvu99H.iF~myMYQwv9.9i~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGvu~LEQMGvW9.u~xLjMQLEQMGvi.if~LUBEv9.999%2C9~c0fv.jmeJ.~LUBOv9.999%2C9~8QDJkv9~8Q8kv9~xLjMLENMGv9~G8Ov9.9H~UGME7vqmYJE1yJ~xLjMLEQMLev9~NGOEv9.9H9~QOvu~875EJM8Ovuh~QJjjJLM71yM8OvFuWHuhiX9~QxEEj5M71yM8Ov~OJ7JN7JOM71yM8Ov~e8JB1G8j875v9.Hi~EmQvA~1NM75EJvu~1OGjUvFuWHuhiX9~1YEvu~myG8Ov9.9i9~GkjLv9.9u9~Qx8Ov%3DK4b4Tg95oEWO7j9Lae4wrpfUBH~O7NvJ1Q7MQN~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMwmYJE1yJMN17Nw1jj~QmGEv~-8OvKrtoExGoFuFAfifAuhAAA9uu~w7Yjvu~QYYM1E8veu~8GNvu~zQlvA~7yQvfX9-fX9%7CA99-fX9%7CAAF-fW9~GQGv9~GQEv9~7Y-vfAW&ssld=%7B%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQNN%22%3A%22Pb%22%2C%22QQQN%22%3A%22r%3D%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%7D&vgd_bid=349065&vgd_ydspr=1&vgd_sbSup=1&vgd_is_amp=0&vgd_asn=174&vgd_rakh=1705325042152550719&vgd_l1rhst=contextual.media.net&vgd_rpth=%2Fnmedianet.js&vgd_hb_audit_1=8CUU9JF8H&vgd_hb_audit_2=839288643&vgd_pgid=p0967114284t202401151324&vgd_pgids=1&vgd_uspa=0&vgda_l1btm=%5B%22SPAMPXL%22%5D&hvsid=00001705325042819017221018024201&gdpr=0&mspa=0&vgd_l2type=scs_newfl&vgd_end=2 HTTP/1.1Host: lg3.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-F
Source: global traffic	HTTP traffic detected: GET /clog?pixel_len_bucket=6132&logid=awlog&lper=1&itypeid=17&itype=ADX&cc=US&cid=8CUU9JF8H&reqid=hKuDd_gKgbNTPC1IRghbYA&vid=hKuDd_gKgbNTPC1IRghbYA&dn=mylovelybluesky.com&rawDn=mylovelybluesky.com&requrl_dn=mylovelybluesky.com&pid=8PR113JGC&ugd=4&fleet=appnexus&requrl=http%3A%2F%2Fmylovelybluesky.com&cliIPType=v4&coppa_enf=true&lmt_status=N&lmt_applied=N&lmt_enf=true&dnt_enf=false&geo_source=1&sc=DC&ct=washington&zip=20011&pubid=pub-ADX-116310109131&tgtval=pub-ADX-116310109131&csip=rtb-appnexus-6d87b4697f-szn49.SC&dtc=east_sc&zone=d&sd=1&ptype=23&tmax=300&xtmax=280&gdpr=0&gpp_present=false&app=0&sat=1&device_id=4&asn=174&sckfl=1&suid=CAESELQ0y-p8dtl0rOvEhDW2kw4&sckfl2=0&smbrid=adx-1&cxtSgmt=long_tail_homepage_catchall&usp_status=0&usp_enf=1&mspa_enforced=true&gqid=AD8Fdm5noyDknKE-CLb2n5p7ZMNuXLl4BcYI8gaAqeksCi15ZuH41DUPLrQnfRN9lucBu-Iu&pexid=ADX-pub-6163292317333011&geoll=false&is_ortb=false&commit_id=4f4eb818&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-01-12+00%3A00%3A00&schain_cmpl=1&schain_nodes_count=1&dummy_vsid=false&amptype=1&second_call=false&supply_cc=US&ipcc=US&is_msnnative_src=false&proxy=envoy&header_lang=false&rtttime=68&req_tid_present=false&pvid=460&prvAccId=764666904&prvApiId=8CU7Q771E&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=839288643&prspt=headerBid&prvReqId=346321243488093_565735447_8392886434601&size=336x280&chnl=smm_migration_test&bdp=0.090&bid_uuid=1916ab425690ab27b2536a79696a948d&cbdp=0.04&og_cbdp=0.090&ogbdp=0.09&pv_adtype=0&res_mtype=0&mnet_ckfl=0&ckfl=0&be=0&advUrl=https%3A%2F%2Frelated.investorfocus.net&dfpBd=0.04&dsrc=-2&dp=0&dbf=1&epc=764666904&s=1&snm=SUCCESS&pcrid=8CU7Q771E-764666904-3-3&tpbTkn=false&exid=218&bidflr=0.010&pbidflr=0.010&opbidflr=0.010&spbf=0&viewability=49&sbdrid=128&exp=ssProfile%3D0%7Csfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7Cclt%3D3%7Ctpi%3D1%7Cfl_rl%3D1%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100%7Ctpi%3D1&mnrf=0&ortbseat=BID_API&brsrclk=0&bidrestime=1705325041753&fpuReq=1&bfs=103&acsn=1&ybnca_erpm=0.09&dmm_erpm=false&dmm_ogerpm=false&bcrid=1700080807683300336028000059500&strg=smm_migration_test&vls=0&scrid=1700080807683300336028000059500&mang=1&pvdTmax=238&fpusp=false&ae=false&epcexp=false&moau=true&ucrid_ver=2&omid=0&mnet_static_share=0.0&apTags%3C%3E=75&dt=O&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_sdr=false&mx_sbp=-10.0&mx_sua_cvg=0011010&mx_tid_sent=false&mx_epbc=8CU7Q771E&mx_SPRIG=2&mx_bsBucket=0&mx_ssProfile=0&mx_sua_os_n=Windows&mx_lr=0&mx_TAS=1&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=None&mx_uid_sent=0&mx_bsBucketRa=0&mx_sid=8CUU9JF8H&mx_SC=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_nsz=3&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_bsBucketKtwRl=0&mx_tgs=250x250%7C300x250%7C336x280&mx_bsProfileRa=0&mx_IAB2=2&mx_bss_algos%3C%3E=0&mx_aurl_hc=0&mx_aabpc=0&mx_PC=1&mx_UCC=5&mx_isLossNtf=false&mx_bsWhitelistBucket=0&mx_bsProfileKtwRl=0&mx_bsProfile=0&mx_ssBucket=0&mx_TAF=3&mx_bsWhitelistAlgo=0&mx_gpid_sent=false&mx_commit_id=2bf0eb232d&mx
Source: global traffic	HTTP traffic detected: GET /log?logid=kfke&evtid=plutol1&__q=AYYEIwKELwQCAAABAAAAAgAAAABAAAEABgAAQIABAAgAMNAATjM0NjMyMTI0MzQ4ODA5M181NjU3MzU0NDdfODM5Mjg4NjQzNDYwMUBkNTZhNjgyNDkxNTlkN2QzNDczYWI4ZWMzYjg0MTllM5gHCtejcD0Ktz80aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20EVVOAwKnqDN4BTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Jm15bG92ZWx5Ymx1ZXNreS5jb20SOENVVTlKRjhICA4zMzZ4MjgwCDAuMDQOZWFzdF9zYwZBRFgICG51cmwAAAAAAACASECy4djUoWMCMgAAAAAAAPC_QHJ0Yi1hcHBuZXh1cy02ZDg3YjQ2OTdmLXN6bjQ5LlNDPjE3MDAwODA4MDc2ODMzMDAzMzYwMjgwMDAwNTk1MDACEDRmNGViODE4AmQC&cbvp=2 HTTP/1.1Host: hblg.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sr/2722522032/SAFEFRAME.html?ule=2967&&kkdd=HA%7C3%7CAnH9&-y=5iS(.R(Sl.RYli(S!!S&CEa_=S&A~ac=S&VE-=55lY&b~Vu=d.iW&VyE=YI2ifii56&VaVE=fVzC)JQMp96Qt5ppr__9VT%3D%3D&V_yE=i!l!!!WSl&~yBu=..!JRYS&VV=21&~V=eI&V8jA=~AApAyC_cby)jpbu~b&ayE=Yx!iFK.1&bayE=D56.!!Y&8bba~=5&___=faYutl~YF5IalKP)i_(fqa~kZ(oA8kfED!qQ9C6Aq)%3D&j~u=(&3T=5&MCE=l&cEb5=YI22W90Yn&cEbR=Y.WRYY!l.&UEcbc=~ER%3DjM33OyM_3p3%3D5SO)Cu_aA%3DSLSWOE)ApU%3DSL(.O~VE%3DEVO_cu%3DS%2CSOE)Ap3%3DRSO-3R_p~E%3DRSRlS55lR5OyM_3pU%3Di!5L(.OM_3pbvV%3DSOM_3p_RcpU%3DSO~bE%3D!5Yl5iW(SOAjpUu8pU))~b%3DSL!5O_cb%3DSLSSS%2CSOya%3D51JdvfOPUU%3D5!OU8pyA%3DRS.O_yyaMc%3DS%2CSO_V%3D5O_y~MyE%3DS%2CSO_a~p~E%3DRSRlS55(SlO_cE-%3DSLSSS%2CSOM_3pU%3D5L.5O-3R_pM_3pU%3DSO~AApT_%3D!LiSilOM_3p3%3D5SO~3-%3DRiL.iOCVcb%3Dr5SOUU%3D5RYO~AApAM3%3DSLlWOu_aA%3DSLSWO-3R_pM_3pvV%3DS6SOa~ypV%3DR%2CR%2CS%2CS%2CS%2CS%2CS%2CSOUA%3D5Oa~ypE%3D5O_vu%3DS%2CSOc.apU%3D.Li!%2CYSL5O~E%3D5OMyE%3DRqcH3iHncCj03am-U9OV-3R_pU%3DiLW.OUbE%3D!i5W.SRYlWRYWW5il(W5(.(SYWWl5ll.!S..SRWYi!(5W!((i!55l55i!!YYl!(5(l5lSl!!RSYRYY!Wi!l!5!(!WS5lSY!(.YlS.YlOMyA%3DSO_vb%3DSLSSS%2CSO)CERapU%3DSLWYO~~%3DmwOVV%3D21OvUpE3%3Dj%2FcOMyT%3Dr5OVu%3DSO_V-%3D.(L!5OIq%3D.SWSOvUpMV%3DSOjb~%3D.OvUpM3%3Dj%2FcOvUpVVv~%3DSOVb%3DTc~8yjCb)jOU~~pGDo%3Dmw%2CmwOUEb%3D5iS(.R(Sl5OvUpbb%3DSOU8p~E%3DRSRlS55lSROEV%3DYO-3R_pU%3D.Li!Obb%3DRYYYYOM3Apa%3DSLSW.O-TpuJV%3DSLlWO~AApUyE%3DSLSlO-y~p~E%3D.(iOM_3p_a~pU%3DWLWROU8pV)%3D.O~)Us%3DSOEVR%3D5O-pc~j%3D5ilO3c~b%3DOV-)C%3DiLW.O-y~pM_3pU%3DSL(iO-3R_pyp~E%3DRSRlS55lR5O-y~pM_3p3%3DSOub%3D.5O-3R_pypU%3DSLSRO-y~pU%3DliiLRYO-3R_pM_3p-y%3D56r5!OM_3pb-y%3DSO--%3DSOV-3R_p~E%3D.(iO_P-%3D.(L!5O3R_pU%3D5SSSO~AAp~E%3DRSRlS55(S5O_cEa%3DSLSSS%2CSO~yE%3Di!l!!!WSlOM_3p_a~pvV%3DSOvUp~_V%3DvUUO-TM%3DSLlWOERap3%3D5SOV-3R%3DiLW.O.aVP%3D5SSlLW!O)CpA~8%3DSLSWOEAAp~b_C%3D~AApAyC_cby)jpbu~bOERapU%3D5O_a~pU%3DYSL5OM_3p~_a~pU%3DWLWRO_vTa%3DSLSSS%2CSOhxR%3DLg3)-uLgO_vTE%3DSLSSS%2CSOy~FuP%3DSOy~yP%3DSOM_3p_aVpU%3DSOUyE%3DSLSlOvUpab%3Dn)AuacCuOM_3p_a~p_-%3DSOVUEa%3DSLSlSO~E%3D5OybtaupyE%3D5iO~u33u_pbcCpyE%3D!5Yl5iW(SO~Maa3tpbcCpyE%3DOEubuVbuEpbcCpyE%3DO-yuTcUy3ybt%3DSLlWOa)~%3D.OcVpbtau%3D5OcEU3v%3D!5Yl5iW(SOcAa%3D5O)CUyE%3DSLSWSOUP3_%3DSLS5SO~MyE%3DIw616dfStraYEb3S_-68eoRvTlOEbV%3Duc~bp~VOEAApu_aA%3DPc3~uOEAA%3D~AApAyC_cby)jpbu~bOUEaVcaE%3DSOEc3C%3D~AAO~CAb%3D3)jCpbcy3p8)AuacCupVcbV8c33O~)Ua%3DOJyE%3DweZraMUr!5!.RWR.5i...S55O8bA3%3D5O~AApcay%3D-5OyUV%3D5Oj~B%3D.ObC~%3DR(SJR(S%7C.SSJR(S%7C..!JRYSOU~U%3DSOU~a%3DSObAJ%3DR.Y&jb-=S&AAA=KTh3wGKe1GJrP0l3AC6d04rV1kF5mY)qm_4._b)mhdcryhyEAyfhREpjF8Yu0I4qYJh3(w8Y5AVJ(Hd--fDzxBommBR3&yT=..!&yjqP_=5&UE_qE=l!S&UyE=.lWS!(&AVP=i!(WR&tE~a_=5&Ucu=QJuB%2FCBumQOQJuB%2FCBlmQOluu&vcba_u=5&vcbUyE=r5SR&VcE)Acyj=bBFr8dV3rdrn18mlRrMMPEj(Z8RyISm!zE.Rtlq1Vs4nspvts)BC%3D%3D&ta3a=5&y~yE=(&cE-=qj-u~b)_%200)VM~&~~AV_p-u_=(&aCyE=aSW!i55lRYlbRSRlS55(5.Rl&~~3E=%7B%22~~ya%22%3A%225SRL5!(LlYLS%22%2C%22~~VV%22%3A%2221%22%2C%22~~~V%22%3A%22eI%22%2C%22~~Vbt%22%3A%22Tc~8yjCb)j%22%7D&8bA3~_V=5&sflct=5095147&bVPpVAa=5&ure=1 HTTP/1.1Host: contextual.media.netCon
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUU9JF8H&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxULU5s5oeDg_iEjqYDV1hvqo2vSKzmrTKeKjc86zlEuFpPUyYXppirFcM1_NNKkD3dkv8BblLnvGYBY1K9Upq9MltyzheSMFpi_NN7rTG2WTXOT_v_6cdOgihN4LO4MPPvec4OyyQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQzLDI5MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiw5XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20vIixudWxsLFtbOCwiMTVtTHB6cndMckEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /simgad/11229060083375947527 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi6qGEfXdUooY7PY-YoCKHplUBKalFavr8qDd3qX_KN_1-MxsQ
Source: global traffic	HTTP traffic detected: GET /466606.gif?cparams=google_push%3DAXcoOmSvKXZnvXfDrlT_RpDfYTKoihT2dQUcpUM0tTWPukGCIw5SZab1d2x4Q-u5TJRdVvdGsExcrZSw0axhlJPcFXdH-ewHQ8N7PJU&google_gid=CAESEFnPY-kHMZNLMEj40Iiq_Tg&google_cver=1 HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sn.ashx?google_gid=CAESEC1TZgQ0su3cqRSxMvGtH9w&google_cver=1&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is HTTP/1.1Host: aep.mxptint.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /simgad/17205409499713138048 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tum?umid=4&uid=CAESEGHwcaT1kwnpvW79lqyvWDc&google_cver=1&google_push=AXcoOmRQsWpn4ZpXZSPeA2_4_ScuklG-zLulB-fd8e2aAW3P_MhJHCCKhAn1GyKDB_Xpb-0wI_k3GEVS4Ybo28yUw_gXj6hcZnTQK9k HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ju/cs/google?google_gid=CAESEKudZrNnT_rcVg4A96tF6QM&google_cver=1&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2 HTTP/1.1Host: gtrace.mediago.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdX?google_gid=CAESEBCuhElsTjbgX1kIcQ62GUM&google_cver=1&google_push=AXcoOmTP6JM8fEEVhlY08kGzv5aeKY_aiiPd6b3TU5C4X1DY6rhCH1rafaIypKxqEZ3X0Dka2ZIJqTlbrC9H7OQgXJPaXFU4XtxMdA HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tum?umid=4&uid=CAESEDJ532h6tSbmFfeQKrWiKgI&google_cver=1&google_push=AXcoOmSkrMJqGPh5ij0kbH32VflGjLVmpiM02UHTl11W-8_JtfpnINWtiaoXRqJ7QnoE9UIetYXqajycMdw9PgfgGMNyEAnsnABtCA HTTP/1.1Host: ums.acuityplatform.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/v2/sync?tagid=V2_4530&src.visitorid=CAESEN0nhbvMce4tpX8nuEm75y8&google_cver=1&google_push=AXcoOmS-T_8ywdeQPYSHEH6pGhHDSGfvH9jyKk6y7plIvsQGh5tGlRlTUAI73rAyZVpDjevLBLrru8VlUOO0oDvOC3SAULYQuTcNLn4 HTTP/1.1Host: odr.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trk?tid=11711&google_gid=CAESEG1r7n0k6n9VMjo8-C80kIE&google_cver=1&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CK69HBoNCPTjlK0GEgUI6AcQAEIASnNnb29nbGVfcHVzaD1BWGNvT21TdktYWm52WGZEcmxUX1JwRGZZVEtvaWhUMmRRVWNwVU0wdFRXUHVrR0NJdzVTWmFiMWQyeDRRLXU1VEpSZFZ2ZEdzRXhjclpTdzBheGhsSlBjRlhkSC1ld0hROE43UEpV HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=5Khj8R3VHae4q7osNuQCARQRNkgF/XsMqFxje/QNuzU=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /match/?int_id=19&redir=1&google_gid=CAESEBZBsUifPzHCMWMFpya5qZ8&google_cver=1&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg HTTP/1.1Host: onetag-sys.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bql.php?vgd_len=6433&&vgd_canary=0&vgd_l2type=scs_newfl&fp=tQScSFTHM7qq6SRQ94ey8au62Rd3vFzlR2KwIQSg84S4CdNp8OoIYIJz3Q6yHv71MO_ApY458s5GEVEdClgn1bf3Jds0v6uR_ezHotxMrxYRqEbvf0-JIJwJGaGtXA9FHCAZfhms81wXsUAo2PMbgQ%3D%3D&cme=kU-eVkVLiCGd3E1AvNRqaEIUwlQpLMtOgGGlHDjP7A5N2Y5OMxDX5MN0k-l7ktN9i_WVBouw-6_tjp2c9AGw-F-jRRl2aFI2cgG0bjwtKaYwWkqRn2x6trgztxK7c8sEiaBtX8CKECXchGZpkfZKpk4qJssv6Fm4WStvwiGJQr9qo4NT6ni_DncW8OKWCCrycGI3Vz8rnqK1vTWSPOxrSNgqlfWyOuNUAlH3QdzcJ5b2bkHjKDQ4jg%3D%3D%7C%7Cu8A6SM53vAcxkZY9VHWafLSuY-HKDieQ%7CUFJJWZ1lEVdklaUp4Q9x5TG45h_4b8t5%7CWGV0YFlErcpuo3Pma1EBA706uXx3IZ3_s1njI9zvr5U%3D%7CxDcVMoSqRIR7BloiCBBcf72WFkGzQWtJrY_KpdpTQD8EJq6LxiDxVw%3D%3D%7CcPcb3VhU0BVjXgWFWEAzinttU1oq1ouO%7CVqjnkVrbIDBz3avdm1eoN_O2dR92TW_s6yxC7fuOmP8Jr1CrzLodhpoLIU8PlbiwLiI6C1NJyVoobdARwwHtw597s3elegfFa8jU1zjp0QmnFT0hYUXHAU2qa8mSGhwl-qGMXvaFwgsAKaDPFjBB6lk5TjT6Gkjcs2U6m7Fb61AhCB3SbbNZOGBKJXsC1whzO_-TS74k9NmilgnPoWur-XmNNmZ3LfmdI_paHGU5xPB3w8n3KIyG2r-csYWE9Wd2BqRKpMNTO8Hu0lSXa-yZo_qA5KO-u-nVtNbHhRQruC4%3D%7C&subBdr=128&bdrid=460&ksu=224&fdkt=267&vgde_kbbh=ffoyxQJuO&kwd[]=Costco+Storage+Containers+Deals&kwt[]=267&kbc[]=119665&kwp[]=1&kid[]=380380307&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0006%7C8%3D011417%7C13%3D0.1207%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.11%7C2%3D1.54&ktd[]=824650694912&kwd[]=Food+Storage+Set&kwt[]=267&kbc[]=119665&kwp[]=2&kid[]=11231706&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0006%7C8%3D011417%7C13%3D0.1193%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.09%7C2%3D2.02&ktd[]=274894881024&kwd[]=How+to+Remove+Bags+Under+Eyes&kwt[]=267&kbc[]=119665&kwp[]=3&kid[]=98649708&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0005%7C8%3D011417%7C13%3D0.0892%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.22%7C2%3D2.26&ktd[]=274894881024&kwd[]=Masking+Tape&kwt[]=266&kbc[]=105227&kwp[]=4&kid[]=18626252&kbc2[]=0%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0005%7C8%3D011417%7C13%3D0.0605%7C14%3D011508%7Cokt%3D266%7Cbdkt%3D266%7Cps%3D0.970%7C1%3D0.87%7C2%3D1.44&ktd[]=3023673950464&kwd[]=7%25+Interest+Savings+Accounts&kwt[]=391&kbc[]=1262292604&kwp[]=5&kid[]=329753404&kbc2[]=pmb%3D1%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0002%7C8%3D011417%7C13%3D0.1460%7C14%3D011508%7Cokt%3D391%7Cbdkt%3D391%7Cps%3D0.354%7C1%3D1.01%7C2%3D5.33&ktd[]=4503874522251520&kwd[]=Packing+Jobs+at+Home&kwt[]=267&kbc[]=119665&kwp[]=6&kid[]=211330547&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0004%7C8%3D011417%7C13%3D0.0639%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.89%7C2%3D2.91&ktd[]=824650694912&v=1&geo=40.32%7C-80.04&dlper=20&lper=100&lpid=&tsid=7&hint=&cc=US&wsip=170774818&bca=0&ugd=4&vgde_setid=Nff&ssld=%7B%22QQNN%22%3A%22Pb%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%2C%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQQN%22%3A%22r%3D%22%7D&cid=8CU7Q771E&vi=1705325043284750660&vsid=3483266440180255&tdAdd[]=asnum%3D174&vgde_test_dat
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEOzRtX562fjwmB4DbY8-tuo&google_cver=1&google_push=AXcoOmTYQdCWDydIGcw8i8YhhVhC8jiBMetgHfAKyGB3jyI6COu2KF-9ydt_2X2Tqd22LMQXt_kk25wn77scqJqGrgME0ZWdyeqEafo HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=be743e64-4ffd-4fa0-ab73-16d03b47df68; c=1705325045; tuuid_lu=1705325045
Source: global traffic	HTTP traffic detected: GET /gcm?google_gid=CAESEGXjSffKCZYfhR-a0w5jhKg&google_cver=1&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k HTTP/1.1Host: a.c.appier.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CWkfu8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcv5qnCsJWW1IGtlpgT5JpTGuW5akXn4jGi_3P6MchajIDVQodITxwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCtwALSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLzg1uq-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAdoMEAoKEPDihNL_zLWmYBICAQPYEw3QFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=hCXV7PUMxzE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xhgB&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CMK3L8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWY5hs23B7yl7eFHDd4vr_C4c4jiuuMon08_-F5CnCDrUK6Ti3gk2wATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCY6gTSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPmp1eq-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQsPnRm-3n1J0REgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=sra16_AfWoE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYBgB&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /clog?pixel_len_bucket=6132&logid=awlog&lper=1&itypeid=17&itype=ADX&cc=US&cid=8CUU9JF8H&reqid=hKuDd_gKgbNTPC1IRghbYA&vid=hKuDd_gKgbNTPC1IRghbYA&dn=mylovelybluesky.com&rawDn=mylovelybluesky.com&requrl_dn=mylovelybluesky.com&pid=8PR113JGC&ugd=4&fleet=appnexus&requrl=http%3A%2F%2Fmylovelybluesky.com&cliIPType=v4&coppa_enf=true&lmt_status=N&lmt_applied=N&lmt_enf=true&dnt_enf=false&geo_source=1&sc=DC&ct=washington&zip=20011&pubid=pub-ADX-116310109131&tgtval=pub-ADX-116310109131&csip=rtb-appnexus-6d87b4697f-szn49.SC&dtc=east_sc&zone=d&sd=1&ptype=23&tmax=300&xtmax=280&gdpr=0&gpp_present=false&app=0&sat=1&device_id=4&asn=174&sckfl=1&suid=CAESELQ0y-p8dtl0rOvEhDW2kw4&sckfl2=0&smbrid=adx-1&cxtSgmt=long_tail_homepage_catchall&usp_status=0&usp_enf=1&mspa_enforced=true&gqid=AD8Fdm5noyDknKE-CLb2n5p7ZMNuXLl4BcYI8gaAqeksCi15ZuH41DUPLrQnfRN9lucBu-Iu&pexid=ADX-pub-6163292317333011&geoll=false&is_ortb=false&commit_id=4f4eb818&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-01-12+00%3A00%3A00&schain_cmpl=1&schain_nodes_count=1&dummy_vsid=false&amptype=1&second_call=false&supply_cc=US&ipcc=US&is_msnnative_src=false&proxy=envoy&header_lang=false&rtttime=68&req_tid_present=false&pvid=460&prvAccId=764666904&prvApiId=8CU7Q771E&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=839288643&prspt=headerBid&prvReqId=346321243488093_565735447_8392886434601&size=336x280&chnl=smm_migration_test&bdp=0.090&bid_uuid=1916ab425690ab27b2536a79696a948d&cbdp=0.04&og_cbdp=0.090&ogbdp=0.09&pv_adtype=0&res_mtype=0&mnet_ckfl=0&ckfl=0&be=0&advUrl=https%3A%2F%2Frelated.investorfocus.net&dfpBd=0.04&dsrc=-2&dp=0&dbf=1&epc=764666904&s=1&snm=SUCCESS&pcrid=8CU7Q771E-764666904-3-3&tpbTkn=false&exid=218&bidflr=0.010&pbidflr=0.010&opbidflr=0.010&spbf=0&viewability=49&sbdrid=128&exp=ssProfile%3D0%7Csfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7Cclt%3D3%7Ctpi%3D1%7Cfl_rl%3D1%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100%7Ctpi%3D1&mnrf=0&ortbseat=BID_API&brsrclk=0&bidrestime=1705325041753&fpuReq=1&bfs=103&acsn=1&ybnca_erpm=0.09&dmm_erpm=false&dmm_ogerpm=false&bcrid=1700080807683300336028000059500&strg=smm_migration_test&vls=0&scrid=1700080807683300336028000059500&mang=1&pvdTmax=238&fpusp=false&ae=false&epcexp=false&moau=true&ucrid_ver=2&omid=0&mnet_static_share=0.0&apTags%3C%3E=75&dt=O&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_sdr=false&mx_sbp=-10.0&mx_sua_cvg=0011010&mx_tid_sent=false&mx_epbc=8CU7Q771E&mx_SPRIG=2&mx_bsBucket=0&mx_ssProfile=0&mx_sua_os_n=Windows&mx_lr=0&mx_TAS=1&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=None&mx_uid_sent=0&mx_bsBucketRa=0&mx_sid=8CUU9JF8H&mx_SC=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_nsz=3&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_bsBucketKtwRl=0&mx_tgs=250x250%7C300x250%7C336x280&mx_bsProfileRa=0&mx_IAB2=2&mx_bss_algos%3C%3E=0&mx_aurl_hc=0&mx_aabpc=0&mx_PC=1&mx_UCC=5&mx_isLossNtf=false&mx_bsWhitelistBucket=0&mx_bsProfileKtwRl=0&mx_bsProfile=0&mx_ssBucket=0&mx_TAF=3&mx_bsWhitelistAlgo=0&mx_gpid_sent=false&mx_commit_id=2bf0eb232d&mx
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /log?logid=kfke&evtid=plutol1&__q=AYYEIwKELwQCAAABAAAAAgAAAABAAAEABgAAQIABAAgAMNAATjM0NjMyMTI0MzQ4ODA5M181NjU3MzU0NDdfODM5Mjg4NjQzNDYwMUBkNTZhNjgyNDkxNTlkN2QzNDczYWI4ZWMzYjg0MTllM5gHCtejcD0Ktz80aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20EVVOAwKnqDN4BTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Jm15bG92ZWx5Ymx1ZXNreS5jb20SOENVVTlKRjhICA4zMzZ4MjgwCDAuMDQOZWFzdF9zYwZBRFgICG51cmwAAAAAAACASECy4djUoWMCMgAAAAAAAPC_QHJ0Yi1hcHBuZXh1cy02ZDg3YjQ2OTdmLXN6bjQ5LlNDPjE3MDAwODA4MDc2ODMzMDAzMzYwMjgwMDAwNTk1MDACEDRmNGViODE4AmQC&cbvp=2 HTTP/1.1Host: hblg.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3483266450180228000V10
Source: global traffic	HTTP traffic detected: GET /simgad/17205409499713138048 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bping.php?vgd_len=2604&&vgd_cdv=1148&vgd_cage=0&vgd_tsce=L379&vgd_mcf=76592&gdpr=0&mspa=0&prid=8PRVCXX19&cid=8CU7Q771E&crid=764666904&vi=1705325043284750660&ugd=4&lf=6&cc=US&sc=DC&lper=100&wsip=170785157&r=1705325042823&rrr=Qp8eyO4s8R1Cp4Yfo7r5QIpsZX5WmhZQdT6IBJgEmIo%3D&requrl=http%3A%2F%2Fmylovelybluesky.com%2F&vgde_bdata=QOfvzxjj~8xLjMjvu9~myJLEYv9.9i~OmYMGv9.XA~QNOvON~L1Jv9%2C9~OmYMjvf9~ejfLMQOvf9fH9uuHfu~8xLjMGvhFu.XA~xLjM7UNv9~xLjMLf1MGv9~Q7OvFuWHuhiX9~YzMGJwMGmmQ7v9.Fu~L17v9.999%2C9~8Evub-TUg~kGGvuF~GwM8Yvf9A~L88Ex1v9%2C9~LNvu~L8Qx8Ov9%2C9~LEQMQOvf9fH9uuX9H~L1Oev9.999%2C9~xLjMGvu.Au~ejfLMxLjMGv9~QYYMBLvF.h9hH~xLjMjvu9~Qjevfh.Ah~yN17vou9~GGvufW~QYYMYxjv9.Hi~JLEYv9.9i~ejfLMxLjMUNv949~EQ8MNvf%2Cf%2C9%2C9%2C9%2C9%2C9%2C9~GYvu~EQ8MOvu~LUJv9%2C9~1AEMGvA.hF%2CW9.u~QOvu~x8OvfV1ZjhZq1yzsjEIeG6~NejfLMGvh.iA~G7OvFhuiA9fWHifWiiuhHXiuXAX9WiiHuHHAF9AA9fiWhFXuiFXXhFuuHuuhFFWWHFXuXHuH9HFFf9WfWWFihFHFuFXFi9uH9WFXAWH9AWH~x8Yv9~LU7v9.999%2C9~myOfEMGv9.iW~QQvIK~NNvPb~UGMOjvzS1~x8Bvou~NJv9~LNevAX.Fu~%3DVvA9i9~UGMxNv9~z7QvA~UGMxjvzS1~UGMNNUQv9~N7vB1Qw8zy7mz~GQQMC_pvIK%2CIK~GO7vuh9XAfX9Hu~UGM77v9~GwMQOvf9fH9uuH9f~ONvW~ejfLMGvA.hF~77vfWWWW~xjYMEv9.9iA~eBMJ-Nv9.Hi~QYYMG8Ov9.9H~e8QMQOvAXh~xLjMLEQMGvi.if~GwMNmvA~QmGdv9~ONfvu~eM1QzvuhH~j1Q7v~Nemyvh.iA~e8QMxLjMGv9.Xh~ejfLM8MQOvf9fH9uuHfu~e8QMxLjMjv9~J7vAu~ejfLM8MGv9.9f~e8QMGvHhh.fW~ejfLMxLjMe8vu4ouF~xLjM7e8v9~eev9~NejfLMQOvAXh~LkevAX.Fu~jfLMGvu999~QYYMQOvf9fH9uuX9u~L1OEv9.999%2C9~Q8OvhFHFFFi9H~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.Hi~OfEMjvu9~Nejfvh.iA~AENkvu99H.iF~myMYQwv9.9i~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGvu~LEQMGvW9.u~xLjMQLEQMGvi.if~LUBEv9.999%2C9~c0fv.jmeJ.~LUBOv9.999%2C9~8QDJkv9~8Q8kv9~xLjMLENMGv9~G8Ov9.9H~UGME7vqmYJE1yJ~xLjMLEQMLev9~NGOEv9.9H9~QOvu~875EJM8Ovuh~QJjjJLM71yM8OvFuWHuhiX9~QxEEj5M71yM8Ov~OJ7JN7JOM71yM8Ov~e8JB1G8j875v9.Hi~EmQvA~1NM75EJvu~1OGjUvFuWHuhiX9~1YEvu~myG8Ov9.9i9~GkjLv9.9u9~Qx8Ov%3DK4b4Tg95oEWO7j9Lae4wrpfUBH~O7NvJ1Q7MQN~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMwmYJE1yJMN17Nw1jj~QmGEv~-8OvKrtoExGoFuFAfifAuhAAA9uu~w7Yjvu~QYYM1E8veu~8GNvu~zQlvA~7yQvfX9-fX9%7CA99-fX9%7CAAF-fW9~GQGv9~GQEv9~7Y-vfAW&ssld=%7B%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQNN%22%3A%22Pb%22%2C%22QQQN%22%3A%22r%3D%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%7D&vgd_bid=349065&vgd_ydspr=1&vgd_sbSup=1&vgd_is_amp=0&vgd_asn=174&vgd_rakh=1705325042152550719&vgd_l1rhst=contextual.media.net&vgd_rpth=%2Fnmedianet.js&vgd_hb_audit_1=8CUU9JF8H&vgd_hb_audit_2=839288643&vgd_pgid=p0967114284t202401151324&vgd_pgids=1&vgd_uspa=0&vgda_l1btm=%5B%22SPAMPXL%22%5D&hvsid=00001705325042819017221018024201&gdpr=0&mspa=0&vgd_l2type=scs_newfl&vgd_end=2 HTTP/1.1Host: lg3.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3483266450180228000V10
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=811&vt=11&dtpt=810&dett=2&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=806&vt=11&dtpt=805&dett=2&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cksync?type=g&cs=6&google_gid=CAESEPx3zv_JZPnTixNbvGEeREw&google_cver=1 HTTP/1.1Host: cs.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3483266450180228000V10
Source: global traffic	HTTP traffic detected: GET /t/v2/sync?tagid=V2_4530&src.visitorid=CAESEN0nhbvMce4tpX8nuEm75y8&google_cver=1&google_push=AXcoOmS-T_8ywdeQPYSHEH6pGhHDSGfvH9jyKk6y7plIvsQGh5tGlRlTUAI73rAyZVpDjevLBLrru8VlUOO0oDvOC3SAULYQuTcNLn4 HTTP/1.1Host: odr.mookie1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id=10595281083246962949; mdata=1\|10595281083246962949\|1705325045512; ov=5f87d0bc6119200a69f83f6bd1182010
Source: global traffic	HTTP traffic detected: GET /trk?tid=11711&google_gid=CAESEG1r7n0k6n9VMjo8-C80kIE&google_cver=1&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg HTTP/1.1Host: ag.innovid.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid=ce6c4286-e59c-4e95-bf95-c21fad1357d3-20240115 08:24:05
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is&google_hm=UjMzNjQ2XzEwRjU0MzhFQV8yMEI3MjM0RA%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=acuity&google_hm=877145267063&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2&google_hm=22210ca7b8f13f0e2q6keg00lreyi26g HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=acuity&google_hm=877145232820&us_privacy=1--- HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=811&vt=11&dtpt=810&dett=2&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=liveramp&google_hm=WGMzMDcwSlVRQWtHd0g2N0hMYlJHRjJON0w2UVlTMGNrWHRKTDRoOVZ3UUhsYmFRSQ==&google_push HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=806&vt=11&dtpt=805&dett=2&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEOzRtX562fjwmB4DbY8-tuo&google_cver=1&google_push=AXcoOmTYQdCWDydIGcw8i8YhhVhC8jiBMetgHfAKyGB3jyI6COu2KF-9ydt_2X2Tqd22LMQXt_kk25wn77scqJqGrgME0ZWdyeqEafo HTTP/1.1Host: cms.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmS3kD2wTnlOSZyzuBoE2QI8D3cGBzWBsvLem9IGSNfrVsVCZhiL2mgROkVKWublrob2QL-35_Bkd_sKtBvaqdDNOgZK5cuGNqg&google_hm=MTc3NDY0OTkwNzQ0NTQ3OTA3Mw== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bdsw&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw&google_hm=vnQ-ZE_9T6CrcxbQO0ffaA== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmR1rXiOjpQnseGmYTjPFo7J5m9RLCOnPTctxzHZrc6O5Aiz0SHgc6_yH9afZnxXCCJtYIL5yu2n-gUfVzwiQEB0sRjZimeExA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmTGN2X_d50pHLLDJD0qrXXS8E6cq-PbVfjQ3H6ZiL87GDaLyGfjejSJ698loF3AontM07lADS7F9wJvWFLA2zxV010C7Rn8hQ&google_cver=1&google_gid=CAESENea1cA6TkOafqa1xSG3nzE&google_hm=UTc1ODYxMTQ0NTE2MDAxMDQ0NDg= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appier&google_hm=RU0yb2pWemlCbWlTeDBpUzlqR2xaUQ%3D%3D&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=NzAyMjUxNDczMjI2OTQ1MTY0Mg&google_push=AXcoOmTXQtNWdcta8yfPq670zhfPsOnDIBDv3eQMeeMwH6By8x23HeGHcA-dRtyoA_YJwr9NBNOopwfjyw510NPMJM6Zshq8-Q_E3-4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /cksync?type=g&cs=6&google_gid=CAESEPx3zv_JZPnTixNbvGEeREw&google_cver=1 HTTP/1.1Host: cs.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitor-id=3483266450180228000V10; data-g=CAESEPx3zv_JZPnTixNbvGEeREw~~6
Source: global traffic	HTTP traffic detected: GET /avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g HTTP/1.1Host: 2.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=MTI3NDIzNjYxMDIxOTI0MzU2Mg&google_push=AXcoOmRdmYmZ4OVmK1WG5fslHU1BHTIcfL-6QRefX15D6m5hLPjPx2TWTJh7FH_sniuBxHdo-HwmTjmqhzezdpa3vtcO1Vh0RU2rtXg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=innovid_ddp&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg&google_hm=zmxChuWcTpW_lcIfrRNX0w HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/12/mylovelybluesky-icon-a-100x100.png HTTP/1.1Host: mylovelybluesky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/Teluk_Bahang_cover-768x513.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/banners/travel-with-mylovelybluesky-vertical.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmRfk3Bxs_Sbl_E6Flm5bXGgK4G1tb3a-vwRD-AXeHcvvmthsefZhnmA4QYs4BkwXgECX-2muWWGUTA84WyEnvCbdAEDVQwElQ&google_cver=1&google_gid=CAESEITSmp977taxVGXtUwfhpwg&google_hm=UTc1ODYxMTQ0NTE0NTg4NDI0MjE= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4Vpu0PvGiv6zBqo65uaVM5zn5HgqRfCV_MZR1vU_XXFnZOLQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQvis-t3_6M4QEWDBG_KHgmNpfrYG3utLScePpT0XUhvezDgkECHNSG5Ud6V3JQ02WA0SAzggh07t82ukwqMFIhV6vAKANsjw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4Vpu0PvGiv6zBqo65uaVM5zn5HgqRfCV_MZR1vU_XXFnZOLQ
Source: global traffic	HTTP traffic detected: GET /avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g HTTP/1.1Host: 2.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/google?google_gid=CAESEFJn_9FjZPk4vKX-Zmn7wCE&google_cver=1&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /match/google?google_gid=CAESEFJn_9FjZPk4vKX-Zmn7wCE&google_cver=1&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y&chk=1 HTTP/1.1Host: sync-dmp.mobtrakk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chk=1
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/12/mylovelybluesky-icon-a-100x100.png HTTP/1.1Host: mylovelybluesky.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/banners/travel-with-mylovelybluesky-vertical.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/Teluk_Bahang_cover-768x513.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=992917243&google_hm=NTNmOGJjN2VhODlhYjlhNg&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325050&plat=2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x612_l%7C404x612_r&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325050529&bpp=122&bdt=218&idt=122&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=7739714387177&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=203 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /zh_CN/all.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/facebook.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/facebook_messenger.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/wechat.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/whatsapp.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/line.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/sina_weibo.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejo HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CYKaY7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgTeAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrJ9QLjrtllcJ3KmN5KkeKFofvPD47nJMQX_rur2mP0h1lM0k0KPpMAE9LCKhr0EiAXjsMmvTJIFBAgEGAGSBQQIBRgEgAfA_9xkqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwUQnYDlAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOaCZABaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3Q_dj1ESVNOUyZwMT04NDQtMzAwLTk1MTYmb2ZmY21wPWZwcHN0MiZjbXA9YmFuX2dkbnJlc18xMl8zNzM4OTk2MjNfMTgxMTIwMzgwJmRjbGlkPUNOX2FtcGJ0Z29FREZidTdTd1VkcERrTmdBgAoByAsB2gwRCgsQwPfE48vW6YTkARICAQPYEw3QFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=Fj6RcWcFHwc&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObBgB&template_id=5001&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CfoeI8TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNkBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQl_y_jMcJdMahzrpw9khcON9GUqgpJ0OP8yl5PQQtkcW3p8gqkQAfvoAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA_oLAggBgAwB0BUBgBcB&sigh=-6qpob8JjVc&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6Q&label=window_focus&gqid=8TGlZZ7tJOS4oPMPgom2eA&qqid=CLHG1Oq-34MDFRu70QQdGzENcA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/pinterest.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=4_7hs0noD5Q&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYA&label=window_focus&gqid=8TGlZfnHJuucoPMPmYiswAc&qqid=COfe1eq-34MDFdSDdwEdnJkLiw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=tIWHopABmJQ&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xg&label=window_focus&gqid=8TGlZY7wJ9_NoPMP2e6UmAk&qqid=CIOj1-q-34MDFc6K0QQdjH0Fgw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /menu/svg/icons/email.js HTTP/1.1Host: static.addtoany.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://mylovelybluesky.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://static.addtoany.com/menu/modules/core.KJQApO2n.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N727992.3159GOOGLE/B30198601.372262804;dc_trk_aid=562456318;dc_trk_cid=181024020;ord=886815866;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C3U5L7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgThAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrI_Qpl5IJLaD70gC1ASSWP2S9XJZ7DnKZETMMI5PEEO-ku0cOy-ZtUFe8AE9LCKhr0EiAXjsMmvTIAHwP_cZKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIH2xOi-34MDmgkjaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3SxCVxiRUO7Bm3SgAoByAsB4AsB2gwRCgsQwPfE48vW6YTkARICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=813_sqk_pbo&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=COyoxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CWN0E7TGlZa7-Cqj3xtYP0o63IJ60_ql18LPZtfoRnODCi8EBEAEg7fipIGDJhqCKpKTgEaABm-fg3wPIAQmoAwHIAwKqBOoBT9B0AJJ7_vWHMXyXneecuyz0-DrFRDiMxcErND9OlleyxXhr0QY38J0q-XNOcVle91-ZhxO3m745ccJIf-WGdmCqCWJI7VTLKUekpgqTeAZhYcFfZQPY5dLxr88e_JEG3hsqkLY8WuyPkoH7jqMI3BeLcIFOGKiNUfUcIA32KJmJbAXOkOMk2Sx_9GaXkbai9HhtCMCDANlggbsdP1CL9nbJbmXBVBXaOFILbXIlqEPJ3f3EdPoVXRJ2ELq1sSQyE3aosKa9fxj40lSU42pUMafQVABH3-Y9S4FuYrqJNyeLhTWj8fs6pGLmwASXu7j7tgSIBbac2otLoAYRgAfDzfZ3qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOACgGYCwHICwGADAHaDBAKChDgvY-33dGT5RcSAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=auQhuJjp7qg&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=CO6oxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/trackimp/N727992.3159GOOGLE/B30198601.372262804;dc_pre=CMGTn_C-34MDFb4LaAgdgVcNdg;dc_trk_aid=562456318;dc_trk_cid=181024020;ord=886815866;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTCNXy51eAAgRD8cbPiUedVVWPLGtY7mkP5ITXBYDhZXRsvuESQ3dKuNb-uFeuvl7h7JrhX76A1WfUzZQPWxaBUbO03UA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1Host: tps.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQA0RGCjQXcVoS_J9ruCY2LPE38H4fLBRJvF6R152jOvUgIgMVzHRO6ENVUwTD3QRw5fdCUyYS_VMiw6W1CBBBEVhc0IA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUT7Y_IrO6blBF0yXf3_2RUu0_VJbbriBbyYmNfCnbJZ9XhXBip-SPOwsq7nCSrIFHq0lv33oLR9X3pLBlqidRZdku4G_HcMg_Ib4MfJCgyV5I4npsTmyiYfRQyB0acU9aeyUGeGg==?fccs=W1siQUtzUm9sOC1ycmJKWkFhWGl6ZHp5OHNJS0VhZXZwSGJ6NFBOYVBRQ2tJVXJ0aWZyRXVVT3JWazYyMG9RYmIyNlNDV0Vka3RLMVpiOHlEOFRwVmhObUZwWWVTaFRhaGNsejVRcFVGYThLZXRINHAzdDBjOHIyMm9pMTZqa0dYM2RhSkZDQWpPd1Nydk93MGZZWU9Oa29CdnRRZ1FyeDJXcnFRPT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwNTMsNDM2MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNX4Exj-q2X1Lg9idKOL6uFr9t97MflTFaeqVz7mzqzF0FfgNqUyFFb9S1VsEdNaWK-cPGfL9m0WyIoBauYdfxBhnasaeQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /879366/html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRcgp88P4SAQ-mSn8XD5w_uCzh-SIuMs1XDEwWxvfgYFbAP5B0Ybs-4v_Ndl4xkPlTF_s41RwOpfKlmbXAZDObT5Tydmw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNWVFmmYsV3u6gVaHonNMWgEEib1xMVcUmBc8ORWNWZDuk-TRhPMIQheD4Si9E96Sm_LjCegR_KqH35hk9vKdv0cWcMk-w HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaTGnviUPlCZd2gJN4icOTEeSvQQpxr6UbUsgO575GBSKTA556undeX2Bqu2PhuYaZBVvYFWp8Ut5n3u46vIbMdLQv-FOw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXiYm1YXrfnFjUvJubGg5pw3v2O47jrwf3r9y31kIOzL7zGB4mz_9ZWas5ICwawGQFAU2gPDyPIJdsP1zXg25sPc5T8pIcYNLX79j0BEyTRl4Wd1lM HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRTYEkSukm8alf172bokmTLBT1lRvEoxvaUZb6UIpYVd8YuyzDv2qVvZ_m5zCAXGlXC3wyWk1W6sunPzrFTQO8DjZkuYA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVQ-6KnTG1LWOHtfhZHoh5-q4uuUeq6zYR3CmLO4NgkfBX5JXCTy2GbOovsFK9k0YimhWN2bsEftDriD8Gaj4044wDz1T4wYhhvVgqdxpACT55p1GAcCcYNr755tIKF5WThntBF4D1SpDNvSBVgfhRVmxtmHPK3mu0JL-Inl6YPen8NeJKgEAGbpX-C/_/ads_leaderboard_/admarubanners./advert?/scrpads./adsrotate1right. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=101&code=CAESEENhzENs7RoM0eP8WaAzBvI&google_cver=1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=265092338&col=29305905,5876516,358438444,549485209,207486733 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=2YMK5WIJZnFiW7DiQKmTbBKzvSN%2FAsgszG5QLf5yw65u30yxbxdzO9EY0AUu2Z6GeiVGsvRYBeDQmnDbx%2BZLkA%3D%3D
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CXrZH_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBN8BT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSNoZ3L2esqXG_zQKvzQQxA59OzcvsrukQ3kT1e1uFrvjr_WFkmZMAEzpi-9-UDiAXSj6CwBpIFBAgEGAGSBQQIBRgEoAZmgAfPx9hqqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJRGh0dHBzOi8vaGVsaS5saWZlL2ZpbHRlcj9rZXl3b3JkPWtpdGUlMjAlMjYlMjBzdGF5JTIwcGFja2FnZXMmcGFnZT0xgAoByAsBogwIKgYKBKy6sQLaDBEKCxDA9uPy9PqJivYBEgIBA9gTDIgUAdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=sUoeI3bWvso&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFY
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPS=5601; CMPRO=5601
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CO9c1_DGlZdiJOsWlj-8PkPqH6AjUnfD5XO_GsfWkC9CQgOyQAhACIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOEBT9BUNaRMd_0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vQfgvP64vQq6eEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLVcNkxKieVU0A077A-WQ83uBA3j8nFWZk4oWjmRMEu40fIVe9knotqvhBKfI_9JsCJrj3YK4NdzwATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQ0P3um4S75aPFARICAQPYEw2IFATQFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=gkPONP881k8&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=Afxx
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1775&cbvp=1&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc
Source: global traffic	HTTP traffic detected: GET /ups/58269/sync?_origin=1&gdpr=0&redir=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1682&cbvp=1&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=C1dy6_DGlZdiJOsWlj-8PkPqH6AjBtMyqdc-AkIHKDdex9I-wARADIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9BWF5xMdv0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDovDGLVCFtdvJ-w70a1ND9Ua-Z14yP8ovFh16hAUP9EgX80VNFk_HpmgrAyFv0LrjyIvnfvV54W4H5aDWtsgeU-_reKcOQUb8QAJ3-1cQgDlMGLRThIgQNcLO7Cu1qH7qWAza4NBkantO6lO0_7-Pn6-Vih6bZqKWoGSwuXdOjq_S3ZphpMzedDw1Hl8WiU52unRvtwASl_-jGwgOIBdPRofkvkgUECAQYAZIFBAgFGASgBjeAB-e0lMUBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJOGh0dHBzOi8vYmVzdHNlYXJjaGVzLm5ldC9pbmRleC5waHA_cmdpZD0xMjIyNTYmc3ViPWdjbGlkgAoByAsBogwIKgYKBKy6sQLaDBEKCxCw1vzXhLPUt9ABEgIBA9gTDIgUA9AVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=TxhwSspVjc4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFY
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXizyx5OMgikPNKlZgmKiP6KCl9CRYr7w7a2bMhd5U3e7mW-sRomh82FNPX-VL1Wos_MioOn3oMxMI9MZwFZM3ESfSeKJj8Y5ypbcnO76lkkecLJqGjNqHs0SXIDgZUMwMSB3rnfA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/index.html?ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_hm%3DSMART_USER_ID_B64 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=66dc06ec-fd4b-410c-a331-23680e638e4c\|1705325057
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CXDyI_DGlZdiJOsWlj-8PkPqH6AjvlqWmdc7_sL2dEmQQBCDt-KkgKAhgyYagiqSk4BGgAajr2_ACyAEGqAMByAMCqgTkAU_QPSmlTHD9Hw0qN1McjWF2FVxqrP_58VkhCYygm6ALRhi11yUUfgNlTP8YJz_-8TWMnU9ALyObzwLwBsEaG3MhOM-KO8NDEketMdn0970A6Lw7i1RpInevfcO9GtTQ_VGvmdeMj_KLxYdeoQFD_RIF_NFTRZPx6ZoKwMhb9C648iL5371eeFuB-Wg1rbIHlPv63inDkFG_EACd_tXEIA5TBi0U4SIEDXCzuwrtCm7G3AM2uDQZGp7TujuX6ZHj5-vlZJizxqylyX4dKl3To6v0t2aYaVJQrAsNR5fFolObsYgE6cAEscmXwtUEiAWgmbv6TZIFBAgEGAGSBQQIBRgEoAY3gAfAlKSPAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4b2AcB8gcEEPafINIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY3MOH8L7fgwOaCTtodHRwczovL3d3dy5maWVsZHNjamRyYXNoZXZpbGxlLmNvbS9uZXctaW52ZW50b3J5L2luZGV4Lmh0bYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQwNzFxt_g35OXARICAQPYEw3QFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=kQ6_B_EJUoQ&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=UFt35e8Ivo_K8buKvRmifluBnVchvrnqhq9WsbsnENFSJeHadDL1y1X6nHuNcPoHuIFjjSY03yo1sOul6qHBdNiueE_hrEVEkAmVRwPxD6c.; uuid2=9132236969289213074
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CM_CC_DGlZdiJOsWlj-8PkPqH6AiarfGydNPs3sTFEdvZHhAFIO34qSAoCGDJhqCKpKTgEaABj_H8_gLIAQaoAwHIAwKqBOQBT9AAKaNMcf0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDovDuLVC4HVJRkw70a1ND9Ua-Z14yP8ovFh16hAUP9EgX80VNFk_HpmgrAyFv0LrjyIvnfvV54W4H5aDWtsgeU-_reKcOQUb8QAJ3-1cQgDlMGLRThIgQNcLO7Cu1kOpbXAza4NBkantO6D71c7uPn6-USg4LTpaWxewxPXNOjq_S3ZphpKlW9bgxHl8WiU-2quRHgwATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBjeAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJpgJodHRwczovL3d3dy5nZXRhcHAuY29tL3Avc2VtL2NvbnN0cnVjdGlvbi1tYW5hZ2VtZW50LXNvZnR3YXJlLz91dG1fY29udGVudD1kJnV0bV9zb3VyY2U9cGRpcy1nb29nbGUmdXRtX21lZGl1bT1jcGMmYWNjb3VudF9jYW1wYWlnbl9pZD0yMDI1OTI3NTAwOSZhY2NvdW50X2FkZ3JvdXBfaWQ9MTUxNjQ4MjIwMzYyJmFkX2lkPTY2MTM4MDk2NzgzOSZ1dG1fY2FtcGFpZ249OjE6R0E6MjpDT006MzpFTkc6NDpBTEw6NTpCQVU6NjpTT0Y6NzpEZXNrdG9wOjk6Q29uc3RydWN0aW9uX01hbmFnZW1lbnQ6MTQ6UERJU19QU1SACgHICwGiDAgqBgoErLqxAtoMEQoLEJDtmvnF8fC20wESAgED2BMNiBQF0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=qSuMAz94178&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz
Source: global traffic	HTTP traffic detected: GET /879366/Enabler_01_250.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /event.png?impid=8a24cd3de094480bbccbf23135950c09&akipv6=&dup=&eoid=1000 HTTP/1.1Host: tpsc-ue1.doubleverify.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ch-H6_DGlZdiJOsWlj-8PkPqH6Ajy87fucqTc4ajAD9vmzPifPxAGIO34qSAoCGDJhqCKpKTgEaAB5dTY-wPIAQaoAwHIAwKqBN4BT9AWXpBMc_0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vRPgvIiRr80Ly73Hvjnkhx6JV6-Z6KyP8oDFh162J0P9MAPh0aFCZrYcmYqEPViBLbgy1_sqfl55roIMazWtRwRh-Pje3MBnUr8Q9Z4L1sQg-1DzLhXh1wfsdhx2DO43j9eIhtxy7sKelF4oMbXhBp4PVf7cuvP9DIhHmviRcvc_WBw53LlT9OFlqP2KfVC3wAS4ybz77wOIBYvwn9o7kgUECAQYAZIFBAgFGASgBjeAB4OrpwSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBD2nyDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDmgkhaHR0cHM6Ly9oaWdocG9pbnRwaG90b2dyYXBoeS5jb20vgAoByAsBogwIKgYKBKy6sQLaDBEKCxCw4ZuMi5-j86IBEgIBA9gTDYgUDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=-PfHAdEoRRI&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2183&cbvp=1&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEENhzENs7RoM0eP8WaAzBvI%26google_cver%3D1 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=WC9wj9LUU2YV2RjDNdg5Vs5kA9YY-7pMNLdffFmOl4iR1Pub_G041AC9eB5Tu5dAyZIvvASgyNXiwlrDphZJwoLoFQXE6sY5mvFn6SMUooc.; uuid2=727555877560728591
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/ld-core.css HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1812&cbvp=1&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=C7tqn_DGlZdiJOsWlj-8PkPqH6Ai_r5TQba-LrbawEbCQHxAHIO34qSAoCGDJhqCKpKTgEaABnfbRmgLIAQaoAwHIAwKqBPABT9BeHK5Mcv0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vQfgvMyp1X-jeEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUkC2leiuVU0A077A-W5sFoBQ3j43EDckYqXzmDSkvH5tpc4w29iP7iRJRx_fmmIdT_veesSy9x8k0dyW8ypvgt7jn8JynhwASGo6-CkwSIBdnk6vlGkgUECAQYAZIFBAgFGASgBjeAB8uJruUBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJFmh0dHBzOi8vZ29zcXVlZXplLmNvbS-ACgHICwGiDAgqBgoErLqxAtoMEAoKEKD8qanCqqjEdBICAQPYEw2IFAHQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=AR2eXj2C7_E&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_deb
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZaUyAk5iMnx646zg.de8aQAA; CMPS=369; CMPRO=369
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CfC68_DGlZdiJOsWlj-8PkPqH6AiAuoODdaTp-c3_EGQQCCDt-KkgKAhgyYagiqSk4BGgAbj0s_wDyAEGqAMByAMCqgTjAU_QYBqvTH39Hw0qN1McjWF2FVxqrP_58VkhCYygm6ALRhi11yUUfgNlTP8YJz_-8TWMnU9ALyObzwLwBsEaG3MhOM-KO8NDEketMdn0970A6Lw7i1Recw6JZsO9GtTQ_VGvmdeMj_KLxYdeoQFD_RIF_NFTRZPx6ZoKwMhb9C648iL5371eeFuB-Wg1rbIHlPv63inDkFG_EACd_tXEIA5TBi0U4SIEDXCzuwrtXx3zV-LRbT1GlFkWgDHd1ktzzsBwEvrIXbYVtHdEvlp_LoDWt2qMwS9Z9Z8AZZfLtN7t0_OfwASukt2enQSIBanvpNJHkgUECAQYAZIFBAgFGASgBjeAB7CLzAOoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBD2nyDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDmgk0aHR0cHM6Ly9pbmZvLmNhbGxtYy5jb20vY3AtaGVhbHRoY2FyZS1zYWZlLWhvc3BpdGFsc4AKAcgLAaIMCCoGCgSsurEC2gwRCgsQwMfWnbCok9LnARICAQPYEw2IFAfQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=R4VOS0oYfgo&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_
Source: global traffic	HTTP traffic detected: GET /sync?UIGL=CAESEIrOqdmzFji86NQUvTm_VXw&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2357&cbvp=1&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/background_300x250.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/Border_image_300x250.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxW1f8RMqRFHUIwPAQAftKwhy6Pb-VHBpVM0G0GMOCkzBkTlpsPmiVQtYZ_QtEitTLMJ6AM4mNAYrEhQHfedioJuqHEGOUXMjcHoynag6JqvdGJIyDCIoiVoSbqrlqqUUu0bKDJIgA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/gsap/latest/TweenMax.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s0.2mdn.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTaqq_6BNWrHV0bzlfZWXs5xp7LgvlQYGTewww6ndS78t2ywN2EEBPyetlTd3UaXvff-dGCYyFTwNK9oGfHtdcgIbIRWZVzag HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1775&cbvp=1&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1682&cbvp=1&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=265092338&col=29305905,5876516,358438444,549485209,207486733 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=teadstv_dbm&google_hm=OTI0ZGY1YjAtNzEyMS00N2E1LWFmYjgtMzhkZTNmYzhmMTM1 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQq
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY;
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHB
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8f
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=YzkxNmVlYTItNWExMS0yNjBkLWUxNTctMzFlNjk5MGQ4ZDk3 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stickyxchange_dbm&google_hm=MjYxNjEzYTk0YmVlODlmOWMwOGI5YTY5ODUzNjE2MmM=&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=oath_dbm&google_hm=eS1lMHdNdnpaRTJ1RTV1QVBoaFlTOTZRblZoZ042NllQSH5B&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/logo.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEENhzENs7RoM0eP8WaAzBvI%26google_cver%3D1 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!@wnfH8K6pQK`!5=E<*L5?%M33?LaC^Ppwhmv(z1cepsl_0)(n?p[FxTiT@C%nugO%v4VB%nmfp)xrwD; uuid2=727555877560728591
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/headline1.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2183&cbvp=1&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4632&vt=11&dtpt=2857&dett=3&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/headline2.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/Cta.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CfoeI8TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNkBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQl_y_jMcJdMahzrpw9khcON9GUqgpJ0OP8yl5PQQtkcW3p8gqkQAfvoAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA_oLAggBgAwB0BUBgBcB&sigh=-6qpob8JjVc&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6Q&label=window_focus&gqid=8TGlZZ7tJOS4oPMPgom2eA&qqid=CLHG1Oq-34MDFRu70QQdGzENcA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5296&vt=11&dtpt=3614&dett=3&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=4_7hs0noD5Q&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYA&label=window_focus&gqid=8TGlZfnHJuucoPMPmYiswAc&qqid=COfe1eq-34MDFdSDdwEdnJkLiw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=tIWHopABmJQ&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xg&label=window_focus&gqid=8TGlZY7wJ9_NoPMP2e6UmAk&qqid=CIOj1-q-34MDFc6K0QQdjH0Fgw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C3U5L7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgThAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrI_Qpl5IJLaD70gC1ASSWP2S9XJZ7DnKZETMMI5PEEO-ku0cOy-ZtUFe8AE9LCKhr0EiAXjsMmvTIAHwP_cZKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIH2xOi-34MDmgkjaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3SxCVxiRUO7Bm3SgAoByAsB4AsB2gwRCgsQwPfE48vW6YTkARICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=813_sqk_pbo&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=COyoxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=appnexus&google_hm=OTEzMjIzNjk2OTI4OTIxMzA3NA%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1812&cbvp=1&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CWN0E7TGlZa7-Cqj3xtYP0o63IJ60_ql18LPZtfoRnODCi8EBEAEg7fipIGDJhqCKpKTgEaABm-fg3wPIAQmoAwHIAwKqBOoBT9B0AJJ7_vWHMXyXneecuyz0-DrFRDiMxcErND9OlleyxXhr0QY38J0q-XNOcVle91-ZhxO3m745ccJIf-WGdmCqCWJI7VTLKUekpgqTeAZhYcFfZQPY5dLxr88e_JEG3hsqkLY8WuyPkoH7jqMI3BeLcIFOGKiNUfUcIA32KJmJbAXOkOMk2Sx_9GaXkbai9HhtCMCDANlggbsdP1CL9nbJbmXBVBXaOFILbXIlqEPJ3f3EdPoVXRJ2ELq1sSQyE3aosKa9fxj40lSU42pUMafQVABH3-Y9S4FuYrqJNyeLhTWj8fs6pGLmwASXu7j7tgSIBbac2otLoAYRgAfDzfZ3qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOACgGYCwHICwGADAHaDBAKChDgvY-33dGT5RcSAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=auQhuJjp7qg&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=CO6oxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/richmedia/studio/60024164/60024164_20231221092021363_Hero-Image_Cat_Consumables2.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2357&cbvp=1&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmS-r2i0KuoDE5VH6MhY0yxiuBi9DoHx5-BnW89CwUbGL8wjR4BwvZHCGpemoHRISzA3AojOxrcVOqyDiYjcrvF2S8z_iUGwwX0Ytz1HramZpxARoSjI5uP1Y9KigxhiWIoX7XLkTLZ_isKnu2mdgKlwdQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTwgIEN1LQK4KZCH0XtrVcRtsuq2iH3k-hQ-KJZNB5p_u2XmHIyypSS8zqmgNzSkYLWifF7P5x6gJAoSTXkNQu9Z3_NsV9sop4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/Border_image_300x250.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/background_300x250.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4632&vt=11&dtpt=2857&dett=3&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRndEC44ZGVhEOFo7-wPeJLUuKApy9O0c21KgE_ao33A_V6pNEosSbBB0AwicewbcVdhV2RJPwYhdEY6nwq7Vy90LctSvYjTJk1PudnvsNmLoMKXVQymj2UOfX6yGmajQADCSxXfAH960AIknXKAXlXbJk HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/logo.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/headline1.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/Cta.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5452&vt=11&dtpt=3269&dett=3&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_de
Source: global traffic	HTTP traffic detected: GET /sync?UIGL=CAESEIrOqdmzFji86NQUvTm_VXw&google_cver=1&gdpr=0 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /sadbundle/12128317773909862788/headline2.svg HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5296&vt=11&dtpt=3614&dett=3&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5641&vt=11&dtpt=3284&dett=3&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_de
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5096&vt=11&dtpt=3284&dett=3&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_de
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=xdmXEDM5sk22n9PM2iy-bQ&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=eYNxQOhAVEaQ0WOGha3j5g&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA&google_hm=eS1hT0RVTjZSRTJwRjIxTWdOMDNzMjI0Q3NXN19QaWxaNn5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=qXJB9OnwRUuAk11aba0hXA&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5452&vt=11&dtpt=3269&dett=3&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/AirMacau-768x512.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/richmedia/studio/60024164/60024164_20231221092021363_Hero-Image_Cat_Consumables2.png HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4&google_hm=eS1BRjguYnZCRTJwR0NTYVBjLkJ6Qkk5T1pkRm9JOGJYRH5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT&google_hm=eS00MjdSZGpwRTJwSHk4Mm1aMUYuR29YZ1pOYUtxUDlGNX5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5641&vt=11&dtpt=3284&dett=3&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5096&vt=11&dtpt=3284&dett=3&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRDum50lrWXz5Yhu0Czgd0D5fL_h_Rscn_AHruSbuLJuNWan_vL9POHqlOScdmDES34uhh3bxcbFm3ejitO9U9jC15TrQLo3FSN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQKnbnaV4TG-U97_v64H__QwyOBp2b9ebutC3UrjRj_XsJNR82ga2abClIlEnSXnCYhtbObnS4pxTxKpQwPviot5HqL1FGi-Q HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmSeIjwUFXvxwNTWjhprFrP8zvznMWF19iP2i-PlozM-pOpTtsqzuREHMn-yHs8qDsl59OOWhEbCvuRAH5dcRU3_JcH66va6klcBFnotonw0HOgeO8jsVWVHsT2NQowwdJ4FNnxLdKOgasLNhv18FTkkKXw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRk8aAOzcL4YDJzbs3Jk5669CA18yOSK12ynhlqEeBV8XROypkoUtnq4I4PJ6nNicocVYSfGYXW0qxStfQK1Swa2IYIyql2iAHQGlw4llcFkMf8yWYz0rFgDOVXKmspoP9m6kHGuuSyHalgTNOpjM-hMWI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=JA0jvjkdJEyhrXrvc-004A&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSA2rqtx26tZoo69R83K1ejUFQXWvehH2eUUYmAIwwL2cq_iuH40V8ucqQ-J5m1Kax5qV3goPKR0lklc7vyyRcuWijtSO4Ifuk HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=2AGeIjQlUEOPwEHomUdE7g&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQLPQsGYxBPWhisDOKW-ucf0uP2dZrbKNvNLqzFdFTBpvmCCXbKJSXSB8DWT4TtdB9lIFxRkqG0L_c30Dlo8MNgekNcZ_tlxW8BS2E-4VFypeQcX5fRQaxy3ssFVbl4ITqMj0QnaIjXgaII6pCtVbQuTA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTg1oVVJq2CzUaXoIbGqF1uMwtljfn6vOzmRR5X7hdfNWWGBomuPq9RwBaSi75INbEp5WDTR_E4Drg5dZClVvi31-yzmKlq6Qx0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE&google_hm=eS1CZ2hVUFh4RTJwR05uemUwNUxzZE4zSTA3Sm0xSDg5T35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA&google_hm=eS1iLk5QRDRsRTJwRlNUdjhZdllmTnFQOU5JSV9pdTh0RH5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmTF3ezaLmYOz7Nh2RaJSZqLFbD3AxsHaxKL62-HjPNokkeI8LPO18riMOgTp21BtNJvoa3uGvruAuLto-2mvxlgNOu22fEJwjw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=42F6C9VsIUWMcvSy0Mjpyg&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSgCMgsIiOmv4ID2yjwQBTgB
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/01/AirMacau-768x512.jpg HTTP/1.1Host: mylovelybluesky.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325055.38.0.0; FCNEC=%5B%5B%22AKsRol_wrahsvHY4dGfMzxoJRGWNHS_NkmycOxFhASitXjG8f5CCjAydz0HYcyKh_3SfOIXzrk5VGTYy_iX6ZcNA7Clepo6XAgMsR8aF1nhT2J2qrPj_3B1rUrd9jgN31HTq2Gb_QAgcMWuUEiuP0I-d2RAkSs27Jw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRwpmsk5b1hrjAm10VAPEfsx6x0LjA3R2w-RSEmr9o8N0sK8owjEUqz-fnfglySi_0qL_A-s3ZQHzJFuL3xTXICom7dzcbGQsk HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSi_oDA7vinFeFX0bVgjwOSb9BUwloWwKgl2quBqyM4WgB_WR1ca3JPR6JygCfxYimVY7TVS2vFZdZp5n_c_Pf4vwpFPzIXYBY HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk&google_hm=eS1pTktXdFp4RTJwSG1WQVlvUE9RdW9EYUpJU0ZvRC5acX5B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFRQU9zbnpVTlFCZA==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRtKbMdrq9XgH6tlmWc5eawPgrzguh_C-RH2QZodKiKq5Qb4yaUnfchmynLT8HYVXXuW3BJ07AsN5C5ehdsgfDLgui21ryKPwI HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /sync/stickyads/53a62d6169986a2c9839605a347fcfe7?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQq
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY;
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHB
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8f
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /zh_CN/all.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/stv?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325066&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325066514&bpp=16&bdt=581&idt=153&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=2458750656016&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=209 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=t4gr2hmzo6q0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /cookie-sync/stv?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQq
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY;
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHB
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8f
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=ctdQweTKqSOSmMiZKg2Yl40gsP94JXU8K8nzXWGMH55glgStuSJWx%2FvAAUomCJrkv98Rg2pkQpKGgVV2IRO0DA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D209%26userId%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=727555877560728591; XANDR_PANID=6VE-vV-DyD0Bgm83LAgwXPsLj6abjlMZT9N7FeKEiHLkpHUUo_QHEOitb1AEx7cqsDzYqgMCBBUtU4GlZxpav9SSufp-9yRgLEsBzC5W5dY.; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRkpbmA-8NEoZcsVivCjP8-kyP2ylEElZkKzdiGjAro7Mi6OL7OlNQbf7lfs_v6jEnyK46320XwINQvYtbVCQD-t57R7g HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxV-2F7d6zjYqZS_8dA5_G1T8LtpVIOchz52O7tz5pXzG4swVHw_M8wZ79rpkCdU4R8_GJ2Nw0fUSyyT4qhuPubHpC_pgtpnqfsA8QJwEdWlmJj0LOBKWFSPSUmH_pZ3CbCVL_ZrwA==?fccs=W1siQUtzUm9sX3dyYWhzdkhZNGRHZk16eG9KUkdXTkhTX05rbXljT3hGaEFTaXRYakc4ZjVDQ2pBeWR6MEhZY3lLaF8zU2ZPSVh6cms1VkdUWXlfaVg2WmNOQTdDbGVwbzZYQWdNc1I4YUYxbmhUMkoycXJQal8zQjFyVXJkOWpnTjMxSFRxMkdiX1FBZ2NNV3VVRWl1UDBJLWQyUkFrU3MyN0p3PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwNjgsNzUyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4 HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=oSINJOxlG8Bno5Tmx0zJCDqyvK5Whq%2F5usCOtWDg9hYwYBOwINbREVe7AJtXC7Ck%2BkpGtkXkgWYVlpEDVSSNCA%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CIP-3gIQvMTgAhj_wNHfATAB&v=APEucNVoCIL4GvMej-942ShRx42S1R5xGVnLhitqKSoh0lPwDzpGoo1M28gE9urR2U1XDIYOsyIs41JMU1E1sYsOYhzWqXwzQKptIYDLKDkQN3lY1e8Vxsg HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /xbbe/pixel?d=CMGL1AIQ8NXbAhjPs9jfATAB&v=APEucNWFfCZ23a0B9TbpfTgJwpdxneWf93-nG2OvY_NuMVgIEfo4rN3LNRDblr4gnGdc5qj3cyD4-8CCEs_MgT5g1npVL0JvesLvYAPwQ24zn93M6zseGUY HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=435837736;ord=uhetnu;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIpL6e-L7fgwMVqqfRBB1t5wlKEAEYASAAEgJhNPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4GAE%26sig%3DAOD64_36maZYIRbAE4Hq57cPbZ-yYhra_A%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=_kzn67urD;cmpl=8;gcsr=m;stc=1;sttr=12;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRKvkKRj8S86_HOkg4uId-EbBKYfy27OojsplOhGpjchrxCaRGWA1dlXwpsNKjQ32OBGcAZgzb_M2sQHht_iVJjr1Assg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CEzPDDDKlZe3KD573xtYPmNek2ALUnfD5XO_GsfWkC9CQgOyQAhABIO34qSBgyYagiqSk4BGgAc3x9uICyAEJqAMByAPLBKoE4gFP0BFXg4lgna-w0PkSmMmMOvxv7N7w-r3prYC62LKNZFf_gHaxTDGZxQWV8Lxb-i09qscoEcVdTUreVUOg5RRcPwAKqynnYWT8uTk1yk-zZofALByuELY072eZJ5FESVP7Z9BLVvKuMRAqNnuNpuaAjL3_B1JiXP4cd-D7fi0TXF6lLBcCebutpA5PNZj67kw3K4gIh7yiIVJKd1Lmvo2rGkaxGM86zOFAqGClrYAPR4dc00zlIivPHpXLrCPRBzlrBgmLggADurbtAPr1MJtRd3O8PIwHa-EtdmWL4VZtzKm9wATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBi6AB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQmZdE0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOliTya33vt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQ0Mz6v8mdvYHaARICAQO4E-QD2BMNiBQE0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=t5UNEhJPzJ4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5GAE&template_id=484&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=Afxx
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=2281214538&col=29305905,5876516,358438438,549336255,207488824 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuhAAAAAABAgAsAQfogAQAAC0BB-gYBAABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxWzSWYo0g8LYhdMECZmVIGG_VIkVwd3MgyuMkmns5pUj_rlmw3BWBuT_6yCG_pPAyj0GTT4oN3u185hV4UGF0wmSr-UhauGCUz5jOml_-hI_kANeGuo9suooylO1HUNSS8EEYBsA2DKo8oZt2Nscm5Uw1A46ld_CEu5CfTLIL2-z36CcggjerE6N0tv/_/customadmode._ad728x90./embed/ads./EmreAds./sponsored_listings. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=M9ckRZ7UFa63QwwIxepPJStKX9L86obNH9OBME0dzKGK0dp7fUdcp21nuQOns2uh5G1GqMvVpo6DmV14m438Ww%3D%3D
Source: global traffic	HTTP traffic detected: GET /sadbundle/2024815875537436803/index.html?e=69&leftOffset=0&topOffset=0&c=Dy5dGanKQr&t=1&renderingType=2&ev=01_250 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=C9zu_DDKlZeqJAdjkvPIPm--EkAaarfGydNPs3sTFEdvZHhABIO34qSBgyYagiqSk4BGgAY_x_P4CyAEJqAMByAPLBKoE4gFP0PsVEi3-Hi02QTPbbB1k0s6-0ITMjLQQ73YJXp2HvSsv7d8zoClZhnQTjDfPb9VNTQSj_gQ4xqIa1oe_1e_kyFHEDJ_XbYuulXE8GKqhV4gIBEeOWcmJeI1Oweumf-baZ3Tl-oR2uzM0RgdCBV6_x99xK1xQ8AHSx3Qv0szsVcS6kTMZ2MO9QkD1EWCw2OKfdN2kcK0stz55CakoNAxgj8hju6YWwZNXps8PwyBZ76iRstmSHuoK7qp8Kz6jYnDw-44rYiBNmaJuyuRJpBH4n4lJWfbGkWcPQ3wPIC3efCR8wATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBi6AB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQrJIb0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOliLjJ_3vt-DA5oJpgJodHRwczovL3d3dy5nZXRhcHAuY29tL3Avc2VtL2NvbnN0cnVjdGlvbi1tYW5hZ2VtZW50LXNvZnR3YXJlLz91dG1fY29udGVudD1kJnV0bV9zb3VyY2U9cGRpcy1nb29nbGUmdXRtX21lZGl1bT1jcGMmYWNjb3VudF9jYW1wYWlnbl9pZD0yMDI1OTI3NTAwOSZhY2NvdW50X2FkZ3JvdXBfaWQ9MTUxNjQ4MjIwMzYyJmFkX2lkPTY2MTM4MDk2NzgzOSZ1dG1fY2FtcGFpZ249OjE6R0E6MjpDT006MzpFTkc6NDpBTEw6NTpCQVU6NjpTT0Y6NzpEZXNrdG9wOjk6Q29uc3RydWN0aW9uX01hbmFnZW1lbnQ6MTQ6UERJU19QU1SACgHICwGiDAgqBgoErLqxAtoMEQoLEODiurfU1cr_-QESAgEDuBPkA9gTDYgUBdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=YAx44dD1bOk&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1FGAE&template_id=484&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=M9ckRZ7UFa63QwwIxepPJStKX9L86obNH9OBME0dzKGK0dp7fUdcp21nuQOns2uh5G1GqMvVpo6DmV14m438Ww%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
Source: global traffic	HTTP traffic detected: GET /dbm/ad?dbm_c=AKAmf-D98bqk1f2DSGTVW9a8Fsu1hJzHsZPixphfFenb6L9PvOjoWsDhw3M509b-o11Kty5K9U5S5KBNr_xUDlqPz9Bq0gxTiQPSkGmgwdsdAMgNcJWSEHHHo8Om0JKqs6lWdbWALV-vGWay0oooBy-1syz_PP389wQEXXmoQTDkydSiodX4iVE&dbm_d=AKAmf-AS-BVzHGuJVWQJ4IwOWzFkgL0l8dxqlA623Y572r1mL9txyubAOk8BzbecQ0dqAAQk8kCJ7ehGY2W5Rc4s8HAKUdyR5ZyVnulqvNIMkakN3881e4cmUWsMYKX_kJ_r2fa2NfOwaAHsDULlCsquScwfhzNXchUT4yOvols8xAiJjRztpQFJN7iF1Jf-KQBNHf-EahKURV9f5-wYBVODZc7Ha0ld7l1Jy14wO_3FD4v5Q14cturGdZuV5akYa4rJ86WIhh_D56C3FkDWRn9FZMLneuRYPAuRPOAHnbCJKggRSxKCZKc5Zq4DDTifkE16zF7Dn6LTcCs2sbPfKPSS-0UiM81d3BP-ZP0Ga-5K8gK1wJKeZNpVMbdgaZfxzxJUxVmeYIONy-2iv3nWNUk-97RpstyF14mfCE3jZKY8J-l1f28oHoJnyUaBR_8Td8WgGsmB0QObeR0RWS58DAmZQkf1UuDA8sEuoQh76KzLujPJ2UsUKRDewysmxYBpeRjWK4e8PedjDm_unePnvvDPsbe3kXDogx0JORkLgwodqBkypgjScPg9yIriqT3lQzZQ0IOmrX5TDtAjD2QTHUDUx_o-2vC4e7Z9rgXDaQoEpIo_HF5msGY5Gg10WIMEnJ2kyQ3ndeJvCcXarB6oHYS8WSJtbjjXzXNTncafM_rFMT0Xnc4u4ztfPgG1ZC0yDDE0P1bvKB1l1umFWx777DApvVEYK2ZdBrjEXRbe5yRDkf_KAbLVGIuQSsexraj_RuoZAYGChrzjBTabcA0iVMenImGAz9wxue26hkxVgpOHkREhQmf2WNf_WG0dwiWpnveuB6PKxJj____sbdSb8U3T1p7j3Ybr7xATJSfZuriwTe5vKLBC5RyBcKAuB8-oQky3Ka--UKJydgIgDsEAcB0KMVY4axxGMZeR7MkKtZYKggeY-o-qpxmevtN6iuSz8V94FlxFr0RqkcpyRpnaNWdWrIuHdMjev8gYlptb-aMXcLdRATt4W4_TD8ZGgsy2S8MAVHBuBKxlgzH77EBFRRA5c7K9gOsMqFBNy2oy0DvMa9BufeXlAAc1GqgSSeSBq7rzR3_Ff2zSwwRPR_2-GeKSNPMyUhEz77R9hXE0IzReIads7gGjwISomxCJuHNwRQ0eBp1-KUGWnxH3zwaCNcSuG-Agg5pqNg4qFBEPcGEjysYi7a1KiWUf5xUcFINVs9EaMcTncixWyk13uH_e3BUaD2lCC7gLwknW9wJqq4J3BNafCzK7i3CP0E-gYRhT1gzxbK1seo_XWLrMtaqarDyhdkBzAE0kF4MgySquLt6L-RrTz3WLtK-bWBhPHh7idp16welB2dq4SQ0quEoL76hm6zq2hs9mWbDfAYHwZmhn9bYxuDX1AeNOYToDSAf4HdX1kSXTT9Fqe5rtwGWjUmH16aoAXDzN23zBq9IDuMjU4To86_vVWCc_lQKnAzSoqhpHEUtqtnV2er14wKqkaWL_V0w-x7dk24NNBgQ9IuVKYO_h-4wPAytYFMj3QtqBjxoX2ysL2uKW1h2ONZBV86a4gJjoXLoKjks0sBwOZnIPyZ3dAH9bw5O-Ew61nCfSbsdXqv_FprwDA3Ln2L93Kf7k3QO0Te0YymWfvCT32cey0s36x-vyTbut04MwOBBbIT1jqSOfjm5Dj6OP9rlrOcCHu1iMskGb8WRN9w0s48O1HVQBsrf77U_aRA2WSBvrZQtQM2MmMrvqDmpiDSjBPhZVkZCqL_Ivk_ahYyLm7omoUwtaL7QWmkevPBWEf_8caC8otdo-Rjjl3O2WoIY09oJr-CBeZM8UCRr2hqP9aF2xrUr7S6sUkHJB27LrdPCt3NE9O9r6ak4AmfrlkS6EE7MQQ0DjfXgtrvO3BBLozwXkvJ5p3WcDrsrSCf3DeX7a8ua6t2vszqMsL_zFAyX3UXGWOguMvey6PEmOBAdWnfShvaDYzm8PAR-rJ8ItmsFuVslxjuGGOjL3_d9geWXfyBAjLMo5FRan7c4dKK2r65JX0kNlfPaKYh7iRlGvcMQGkgdFaLR17NbRzwnwTn0IvKB_0u6dU5mLlTJ-Y1DOK3C0YHIg-HZMjUzEMR5mgW_xNRrfFzc5IiNfbmn_MQEBXaas5THsL9CgIXHgCS3S2dWEfGUsyWxdDOnF_M7ZE0y_Cvqy8M_XOPPrHfK3Y2fe2cEFE2dXnXsFzhkDkpAwlGSkI2m4l1SanhCEfOgMVzaBpyS4spbFg4B1xuNT1JYSKl_tpDrsMG-JcZCBuXuWAhUye-le8XNXSYSe06nFkgCwekUfigmig71GDdZqG0-mzzkilfMaFM5l4By8iZeDJOGzBnqwubr_DjRyIgwYeIYK06_qfL7G7vGgjvWhLfrCaZ140qxloKU5-MZfNGP6TixyPF2vzbpYTn8s9Ioh69MjJHl18X1uchR7j3NGgP5dvjjFnmnSreagE8_GAiTwGiup2wNOiKjp50LvLFkBXAcHfBJ3iRoxCo9Mcn4yky8gX2qolb0k5EbeWl1bPGEtQ1xi9UiISWhPhNGzLLk2PjGvBDR6hl1FbPZjbVEoKDMDqLcNLfqfXWY5YRkPY7N7wj8xmVuuIT62q8nL2kUXv0gCx6X7ReYY1ZEsU5tU1KcYeKkEz45zpWalJJLF6Qm4ybcoRQuKpctNZkB5z1BREwyI8OXY3tjjCcnjXtbsFeVkJQkbpaYeZN3fN1_78CvI4vXK4B0FY6W7RfY_oKfOYJL3VQePxqh1IxwheaVAUbbXbyU8Zii2o2IFuAoPlh6t
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CwDomDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT-J57WV5cFke2C7HuA-cnoIcOnmw25EEzvrZXwGjnhqko6noabw0wATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCO0w7SCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WJuHnvi-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ0J2V0JuRiKI5EgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=gOhQXJ6sIP0&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4GAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=362&cbvp=1&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxV6q9mPXZm3NTvC7lh2ig9R2js_P-ooPTAw8YAdu-S0uqIAdjDOXXPlg5aH1REC7ID1nvYA26W5a4LP6apbC_MJUCWvreQydH14-_9V7RdU2E5xtr3PRaA3_Zk9rGbPQdL1707cGA==?fccs=W1siQUtzUm9sX3dyYWhzdkhZNGRHZk16eG9KUkdXTkhTX05rbXljT3hGaEFTaXRYakc4ZjVDQ2pBeWR6MEhZY3lLaF8zU2ZPSVh6cms1VkdUWXlfaVg2WmNOQTdDbGVwbzZYQWdNc1I4YUYxbmhUMkoycXJQal8zQjFyVXJkOWpnTjMxSFRxMkdiX1FBZ2NNV3VVRWl1UDBJLWQyUkFrU3MyN0p3PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwNzEsMjQ4MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw2XSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20vIixudWxsLFtbOCwiMTVtTHB6cndMckEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv83EF5UOrk6HBIiiiewMKKXENrEggrjHFrY0qM00JkChKQltBPvh-s6cb8C0ij4iQaTGYsO8v4H4Wd5U3mzheYZWpnlsmJIudXCwY0gG8ZBzhDhtpdoddKAAuYdT6ISjIos1GTtlVVEIGc42e_rx6PhJjstrUYy_Tz_z718j2l8cA1WvNYda9Hnjel1t-aUis&sai=AMfl-YTqLH-miKFNUeMXFYUGNd0-Pk0LZSrRd8-eLisZ7P6LJXRS2hc8lcQskFS79ImAz0MLXpU6lZNuavOYZwzvBrkcWGTCa-4HkFmV4Q&sig=Cg0ArKJSzDbC6WF6U5gfEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.04599&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /simgad/8335829572458372918 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw HTTP/1.1Host: beacon.lynx.cognitivlabs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=d3X1mRea%2FucWdOV94ccvL4E%2BSiEvD95edpx1ZFDOVbSS39UZN1KnmofUPHz%2FiwHE9CZn691I8DHq47en8%2F5XpQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
Source: global traffic	HTTP traffic detected: GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxV8CPxdjL64wIQW98SRBN695jm4NK4yrOu3YhMY0kqORO3jivOB553nDV6Qt_QMzxyNWv6d3cWNSxS6vSDFDD3sVsvTKgzR4F5n_pvnvqREIqa0XoDUTVaq0cm-n0nZ-8U3u5kufA==?fccs=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 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1680&vt=11&dtpt=1318&dett=3&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DA
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2681&vt=11&dtpt=2678&dett=2&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://googleads.g.doubleclick.netX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQ3O00v06J6pWRrAmYBQdt0ZzVZpACR4WTb8ujiVz4OfQYN5CS5pdt2tZ6Fya9Q_wprKdOyOlQD4H1GoBrxZA_H_N97Ee4bdkc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=362&cbvp=1&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmSjYPHbuNMi0EVqUr_KN6VbgVJoTmh_JRmSbOo7MgC8M0pb1qez5tgBR_NGC8kBAO52PFJYrVFxoxg_7Jkp-w0EPocLtda6FQ HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjsv83EF5UOrk6HBIiiiewMKKXENrEggrjHFrY0qM00JkChKQltBPvh-s6cb8C0ij4iQaTGYsO8v4H4Wd5U3mzheYZWpnlsmJIudXCwY0gG8ZBzhDhtpdoddKAAuYdT6ISjIos1GTtlVVEIGc42e_rx6PhJjstrUYy_Tz_z718j2l8cA1WvNYda9Hnjel1t-aUis&sai=AMfl-YTqLH-miKFNUeMXFYUGNd0-Pk0LZSrRd8-eLisZ7P6LJXRS2hc8lcQskFS79ImAz0MLXpU6lZNuavOYZwzvBrkcWGTCa-4HkFmV4Q&sig=Cg0ArKJSzDbC6WF6U5gfEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.04599&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=2281214538&col=29305905,5876516,358438438,549336255,207488824 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfujwAAAAACAgAsAQfogAYAAC0BB-gYBgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViYAAAAADF4HOAAAAAAgvjS_AA
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQq
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY;
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHB
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8f
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQaeUDlnVQurQazgNwTyK1O-t1nVsNOgTJQG5CLkAzceCnwgtZhJgh8AgE_RnXC0I1yvQ5PMwhmZ2At2LGxdtGd7ZgA3ozb HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR8-7nf_ZGrmK5pgWWgz_1AJSNOk5or24NWFPdluzEmrbrv4St3Qf1vE_HEwGVqGPIBY5PKDJJDc-6tuY8YJirEpuR0wi2p HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRQzk3SCSYSzu6zA99kv6dQuxPPFQqFmH4KvXDTI2kpdGCWudIyLv3WlMNrUnGtX1143aCAOIe7eL0z7_sbouimKCk51xWKDuR2 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cj6lWDDKlZe3KD573xtYPmNek2ALUnfD5XO_GsfWkC9CQgOyQAhABIO34qSBgyYagiqSk4BGgAc3x9uICyAEJqAMByAPLBKoE5QFP0BFXg4lgna-w0PkSmMmMOvxv7N7w-r3prYC62LKNZFf_gHaxTDGZxQWV8Lxb-i09qscoEcVdTUreVUOg5RRcPwAKqynnYWT8uTk1yk-zZofALByuELY072eZJ5FESVP7Z9BLVvKuMRAqNnuNpuaAjL3_B1JiXP4cd-D7fi0TXF6lLBcCebutpA5PNZj67kw3K4gIh7yiIVJKd1Lmvo2rGkaxGM86zOFAqGClrYAPR4dc00zlIivPHpXLrGHTJqvai6LMPqsVJljYmDymJ5HVfl2k3gbxXnnhoXun-eXFf-4B41uGwATfrJGZgwKIBfXs34gHoAYugAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WJPJrfe-34MDsQlPWCIGEl69iYAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ0Mz6v8mdvYHaARICAQOqDQJVU8gNAbgT5APYEw2IFATQFQH4FgGAFwE&sigh=VvqEmS3nzQw&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5&label=window_focus&gqid=DDKlZYPcDoywoPMP9seBaA&qqid=CO2Arve-34MDFZ670QQdmCsJKw&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibI
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=-sfwA0KlPoc&cid=CAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4&label=window_focus&gqid=DjKlZeqZBaGpoPMP2KqjgA8&qqid=CKS-nvi-34MDFaqn0QQdbecJSg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpk
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=C714aDjKlZe7yBb6dxtYP9o6r6Avzg-Sudanlvd6fEWQQASDt-KkgYMmGoIqkpOARoAHOhqbAAsgBCakCnF5Mi3Zfsj6oAwHIA5sEqgSMAk_QKj8D6nkMHvvJl6UPd2I1r0oSBD0SDVI6qtY5-TYllVIUAuMl5ID-2tUl0_AiiKjTWcD1MI_MgsGw0dbaoEdB0TGMStqycJ8dsRRK6dkB6VRcDsR-uS5n_T-LlPBowGRtkkBv1yVhc9V9gMx3q8qPexru6_F9BAzcc_Td_gzIrwWSJz5t5PwalZ68ydicX79OslGPclixBwMSmZWBOfv6r3qT-WMEyQqwUC8gc2Nxqc2WO5gsddCqgia_YW0_I-8NKNmqVQtGV4NKtzy-yJV2neRXV4c4MsKJkiQqj_OTdCp732xnf9hQcUBYTpszzxQNpkafnpqhVKNZGPZlZ7sguPLPdycCYiEkm6jABPKiysioBOAEA4gFspHCgEqQBgGgBkyAB5r52b8BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYmvud-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBOV_qIW0BMA2BMNiBQF2BQB0BUB-BYBgBcB&sigh=yyoMu8lH2Xk&cid=CAQSOwAvHhf_wPBaE5IrSf5SVnjTZgH9-XtVGBmjHKHRbqt0X5m5pSYDZgNvJmTLjTu8WfxfYHVRRgLSuwLr&label=window_focus&gqid=DjKlZcSRBbeToPMP4auMoA0&qqid=CO6xnvi-34MDFb6O0QQddscKvQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782Accept-Encoding: gzip, deflate, brAccept-L
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1680&vt=11&dtpt=1318&dett=3&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cqkk-DjKlZdacBMaE3rsPo_aXcJPVw6x19e79jfgQZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0BXg-a8gg-p6kuTeeOzAH37dI1s4hCmWLu4viZWkA3NFVp-FH2RkciWB9AGEzjiB4KiPsciz2_nNgxxfS1MrpLyvM-FlDYkz3ig7FmmcLqqH5h70SWTFHDWG_zaeS5ZYoTvhdSZDpbQ1yaVTxkdp3JM-q5x0VhMiPm8H73oVHsMNg92uejSSZC_k48azZiq9Jaq-eFstQkJZgUHPpjwTWZaekyyEc0sqOrk1nXGcEkkJwrRpbhC-HZ0gVNeLxFtR2Xy2WXHY_BU5uVNcVT3YiXShFW1YuDfplVjGrdsnyVJNZblhYrXXdjCL7RdCqiNQXNdR7fP6LkFVRxEfMe0iojGljiBheRcNRMAEqPDRp6AE4AQDiAWcx_SJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljaqJz4vt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=477fF8LZsZk&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_e&label=window_focus&gqid=DjKlZcK7A-m2oPMPzYOxyAQ&qqid=CNbbnPi-34MDFUaCdwEdI_sFDg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793Accept-Encoding: gzip, deflate, brAccept-Language
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTk8OR8gBWBt_X4rJo3mqyvjSfpMFREwzRVfu-a9tidnP1zPIWnl6xJocxR1GtxysjKaW33LVe69BpxBN6leTKX_KXH9un53xoY HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /simgad/8335829572458372918 HTTP/1.1Host: s0.2mdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CpXR_DDKlZeqJAdjkvPIPm--EkAaarfGydNPs3sTFEdvZHhABIO34qSBgyYagiqSk4BGgAY_x_P4CyAEJqAMByAPLBKoE5QFP0PsVEi3-Hi02QTPbbB1k0s6-0ITMjLQQ73YJXp2HvSsv7d8zoClZhnQTjDfPb9VNTQSj_gQ4xqIa1oe_1e_kyFHEDJ_XbYuulXE8GKqhV4gIBEeOWcmJeI1Oweumf-baZ3Tl-oR2uzM0RgdCBV6_x99xK1xQ8AHSx3Qv0szsVcS6kTMZ2MO9QkD1EWCw2OKfdN2kcK0stz55CakoNAxgj8hju6YWwZNXps8PwyBZ76iRstmSHuoK7qp8K3yhQ-I8EzVFspszPnRuUBoTgxt8lqdRh04Ikf37nVIjOOMT30qsPXvuwATK6cD3tASIBYGCsLxLoAYugAfruPWDAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIuMn_e-34MDsQkLBNN1UEDOPIAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ4OK6t9TVyv_5ARICAQOqDQJVU8gNAbgT5APYEw2IFAXQFQH4FgGAFwE&sigh=Wq94U4s43bw&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1F&label=window_focus&gqid=DDKlZegt7LWg8w_OwZxQ&qqid=COq_n_e-34MDFVgyTwgdmzcBYg&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=9PBZdF5b1RpmXb5
Source: global traffic	HTTP traffic detected: GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2681&vt=11&dtpt=2678&dett=2&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQq
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRfr734V0ahK5eHYkp2NUscxxd_eDTKE8uEJe1sOrER9_ievttcWs1pYvuZhdRbABu5E5VQci2lJ2xgCXwYnGd5juco1O9P2S0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmTGz4UZLqS-5gc_aHR-pPbF1CFhusTIvhGVoMfznNnv6WGyVzNc4aqfIK6aes2bqDSA3MbEGuALffi9U0O9kZ7H0XfE2cOfUrds HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQ5nhm6xIgjDRfadzioPySk6oufYMOwMIx6xd5oc2NHOLmJF7PC2NZT7FirCo__0WVOTvG1kVPTO2PDLNCAntZi0UVfjlF01a9Y4XSlbWwprMQZtYg5qhLQBElHRVdsQHBim7UWBAx0uF-WDmkg9rAWbRw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR6u1drK2729o5c18wG9Q3s2LyiDDPuQX3X4eZLFn6k0-HgSvtCKKoTwKUgqaR0H-Cu3hOr6onHd0khznnN_6tpsk-fzr4VMkt2 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTHuv3Gb-mHtSeYaCb0U4tcEmwp6oYY3ZY5w7thL3IhoTHX6RMVrq6B6j9i-Ad-0leNseCbJx6xrqF9PKjZrOVReYbJ9ywp2HJP HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yahoo&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
Source: global traffic	HTTP traffic detected: GET /zh_CN/all.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=stickyadstv&append=1&cb=4661227&redirect=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D690%26userId%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6yzty5mqq4q2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325081&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325079738&bpp=176&bdt=1433&idt=1645&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=1063240671184&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1737 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSg4zHizPyZZW0-KuYP840tSLcBVkjl-c0CG-wzVfUDMgu1PfJf-_x4DuhilA82OjwXqMQwTf0-HqYZ0AGBO4Poe2yXEQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmSTDwt9l1q1_zfjzXusC15-xLqElAFaLN4lRG3GU0Kt19Jv_r5XLJToimzGJBuE27SxUYLqn5KD1lpxb08iEGukFKbNDWFuBeVV HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdX?google_gid=CAESENoQvShuFmYAxY_g8zYxFwA&google_cver=1&google_push=AXcoOmRGPhaRkdW-5noDQ29WO8myrSXoTNTSFOMBjKp5UdUZGNPva3IDPB9lRXzkyTDu_u4hrLqyBJQEpT7QZl9Czjto_mLSCVXL6Zln HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdX?google_gid=CAESENoQvShuFmYAxY_g8zYxFwA&google_cver=1&google_push=AXcoOmT1fscSJpInLvMtM25stHAE4eyen3OEig17UK5QdTqvHV2BJXATNxKObbrVVL5XlHh2yIjFtw0wvmVbN9qeQw3TVdMJX_GWrsWv HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
Source: global traffic	HTTP traffic detected: GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmTn9eVpy14MXGk_dExzxp5GC6SOe9qyB9WTXmQtWtMMysp1DNpLyZupIsFZ3VSKeU8nKLh6FSm463pTbQpYhoyrgk5kQ0gsH5E HTTP/1.1Host: tr.blismedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmQavkCXRN6T-tQpfQALC0v0io53FZK15wAAJS2_oNoe-hPxeogIzIO5obwMoSvg3Ga6InZuy_m0vkOC-_Gic4Cvg9EqFl1vs5Sa HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSABKAIyCwiI6a_ggPbKPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ct9ezGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE4wFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfj0uUe7cIbsotBFCdQ4ZZ4DzMRuNRq4QSgID_UeOCZ6o6fGisHYNMAE8ILHpM0EiAXJz5fFSZIFBAgEGAGSBQQIBRgEoAYugAfZx3qoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCnuQXSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WN-w2_6-34MDmgmjAWh0dHBzOi8vd3d3LmljaXMuY29tL2V4cGxvcmUvYWJvdXQvP2NtcGlkPURTQyU3Q0lDSVMlN0NDSExFRy0yMDIzLTA4MTYtR0xPQkFMLUJyYW5kX1Bvd2VyaW5nX1Byb2dyZXNzJnNmaWQ9NzAxNEcwMDAwMDFvR3U0UUFFJnBsYWNlbWVudD1teWxvdmVseWJsdWVza3kuY29tJnRhcmdldD2ACgHICwGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDuBPkA9gTDYgUBNAVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=iiuBgqjeOlQ&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOyGAE&template_id=484&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351Accept-Encoding: gzip,
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmR-j4hh_95gwON9ls589CFfcje7uT58V2DD1lIH9lkpk57Ftkgml53S_Q_jSzedNi1kmHSxZgqHguLF1YNovQ0pooRXeltbXc5B HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSABKAIyCwiI6a_ggPbKPBAFOAE.
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmTr_oCoE_Oxasl-Qr1eZ6qwU_dQ93wP1v-V0I_G7SfDLSnuZ496WS51_ZFewAUUtMpD-FpDnDJ6QvyabiFB-JplDHu21XCCn6U HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ce4exGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOEBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo8ypXbEa-0q_r05PjBAUi8gMjg8UhifmJlhFgQsWejc4hczTZPpXwATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA9gTDYgUBNAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGACyGAUYNyIBAA&sigh=HOZIVsRCNws&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CXuyxGzKlZdeiKMLDxtYP6uqP6AWarfGydNPs3sTFEdvZHhACIO34qSAoCGDJhqCKpKTgEaABj_H8_gLIAQaoAwHIAwKqBOQBT9AVyXWxtHf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8ZNJSRJylkUqSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYbe38oSegTj2NU9B6QqHwWQSOrduGFdvUNGf4dITZWqQWQjwn-xNKziKHipBkUnX9718COAq8YwATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBjeAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJpgJodHRwczovL3d3dy5nZXRhcHAuY29tL3Avc2VtL2NvbnN0cnVjdGlvbi1tYW5hZ2VtZW50LXNvZnR3YXJlLz91dG1fY29udGVudD1kJnV0bV9zb3VyY2U9cGRpcy1nb29nbGUmdXRtX21lZGl1bT1jcGMmYWNjb3VudF9jYW1wYWlnbl9pZD0yMDI1OTI3NTAwOSZhY2NvdW50X2FkZ3JvdXBfaWQ9MTUxNjQ4MjIwMzYyJmFkX2lkPTY2MTM4MDk2NzgzOSZ1dG1fY2FtcGFpZ249OjE6R0E6MjpDT006MzpFTkc6NDpBTEw6NTpCQVU6NjpTT0Y6NzpEZXNrdG9wOjk6Q29uc3RydWN0aW9uX01hbmFnZW1lbnQ6MTQ6UERJU19QU1SACgHICwGiDAgqBgoErLqxAtoMEQoLEKC37o7x06fVwgESAgED2BMNiBQF0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=kIQsiU4-sHA&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=agnoeUSkTsuAutosiaUYpwGWJN3UQv6qZa2PRAMZai
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CLkKmGzKlZdeiKMLDxtYP6uqP6AXBtMyqdc-AkIHKDdex9I-wARADIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9AFoCGxtXf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8ZlJSR0YtCMwSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYVXlNpSegTj2NU9B6QMyx1QCOrduH1ctEHFP4EQxY3qAWQjwn-xNKzkcPCxRgUnX9717CKJqUVwASl_-jGwgOIBdPRofkvkgUECAQYAZIFBAgFGASgBjeAB-e0lMUBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJOGh0dHBzOi8vYmVzdHNlYXJjaGVzLm5ldC9pbmRleC5waHA_cmdpZD0xMjIyNTYmc3ViPWdjbGlkgAoByAsBogwIKgYKBKy6sQLaDBAKChCg4Lv99emLjjASAgED2BMMiBQD0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=RRpTeptrg1E&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5e
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUXZcSkdqm3SS33krqDPRAS0U
Source: global traffic	HTTP traffic detected: GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmRP7oEenP2bLB8uL4-ej4aZ-pQp8DKIdq5hUie18zO8-2ShzV6AB5zinpnjToCYEM5jTXoe5iIDV0GzxJDTK8pyRDAerNtrYBnK HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxWfkZh5qMI1Rld1ftbbYo8earoS2QVb9jwqw1RiUU_Zh2JYfuqhKW1PNdA-HOH4UteUb4h6gC-Nk3MeFbhq1iA988Cmo_p0qDxMxLugBKtiYsJPDp4ZHKDoOJ7LczZe1vUTmLjxoA==?fccs=W1siQUtzUm9sOXo4TW9ucEt5dUlibHVhMjJFdXNuUDNPZFlDd3pyZVdHbGFLYi1uNnoxQi1OQ3djdTVZcFdVazJRaWdQWDI2cWtkUlBkajI0MjRGbWhJNXhVYlNwYWxJOE1wd2pjYUk2RUUxV0tCV3oxOXBQTE9UdnV6T1pqWk8wRXNjWkE2Z2tURW1WOFducXNXM2xwaDZMdlpNQTFoYi0xOHJnPT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwODUsNzQ3MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaSJ2lqKw2CcEgCScZLDYapoiIGxJwNNUpqTn0R-r8BAsQGw15fmMzYdIia5UQ2QJlaucfjQU9mY6krnRnPZZINE6rxRKg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378038567;dc_ver=99.292;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1892844450;ord=sbrk40;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI-tjZ_r7fgwMVj7zRBB0jIwXQEAEYASAAEgJxT_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE%26sig%3DAOD64_2cMVrnYOZ9MSKq-FMOtnFYcp9EeQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=1,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=a;stc=1;asnm=1;sttr=83;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmRvcp0a0a1NMIez4Jgo0_n-CT-3H86h4GJdXiQf5S7SCvZd88vd-ktwY72MIdPmD04TdNyBwwGltCxVVPAo41KdQt1VjDbSBu58 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsIqNf1_-v1yjwQBRgFIAIoAjILCIjpr-CA9so8EAU4AQ..
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CJ8T1GzKlZdeiKMLDxtYP6uqP6AW_r5TQba-LrbawEbCQHxAEIO34qSAoCGDJhqCKpKTgEaABnfbRmgLIAQaoAwHIAwKqBPABT9AkiRixs3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8WRryEPWupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxzCFIhywyrmtOQV3XYp2QrosypTLFP70K9qk5d9hBrvOBFFtuOrAOr5t6rXw3568Gst111zwJVSfPlTvfrBialvYP6ejYmwASGo6-CkwSIBdnk6vlGkgUECAQYAZIFBAgFGASgBjeAB8uJruUBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJFmh0dHBzOi8vZ29zcXVlZXplLmNvbS-ACgHICwGiDAgqBgoErLqxAtoMEQoLENCG8NyWrZ_F5AESAgED2BMNiBQB0BUBmBYBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=AO3cPbE8ZPE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-p
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cr71_GzKlZdeiKMLDxtYP6uqP6AXEqsuSdbrB3anMDo_ljMzlBBAFIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBN8BT9B66gCxsnf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LK8UQozgfUupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxHcSfCKet-k4wekLABcpmnBlyBditmwWtktdwt_Vfsvemqhy0Ynrl-M3eEdBU0dC-sUuP_4MAEzpi-9-UDiAXSj6CwBpIFBAgEGAGSBQQIBRgEoAZmgAfPx9hqqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJRGh0dHBzOi8vaGVsaS5saWZlL2ZpbHRlcj9rZXl3b3JkPWtpdGUlMjAlMjYlMjBzdGF5JTIwcGFja2FnZXMmcGFnZT0xgAoByAsBogwIKgYKBKy6sQLaDBAKChDQ65n7ouz37yQSAgED2BMMiBQB0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRhmIgEA&sigh=qjq6ImCA6r8&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5e
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CU8neGzKlZdeiKMLDxtYP6uqP6AX36JutdZfavOHqEryC2IHwBRAGIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9AhmRexsHf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8Y1JSQg6kjkwSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYVDVJtSegTj2NU9B6QnE2ZQSOrduGYNYFZF_5fPgE4qAWQjwn-xNKzyr7VyhgUnX97193NdvsWwASHnLuEyAOIBYPQxecukgUECAQYAZIFBAgFGASgBjeAB_2LnMEBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJN2h0dHBzOi8vaXJlc3VsdHMuY29tL2NydWlzZXM_cmdpZD0xMTcxMDUmc3ViPWdjbGlkJnNsPTWACgHICwGiDAgqBgoErLqxAtoMEQoLEOD1uNaUi9vFkQESAgED2BML0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=iLgN0jsqfr4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUG
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=64749615;ord=o09itk;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMImZeXgL_fgwMVnI7RBB3q6ATUEAEYASAAEgL7o_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbwGAE%26sig%3DAOD64_0egs2PjaWlFnf9Zk_0Y-BRe9bc9Q%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=8;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CUZeUGzKlZdeiKMLDxtYP6uqP6AWAuoODdaTp-c3_EGQQByDt-KkgKAhgyYagiqSk4BGgAbj0s_wDyAEGqAMByAMCqgTjAU_QfdQbsbF3_07tvWxJGrGu-udw4nO-OVBxPw3ZnobEUCD2RsNhzVmUTQQZPhkGKh-kgJB_tsrylAgk9nQClWpQKZhC5n6jc8Se-2Itac9ywvGTSUliBsxYKErulvQsoFY1Qh_uNCTLVPhdj68E4uA8Wwe2h5SkJ00DelzaB8jX6MSUcS1Jp0AMSKPpuZ0ls1TiIsnvzU0Mj2nbn34EKWTzkw3_ad54lhUa7AnWIFwaqKgPxoY82jPbqpYcnOSzgl10hQ-_gwpOGC1-p6-pHaQr_sjGG42tqlUVNp1xbVrA90ghwASukt2enQSIBanvpNJHkgUECAQYAZIFBAgFGASgBjeAB7CLzAOoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBCb8irSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDmgk0aHR0cHM6Ly9pbmZvLmNhbGxtYy5jb20vY3AtaGVhbHRoY2FyZS1zYWZlLWhvc3BpdGFsc4AKAcgLAaIMCCoGCgSsurEC2gwRCgsQ4LX9iJH10pj_ARICAQPYEw2IFAfQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgAshgFGDciAQA&sigh=1n5cF9XVNoA&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaQ49kEI_P3bXk8gYm36a4mevpybFm-yJtZ0jJppBDYBL-C_D2h3cR-35KydukMreaGF4KjxVSBLrXBmzdvXK0GH4uGfdg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004001;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=2095948214;ord=z3ghd5;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIgtiXgL_fgwMV_oN3AR2GGgY5EAEYASAAEgJvv_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlmGAE%26sig%3DAOD64_02e9gsl6i-jkDtMLHrPNvFtOpCcA%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=9;prcl=s HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CAKlEGzKlZdeiKMLDxtYP6uqP6AX_3ZeTdbOqzKOqEpT8o_T5QRAIIO34qSAoCGDJhqCKpKTgEaABl6mB-gPIAQaoAwHIAwKqBN8BT9AX5RWxvnf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz2_K8S0c3FjXupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxZKQavKet-k4wekLBkdA6mBlyBdmQq8xxdtfwo61TsvbWqhy0Ynpl7JXSEdBU0dC_jHtGI2cAEn5WFosUEiAXGyZjxTZIFBAgEGAGSBQQIBRgEoAY3gAfR1v4FqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJYGh0dHBzOi8vd3d3LnN0aWNrZXJnaWFudC5jb20vc3RpY2tlcnM_dXRtX3NvdXJjZT1nb29nbGUmdXRtX21lZGl1bT1kaXNwbGF5JnV0bV9jYW1wYWlnbj1uc2QtMjAyNIAKAcgLAaIMCCoGCgSsurEC2gwQCgoQkOixlteXhpdrEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGACyGAUYNyIBAA&sigh=LDCt-O8zRNc&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h
Source: global traffic	HTTP traffic detected: GET /ads/measurement/l?ebcid=ALh7CaRKomDjAz7NvI4aS8Mv1jqx9HLUPxkHIRbnYL_Do-ss2YY_PcqRqaVfvCR7eMeo25QvSlFPq-MwvvG_wTYUmZ5gOuW5JQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /v4/pixie? HTTP/1.1Host: jelly.mdhv.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=C8ScdGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTkAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOLUDTgdaidrG6m8H-9ELIjRB_1He7nRxw-t0wVE1ZLPtTc3XLaaV8AEzcOcvrsEiAXenqyZTZIFBAgEGAGSBQQIBRgEoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwUQqOacAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY_qbZ_r7fgwOaCdIBaHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvc2VhcmNoYWRzL2xpbmsvY2xpY2s_JmRzX2FfY2lkPTEzNTA0OTEyMiZkc19hX2NhaWQ9JmRzX2FfYWdpZD0mZHNfYV9maWlkPSZkc19hX2xpZD0mZHNfYV9leHRpZD0mJmRzX2VfYWRpZD0wJmRzX2VfbWF0Y2h0eXBlPXNlYXJjaCZkc19lX2RldmljZT1jJmRzX2VfbmV0d29yaz0mJmRzX3VybF92PTImZHNfZGVzdF91cmw9gAoByAsBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=m9gW4MOP4wY&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /simgad/772535680019461723 HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CX7KwHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgVutct5LFzgH4lF86oNvvJV8xQTy0qSXaMz_24KabfFTBfdOPRymwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBDdkhPSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfjloC_34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQgOSF3s321OI8EgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=4Zthy4nKjpU&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbwGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZ
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CKamzHjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCsVVLlEadT9xLiDq_Q0wlxqUudcaj0kiYGxFxbR8Ntl3kOlyGV2cwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBDz7xTSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKSkl4C_34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ4Kr42peF2pRDEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=k2h-fgPqf5U&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlmGAE&cbvp=2&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: event-sourcesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfd
Source: global traffic	HTTP traffic detected: GET /native-to-display/sdk.js HTTP/1.1Host: adsdk.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v/s/240/trk.js HTTP/1.1Host: cdn.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=Gg9z13ZdGa1bTmn_Ejy2PbuMjw3CNlj1HnaCT2MC4n3wMe3bJhVcc7HMN6Wb7iemA9XoRSotxq4NJZNf2OHxiCN30z9ztQB8OM3gUyT-ud8.; uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVKB93Tml1uC9vJox75u9TawBJUr9ExabBbmPW4Ea8KznkPZhryQWE3PeX1sJVhW1jrSpQ8GNdibWHwpWjQZ-9DcFoywTKMPBMmcvJijYd9UB1vxyVhNQRhN_f0PJlj3k3-piu_hlMQYoVyT6s1LJq7t9cbopRTpfahfHGx0ESk5mSloAO6oUVGUyEN/_/myfreepaysitebanner./img-ads./ads/default_/advert./adverserve. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://mylovelybluesky.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&s=2 HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=6D3ZpLGavi7shxnwoBEq
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=ChN0oGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOQBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo46rfCOrduH4E-VZEP4hEw5fmQWQjwn-xNKztJParSkUnX97173rEvsRwATfrJGZgwKIBfXs34gHoAY3gAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDsQlPWCIGEl69iYAKAZgLAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA6oNAlVTyA0B2BMNiBQE0BUB-BYBgBcBshgFGDciAQA&sigh=gillTeOFMiI&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLx&label=window_focus&gqid=GzKlZf3EJ9bNoPMPrp-HiA8&qqid=CJec2v6-34MDFcKh0QQdavUDXQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=Af
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4
Source: global traffic	HTTP traffic detected: GET /pagead/interaction/?ai=CKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=rZ-VKM24ENg&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkG&label=window_focus&gqid=GzKlZb6BJ9u0oPMPqPeFuAw&qqid=CPrY2f6-34MDFY-80QQdIyMF0A&fg=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmQHOZq5Aox_zySiWkCILkbOlCXRnQ5Hx_GWTAhbtyK_WW53gnL3FyCmySb4McVk1EWBUAWA5CwMohYlx0786Qizad0nlCn-Zauf0QdtEfSR00pky_4GV7Bo49ZFoZzyvw6Yp8769qswpuxhSzA2wLVGtCA HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=690F5FB948B2412881DA26E47E140F91
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmStzJQQ9mHnmOHnZq9U6UOen-1zBIEdgPMnsM1-SOD9WLggwLJAndGucEdppEhTr9Mfm7wGlnn0q-SAFSCTywoHQSXc9GIjTaj3sFzauifIc60500SaafxMdbpL8O4egAISNk5PgAJGBTGTDJCR2JN2rE8 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pagead2.googlesyndication.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsIpPKUjOz1yjwQBRgFIAMoAjILCIjpr-CA9so8EAU4AQ..

Source: chromecache_746.2.dr, chromecache_324.2.dr

String found in binary or memory: return b}DC.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),EC=["www.youtube.com","www.youtube-nocookie.com"],FC,GC=!1; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: chromecache_567.2.dr, chromecache_701.2.dr	String found in binary or memory: http://ad.doubleclick.net/viewad/817-grey.gif
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia
Source: chromecache_611.2.dr	String found in binary or memory: http://google.com
Source: chromecache_496.2.dr, chromecache_611.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_554.2.dr	String found in binary or memory: http://greensock.com
Source: chromecache_554.2.dr	String found in binary or memory: http://greensock.com/standard-license
Source: chromecache_611.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: chromecache_496.2.dr, chromecache_611.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_701.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/ads?client=dclk-3pas-query&output=xml&geo=true
Source: chromecache_701.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/ads?client=dclk-3pas-query&output=xml&geo=true&adtest=on
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://pki-crl.symauth.com/ca_7a5c3a0c73117406add19312bc1bc23f/LatestCRL.crl07
Source: chromecache_522.2.dr, chromecache_633.2.dr	String found in binary or memory: http://pki-ocsp.symauth.com0
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_632.2.dr	String found in binary or memory: http://s0.2mdn.net/ads/studio/close.png
Source: chromecache_701.2.dr	String found in binary or memory: http://tpc.googlesyndication.com
Source: chromecache_625.2.dr, chromecache_857.2.dr, chromecache_845.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_328.2.dr	String found in binary or memory: https://ad.doubleclick.net/dbm/ad
Source: chromecache_600.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N727992.3159GOOGLE/B30455423.373899623%3Bdc_trk_aid%3D565191
Source: chromecache_797.2.dr	String found in binary or memory: https://ads.stickyadstv.com/user-matching?id=11
Source: chromecache_456.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://adssettings.google.com
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://adssettings.google.com"
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://adssettings.google.com/whythisad?source=display
Source: chromecache_746.2.dr, chromecache_324.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_807.2.dr	String found in binary or memory: https://cdn.adnxs-simple.com/js/anjam.js
Source: chromecache_415.2.dr, chromecache_611.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_415.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/
Source: chromecache_611.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_357.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/gsap/latest/TweenMax.min.js
Source: chromecache_357.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_347.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm
Source: chromecache_347.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm
Source: chromecache_677.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm
Source: chromecache_379.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_650.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_797.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_677.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm
Source: chromecache_650.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0
Source: chromecache_611.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_611.2.dr	String found in binary or memory: https://cse.google.com/cse.js?cx=$
Source: chromecache_524.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_347.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix
Source: chromecache_357.2.dr	String found in binary or memory: https://explorajourneys.com/us/en/explore-more/the-total-luxury-offer?utm_source=digitaldisplay-jell
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_611.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_611.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat:700
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_437.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_437.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_437.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_437.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_437.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_869.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_869.2.dr, chromecache_484.2.dr, chromecache_478.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_611.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: chromecache_496.2.dr, chromecache_456.2.dr, chromecache_611.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_600.2.dr, chromecache_404.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/aclk?nis
Source: chromecache_328.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/dbm/ad
Source: chromecache_648.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png"
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/adchoices/iconx2-000000.png"
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png
Source: chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png"
Source: chromecache_786.2.dr, chromecache_329.2.dr, chromecache_866.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/ad_choices_blue.png
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png"
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png
Source: chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png"
Source: chromecache_347.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=$
Source: chromecache_611.2.dr, chromecache_916.2.dr, chromecache_663.2.dr, chromecache_728.2.dr, chromecache_455.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_657.2.dr, chromecache_873.2.dr, chromecache_489.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_611.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_632.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=
Source: chromecache_813.2.dr, chromecache_611.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_857.2.dr, chromecache_845.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_857.2.dr, chromecache_845.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_857.2.dr, chromecache_845.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_566.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_502.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=mys&d=
Source: chromecache_456.2.dr, chromecache_611.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_496.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_488.2.dr, chromecache_395.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss
Source: chromecache_873.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_657.2.dr, chromecache_489.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_746.2.dr, chromecache_415.2.dr, chromecache_324.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_728.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/
Source: chromecache_611.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_496.2.dr, chromecache_611.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_496.2.dr, chromecache_456.2.dr, chromecache_611.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_456.2.dr, chromecache_611.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_838.2.dr, chromecache_328.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_496.2.dr, chromecache_456.2.dr, chromecache_611.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_321.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_873.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_657.2.dr, chromecache_489.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssK5C-182y7Me59mDSLqDyPUN-gr8rNeYYktyp
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssYMIxVbKBzBMzNOH_1g_BmX7phfpuXMvESo5c
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssv5Fvt4vXS8ypMNtM23puVJY0og0CUEDh4g8T
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst1iuggzzanYBmdjE6d-FpeidT00KHLSUNGSRg
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstCQviZC_jQuQrIOgt3lRkNr6vkonQskp62tm6
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstOKbZB1bvyROszdMMiwamn70H7jN02_ejMGF-
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstWCNhnlkq95oGn6BKqHvbkozRmjcnZOreyP8h
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstamifoYOogvH0YKsKcAVqFws04Qq0uPFdqe8o
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstbq7cjg8BVcMyNai-JEje2F7Ii6rcdXMd9qSo
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstgxQJXUmonY9sz62ab1-IiYn5vdj__U_L8u1_
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuF0P4GmYHX-JjO7KQeAq1QzToLYSNko8ZDWGA
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuHxt3DG_apQPUip1hYGbu_eHZeOHyOEa9Su0V
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuWHq-rbXoA__G_WuMAK3WrgqYZps3iMnK4qud
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuZsZQ5IxILhJVXqXFBJgMjEV_NOJKuajDOhol
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu__AIlrA1Dv4yQKDNPUoPOYMfz1ZVzG2lZXQT
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuzM7KlDZK7vuZf2es9a5ezYxno2HPX-3EdnE9
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv4s6lwqIEE4hg1GQDsiD44M6UgRDagAMqaMyu
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsv88ysr337ac_2fKhiGkuFURPSgaLZBynA9eve
Source: chromecache_815.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvCDgoJjGseIBDgzX9_8htixwsQyUSFd1keKGl
Source: chromecache_875.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvawKBmwvkMppgkpdm74Sfh17o3F3P0f2I5dKt
Source: chromecache_401.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvgsv6oycvzzfyXlNrLEqSYoUvf2INv4Qqa8v1
Source: chromecache_611.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_832.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_632.2.dr	String found in binary or memory: https://play.google.com/store/apps/details
Source: chromecache_832.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_379.2.dr	String found in binary or memory: https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&rediru
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070149306_Hero-Image_Dog_1-Hardgo
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070151627_Hero-Image_Dog_1-Hardgo
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070153995_Hero-Image_Dog_1-Hardgo
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070156532_Hero-Image_Dog_1-Hardgo
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070159038_Hero-Image_Dog_1-Hardgo
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070201355_Hero-Image_Dog_1-Hardgo
Source: chromecache_567.2.dr, chromecache_701.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_567.2.dr, chromecache_701.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/studio/Enabler.js
Source: chromecache_701.2.dr	String found in binary or memory: https://secureframe.doubleclick.net
Source: chromecache_838.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_611.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_559.2.dr	String found in binary or memory: https://static.addtoany.com/menu/
Source: chromecache_559.2.dr	String found in binary or memory: https://static.addtoany.com/menu/sm.25.html#type=core&event=load
Source: chromecache_324.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_324.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_611.2.dr	String found in binary or memory: https://support.google.com/adsense/answer/11188578
Source: chromecache_832.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_650.2.dr	String found in binary or memory: https://sync.search.spotxchange.com/partner?adv_id=7025&gdpr=0&redir=https%3A%2F%2Fcm.g.doubleclick.
Source: chromecache_677.2.dr	String found in binary or memory: https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea
Source: chromecache_746.2.dr, chromecache_324.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_489.2.dr, chromecache_701.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_632.2.dr, chromecache_611.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/%
Source: chromecache_657.2.dr, chromecache_489.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_797.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true
Source: chromecache_677.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doublec
Source: chromecache_625.2.dr	String found in binary or memory: https://use.typekit.net
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_404.2.dr	String found in binary or memory: https://www.getapp.com/p/sem/construction-management-software/%3Futm_content%3Dd%26utm_source%3Dpdis
Source: chromecache_489.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_456.2.dr, chromecache_916.2.dr, chromecache_648.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_611.2.dr	String found in binary or memory: https://www.google.com/adsense/search/ads.js
Source: chromecache_611.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_786.2.dr, chromecache_329.2.dr, chromecache_535.2.dr, chromecache_866.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3D%26gl%3DUS%26hl%3D
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://www.google.com/adsense/support/bin/request.py%3Fcontact%3Dabg_afc%26url%3Dhttp://mylovelyblu
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_743.2.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: chromecache_375.2.dr, chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_657.2.dr, chromecache_489.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_611.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://www.google.com/url?ct
Source: chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr	String found in binary or memory: https://www.google.com/url?ct=abg
Source: chromecache_653.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=CFf0PKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEu
Source: chromecache_857.2.dr, chromecache_845.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_746.2.dr, chromecache_324.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?id=
Source: chromecache_680.2.dr, chromecache_832.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__.
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://www.gstatic.com"
Source: chromecache_611.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: chromecache_611.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: chromecache_611.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: chromecache_611.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: chromecache_404.2.dr, chromecache_666.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png
Source: chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/2x/googlelogo_dark_color_84x28dp.png"
Source: chromecache_600.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Source: chromecache_600.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Source: chromecache_611.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/%
Source: chromecache_375.2.dr, chromecache_361.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Source: chromecache_324.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog/mc/collect
Source: chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	String found in binary or memory: https://www.petsmart.com/?utm_source=DV360&utm_medium=Display&utm_campaign=PS_National_FY2023_Genera

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 50806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 50726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50973
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50748
Source: unknown	Network traffic detected: HTTP traffic on port 51227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50989
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50749
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50981
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50646 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 50738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 50634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50996
Source: unknown	Network traffic detected: HTTP traffic on port 51008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50990
Source: unknown	Network traffic detected: HTTP traffic on port 51194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50930
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 50931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50710
Source: unknown	Network traffic detected: HTTP traffic on port 51033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50959
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50951
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 51055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50961
Source: unknown	Network traffic detected: HTTP traffic on port 51137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50575
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50332
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 51082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 51235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 50768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50781
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 51139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 50791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50652 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443

Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.199.50.2:443 -> 192.168.2.5:49742 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_5532_543133361

Jump to behavior

Source: classification engine

Classification label: mal56.win@26/614@287/87

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1644 --field-trial-handle=1984,i,912001148016824484,8178260461963803595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mylovelybluesky.com
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1644 --field-trial-handle=1984,i,912001148016824484,8178260461963803595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	4 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	5 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	2 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://mylovelybluesky.com	0%	Avira URL Cloud	safe
http://mylovelybluesky.com	5%	Virustotal		Browse

Source	Detection	Scanner	Link
tr.blismedia.com	0%	Virustotal	Browse
js.passport.qihucdn.com.webcdn.360qhcdn.com	0%	Virustotal	Browse
jelly.mdhv.io	0%	Virustotal	Browse
aragorn-prod-va-lb.inbake.com	0%	Virustotal	Browse
match.prod.bidr.io	0%	Virustotal	Browse
ds-pr-bh.ybp.gysm.yahoodns.net	0%	Virustotal	Browse
part-0029.t-0009.t-msedge.net	0%	Virustotal	Browse
gtrace.mediago.io	0%	Virustotal	Browse
user-data-us-east.bidswitch.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
sync.ipredictive.com	0%	Virustotal	Browse
prod.appnexus.map.fastly.net	0%	Virustotal	Browse
sync-dmp.mobtrakk.com	0%	Virustotal	Browse
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	0%	Virustotal	Browse
onetag-sys.com	0%	Virustotal	Browse
jsdelivr.map.fastly.net	0%	Virustotal	Browse
rtb.adentifi.com	0%	Virustotal	Browse
ads.stickyadstv.com	0%	Virustotal	Browse
mylovelybluesky.com	5%	Virustotal	Browse
s6.qhres2.com	0%	Virustotal	Browse
aep.mxptint.net	0%	Virustotal	Browse
partners.tremorhub.com	0%	Virustotal	Browse
js.passport.qihucdn.com	0%	Virustotal	Browse
ums.acuityplatform.com	0%	Virustotal	Browse
beacon.lynx.cognitivlabs.com	0%	Virustotal	Browse
x.bidswitch.net	0%	Virustotal	Browse
1f2e7.v.fwmrm.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://beacon.lynx.cognitivlabs.com/adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8	0%	Avira URL Cloud	safe
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://polymer.github.io/AUTHORS.txt	0%	Virustotal		Browse
http://polymer.github.io/AUTHORS.txt	0%	Avira URL Cloud	safe
http://mylovelybluesky.com/wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js	0%	Avira URL Cloud	safe
http://mylovelybluesky.com/wp-content/plugins/simple-social-icons/symbol-defs.svg	0%	Avira URL Cloud	safe
http://mylovelybluesky.com/wp-content/themes/magazine-pro/lib/gutenberg/front-end.css	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Avira URL Cloud	safe
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	0%, Virustotal, Browse	unknown
um.simpli.fi	35.236.220.17	true	false		high
rtb-csync-use1.smartadserver.com	216.22.16.57	true	false		high
tr.blismedia.com	34.96.105.8	true	false	0%, Virustotal, Browse	unknown
global.px.quantserve.com	192.184.68.149	true	false		high
js.passport.qihucdn.com.webcdn.360qhcdn.com	101.198.192.8	true	false	0%, Virustotal, Browse	unknown
jelly.mdhv.io	216.239.34.21	true	false	0%, Virustotal, Browse	unknown
rtb.openx.net	35.186.253.211	true	false		high
stats.g.doubleclick.net	172.253.63.155	true	false		high
cdn.w55c.net	54.175.232.95	true	false		high
cdnjs.cloudflare.com	104.17.24.14	true	false		high
cm.g.doubleclick.net	172.253.115.156	true	false		high
aragorn-prod-va-lb.inbake.com	18.235.50.99	true	false	0%, Virustotal, Browse	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	52.0.126.85	true	false	0%, Virustotal, Browse	unknown
www.google.com	172.253.63.99	true	false		high
id.rlcdn.com	35.244.154.8	true	false		high
tagr-gcp-odr-use1.mookie1.com	35.190.90.30	true	false		high
match.adsrvr.org	52.223.40.198	true	false		high
match.prod.bidr.io	52.7.65.124	true	false	0%, Virustotal, Browse	unknown
cm127.appier.org	172.105.221.29	true	false		high
us-u.openx.net	35.244.159.8	true	false		high
widget.va1.vip.prod.criteo.com	74.119.119.150	true	false		high
googleads4.g.doubleclick.net	172.253.122.156	true	false		high
securepubads46.g.doubleclick.net	172.253.122.155	true	false		high
d2ctznuk6ro1vp.cloudfront.net	99.84.208.113	true	false		high
gtrace.mediago.io	35.208.249.213	true	false	0%, Virustotal, Browse	unknown
warp.media.net	23.39.32.29	true	false		high
cs.media.net	23.39.32.29	true	false		high
analytics-alv.google.com	216.239.38.181	true	false		high
googleads.g.doubleclick.net	142.251.179.156	true	false		high
d2qfvhmlvd2g6w.cloudfront.net	18.67.76.106	true	false		high
www3.l.google.com	172.253.63.102	true	false		high
a.tribalfusion.com	104.18.25.173	true	false		high
static.addtoany.com	172.67.39.148	true	false		high
hblg.media.net	23.39.32.29	true	false		high
lg3.media.net	23.39.32.29	true	false		high
prod.appnexus.map.fastly.net	151.101.193.108	true	false	0%, Virustotal, Browse	unknown
part-0029.t-0009.t-msedge.net	13.107.213.57	true	false	0%, Virustotal, Browse	unknown
clients.l.google.com	142.251.16.101	true	false		high
s.360.cn	171.8.167.89	true	false		high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	52.73.89.2	true	false		high
mts.l.google.com	142.251.163.102	true	false		high
mylovelybluesky.com	103.130.153.151	true	false	5%, Virustotal, Browse	unknown
s0.2mdn.net	142.251.16.148	true	false		high
user-data-us-east.bidswitch.net	35.211.178.172	true	false	0%, Virustotal, Browse	unknown
s.tribalfusion.com	104.18.24.173	true	false		high
www.googletagservices.com	172.253.63.155	true	false		high
2.gravatar.com	192.0.73.2	true	false		high
tps-ue1.doubleverify.com	34.117.228.201	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
contextual.media.net	23.56.8.25	true	false		high
scontent.xx.fbcdn.net	31.13.66.19	true	false		high
rtb.adentifi.com	34.237.132.177	true	false	0%, Virustotal, Browse	unknown
sync.srv.stackadapt.com	54.160.145.206	true	false		high
sync.ipredictive.com	54.157.70.26	true	false	0%, Virustotal, Browse	unknown
accounts.google.com	172.253.63.84	true	false		high
sync-dmp.mobtrakk.com	5.161.188.99	true	false	0%, Virustotal, Browse	unknown
ad.doubleclick.net	172.253.63.149	true	false		high
ums.acuityplatform.com	69.90.254.78	true	false	0%, Virustotal, Browse	unknown
aep.mxptint.net	204.2.226.29	true	false	0%, Virustotal, Browse	unknown
lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	54.164.228.18	true	false		high
dsum-sec.casalemedia.com	104.18.36.155	true	false		high
onetag-sys.com	51.222.39.184	true	false	0%, Virustotal, Browse	unknown
nym1-ib.adnxs.com	68.67.160.26	true	false		high
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	3.225.218.10	true	false	0%, Virustotal, Browse	unknown
ib.anycast.adnxs.com	68.67.179.155	true	false		high
ag.innovid.com	unknown	unknown	false		high
securepubads.g.doubleclick.net	unknown	unknown	false		high
pm.w55c.net	unknown	unknown	false		high
a.rfihub.com	unknown	unknown	false		high
px.owneriq.net	unknown	unknown	false		high
ads.stickyadstv.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
clients2.google.com	unknown	unknown	false		high
dis.criteo.com	unknown	unknown	false		high
beacon.lynx.cognitivlabs.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
odr.mookie1.com	unknown	unknown	false		high
c1.adform.net	unknown	unknown	false		high
pxlclnmdecom-a.akamaihd.net	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
1f2e7.v.fwmrm.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
tps.doubleverify.com	unknown	unknown	false		high
s6.qhres2.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.doubleverify.com	unknown	unknown	false		high
partners.tremorhub.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
dclk-match.dotomi.com	unknown	unknown	false		high
sync-tm.everesttech.net	unknown	unknown	false		high
sync.teads.tv	unknown	unknown	false		high
cdn.jsdelivr.net	unknown	unknown	false		high
ups.analytics.yahoo.com	unknown	unknown	false		high
fundingchoicesmessages.google.com	unknown	unknown	false		high
d.agkn.com	unknown	unknown	false		high
js.passport.qihucdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
a.c.appier.net	unknown	unknown	false		high
mweb.ck.inmobi.com	unknown	unknown	false		high
rtb-csync.smartadserver.com	unknown	unknown	false		high
www.facebook.net	unknown	unknown	false		high
pr-bh.ybp.yahoo.com	unknown	unknown	false		high
x.bidswitch.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
clients1.google.com	unknown	unknown	false		high
r.turn.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSg4zHizPyZZW0-KuYP840tSLcBVkjl-c0CG-wzVfUDMgu1PfJf-_x4DuhilA82OjwXqMQwTf0-HqYZ0AGBO4Poe2yXEQ	false		high
https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo&google_hm=82nPL-gDAe41xcnm3Ha0dg	false		high
https://x.bidswitch.net/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw	false	Avira URL Cloud: safe	unknown
https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUU9JF8H&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSA2rqtx26tZoo69R83K1ejUFQXWvehH2eUUYmAIwwL2cq_iuH40V8ucqQ-J5m1Kax5qV3goPKR0lklc7vyyRcuWijtSO4Ifuk	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D	false		high
https://analytics.google.com/g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015z89133403656&_p=1705325066007&gcd=11l1l1l1l1&dma=0&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&tfd=3072	false		high
https://stats.g.doubleclick.net/g/collect?v=2&tid=G-JJ7DB92BJ6&cid=449002724.1705325034&gtm=45Pe41a0v9133405015&aip=1&dma=0&gcd=11l1l1l1l1	false		high
about:blank	false	Avira URL Cloud: safe	low
https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B	false		high
http://mylovelybluesky.com/wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js	false	Avira URL Cloud: safe	unknown
https://b1sync.zemanta.com/usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmS4xfBktbiyJEYWtgMnG4IkbRinQOlMNSRgvubYtTWkC8aFNfGDqhrB2gKg3d1xUOIE6nb0EuulRnGLdXhLwnwxUo-pde2eXG0	false		high
https://s0.2mdn.net/simgad/11229060083375947527	false		high
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSWdQlnelggeqzsGYn4RL9bgsfbgFyQIYWl_3K9de0FlDl4L9PoBle-aRC9lvZMomnO0GmPvs27-nieQa-DRR9EXNnVQFcIgCk	false		high
https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/jquery/jquery-migrate.min.js	false		high
https://us-u.openx.net/w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1	false		high
https://googleads.g.doubleclick.net/pagead/adview?ai=CU8neGzKlZdeiKMLDxtYP6uqP6AX36JutdZfavOHqEryC2IHwBRAGIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9AhmRexsHf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8Y1JSQg6kjkwSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYVDVJtSegTj2NU9B6QnE2ZQSOrduGYNYFZF_5fPgE4qAWQjwn-xNKzyr7VyhgUnX97193NdvsWwASHnLuEyAOIBYPQxecukgUECAQYAZIFBAgFGASgBjeAB_2LnMEBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJN2h0dHBzOi8vaXJlc3VsdHMuY29tL2NydWlzZXM_cmdpZD0xMTcxMDUmc3ViPWdjbGlkJnNsPTWACgHICwGiDAgqBgoErLqxAtoMEQoLEOD1uNaUi9vFkQESAgED2BML0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=iLgN0jsqfr4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRmGN7qeEvMzj6QO_sqLAc4lqJrtU2EWFBt_Bo92JvoAP2qPrKGbtZ71NCrnSJpEUrGc3AtxN_Q7UbebTJFIdxJ65-cJw	false		high
https://googleads.g.doubleclick.net/pagead/interaction/?ai=Cqkk-DjKlZdacBMaE3rsPo_aXcJPVw6x19e79jfgQZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0BXg-a8gg-p6kuTeeOzAH37dI1s4hCmWLu4viZWkA3NFVp-FH2RkciWB9AGEzjiB4KiPsciz2_nNgxxfS1MrpLyvM-FlDYkz3ig7FmmcLqqH5h70SWTFHDWG_zaeS5ZYoTvhdSZDpbQ1yaVTxkdp3JM-q5x0VhMiPm8H73oVHsMNg92uejSSZC_k48azZiq9Jaq-eFstQkJZgUHPpjwTWZaekyyEc0sqOrk1nXGcEkkJwrRpbhC-HZ0gVNeLxFtR2Xy2WXHY_BU5uVNcVT3YiXShFW1YuDfplVjGrdsnyVJNZblhYrXXdjCL7RdCqiNQXNdR7fP6LkFVRxEfMe0iojGljiBheRcNRMAEqPDRp6AE4AQDiAWcx_SJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljaqJz4vt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=477fF8LZsZk&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_e&label=window_focus&gqid=DjKlZcK7A-m2oPMPzYOxyAQ&qqid=CNbbnPi-34MDFUaCdwEdI_sFDg&fg=1	false		high
https://match.adsrvr.org/track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmRvcp0a0a1NMIez4Jgo0_n-CT-3H86h4GJdXiQf5S7SCvZd88vd-ktwY72MIdPmD04TdNyBwwGltCxVVPAo41KdQt1VjDbSBu58	false		high
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQAM6iz3S6L8BZ4luW_x_vWTBswUNOvmkN9Fm7ymub2lZeKCdXGLUEYKkROurc9Ohpw3Sn9CN5TvfUsSAqWoZe4DVyUqVJ2zeL5e8Rc6AKhtx5ZdK4kTZFPFzh86xrpcf7ipFVST3niqISjPbr2Ng3fgKM	false		high
https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/hoverIntent.min.js	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaRkIvQ3YKlGcxklsNq5mmXDtntNFs4_mQfgNoJK81k_olyrKv9owRbDTq1ZswOI5NRMypK9SCWTtaJzphH5mfbH4TqZxA	false		high
https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=JA0jvjkdJEyhrXrvc-004A&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm	false		high
https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA	false		high
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922	false		high
https://cm.g.doubleclick.net/pixel?google_nid=liveramp&google_hm=WGMzMDcwSlVRQWtHd0g2N0hMYlJHRjJON0w2UVlTMGNrWHRKTDRoOVZ3UUhsYmFRSQ==&google_push	false		high
http://s.360.cn/so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6/3m7obc2.ey9kfsce4u4l6b9y0l1e1v	false		high
https://cm.g.doubleclick.net/pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmRfk3Bxs_Sbl_E6Flm5bXGgK4G1tb3a-vwRD-AXeHcvvmthsefZhnmA4QYs4BkwXgECX-2muWWGUTA84WyEnvCbdAEDVQwElQ&google_cver=1&google_gid=CAESEITSmp977taxVGXtUwfhpwg&google_hm=UTc1ODYxMTQ0NTE0NTg4NDI0MjE=	false		high
https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2&google_hm=22210ca7b8f13f0e2q6keg00lreyi26g	false		high
https://a.c.appier.net/gcm?google_gid=CAESEGXjSffKCZYfhR-a0w5jhKg&google_cver=1&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k	false		high
https://beacon.lynx.cognitivlabs.com/adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8	false	Avira URL Cloud: safe	unknown
https://cms.quantserve.com/dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEOzRtX562fjwmB4DbY8-tuo&google_cver=1&google_push=AXcoOmTYQdCWDydIGcw8i8YhhVhC8jiBMetgHfAKyGB3jyI6COu2KF-9ydt_2X2Tqd22LMQXt_kk25wn77scqJqGrgME0ZWdyeqEafo	false		high
https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmRpPqbdw6uSenbFaK0R23iAP78nBE5lH0LVZSXkbUPmSekqKtgWHQA-opdYCPHl2OTu722sJjb7QUwI4di5_XZh2z5qu3B3qZ8	false		high
https://connect.facebook.net/zh_CN/all.js	false		high
https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs	false		high
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1	false		high
https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js	false		high
https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR8-7nf_ZGrmK5pgWWgz_1AJSNOk5or24NWFPdluzEmrbrv4St3Qf1vE_HEwGVqGPIBY5PKDJJDc-6tuY8YJirEpuR0wi2p	false		high
https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtj-J0ASOjeM_vXHQWXN2alj92a_XNICpb_jtl1QdyQujDXJX1SqFWZoi0H707zRv6SHczXhGpyJToXSRM1rteplQtNwsfNA&google_hm=82nPL-gDAe41xcnm3Ha0dg	false		high
http://mylovelybluesky.com/wp-content/plugins/simple-social-icons/symbol-defs.svg	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/measurement/l?ebcid=ALh7CaSmrIRR3L5WGdkOCbzmoDeZdtHi_SR-a6Q5E4b_R6aGKHSdW6RWvjAznjctqC44oVM_TRb_JnJoBmwzGB7Ol_87S0eLbQ	false		high
https://d.agkn.com/pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821	false		high
https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js	false		high
https://www.google.com/ads/measurement/l?ebcid=ALh7CaQ49kEI_P3bXk8gYm36a4mevpybFm-yJtZ0jJppBDYBL-C_D2h3cR-35KydukMreaGF4KjxVSBLrXBmzdvXK0GH4uGfdg	false		high
https://id.rlcdn.com/466606.gif?cparams=google_push%3DAXcoOmSvKXZnvXfDrlT_RpDfYTKoihT2dQUcpUM0tTWPukGCIw5SZab1d2x4Q-u5TJRdVvdGsExcrZSw0axhlJPcFXdH-ewHQ8N7PJU&google_gid=CAESEFnPY-kHMZNLMEj40Iiq_Tg&google_cver=1	false		high
https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1#RS-1-&adk=1812271803&client=ca-pub-6163292317333011&fa=3&ifi=10&uci=a!a&btvi=5	false		high
http://mylovelybluesky.com/wp-content/themes/magazine-pro/lib/gutenberg/front-end.css	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662	false		high
https://analytics.google.com/g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325096141&_gaz=1&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&_ee=1&tfd=1025	false		high
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000004385723E0D	false		high
https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRk8aAOzcL4YDJzbs3Jk5669CA18yOSK12ynhlqEeBV8XROypkoUtnq4I4PJ6nNicocVYSfGYXW0qxStfQK1Swa2IYIyql2iAHQGlw4llcFkMf8yWYz0rFgDOVXKmspoP9m6kHGuuSyHalgTNOpjM-hMWI	false		high
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A	false		high
https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/css/dashicons.min.css	false		high
https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png	false		high
https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&google_cver=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSi_oDA7vinFeFX0bVgjwOSb9BUwloWwKgl2quBqyM4WgB_WR1ca3JPR6JygCfxYimVY7TVS2vFZdZp5n_c_Pf4vwpFPzIXYBY	false		high
https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmRx9fT50cXuGaFpq8-K6rMJYT5BO1Y-dFW2Z7vh-IUo3bYI8knlDk3kqAYsvdoaJgI_L_7p1VsqJpHL0DBFrhB_O-yuWu_nAcA	false		high
https://sync.srv.stackadapt.com/sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y	false		high
https://googleads.g.doubleclick.net/pagead/interaction/?ai=CfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=tIWHopABmJQ&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xg&label=window_focus&gqid=8TGlZY7wJ9_NoPMP2e6UmAk&qqid=CIOj1-q-34MDFc6K0QQdjH0Fgw&fg=1	false		high
https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8	false		high
https://match.adsrvr.org/track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmSegmnKW4xt5mi8P_dPtNdqLs1hgDCiyUskewZxxzECN_eOpPV1DozueTMlLwAu_FTfDMvVwrMPtxAx2gHnFq4Dn82NkJaQcV0	false		high
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446	false		high
https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQaeUDlnVQurQazgNwTyK1O-t1nVsNOgTJQG5CLkAzceCnwgtZhJgh8AgE_RnXC0I1yvQ5PMwhmZ2At2LGxdtGd7ZgA3ozb	false		high
https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_hm%3DSMART_USER_ID_B64	false		high
https://googleads.g.doubleclick.net/pagead/adview?ai=CAKlEGzKlZdeiKMLDxtYP6uqP6AX_3ZeTdbOqzKOqEpT8o_T5QRAIIO34qSAoCGDJhqCKpKTgEaABl6mB-gPIAQaoAwHIAwKqBN8BT9AX5RWxvnf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz2_K8S0c3FjXupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxZKQavKet-k4wekLBkdA6mBlyBdmQq8xxdtfwo61TsvbWqhy0Ynpl7JXSEdBU0dC_jHtGI2cAEn5WFosUEiAXGyZjxTZIFBAgEGAGSBQQIBRgEoAY3gAfR1v4FqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJYGh0dHBzOi8vd3d3LnN0aWNrZXJnaWFudC5jb20vc3RpY2tlcnM_dXRtX3NvdXJjZT1nb29nbGUmdXRtX21lZGl1bT1kaXNwbGF5JnV0bV9jYW1wYWlnbj1uc2QtMjAyNIAKAcgLAaIMCCoGCgSsurEC2gwQCgoQkOixlteXhpdrEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGACyGAUYNyIBAA&sigh=LDCt-O8zRNc&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1	false		high
https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNX4Exj-q2X1Lg9idKOL6uFr9t97MflTFaeqVz7mzqzF0FfgNqUyFFb9S1VsEdNaWK-cPGfL9m0WyIoBauYdfxBhnasaeQ	false		high
https://s0.2mdn.net/sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250	false		high
https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0	false		high
https://fundingchoicesmessages.google.com/el/AGSKWxX0v6aVQGFBMICjnJj7fZDS5OjVSpLKf1vAPjiAuk90T7J5JW7l9j26jw-3VvB6ynuGGPfxVPcYxk70J6LsWEsBlMoBjUtINsEBFCoOonNOaaTuU5slD5ha9JaALhDaJOc1OrMRtg==	false		high
https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&gdpr_consent=&google_cver=1	false		high
https://static.addtoany.com/menu/svg/icons/facebook_messenger.js	false		high
https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmQA22W9PHHVcPt-rd1JHBkm5wPdjeFC36VHj7NrENCvWzsqK23YfTdLfE7PQscs5RBJiwlpVZZv5mYRzdNWY2zuuxC1KJGhYSB5Mi-RwuwAbuzn9ev5vUOliHZfVe5NbB9JwH68svzksz351ubmupyWmw&google_hm=82nPL-gDAe41xcnm3Ha0dg	false		high
https://cs.media.net/cksync?type=g&cs=6&google_gid=CAESEPx3zv_JZPnTixNbvGEeREw&google_cver=1	false		high
https://s0.2mdn.net/sadbundle/12128317773909862788/ld-core.css	false		high
https://match.adsrvr.org/track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmStzJQQ9mHnmOHnZq9U6UOen-1zBIEdgPMnsM1-SOD9WLggwLJAndGucEdppEhTr9Mfm7wGlnn0q-SAFSCTywoHQSXc9GIjTaj3sFzauifIc60500SaafxMdbpL8O4egAISNk5PgAJGBTGTDJCR2JN2rE8	false		high
https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}	false		high
https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597	false		high
https://pr-bh.ybp.yahoo.com/sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://s0.2mdn.net/ads/studio/close.png	chromecache_632.2.dr	false		high
https://adssettings.google.com/whythisad?source=display	chromecache_875.2.dr, chromecache_401.2.dr, chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr, chromecache_815.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_611.2.dr	false		high
http://ad.doubleclick.net/viewad/817-grey.gif	chromecache_567.2.dr, chromecache_701.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_680.2.dr, chromecache_832.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0	chromecache_650.2.dr	false		high
https://support.google.com/recaptcha	chromecache_832.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/back_blue.png	chromecache_404.2.dr, chromecache_666.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png"	chromecache_850.2.dr, chromecache_653.2.dr, chromecache_725.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/x_blue.png	chromecache_404.2.dr, chromecache_666.2.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dtea	chromecache_677.2.dr	false		high
http://mathiasbynens.be/	chromecache_611.2.dr	false		high
https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpix	chromecache_347.2.dr	false		high
https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm	chromecache_677.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/abg/iconx2-000000.png	chromecache_404.2.dr, chromecache_666.2.dr	false		high
http://googleads.g.doubleclick.net	chromecache_496.2.dr, chromecache_611.2.dr	false		high
https://googleads.g.doubleclick.net/pagead/images/mtad/abg_blue.png	chromecache_404.2.dr, chromecache_666.2.dr	false		high
https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070159038_Hero-Image_Dog_1-Hardgo	chromecache_551.2.dr, chromecache_760.2.dr, chromecache_687.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.24.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
23.199.48.23	unknown	United States	20940	AKAMAI-ASN1EU	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
142.251.163.102	mts.l.google.com	United States	15169	GOOGLEUS	false
142.251.111.149	unknown	United States	15169	GOOGLEUS	false
52.0.126.85	ds-pr-bh.ybp.gysm.yahoodns.net	United States	14618	AMAZON-AESUS	false
172.253.115.106	unknown	United States	15169	GOOGLEUS	false
68.67.179.155	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
192.184.68.149	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
35.236.220.17	um.simpli.fi	United States	15169	GOOGLEUS	false
172.253.115.103	unknown	United States	15169	GOOGLEUS	false
101.198.2.147	unknown	China	55992	QIHOOBeijingQihuTechnologyCompanyLimitedCN	false
68.67.179.153	unknown	United States	29990	ASN-APPNEXUS	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
50.31.142.63	unknown	United States	22075	AS-OUTBRAINUS	false
180.163.251.231	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
142.251.16.148	s0.2mdn.net	United States	15169	GOOGLEUS	false
69.90.254.78	ums.acuityplatform.com	Canada	13768	COGECO-PEER1CA	false
172.253.63.100	unknown	United States	15169	GOOGLEUS	false
192.0.73.2	2.gravatar.com	United States	2635	AUTOMATTICUS	false
172.253.63.102	www3.l.google.com	United States	15169	GOOGLEUS	false
142.251.16.149	unknown	United States	15169	GOOGLEUS	false
52.73.89.2	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
99.84.208.113	d2ctznuk6ro1vp.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
171.8.167.89	s.360.cn	China	137687	CHINATELECOM-HENAN-LUOYANG-IDCLuoyangHenanProvincePR	false
172.253.62.157	unknown	United States	15169	GOOGLEUS	false
3.225.218.10	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
34.206.227.189	unknown	United States	14618	AMAZON-AESUS	false
74.119.119.150	widget.va1.vip.prod.criteo.com	United States	19750	AS-CRITEOUS	false
54.236.169.36	unknown	United States	14618	AMAZON-AESUS	false
34.237.132.177	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.239.36.181	unknown	United States	15169	GOOGLEUS	false
216.22.16.57	rtb-csync-use1.smartadserver.com	United States	30633	LEASEWEB-USA-WDCUS	false
18.235.50.99	aragorn-prod-va-lb.inbake.com	United States	14618	AMAZON-AESUS	false
192.184.68.134	unknown	United States	27281	QUANTCASTUS	false
104.22.70.197	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.179.156	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.2.60.235	unknown	United States	14618	AMAZON-AESUS	false
18.67.76.106	d2qfvhmlvd2g6w.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
54.175.232.95	cdn.w55c.net	United States	14618	AMAZON-AESUS	false
68.67.160.26	nym1-ib.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.18.25.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
151.101.193.108	prod.appnexus.map.fastly.net	United States	54113	FASTLYUS	false
172.253.63.84	accounts.google.com	United States	15169	GOOGLEUS	false
172.253.63.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.22.16.41	unknown	United States	30633	LEASEWEB-USA-WDCUS	false
172.67.39.148	static.addtoany.com	United States	13335	CLOUDFLARENETUS	false
35.211.178.172	user-data-us-east.bidswitch.net	United States	19527	GOOGLE-2US	false
172.253.62.106	unknown	United States	15169	GOOGLEUS	false
172.253.62.102	unknown	United States	15169	GOOGLEUS	false
103.130.153.151	mylovelybluesky.com	Malaysia	138359	DATAKL-MYDataKLSolutionsSdnBhdMY	false
23.39.32.29	warp.media.net	United States	16625	AKAMAI-ASUS	false
31.13.66.19	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
172.253.63.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.16.101	clients.l.google.com	United States	15169	GOOGLEUS	false
35.190.90.30	tagr-gcp-odr-use1.mookie1.com	United States	15169	GOOGLEUS	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.7.65.124	match.prod.bidr.io	United States	14618	AMAZON-AESUS	false
18.164.116.51	unknown	United States	3	MIT-GATEWAYSUS	false
13.107.213.57	part-0029.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.253.63.99	www.google.com	United States	15169	GOOGLEUS	false
5.161.188.99	sync-dmp.mobtrakk.com	Germany	24940	HETZNER-ASDE	false
101.198.192.8	js.passport.qihucdn.com.webcdn.360qhcdn.com	China	55992	QIHOOBeijingQihuTechnologyCompanyLimitedCN	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
54.164.228.18	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.81.176.252	unknown	United States	14618	AMAZON-AESUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
172.105.221.29	cm127.appier.org	United States	63949	LINODE-APLinodeLLCUS	false
104.22.71.197	unknown	United States	13335	CLOUDFLARENETUS	false
216.239.34.21	jelly.mdhv.io	United States	15169	GOOGLEUS	false
23.56.8.25	contextual.media.net	United States	16625	AKAMAI-ASUS	false
35.208.249.213	gtrace.mediago.io	United States	19527	GOOGLE-2US	false
171.13.14.66	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
34.96.105.8	tr.blismedia.com	United States	15169	GOOGLEUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
204.2.226.29	aep.mxptint.net	United States	396273	AS-CITYNETUS	false
68.67.181.211	unknown	United States	29990	ASN-APPNEXUS	false
157.240.229.1	unknown	United States	32934	FACEBOOKUS	false
35.186.253.211	rtb.openx.net	United States	15169	GOOGLEUS	false
34.117.228.201	tps-ue1.doubleverify.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
54.157.70.26	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
54.160.145.206	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
51.222.39.184	onetag-sys.com	France	16276	OVHFR	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	38.0.0 Ammolite
Analysis ID:	1374750
Start date and time:	2024-01-15 14:22:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://mylovelybluesky.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@26/614@287/87
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://mylovelybluesky.com/#genesis-content Browse: http://mylovelybluesky.com/#genesis-nav-secondary Browse: http://mylovelybluesky.com/#genesis-sidebar-primary Browse: http://mylovelybluesky.com/#genesis-footer-widgets

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.179.94, 34.104.35.123, 142.251.111.97, 142.251.16.95, 172.253.115.156, 172.253.115.155, 142.251.16.94, 172.253.63.97, 142.251.167.155, 142.251.167.156, 142.251.167.157, 142.251.167.154, 172.253.122.95, 172.253.115.95, 142.251.111.95, 142.251.163.95, 172.253.63.95, 172.253.62.95, 142.251.167.95, 142.251.167.94, 172.253.63.132, 172.253.122.94, 172.253.122.155, 172.253.122.156, 23.207.202.67, 23.207.202.83, 23.62.230.163, 23.62.230.148, 23.51.57.155, 104.66.251.81, 185.167.164.43, 199.38.167.130, 23.222.5.87, 23.222.5.91, 142.250.31.95, 13.85.23.86, 72.21.81.240, 23.62.230.171, 142.251.111.155, 142.251.111.154, 23.221.241.151, 192.229.211.108, 13.95.31.18, 172.253.122.132, 172.253.115.132, 23.45.233.16, 23.45.233.48, 151.101.194.49, 151.101.66.49, 151.101.2.49, 151.101.130.49, 63.251.28.134, 63.251.28.133, 63.251.28.233, 63.251.28.234, 52.165.164.15, 3.144.50.131, 3.144.50.143, 3.144.50.144, 3.144.50.135, 3.144.50.154, 3.144.50.151, 3.144.50.155, 3.144.50.145, 3.
Excluded domains from analysis (whitelisted): fp4.ads.stickyadstv.com.akadns.net, a267.g.akamai.net, slscr.update.microsoft.com, clientservices.googleapis.com, tps-geo.dvgtm.akadns.net, cdn.doubleverify.com.edgesuite.net, ocsp.digicert.com, www-bing-com.dual-a-0001.a-msedge.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, rtb-csync-geo.usersync-prod-sas.akadns.net, a463.d.akamai.net, e9957.e4.akamaiedge.net, www.bing.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, ajax.googleapis.com, dual-a-0001.a-msedge.net, na-east-digital-dual-active.fwgtm.akadns.net, pagead2.googlesyndication.com, pxlclnmdecom-a.akamaihd.net.edgesuite.net, www-www.bing.com.trafficmanager.net, adsdkprod.azureedge.net, edgedl.me.gvt1.com, a-us-east.rfihub.com.akadns.net, g11v.fwgtm.akadns.net, a1241.dsct.akamai.net, adsdkprod.afd.azureedge.net, dsp-cookie.trafficmanager.net, wildcard.owneriq.net.edgekey.net, tps-wlb-useast.dvgtm.akadns.net, h2.shared.global.fastly.net, www.googlead
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 12:23:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9732016251620466
Encrypted:	false
SSDEEP:	48:8hdhjTJtRfHDidAKZdA19ehwiZUklqehSy+3:8FrD1y
MD5:	8659E29CD29FC9455DD32097BD2E1911
SHA1:	742870E8FFB5A45335DE4484ACFF700A9D58C0AB
SHA-256:	9F3CE3528996DEFF170F07C19E62930953616269BFDF0B0C31BC785B46C2AB1D
SHA-512:	C38DD7B9B59F98B13848B0C4780C57A8AC4B21D7C3A5D7B695DE060BB9C910F4D3DA80CC2C94A80835B416A03C9A90CA85CF6156CD96CC545E5AFD3FD2B0F6DC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x....G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X.j...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 12:23:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991971061371615
Encrypted:	false
SSDEEP:	48:8AdhjTJtRfHDidAKZdA1weh/iZUkAQkqehly+2:8yrx9Q4y
MD5:	D5996617088657E32E004929E880293D
SHA1:	CF53B9A9EB7FED2F149E910CD9DD745E9E6BBA8A
SHA-256:	64002E1FAA3F45D948C3C5B88272B7ECE66F2A76E8412D8FBE873569A6CD3FE2
SHA-512:	C0CD85F323DB810EFDFFEE44FF0DB7E623F63A8CF9D5BE1F2C23AF807D96A387438B77BD76DEFC9C6BAFE70487903F1CEF9AF85AFBFB92B8B5845E21F0EDFF73
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Z...G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X.j...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00212939820607
Encrypted:	false
SSDEEP:	48:8x2dhjTJtsHDidAKZdA14tseh7sFiZUkmgqeh7sry+BX:8xMrKnpy
MD5:	A314972F03BEBFDB987E6C5725D245B4
SHA1:	6160604F95FCA2E127BD47DA63B092B7A39873B7
SHA-256:	B1880CC3E63BDC586EB36346B1153944EA5913A6E29128B12CBDB76B2449C06E
SHA-512:	0988F43A4ADA9D811A8B3A8A0CFDEA2CCEE8CC75D9F5CC078B55DECF0EC0831E67AC70D278DA18466085FF28FACC31DF6A53B998D8A6EE8E8CB1F025F597E3DE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 12:23:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9907282844524947
Encrypted:	false
SSDEEP:	48:8zdhjTJtRfHDidAKZdA1vehDiZUkwqehRy+R:8LryTy
MD5:	673FC4300C6BDD32D51C960F59FB5369
SHA1:	FDBDE9DEB4C72D608AF51705079B3F7C51F4BD2D
SHA-256:	406697321EFD79B3BB3DD5AF4091F6ABA8F6C590399800689ADB423F20C00607
SHA-512:	C332F9F520C5799186C6ECBF5597C1E1EF77D42E5E09600504743B294CDF6FC438A617688700378F363B7B73E024538BE696235A085AC873D35885BD2E41417E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......{..G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X.j...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 12:23:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9798712296856906
Encrypted:	false
SSDEEP:	48:8qdhjTJtRfHDidAKZdA1hehBiZUk1W1qehfy+C:8ArC9/y
MD5:	132E0ABF0E0C74650AA66D1DB146FF01
SHA1:	677AF7513659A29CE67FA8CC4480580741B1F9FE
SHA-256:	F809443BA214AFCC8D88E1C58792C6BD86EDC801BAA949C952D2A8E2BE7EFE21
SHA-512:	2802C69B83EBDF4383EACF007F95B5CF3DECAB8AB083239316B8519CE2EC32CC6F1B41687F5564B729E7263312EEBE87C6666A3EA1A5AB6274250129E9F9B6F4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X.j...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 15 12:23:49 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9921504967554458
Encrypted:	false
SSDEEP:	48:8SdhjTJtRfHDidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbpy+yT+:8Ir8T/TbxWOvTbpy7T
MD5:	8B47736D383BD9D3C68D913DB8BB9C31
SHA1:	EC0CAEA1BC40FE0075B973415D6E7697C63B15A1
SHA-256:	2A5C14CB3BE7BE48FA0B2FC63C84D46A71B1217AA9FA2D22D60624AC77E508AD
SHA-512:	1813DD0862D3D07E54D8E6992722BF2A76DD2F038EC66FF8C8B01657E0FF109985A1448DE68F9C1B25F1B3A56FB5CE1C38D2A5090C0731FB484A9601C2BCD1A1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....`.q..G..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I/X.j....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/X.j....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/X.j....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/X.j..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/X.j...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........>r.C.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zeta_interactive&google_push=AXcoOmS3kD2wTnlOSZyzuBoE2QI8D3cGBzWBsvLem9IGSNfrVsVCZhiL2mgROkVKWublrob2QL-35_Bkd_sKtBvaqdDNOgZK5cuGNqg&google_hm=MTc3NDY0OTkwNzQ0NTQ3OTA3Mw==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1137), with no line terminators
Category:	downloaded
Size (bytes):	1137
Entropy (8bit):	4.40081212141992
Encrypted:	false
SSDEEP:	24:6TyOGq/BWEBZ4tcMxELOaJDwgbLfxY/Mzre31l2/ZWaQJVrjVxbmLhCxydoU/DqV:6Typq/BWEBZIixxwc+kzrelzxJljVZtn
MD5:	BF004036297449BAE92251730C072A84
SHA1:	0BFD85A0D0387BA2BC229335E6356D4A246A02AD
SHA-256:	390BB80C8EC894A3669DF1522E5F88B9F1C2A7DC7B2A6AA39EA8A6401B1AEA80
SHA-512:	455024179CB899EDB3D8C68F40BB268C9D3D8312004DEECDF34EFA3212B64B38B194508EC29362D4018ECF0C388A8FF5613BE644775F102AECA31BE566C7A605
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/whatsapp.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({whatsapp:'<path fill="#FFF" fill-rule="evenodd" d="M16.21 4.41C9.973 4.41 4.917 9.465 4.917 15.7c0 2.134.592 4.13 1.62 5.832L4.5 27.59l6.25-2.002a11.241 11.241 0 0 0 5.46 1.404c6.234 0 11.29-5.055 11.29-11.29 0-6.237-5.056-11.292-11.29-11.292zm0 20.69c-1.91 0-3.69-.57-5.173-1.553l-3.61 1.156 1.173-3.49a9.345 9.345 0 0 1-1.79-5.512c0-5.18 4.217-9.4 9.4-9.4 5.183 0 9.397 4.22 9.397 9.4 0 5.188-4.214 9.4-9.398 9.4zm5.293-6.832c-.284-.155-1.673-.906-1.934-1.012-.265-.106-.455-.16-.658.12s-.78.91-.954 1.096c-.176.186-.345.203-.628.048-.282-.154-1.2-.494-2.264-1.517-.83-.795-1.373-1.76-1.53-2.055-.158-.295 0-.445.15-.584.134-.124.3-.326.45-.488.15-.163.203-.28.306-.47.104-.19.06-.36-.005-.506-.066-.147-.59-1.587-.81-2.173-.218-.586-.46-.498-.63-.505-.168-.007-.358-.038-.55-.045-.19-.007-.51.054-.78.332-.277.274-1.05.943-1.1 2.362-.055 1.418.926 2.826 1.064 3.023.137.2 1.874 3.272 4.76 4.537 2.88

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSPHnfGZgS1NpL7zRJYTP1od-KTjZH1OG7RA8KRrqumnHiepjBubgwzSGuOHqzWiyIF1akEIplPFVn4JQ3FyvyGjXceNxB6C7I
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSBo6FKjlLIWLW0now7E1QVSA0WvCbbLiA9PAjYB_iazxU-wIZ5sZakfprMQGOQc-N6Eblsi4HU8sag6hDpAqsC-f6835KBOWVY
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmR4fFUYTwL_PPAMnLJqq0VJvSkjUNxgPjTO_qUCgIoHJFqujAI5T93-7eLhIlX6cBSKNT4ZpS4FULjWPFxqXzsg0AmZNIj3yjiS&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3172
Entropy (8bit):	7.909558632589116
Encrypted:	false
SSDEEP:	48:2PzpqMshrWSnywEEo8UE84b0BC6Nn134pZqP4xxl6b4WKrobgJhrTEuNIYkkv/jG:ulqMshr7B5v84Jy3cqPul3xrJ5RkqFwv
MD5:	C2F051ABEBEF06C61C32753D77F6387B
SHA1:	D2F8B7EFE81166D4B7366F03FCB01CAFEB06CDD3
SHA-256:	960FA8164DBD0B4359C2C0E99657625324CA09DCC67F92F776201AF72EF4B21A
SHA-512:	252F2B10CA07CEC354D873B7669816E972A7E64C948ADC0BE982B2AB88B8ED164B655FE94AF4E415C07DF41A6081A3E9418F34AFEC5185E2351095F9DA0C40CA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.............PLTE........................................?Pf..............p..f..w..Ml.3V.....,Q.&F.\y....r..g..Ch.^z.I_~..........Wr.(M.Ys.EXtu..d..Qj.Y~.!F..3.=W.$B....Me..........Wp....b~......p...........h..8U.Pm.n..Om.6[.Eg.......v..<NeAToo.....F[yRi....m.....Rk....Zu.~....e......G[wOm....y......>..3.9O}^y....p..H^}...Wq.F\{c........k..Vp.............8...#?..}..%w...y.....4.....(J....O..U...1..s.V..l..<......n.)z.?..C..?W..6....G...Dw..3.1P.L..a....St.)D.....h....f...w..#m..L..8....J}.?u.8o.<f.?c........b.^..?...e....}...Q.Ny.r...;..?.y...f..8}.A..}..^..f...@.2L........./z..o...\.[..9y.X..i...^.+d..?.Ib..?."s.......n..M..2p.'h.O...Z.Dl./_..l.T...U..[.t..C~.g..`...B..P.+W.5`..J..9.?]....G......[..@q.r...X.s...9.s..`..3l.0s.$.....rtRNS...............5$....L4...#...........G......................ndOE.................ssrb]N?9....................G.._.....IDATX..u\.a....6.6i.%T......%.B.0P.pl.....l......IA........m..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACjsqaDTbSNwMQU4-jAAAAAAA&expiration=1705411490&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmTpIzaHZOc6iEf2o5M1jGQDhjYgV4abrGxWksE-HSsCdnc1qedcq8n14qqmJtRh78qQ8PpLw2ZY0efNCq4ml62AHCrwVFSqkPUfND9MA1_H4OWE3OTJrQ280rXX0osgErpNTsnpncrrcc7DFgFLG5SAgg"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.393538995156011
Encrypted:	false
SSDEEP:	24:4Hks6rq5/Jz2pRNrBZJuvu8goqc0ioNhc+u4+mI:262z2bNrVENtmN+a+j
MD5:	537504D1561873C412061CAF52C95A1F
SHA1:	6131BF2545A07E52FC74AB8A835AE03301F18F2B
SHA-256:	8C6872E180C6B66EEB1F37C2F4766D7733D33FCA2DF6E8B0875DF507F1C9D7D7
SHA-512:	049E2B79505F470CF779EEE4B76A92EA62504FF12C67B400419E3837021F70A48411E65D4F3265389BD0D922C4F28DC61BE9612E5A857AD831F0F0F9334EEBAC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="5E5Oy65vuutbMx-939FStw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1705325048826');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.923034560408535
Encrypted:	false
SSDEEP:	3:RAMTFNQWg5BVWAoxXmsVoLrVVEtLpO5HKuaNY6Zfn:z/Dgi/olWLpCKua26Zf
MD5:	C94B7AEED7521DC95699CD74F9609B19
SHA1:	7B19E24F0D95007F896156FE38283B39F32B9988
SHA-256:	20550F7BCB2A817AC9A5879E04260DA8268E971C0B8031A6B7A2F48A55EE60D5
SHA-512:	7663A443D0DA7B4A0B16070B6064DDA95FBCA04F5256069717C1013901AACBC2E2695B4B6EE215BD57A12D398FD03B3E60A0912F78B89B00704FA6FCF1157B6C
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/genesis/lib/js/menu/superfish.args.min.js
Preview:	jQuery(function($){"use strict";$(".js-superfish").superfish({delay:100,animation:{opacity:"show",height:"show"},dropShadows:!1})});

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	237698
Entropy (8bit):	5.571459547824953
Encrypted:	false
SSDEEP:	6144:GAR+vWIMOPEte6ktV9eUqDlKgB+piujrmJ:iOIMOPULKgB+piiw
MD5:	9C21571AE6DD8DA3A2B73D4A2D1D4D0E
SHA1:	8545565F028B729D6422F0C8AFA3014B4694299E
SHA-256:	DB88ABD46A703653A46467468493215D771EFBF5E3B2409320559B3730BA3BBB
SHA-512:	CC618D4881C470A023B2D7E998E457FC74B88A6F614B039755A9371AFEFAE55318DFB4BF38DA660EFF82E348F95438A62AEF964E5F9FE7FC173816E78D995508
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=GT-577T3JV
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","mylovelybluesky\\.com"],"tag_id":21},{"function":"__ogt_ga_send","priority":9,"vtp_value":true,"tag_id":17},{"function":"__ogt_referral_exclusion","priority":9,"vtp_includeConditions":["list","mylovelybluesky\\.com"],"tag_id":19},{"function":"__ogt_session_timeout","priority":9,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":20},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhon

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 960x300, components 3
Category:	downloaded
Size (bytes):	21422
Entropy (8bit):	7.676642561635676
Encrypted:	false
SSDEEP:	384:QRFdbCzQLeve3LCqQJIm8NxE/b7j1o3MafkF9VFEnfYJle7m+pXKU0ppV:AdbC8LevGf6Im8NyD7IdkjVFEngle7mb
MD5:	71B051E13C9642EFECBA43A061DBACC7
SHA1:	9F4157455C9BA102F16308690C2B6320D25EF0CF
SHA-256:	4D6EC21F10BA9CD0991DCDD78D9BD58D8353CBE7B579CF15969FF67D63BB1DB7
SHA-512:	3B7A720DF24B26151FAC591BA3595F42AFC94670CAC6E2727603C5F95A29F2E595BD03797F1B941D3F80F5233DBEFD935E763B287A8E870CEC9804131DAFF26E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3865532571172175858/6592766407814317453
Preview:	......JFIF..............Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H.............................Y...........:.......bhttp://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.............................................................................................................................................,...."........................................N..........................!1..AQ."aq2R..#B.br.....$3Cc...Ss..%4...&56Duv....................................5.......................!..1A.Qaq."..2B..Rb.......#.............?.....................lL......^..O....0.../....?O..&h....e]7.......-..x..wv{K.....xE..................................

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2973)
Category:	downloaded
Size (bytes):	91013
Entropy (8bit):	5.482778754777459
Encrypted:	false
SSDEEP:	1536:FN+oUKGvIVf0Ux4axlUuGr2cdwXEuPgtAorVCW4h:JVGxaxGJhuPgtAor0xh
MD5:	0BD00D035485979BC8798F6597913442
SHA1:	FB97B3BA6A6F84C9150822F973AAD62B14D506D9
SHA-256:	38EB0379C855F10A0E69073AF6B54582216FA37B7E2B1563A1246BBF1EF49642
SHA-512:	AC205524B037EC55181F082D48EC9020FBDB596151177400A003B5602946F73FD24B8778D90B9BBB45CEC3DB2544E0C59BB0E483A043005978BAE270F4F357ED
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/dv3.js
Preview:	(function(stc){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}; .p("Symbol",function(a){if(a)return a;var b=function(f,h){this.Pb=f;ba(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.Pb};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=fun

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	116229
Entropy (8bit):	5.919502834360695
Encrypted:	false
SSDEEP:	1536:FFvkh+Xv7RtIK4mpmS66vTYay9JmYd2SXvaC8fHRk2VL6T7Rfbd3HRwlAxhqUfwy:FFMh+t77YLXvpUCwiqGwyr/CH4
MD5:	EDEDE7A7EFC374146C21ED21988A7302
SHA1:	0C526394F729318D247C166B504A4674D3926B2A
SHA-256:	1010372E62D6A46DCF2480F23779AC74C9029E6A507E1413FA142F6C880C048B
SHA-512:	F933E93F52CC09A78DA25394E85A8A6C617050DDBC5E8C4BCB5B791E77CAE7551DDA3EF719369782D61FEAE5ECF89FD8C095D0E00498147B317812311884DAD3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;margin-left: -150px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="300px" height="250px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22style\x3d\x22lef

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16266
Entropy (8bit):	6.017883148131574
Encrypted:	false
SSDEEP:	384:IvRKFe0+5/f1HWbNWobD+XvvVL5tPcKER+C4gA/9UuPfrvchE:IZKFJ+72bNWobmvvVlt01R+C4gAVUcjX
MD5:	B4FDFA8D63F5B4F598B3B12B6364D53C
SHA1:	E086837CEAB0D4FBD3A259AADBC3D666D68A3444
SHA-256:	480184A97884E957E29E41C9D69DEC32E8132421513C130F5D71E1BCA5DBB118
SHA-512:	8964E58334DB45578F3235B45BBB34A8506ACC0D85650A0816FC1792CE9D74BBCF4723BF9A2B184E2BCD517CF6A69386F746FA060E807CD3BEF7F28F2E9F920F
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240109&st=env
Preview:	{"sodar_query_id":"MDKlZYKSJo3ao9kPmJaf-Ac","injector_basename":"sodar2","bg_hash_basename":"MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8","bg_binary":"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

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2600)
Category:	downloaded
Size (bytes):	9383
Entropy (8bit):	5.475160479909826
Encrypted:	false
SSDEEP:	192:PZvWsrNZKvmmQ5Ap/1FXOgyWbTAQSQF3y4f2zoFeZOtci:PZlrNZQmV5E/1FhALC3y4f2zoFWOT
MD5:	4B0EF9DFA83525E0607F42119C034D23
SHA1:	F40F2D2C63A73C6F08EE022A26609111325EAF0F
SHA-256:	97C530C44249746307C2B01B37EED0F53757D139BC4243798F468C71DA9844DA
SHA-512:	0104B1A460A21C9DFD241DEDCCA1A08718A232DFA597FA201FB792D1395022543CB544CB5DDEA6AD50A102B8E039653F850F68339104E1D90BBF61ED7E51C1C7
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var g=this\|\|self;function m(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=g,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function n(a,b){a=a.split(".");var c=g;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};var q=m(610401301,!1),r=m(572417392,!0);var x;const y=g.navigator;x=y?y.userAgentData\|\|null:null;function z(a){return q?x?x.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function A(a){var b;a:{if(b=g.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function B(){return q?!!x&&0<x.brands.length:!1}function C(){return B()?z("Chromium"):(A("Chrome")\|\|A("CriOS"))&&!(B()?0:A("Edge"))\|\|A("Silk")};!A("Android")\|\|C();C();A("Safari")&&(C()\|\|(B()?0:A("Coast"))\|\|(B()?0:A("Opera"))\|\|(B()?0:A("E

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70325
Entropy (8bit):	6.028230877740886
Encrypted:	false
SSDEEP:	1536:IfkHan4EQmby5ZrcxROplbfUW0CdHXRtfHqDc:wVQ5rhEWfjt
MD5:	3D3E56EC0112B6B6F5EDF9A2C325E38D
SHA1:	DA1F03FDAE09D36ADF37E137BAD42B3DAECBFABC
SHA-256:	2326D8E40C4DEE5F096A4C26B85864C735DA5FE19941D5C4DBC4526F76ADECB9
SHA-512:	545E02544F020230CB40269011E5D0BDF63D23AE265C874E45C38468F02B319FD1E0FE7B9E99F69EAE18B1A13FBA1FEB0181F79DBD0C9E72068B19B9BB33626C
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=64749615;ord=o09itk;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMImZeXgL_fgwMVnI7RBB3q6ATUEAEYASAAEgL7o_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbwGAE%26sig%3DAOD64_0egs2PjaWlFnf9Zk_0Y-BRe9bc9Q%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=p*sDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=8;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_698102464"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZZ3qNJ3aoPwPuqCpoAs"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("object

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 768x512, components 3
Category:	dropped
Size (bytes):	94730
Entropy (8bit):	7.964905882599774
Encrypted:	false
SSDEEP:	1536:nB5MtTo3H9z+IOGWUxcKf7MkWF2tbPXOe5QoDm+VZj1mtT6Qf7wNtvRs4494rcfw:nvcg9z+IDWwcEOIvOeTmUj1mVBgO9Kco
MD5:	11917A0A8EB5740D1B148B84ED1370D2
SHA1:	D137C4D820C553CF292AA51B7C11897B5D18A605
SHA-256:	5359AF53921F8D7F44072082A5AEC6F82E5616566CC39398B4B2118B768CAE63
SHA-512:	3AFC7310AA0AD42D6DD8DFF1F9A2CBFD0CC488F9749AD29A433E7F095F6D9C9437B21EF41666ABFEEE2B9B11C4611363F36A9CFF8C226943754FCD8EF6D28F42
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Canva" xmpMM:InstanceID="xmp.iid:207399F0A94C11EEAFFDA2143F58168D" xmpMM:DocumentID="xmp.did:207399F1A94C11EEAFFDA2143F58168D"> <dc:creator> <rdf:Seq> <rdf:li>SockPeng Ng</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Untitled design - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:207399EEA94C11EEAFFDA2143F58168D" stRef:documentID="xmp.did:207399EFA94C11EE

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-Cd8tBnPPjkTHaBj7WbU0Lc582DZ0iUkXntVok7ALIZw5hL5lOPzg70sNihdK6XNJIwrpI0Z8GpOE5TnSRE4iLfODrt8jasFmb1-Hiet2OHWy0MBIU
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 934
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	7.575243230300679
Encrypted:	false
SSDEEP:	12:XVZyvVHDu6ozd0wWnkrltWdADRmBIMS6IL2+xO8MZ3qzXoSO:X4Dudp0JncKAdm2662+8p9GO
MD5:	3D2894D55E052235CC16299365DBEB14
SHA1:	BD5BF9FA626DBBC0F8C3337143F25F5F35B3AB69
SHA-256:	1F6EA609F60B9E5567C3F025CDCDE7FB3BB1C383C6581CC99948190F2D140CD1
SHA-512:	521DDD3AB65B60DB46D9ED2D07FEC51A2232340BE2C21A999888BEF0161310EB99B55B61DCE0637B012E157D94FA762B442671D0BCE05B985D5D9273190BE152
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/contact-form-7/modules/recaptcha/index.js
Preview:	..........}RMo. ..+^..(..V......V=..Z..<.....?o.......l.......8o....q.....5..B......).q.........o..>..X.....R8..BkN..T...7.._hM.TL1...@........vr.}...@..z$c..+L..b,5...u.7.O.YA....({.L7$4..3.~.....'D..j@.Od...o..8..f.8.5...<......-.......(..m...![.......abIu.3.i..2.s.J)3..<KL.}..B....".M./..........H......R?....FtP5..-..gS......5./]C....iy....S\|/...c.K.v.E....9].K.D.k....-X..m.M*..Y..2k..i.....WM\..z....(+.x..=...L...P]..[AK.R...Qh^R...#0.j..5.&9..(..fO......

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://partners.tremorhub.com/sync?UIGL=CAESEIrOqdmzFji86NQUvTm_VXw&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmS-r2i0KuoDE5VH6MhY0yxiuBi9DoHx5-BnW89CwUbGL8wjR4BwvZHCGpemoHRISzA3AojOxrcVOqyDiYjcrvF2S8z_iUGwwX0Ytz1HramZpxARoSjI5uP1Y9KigxhiWIoX7XLkTLZ_isKnu2mdgKlwdQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2499x1312, components 3
Category:	downloaded
Size (bytes):	151697
Entropy (8bit):	7.7325975854327655
Encrypted:	false
SSDEEP:	3072:eqPGXJZHjTEyiGkp1pPirJhZe0uEWNZeP1WmhOpNU827TpO:Rwv2REh1IoPMmhOEO
MD5:	19989CE7A8237EF2BEF8AE7435C31DFE
SHA1:	39613182455F8CDE1DD547B8C6A6485F4B465FB1
SHA-256:	FCDE22C50880001CEF19931BC3E7230BEB1BB076D2648196E67C8CFE2337CAEB
SHA-512:	35A988EFAB9CE9B6F556D474D49D580C00A899302A4732B58ED0401AC66A3D767FC2374D2C43DD68AB642B52C0638736238A977D1034F7383199E2FDA7A4B697
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/14258479026921098253/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////...... .............................................I........................!1.AQa..q....."2......BR..#br3C$ST...D.4c..d..%...............................%......................!1.AQ..aq"2BR............?.............................................,....i...E(.....)@...#H..H..e.. ........4.....r...l@@+.\.p..W.....w...p...<...;.\.p...........p...\..+..........p....p..............p....Aq..0...1...r......p.............B` $.D..........(.P.7L.t.8@K..t...!.t....]0%.&.t..CS..YB...a.X`V& "..,\..........V........@. ...@..........@...@. ....B(..,.............U......... ..P. .........@. ......@...........B....@....@&.H......%....P.........`...... ... ._...Dd....].. .4.&@.........,P.....,.`...`..h....!...X.`..........C..(.Y.)@...)D!..J U...;..0...&..`..Ab.).........Rl.......p...P........`.2.......p...\...............w........p..\....ph

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIqI6B8b7fgwMViCGzAB1Ivgg8EAEYACCzm49j;dc_eps=AHas8cBrPYa5p_YWlcsJM48qKQhl4sqhg9eqnZKnMKO04EBjvRLTjK9ks6MKwAThU3zHJQWbcrSciSKX9A;met=1;&timestamp=1705325067361;eid1=2;ecn1=1;etm1=10;eid2=871060;ecn2=1;etm2=0;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://dis.criteo.com/dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQVvuK12lNK_6xFvirPlNuLvinJElQtI34ruZ-lH_LUp-y_6PKu6RRLt9FFo2qwcpN0Uv1XvbyEXjx8TSSoE6WnbW0ezSqyDkQZXo5UYj0CBuguzPS-ikZGJe5SZLsq3iOziJ0_eEhDKRBmANQQrtDaAg&google_gid=CAESEGNkQuhMYcUM4e65x_gmwzw&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1724
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	7.556798321034079
Encrypted:	false
SSDEEP:	12:XbBofU/bTVVdfFe2Aw2YKxLGSpTbB/x9yLsaraC6MzfSQ5Zp2n:XbAU/ffddVh2YMLGWbB/aLsajzKQ5n2
MD5:	E5824A732112A4503F13ECC8C4DFB1AE
SHA1:	374492CEBFBA72C5E1435398A85F1A5B82104760
SHA-256:	E755107327ADFA3AD29BD048C5A8E75C7BE38C3E3F5FD9B57F2C1EBE88292997
SHA-512:	C3E9188A02F297EDE9DD1EDA19325CD236393B296799568E5F0A719303A4FE8DE6EE512250103BF998B3280C8A9C6D85FE8ED8342E8AC834AF197E4B1E965FCC
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/jcwp-copy-paste-blocker/jcorgcpbjs.js
Preview:	...........Ao.0.....^s(F"V.i..!.M.......y...+.4a).}r.....u.....O.....{.....K..C...s.ARJn3%..as~...`..F.k.2&m.m.}.H.\d<.B..` .S...m.....e..y..).....G<L3...4.....1l.S..J....JZ...g..He...V.....9."b[C...6u#..`.m.%@..`.s.aGb.....)wgX..eIv.....;.py..uE..M..\........_V.o#..........e.4.R..s.n...H..w&..m..._W...f[h,..9.iX-+@a.-V......A..j.Sn......3...q..6!.$z...u.$U..w.r.Q....9E....Ui..x.....G....-..T...=.=p&=..X.j%.=...?..mD....VnC".J3..l..............A.f...*&..?x5..Y...3......

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624), with no line terminators
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	5.08357937709973
Encrypted:	false
SSDEEP:	12:kxP4L8BM4FoCpbWWGYsz8KBG6FkKOWGQL8BM4ZpbWWGZc+L8BM4ZeDWQ:kDB7Fo6Gf4KBG6FkKNGVBjGZqBtQ
MD5:	2D2E748FF881CF40A786D54F8D590552
SHA1:	FFF24FFE121DD664F42164CC466BF15045686703
SHA-256:	9FF367082BE1D94ABC86AD1E75FF921CC5D53846E860267372FADE66305F9120
SHA-512:	294D54527856E1E394889C217F5E6414069ADE375FA4007385C1048F020A2046333733FBFBE613C353179C835A5F4835475AABFE0F92A69DF2F588916653DE29
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNX4Exj-q2X1Lg9idKOL6uFr9t97MflTFaeqVz7mzqzF0FfgNqUyFFb9S1VsEdNaWK-cPGfL9m0WyIoBauYdfxBhnasaeQ
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_cm&google_dbm" style="display:none;"/><img src="https://ib.adnxs.com/getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC}" style="display:none;"/></body></html>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9923
Entropy (8bit):	4.689782570943409
Encrypted:	false
SSDEEP:	192:4evwBrmNislEhQ1RsNGQ3pVI+3tpBIHe7w:4Gmrvs2uqG8VzW+7w
MD5:	D3AD1EC8B55899776B8E264C8F1F9F73
SHA1:	2D5145ED3EFC6524D86B93D39C89A786F8022415
SHA-256:	2C73E763D4EB19C863FED9C51B12CD493ABABDA27FB0534C03D12B42AA66DCD3
SHA-512:	B43620045DEF5EF2248B5F211382A1CE9EE738DA0486A1D1435422619E386740F56258EE0C8A0F32AD6610767145B45560CE273A9670E044690C52424B88C594
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<g id="headline1.1">..<path style="fill:#FFFFFF;" d="M100.617,114.652c1.241,1.449,2.943,2.69,4.921,2.69c2.023,0,3.656-1.311,3.656-3.242...c0-4.53-9.015-4.691-9.015-9.75c0-2.69,2.645-4.116,5.243-4.116c1.84,0,3.656,0.414,5.197,1.449l-1.357,1.495...c-1.126-1.311-2.483-2.162-4.185-2.162c-1.725,0-3.334,0.874-3.334,2.667c0,4.3,9.267,4.668,9.267,9.658...c0,3.334-2.852,5.013-5.887,5.013c-2.162,0-4.231-0.713-6.024-1.932L100.617,114.652z"/>..<path style="fill:#FFFFFF;" d="M123.759,112.882c-0.253-0.552-0.621-1.265-1.518-1.265c-1.472,0-3.403,2.001-5.266,2.001...c-0.553,0-1.013-0.184-1.219-0.828h-0.069c-0.598,1.84-1.104,3.656-1.472,5.335h-2.069l7.68-17.6

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSA2rqtx26tZoo69R83K1ejUFQXWvehH2eUUYmAIwwL2cq_iuH40V8ucqQ-J5m1Kax5qV3goPKR0lklc7vyyRcuWijtSO4Ifuk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (427), with no line terminators
Category:	downloaded
Size (bytes):	427
Entropy (8bit):	4.89632656716094
Encrypted:	false
SSDEEP:	12:cHTTyOGq/BWEBadNt34PWvVClQwCS3A12uTXcubp/+yChgV:6TyOGq/BWEB+NtoPcs3ALTXckx+y
MD5:	95959D8B73948BCBE75901F91FE4FBEC
SHA1:	779925E62FF499409212AE635AC551FB68FAE1F6
SHA-256:	B199ED28BA39E8D3BDC0D2860B8F710808796F2C7272406178010428F509D397
SHA-512:	A1B7DDA636528B8CB2F5B33FB42550F971B19A19260BD7FC7E2F094479B29E6890D32DBF78327AFEEA442337B0442F0FDA17BEE893E991808CF70B5A6722D617
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/email.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({email:'<path fill="#fff" d="M27 21.775v-9.9s-10.01 6.985-10.982 7.348C15.058 18.878 5 11.875 5 11.875v9.9c0 1.375.293 1.65 1.65 1.65h18.7c1.393 0 1.65-.242 1.65-1.65Zm-.017-11.841c0-1.002-.291-1.359-1.633-1.359H6.65c-1.38 0-1.65.429-1.65 1.43l.016.154s9.939 6.842 11 7.216C17.14 16.941 27 10.005 27 10.005l-.017-.072Z"/>'})}(a2a)

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	dropped
Size (bytes):	38400
Entropy (8bit):	7.97748083506869
Encrypted:	false
SSDEEP:	768:ewIwWDqBel1dkyZI2DGXK7t4UPjcbLX4iGngOqGon8FZS+gaWI25/K:ewILqBwQm3IQDcbLbAgRl8Fqii/K
MD5:	0570E4BF5189264B78A935DBC8856FE3
SHA1:	A728A1A0BB0518308357D7583928198C18C3B6E7
SHA-256:	5722F44AE2DC4FF1A31468E88ADC0CDA24B03649B00B76A5EE61161F60C4D3D2
SHA-512:	EC61589263D7089C67A5C354D7B4F16F4B86D3BAF94CEE5847ACBF85CCC260849E375B206432AFAAF61BB862F37E45A8EB4753A2F8F2F199797FA32A29260793
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........'...'&'&&'&&&&&'&&&&&&&&&&&&&&&&&&&&&'&&&&&&&&&&&&&&&&......:.X...........................................I.......................!.1."AQ.aq.2....#BR.b.....3CSr..$..cs..%D.....4T................................:.......................!1.A.Q."a.....2q.....BR3.#Cr.................?..9@."..B..NP..AB$......X...[z2T...smAtq.d...O+TQ.+..0"batZ.S&t.B.II...2H....S&s..kR...X=..?.w....g_.<.7.O..d.S(.0..E.....\...Q..!..B....(d.3-.=.s$.H.Z..K...Q.Fp..\|...r.K..U....CJV8...D....N.....d./....Vn.%. .....f.%...VA..."3>...$'..BQ.'s ......*Y.;...R...}.\|...h..@.f.T ....$(A4(A....(A...(..d....m..7wT0w/..........-...:..q&u.iw....B..N.....Z..(..c..D.....T.d`.c.9....Gp....O.<...........Q.V.j.S....w.Sd....-.t.m...N...s.'.:.....i..qh(:...&..}z.zr.8.<.e5.....i..p..<:.L....i...H.Dul....:9.....kq.j.Pm....H.K<`.3...&:t..D.E.......I.#Qq...yt.BiB.a4.LV<:..BLOb.!.3..+..I...0?.F...q._=_...

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1246x652, components 3
Category:	dropped
Size (bytes):	128644
Entropy (8bit):	7.984332330531988
Encrypted:	false
SSDEEP:	3072:fYZu98kt3KiN0MJJNnEY2xH56DlSMDXWaH/yVOhc:fYZZkzTqZ6DvXD/yVOy
MD5:	E898D618F880E0D244E94031BE0E165C
SHA1:	4977F56655241B3D3E2AF8846681D33CA468E2C3
SHA-256:	2382723FADBD5CCFE3198DF5F8277CC9C11970C0C9FAA4E7146F743980BD00BB
SHA-512:	AB5A979C25EF6D9185B54692C78D22FF76676B841B5BE0329EAF4685254D252E63A9D96703BE8C6BE09EC2FB93FE7442EE8D7C9C8191D13CAB5FA292735C209A
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////...................................................O......................!.1A.Qaq..".....2R....B...#Sbr3C.......$cs..4T...D................................../......................!1..AQa.."2q.BR.......#............?..o_U.1....($......PD.PI@e.A.ITE.A.D..ED..:.Z....4.[.M...SLN..M...SD.....2.....J.J..............SA.PU.j.4.>.a.....".b.c.....&1..1..c...Lcz.c...oTI@PIA%.A.D..A.D..A.D...D...Q....A.D...DTDE.TD.PD.PIQJj7x.M........=sw...;Cw.;C......v..N....N...Cw.............w.!....=dq.N.z.....).&P....).E.&..yAO......=.}..S..p....Y>.N.b......Tur3c....7X.......X...N.2.Z...N.eg....&...V...ag.......^.N...N..X>...M..8..v...T...:.....h.hq........N...O.S..RI...R.9.........:.;.w.N.:.{.3a....R.H\w.u....h^.nU5:.k!...!MQ5...5.S`z.w.ju...:....N......o....{}...:....S.o......&&........{.....C.OYn.;D..{.h....v..L.l.Yf.69.z.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw&google_hm=vnQ-ZE_9T6CrcxbQO0ffaA==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	11260
Entropy (8bit):	5.250300119128413
Encrypted:	false
SSDEEP:	192:vNPVwP7atgq/ILBYce7nalVMaFnYI2mkkNztHwq/hl6AJ:VP6PEc3fkC
MD5:	0F7C0F7C7D849341AC23AF629367324C
SHA1:	D721B196CC04E1F65D974AA29AB911BF2EA6C5F9
SHA-256:	88D97D1DF53D20FD05D38132A9AB14B32C3F6EAB56AE9C23F01E0C61393D3AFB
SHA-512:	C006E500CE493D269645E282BC581C7131EC13F04E11042FC15D0367B0021969AD4624E05270221306BA9304807F59EA431BD438E3EB0DD6694D4B7EDF8A0A2E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250
Preview:	<!doctype html>.<html>.<head>.<meta charset="UTF-8">.<meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"> .<meta name="ad.size" content="width=300,height=250">....<title>Explora 300x250</title>.<link rel="stylesheet" href="ld-core.css">..<script>.var clickTag = "https://explorajourneys.com/us/en/explore-more/the-total-luxury-offer?utm_source=digitaldisplay-jellyfish&utm_medium=display&utm_campaign=us-en-the-total-luxury-offer-dec2023-animated";.</script>.<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>.<script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/gsap/latest/TweenMax.min.js"></script>..<style type="text/css">. . .#backgroundImage {-ms-filter: "progid:DXImageTransform.Microsoft.Alpha(Opacity=1)";. filter: alpha(opacity=1);. -moz-opacity: 1;. -khtml-opacity: 1;. opacity: 1; .background:url("Border_image_300x250.png"); width: 100%; height: 100%;backgr

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI7cKB8b7fgwMViyezAB1diAZNEAEYACCzm49j;dc_eps=AHas8cAYoTc9wQXl0OyK1GlEZXcmPbA-3olV4kd0AEStnKH7jnStsJQAbNX7CFAhGi7muVziEKNHOhW0eQ;met=1;&timestamp=1705325077328;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	dropped
Size (bytes):	42048
Entropy (8bit):	7.977452342361958
Encrypted:	false
SSDEEP:	768:ylyPz+4dF5ORxwB+CLUpT70nJ0UpqpBKaZ0y64LuHo2lGKdzwGDmzaR:3PzNORW+lT70nWeqpBay6quI2lGq0GD9
MD5:	A113B91926B7FEED34215978E7C53BD6
SHA1:	EE88F8356AE28A287E9810C77ABCCE6022214A32
SHA-256:	1770C55EF69B2E3797255CB896F77867E9C3D748A8CE63AB26D0350B23B6C475
SHA-512:	3AE7CDD881735EB5F46CD64367276934EDDED5BBEB75A9C01A92763A2A96963E039366E33C5E4A29B59F6324B073FC6A73B1F599D571A7D7147C21A101CC47F2
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......:.X...........................................O........................!1.AQ.."aq2....#B....Rr..3Cb.....$ST....cs...D...%d.4...............................+........................!1.Q."Aa2B.q....#............?..2...G.O..Zr..MaG.<].e.y.4..L...WS..1.m..F..ev..m..D.. .ZYt.e..vg...l~......ov..=)p._.[.D.......HQ..]_...[...f.b4)......4....4....V.....r...J.r.Y..[{..Pm....p........q5]V...y.8\|!..$...s2..Ib-.c.$.'./.y.cx......\`.GK...lh.Q1k_..)...!.fUeE......<.yd./._.Y..eu..#.K{>.2.....O.>..u.4<.L3..g..(....w.$o.>Q].yL.Y.q..(.A`.x.F.!v...:Y..X]..4.!bL.B..$....27...X.f#..:iA.E9."7'.9...#..x..0..s...!d.Id.1..A.;.4.:.....A...>...z'`.R...5..4.....Gd[. !..p~.H... ...0.. ?.w.RoL.\|..Nf...5.,o...1.{I.....>....r..K..D{D.RFZ....0P...nI...p.j.v...r..J...~T..B.;..t.=.....w.....T..q.a%.RI...jgl.IE..;...-.`.@

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.960656225380364
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKEMCsxBG8gWaee:PLKdXNQKrZgL
MD5:	7ACB77FD99ECED093F7849E9E0C261B1
SHA1:	5A9A0046D82F18B04FD2DF84A363D1854B5388DC
SHA-256:	28BD191BBA13945F81B09F2DF5F54B9208309F4DA0E7BB202C1E61C7ADF039B9
SHA-512:	6983990149C871728E0286674E3E415FBD226306031A52F6A24DA60BFF39CD1B30003D9A85180A989D638B030C5919F948E678320B4B7AE458C1DDC43EB1CEC5
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js');

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	85415
Entropy (8bit):	7.974182214192493
Encrypted:	false
SSDEEP:	1536:4UancbSsaJzMzOfr8UzB2/FzLQk2gqYKujdQI3bTGJAvdrZPpx:4Ua9DMrUzQNwk2gqluBQybTGJAvdVRx
MD5:	2B5C0112F0EC12382E357B4A53A7EE5E
SHA1:	33329F871AE6C880900A4BAE4D5335F713666B83
SHA-256:	12EBFC02DD988FC9C1B58FF4804F7C69F29874B020D485EC5DB5BA8910A2B6E5
SHA-512:	B5DB001D3D2746325BEA5B34FE82ADACC97BA4BF1A79AFD45308BE2586417810889CF9387CEBE66232F370E03C169A01107CB5BEBA179287F052A691A5346C3B
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/17205409499713138048
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8eXn8L7fgwMVOi6zAB2_HA6yEAEYACCzm49j;dc_eps=AHas8cDjTgMsODAHF3k93xLgW20u1mFN_-ro3Nkd2_JR1k586NBURXu0nNh4mzTu7V4HyeP456aR0XIniA;met=1;&timestamp=1705325067362;eid1=2;ecn1=1;etm1=10;eid2=871060;ecn2=1;etm2=0;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	36404
Entropy (8bit):	7.982818908225298
Encrypted:	false
SSDEEP:	768:uy6zDBxj2Jg+9TeqhZFoX+hBjJ7WX4RbnmAnTGWqcNNj3IDuD:uNL50aqlhBjJ7dBzTTpl3IDq
MD5:	2BA8990CC12919893EF0CC6A5C8DEB94
SHA1:	69A1D1D5154FED77022B489DB71367F1A0E76BB4
SHA-256:	6F0C6F49AA335EA47F66E4E480560CA6F5768BCB314BBC80978D813C3F1028F8
SHA-512:	B8944996CF012A8E0B979B41ABEA77CA8B1F1AD9B20C8C0B0CA8846D13E06E82C038C67A303E602A4A3EB77E3811B32C228BB859E11A7FC8F042D1E32D84EE51
Malicious:	false
Reputation:	low
Preview:	.....!Adobe.d@.....................................................................................................................................................................,................................................................................................. !.1.0"3.@2#4.PA..$%5.BC'8.)..........................!1..AQ"..aq.2.. .#.BRb3.0....C$45r...S.....D..Eu..cs.d.vw......................!1AQ. .aq........"20.R@.B.#.Pbr..3.$`...................o..........my2...-.x2.a.1<....~hH.2.C.@...(~..H!D....hA...h#.....t..W..Z.P......'..a.H${B4xa.HdY.. B......A..............Lt[..IuO..(.A..b..,......4h......Y..A..!d20..x..c2..A.]..&..._4.....no..<...I.G5....I.}.3.$x....#a.... ...Brjl.[L....+.D......~.t.n^....F.y...]]..b..rHuX.......s...T........M.0...h!...<E.)....#.@...tU W6....,.......H....O.%...3..Uu^.o.U....t1w/...77vXZ..<M..ca....9..@(..3...3.."..l.<a9.5.Y$QvQ.]TmunX4.#.v2.7..1!.l$.ru6...&G..).`..RF.m...n.p...aR.xn.]/.......+..L0C`.0.x..,.y....ii.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14575
Entropy (8bit):	3.8505764084300074
Encrypted:	false
SSDEEP:	384:WWlhcrdqJU7kXxQPWpHsXCq+qodZQqqCtJUwJPwJ5LbMIxZiZvy:bhHXxQPKSodZQqqCtJUwJPwJ5LbbiZ6
MD5:	CB448FCCCAC1204CCB86D069B7E01DAE
SHA1:	BB4E98189E51D206B47D81BB6382F3D73520E72C
SHA-256:	C30405C07044ED507DBEB116D0E8D192E312A4554C46EF1743BEFC29F5276B56
SHA-512:	FFE472C1D9675ED6C258ED159E92DEEBA02487244B5AA942CA554C17EE40E1EA9A011383E9919FF3E699E9874A2AD570DF128244C1CE2A7DF991586D4C98E108
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.5.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g id="logo_00000126315863549042564930000014701254360129029549_">..<path class="st0" d="M216.8,60.8L213,50.7c-0.6-1.7-2.2-2.8-4-3.1c-2.6-0.4-3.9,0.9-5.9,2.1c-0.5,0.3-1,0.5-1.3,0.3...c-0.7-0.5-2-2.5-3.1-2.5c-0.8,0.1-3.3,1.7-4,2.7v-2.5h-2.1v13h2.1v-9.3c0-0.9,2.3-2.5,3.1-2.6c0.8-0.1,1.7,1.8,2.7,2.1...c1.3,0.5,3.2-1.3,5.4-1.9c2.6-0.7,4,0.4,4.9,2.4l0.5,1.3c-4.6-3.1-9.7-0.7-9.7,3.7c0,5.8,8.2,6.1,12.1,2.8l0.6,1.6H216.8z... M213,58.1c-3,4.3-9.1,3.6-9.1-1.6c0-3.6,2.3-5.6,6.9-3.6c0.5,0.2,0.8,0.5,1,1l1.2,3.1C213.2,57.3,213.3,57.7,213,58.1 M182.7,47.3...c-9.6,0-9.6,14,0,14C192.3,61.3,192.4,47.3,182.7,4

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1747
Category:	downloaded
Size (bytes):	411
Entropy (8bit):	7.492425197014556
Encrypted:	false
SSDEEP:	12:XBINM2DLDz0Yt9bvPiF4WmDmwZgbQcdRfucmpuMfVso38p/:XuS2zz0YJWpwBElkfVso38R
MD5:	EB011DE373B447DEF8917B00AC1C154B
SHA1:	DDFC54E9853C8FB1D924EA90934991A61B274F4F
SHA-256:	20B0B5CB89559FF2AD976FA4F3AA9DCB2484EFDD7F99DD072C5D5A91A67EC442
SHA-512:	150351EEC06EC5F1F431574101821F1917F1E3C3C787AF4A5BA2F8B01635CFC626C3DEC4C1497CF95E934F447CB7279DF3A03EFEC6100D7AD7D84E95805A1502
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/captcha/css/desktop_style.css
Preview:	.............N.@....S..5R1.Q..cxkF..Q.!.j...Y..j...o...3...IZi......^.V.1A*....e......<^.\C,].r\........zY..+JL...f...U.. \|..g.P..Ox.Ee..5.lCY.Ra).~Hz......r..vy....T@.........M./.,.&....9....w..2..@...U....N...........2.v=.>..g.....O...Ck..8...\|.>.....Ur.....;..G..k..T.f...._....N..H.).[...M.[..O._.P....?..N-...m...lY..........O.3...K..J7&..`s.h..FQF.q.5...]...n....$....{.~.}:..QH1.....

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQSz__9n2hB2d9UFcVsGpXgmrwD8HGnt-vPbEyUMlmjUj74q01hb5sjQU41LBhfgsPPod28w0Y4wxZbUtlyfERcsXdqriXPRw&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT&google_hm=eS00MjdSZGpwRTJwSHk4Mm1aMUYuR29YZ1pOYUtxUDlGNX5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1256), with no line terminators
Category:	downloaded
Size (bytes):	1256
Entropy (8bit):	5.834224519268485
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAe+KVCLTLv138EgFB5vtTGJTlWtA1r1sLqo40RWUnYN:VKEceKonR3evtTA8612LrwUnG
MD5:	46C31AF0A74D46F21F86027E97D2E9AD
SHA1:	221E4805F75E6BB4C97C1C558ABD6CFEC5A5C382
SHA-256:	F9DB1F9C1382EADBCC625095E33E1BD126AAB1331313EBF7ED93B79B7D16209C
SHA-512:	FAE56BEB51BC9AD55BC5A8083E228DF9B1041103E047CB9BEC0F9ADF8A3FFAF5A7FB571072886368614CD69F6899FFA1B47254FE1DED7680E1164FD9C83BE684
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?render=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&ver=3.0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-LtGrwK

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmSjYPHbuNMi0EVqUr_KN6VbgVJoTmh_JRmSbOo7MgC8M0pb1qez5tgBR_NGC8kBAO52PFJYrVFxoxg_7Jkp-w0EPocLtda6FQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	35254
Entropy (8bit):	7.964166419470512
Encrypted:	false
SSDEEP:	768:mKR/lidVaEFqjiidRejcRzzXr3fASupgYx5jRsVXGpAA:Zlid0qJ2/bm3xeYF
MD5:	A2077D80BD47F15A505407947FAAC1D8
SHA1:	858C2073DD74104ABCECC4DD33ABE93F2EF6098D
SHA-256:	D93108B4D6B185AE7150D5BA9D0F77BD640C158FD8F8E2DE35BA30BDA932A326
SHA-512:	A7B98FA575D73282D4DA992481A986FB8203823210CE858864BF631EA48C478B016E8176F9635C6358A69C2F820E36525C9F80D50187CC76F8ED2A2A79F4BE78
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f21cd22-0b54-4b14-9101-6f7ef048f2cb" xmpMM:DocumentID="xmp.did:651BE292746111ED9451A2098CC9645C" xmpMM:InstanceID="xmp.iid:651BE291746111ED9451A2098CC9645C" xmp:CreatorTool="Adobe Photoshop 24.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7d094581-e61d-49ee-9001-713af6d885cd" stRef:documentID="adobe:docid:photoshop:c5e361de-0e60-2f4e-8963-709c8651f345"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (412), with no line terminators
Category:	downloaded
Size (bytes):	412
Entropy (8bit):	5.28837320650546
Encrypted:	false
SSDEEP:	12:kxP4L8BMo9CpbqWGkBCqAo8KBGGx1KE+WjWQ:kDBqGShaKBGGrKEVKQ
MD5:	44D795EF4B42B3D71F2132692B14A280
SHA1:	BAC440DD445F970B5A9F4CA6D77139A77016808D
SHA-256:	B5CAAB4F619E85958D7B9985C51504F31AA65076FBA3ECF921EB3F91FE5061E4
SHA-512:	7C619BFD0C2949027A9FD2B5F61119C91B30E3002D1D96EE91A8D325344E74CD7FFA73F20D0EBB7CD01724AB4AC34292DB77B08AF2A40A77B0175B67D1A46D99
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_hm%3DSMART_USER_ID_B64" style="display:none;"/></body></html>

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 628, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	90067
Entropy (8bit):	7.974398087977511
Encrypted:	false
SSDEEP:	1536:uKyozeNsOPIsJZRRZtsdd9ZJu9fl7a4mbRwA+lSkvc/7CWkK2JaJmt+:lznOQsjBSdRJu9fU4mteMT/3JRmg
MD5:	75CD3E01BAAAE3DFBD05DE2D5FE3F15F
SHA1:	C270BB992982D622B74EEC64245F0E685CBB719F
SHA-256:	5D6A02A049BC7EA346742D45393CF935C05BE21F182AB21C8E6B1687E3C44B31
SHA-512:	6195A173B2B6FC537CB778F9AC63F8FE0AF0352E32DB739BC29493094D5A549D85AA1532EAB06234E2DFFDD52C546B09E18C9A3EED07916D252FA8A6974278C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......t.....5Ve....PLTEI-~.%d.........x..w.......6.w.....+.p...Z....................'.......+..F...].\|.,...F..].\|.i....ze..,aI..f...............\|.U;.....N..6.)q.s.mW..X..D..O.p....h../m..........q...q.:w.<S-\|.9.zt.oK.-a.'kiIo.OVr+x....._.[.....b..t..5.yV.(n..fr...8.g..qA.......<<...Ly..s.%.f`_@t.L....`PsRj.T...f.....B.B....D@UV.>...o:..Q.@\.r.....B....\e....@..Q.Nv....7.eN7B.. V.cF.Y...$.;mo~y%Y.l.~ ...DU..6....8#a...Y....=.mHWw...X.qviYz.^r...v.....^i..Qo..n....Z<...g..ezh.;r...Y.]......../.........SM.....l..Md....6....r>..cqG....z..n.0o..^cR..c.YV].n...t.g...lofxA.m.....).....cj.QAnx W.gK...!v.X!\^...qW.k>@.u..#..\...=G<\rsUP....\.Be......v=g.IE.\|v....<g..G'5c.r&... .IDATx..wT.....6.c.. ..c!.Je....".AE4z....z..P.. ..$.@..x.......D<...Y...v&'.:.<w...5....z.../~...>.{...k%..U.u....=.W.i3..5...9..-....k....z..J.f....k+gC]]..?...ZU...H...S.N..3..Y..2N.x.t...U..qL:W...W_].i.C.l.....P.Fwd.....L[

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	1482
Entropy (8bit):	7.6041012002235
Encrypted:	false
SSDEEP:	24:BJYH3qJj1ifIUh2eO5HSCAaAb3EzY7XzpZcYuTum9Q7mWAbe:BJYXqifIUF0HxAFL7XzpZcY+/9ymW1
MD5:	45F1A96EA71A1DE090EA46A7A69B2A7A
SHA1:	D128ACB6F425313D7762CDC3EA525B386C68C0CF
SHA-256:	8FA115F6945234D2C7718CD3622CBC0D58D52721E9ADBF4B63A31D3206D3DF5E
SHA-512:	AD73A359B54FF48D0B55782AD3A908F9E9137198952B8C596AC9D71EAC192B11CAD127006612E5D907B45DBE9205100A198B46B4CAE2B5B2869067AA052EEBBC
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."'."%#...2)!'&()..93-2<.3('.........../ ."2-211(-&22&02'&''&2-'//0222/.&-(/-&-((----'03&,......d.d..".......................................5.......................1..!AQ.aq..#2r...."BRSc.Cb.................................-.......................1..!"AQ..q.2.3BRa...............?....5....e.......ezL.C56.B......i.r...iQ..X.N$..Z..ZoL.7..>..di.4d....""zz""...." ...I....d=jJF.......n.19....c......I.7.&V...>s..^.za......e:..A..Q.........Y{...<G.-.k...N:...A..v.%^.....].t.'7.-........D@.....!..R.}.9.i.6..ziU}......D.....Z.Z....=..d'..D...H.-...T.F......h+.q.i...Ews..,.8.=...B...=.f].i.. ).=.[..S.%.V..>U.Y...]..a....u..y.~..."I......{......6....[....G.....4."t..D....o_..G....tz`...I.......z$...%#....N8.....v.a.&\.^.n.d..Nzp)U...\|.M{c......[k...Az{.+.;.=[..A.....5(.juT......O0z.jR.5....WK........<DH.." ....+..t!....&).K\(.x.9.a.qRI,>......%...4n.)..1.5{..I.O..He,..!..`z.4.j.?I.....}...c.G....

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16142), with no line terminators
Category:	downloaded
Size (bytes):	16146
Entropy (8bit):	5.1921466250783626
Encrypted:	false
SSDEEP:	384:H75NVCMqhONzRMs9K+K3JLyuLKmtfj0z149LmK4ujm:ViPOM5OgKC0C+mm
MD5:	94DFDBE80F36B3BE63CE74FF1135B996
SHA1:	5E05077D99E736AF42B2DA70E428E7F7DF556DD4
SHA-256:	4C0CED2CB3830D045CDD74F745FD4D6DCB082D8EDD3A9FE46E39295E30CB8032
SHA-512:	628169B65F39A18F13FACAC9E3375EB59DBCAC67CDAA7612562165D94AEC1FDA6CFF93B1F228155C317F82A544390948F7243DF330972851B49F6A45781AA2D2
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js
Preview:	!function(t){"use strict";var r,n,e;n={},(e=function(t){if(n[t])return n[t].exports;var o=n[t]={i:t,l:!1,exports:{}};return r[t].call(o.exports,o,o.exports,e),o.l=!0,o.exports}).m=r=[function(t,r,n){n(1),n(67),n(68),t.exports=n(72)},function(r,n,e){var o=e(2),i=e(36),u=e(57),c=e(56);e=e(62);o({target:"Array",proto:!0},{at:function(r){var n=i(this),e=u(n);return(r=0<=(r=c(r))?r:e+r)<0\|\|e<=r?t:n[r]}}),e("at")},function(r,n,e){var o=e(3),i=e(4).f,u=e(40),c=e(43),f=e(34),a=e(50),p=e(61);r.exports=function(r,n){var e,s,y,l=r.target,v=r.global,b=r.stat,g=v?o:b?o[l]\|\|f(l,{}):(o[l]\|\|{}).prototype;if(g)for(e in n){if(s=n[e],y=r.noTargetGet?(y=i(g,e))&&y.value:g[e],!p(v?e:l+(b?".":"#")+e,r.forced)&&y!==t){if(typeof s==typeof y)continue;a(s,y)}(r.sham\|\|y&&y.sham)&&u(s,"sham",!0),c(g,e,s,r)}}},function(t,r){function n(t){return t&&t.Math==Math&&t}t.exports=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof global&&glob

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71385
Entropy (8bit):	5.515546222590427
Encrypted:	false
SSDEEP:	1536:L8fUjOgdDTst8baWYUVgCggvEvI4Kv4tJ5SPghhCPexpGGHa3ou4MOanIaxA:QfjgzNv4lugrCPexpp63QoxA
MD5:	2F7BE96138A06F73A77C87104EFA215E
SHA1:	B98A07C88F7CBB92FBD672A86AAD915E97DC8BD9
SHA-256:	108BCBA14581350A7815B5CAA02835F1157276A442EE1B426FBE23BB6FB8F3C3
SHA-512:	1BF8B6D4041496146EBE0F54311CFB62466ABB3EC378D33F2E2B74CE28E69808B3354E6058C718C9D1EE474A3B2797966741D057603EE90D523C03FB0B4D723B
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/modules/core.KJQApO2n.js
Preview:	const t=".KJQApO2n",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,track_links:X,track_links_key:"",callbacks:[],tracking_callback:X,add_services:!1,thanks:{},locale:X,no_3p:X,icon_color:X,color_main:X,color_bg:X,color_border:X,color_link_text:X,color_link_text_hover:X,counts:X,overlays:[]};const L={num_services:8,prioritize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},y=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for(const a in e)Z[a]=e[a],J.a2a_config[a]&&(J.a2a_config[a]=e[a])},u=(y(),"https://static.addtoany.com/menu"),o=["feed","mail","page"];let w,x=0;const k=e=>{e?x=e.a2a_index:A&&(x=A)};let j=0;const Q={},n={feed:[],page:[]};let i=["a2a","share

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmTGN2X_d50pHLLDJD0qrXXS8E6cq-PbVfjQ3H6ZiL87GDaLyGfjejSJ698loF3AontM07lADS7F9wJvWFLA2zxV010C7Rn8hQ&google_cver=1&google_gid=CAESENea1cA6TkOafqa1xSG3nzE&google_hm=UTc1ODYxMTQ0NTE2MDAxMDQ0NDg=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssJMu5EAXFZ3069ZeRSB0SCdycB4s4G8ECYFtv9qYizkeJsYSzacYslFlRvNpLC8GRRnd-G4aSjdPxMtgmF2OvGCEJ87tpN_UDJsg_xgL7E5RrDfFN_RwK4W-Fqi1adqKO7prsgCG3gg1q2OV2r9pzM4qJ0&sai=AMfl-YQxZXbBy-vaSTjz73TGKOR4EW29gCYZZNBPpBzH1gGhR4YZuNRxessN-4qlYnEbtza18VUjAHoX3qNOltp1Uss9vJn6pP1v73YTiJpKD_B2rN8EzMiYyNdlRkI&sig=Cg0ArKJSzLu_E2vezEnJEAE&cid=CAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKlGAE&id=lidar2&mcvt=1008&p=-1,1,123.265625,1006&mtos=1008,1008,1008,1008,1008&tos=1008,0,0,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1705325099686&rpt=2682&met=ie&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65090), with no line terminators
Category:	downloaded
Size (bytes):	65090
Entropy (8bit):	5.770657743820133
Encrypted:	false
SSDEEP:	1536:aQSGx7LZTaxbIlfglmvPE/DE4EIHyEJKsbv7ER:NSKZTimk/gNMv8BR
MD5:	EBDD5B4C7854DE2AD446F6A090F5553D
SHA1:	50BDCD39707536188A038B9BA476CC444BBFE14C
SHA-256:	358046E1FCAC0FFBD896E8DFC5CC461280DB1CDD3E23A89FA0DE81C5E9CD6301
SHA-512:	C076340141043343091FACA0DFBC7079E708CEE434D3AC70771399432C754F3274F288C5C6625A284E159B2DB1BE698C14357CAD99E89500CF3A1125D7F0EBBF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12,1.12);-ms-transform: scale(1.12,1.12);-o-transform: scale(1.12,1.12);transform: scale(1.12,1.12);

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (64370), with no line terminators
Category:	downloaded
Size (bytes):	64370
Entropy (8bit):	5.760597235528972
Encrypted:	false
SSDEEP:	768:sJ7zQ9PUQI9wE39NsCu/HvCGvU2EZQymWUyKpAkbgChFEwEXUKIl5qvAvE0Et6a/:aQSGx7LZTaxbIls4MH6agLyCKsbvSB
MD5:	542C7FC376F0C599F9BE8C6630717233
SHA1:	76B33ABAED875981B72A2801B372CA380D91AE1A
SHA-256:	D3C6B67126688DDBB89B1A8BA5BFB62A4D1FD3D0DA6C5D1EE60711008130ECDA
SHA-512:	C12273C25B71113AD270B4B280864396B4148D000D5ED76B8EC729ED0CFFF45223EBB2C757766E35ABF5FCCDAA9004E3F2820B7D525F32693FFDA22AAC84D56B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12,1.12);-ms-transform: scale(1.12,1.12);-o-transform: scale(1.12,1.12);transform: scale(1.12,1.12);

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTr_oCoE_Oxasl-Qr1eZ6qwU_dQ93wP1v-V0I_G7SfDLSnuZ496WS51_ZFewAUUtMpD-FpDnDJ6QvyabiFB-JplDHu21XCCn6U
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	102980
Entropy (8bit):	5.553944411449827
Encrypted:	false
SSDEEP:	1536:qzyhMxk+8B+EsbbnP0FkcmU24f2aN10Tc3oAhQb/6TVkF0HwF6rK7CDig:QFbUJL1P3oAObyROgwFd+Dig
MD5:	7D4FF891568981DA2173A37F3B57C2C5
SHA1:	2529A301E5C201DC91570D214F3A666F57585E13
SHA-256:	C263DE9C21FA2A5121095114B4643AB7CC8F011776461B63075D888D50C8F67C
SHA-512:	FC29836E1261AF472DF2E36DFA23C84034338CB8E05676720E3F7030599ADD9B7D5A92130DC8EE8BC8B04EF0747A897D3B243432BBAA428B126BB18E0322739F
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/nmedianet.js?cid=8CU7Q771E&ydspr=1
Preview:	(function(){;var _mN = {"_prid":"8PRVCXX19","_cid":"8CU7Q771E","_cpcd":"QcqgoxBu_JEBy1__-rrJcw==","_sizemovl":{"df":"320x50","ipad":"728x90"},"_verId":"9111299","_oref":"","_optout":"","_uencru":"8CU7Q771E","_limgBeac":true,"_popUrl":"https:\/\/lg3.media.net\/log?logid=kfk&evtid=popup","_shftstr":"sdFlrDO6w94_aNInZitEo1LKByW5-vz8jhqSHcmCA=XkR0JVepPuU7b2xfg 3MT\/GYQ\|~","_shftn":9,"_ydspr":"1","_lbt":"500","_trunLogUrl":15000,"_L2ISrc":"1","_mcf":"76592","_https":"1","_dcSplit":{"G":"100"},"_cfo":["BI","BY","CD","CU","IQ","IR","LB","LY","KP","NI","SD","SO","SS","SY","VE","CF","YE","ZW","ML","IL","RU"],"_cntDetConf":{"parents":4},"_lw":1,"_smp":"smtr","_smwp":"sr\/2722522032\/SAFEFRAME.js","_rtbsC":{"YBNCABID":["1","4","9","7","6","92","132","223"]},"_dpid":"8PO734354","_dyApi":"https:\/\/contextual.media.net\/dtp.js?","_kaMtTl":"bradsdeals.com","_el2shd":"100","_l2qek":["fnAtVW*uFLkzK(","7pxsTUl)ChSE-Q","_Pjwb4ogM0dvBG","Hmyc9OeR.ZqY5!","NiaJ~D23XI816r"],"_lpro":["ALL"],"_d

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmQHOZq5Aox_zySiWkCILkbOlCXRnQ5Hx_GWTAhbtyK_WW53gnL3FyCmySb4McVk1EWBUAWA5CwMohYlx0786Qizad0nlCn-Zauf0QdtEfSR00pky_4GV7Bo49ZFoZzyvw6Yp8769qswpuxhSzA2wLVGtCA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	7.6041012002235
Encrypted:	false
SSDEEP:	24:BJYH3qJj1ifIUh2eO5HSCAaAb3EzY7XzpZcYuTum9Q7mWAbe:BJYXqifIUF0HxAFL7XzpZcY+/9ymW1
MD5:	45F1A96EA71A1DE090EA46A7A69B2A7A
SHA1:	D128ACB6F425313D7762CDC3EA525B386C68C0CF
SHA-256:	8FA115F6945234D2C7718CD3622CBC0D58D52721E9ADBF4B63A31D3206D3DF5E
SHA-512:	AD73A359B54FF48D0B55782AD3A908F9E9137198952B8C596AC9D71EAC192B11CAD127006612E5D907B45DBE9205100A198B46B4CAE2B5B2869067AA052EEBBC
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/2995076213469611527?w=100&h=100&tw=1&q=75
Preview:	......JFIF..................................................."'."%#...2)!'&()..93-2<.3('.........../ ."2-211(-&22&02'&''&2-'//0222/.&-(/-&-((----'03&,......d.d..".......................................5.......................1..!AQ.aq..#2r...."BRSc.Cb.................................-.......................1..!"AQ..q.2.3BRa...............?....5....e.......ezL.C56.B......i.r...iQ..X.N$..Z..ZoL.7..>..di.4d....""zz""...." ...I....d=jJF.......n.19....c......I.7.&V...>s..^.za......e:..A..Q.........Y{...<G.-.k...N:...A..v.%^.....].t.'7.-........D@.....!..R.}.9.i.6..ziU}......D.....Z.Z....=..d'..D...H.-...T.F......h+.q.i...Ews..,.8.=...B...=.f].i.. ).=.[..S.%.V..>U.Y...]..a....u..y.~..."I......{......6....[....G.....4."t..D....o_..G....tz`...I.......z$...%#....N8.....v.a.&\.^.n.d..Nzp)U...\|.M{c......[k...Az{.+.;.=[..A.....5(.juT......O0z.jR.5....WK........<DH.." ....+..t!....&).K\(.x.9.a.qRI,>......%...4n.)..1.5{..I.O..He,..!..`z.4.j.?I.....}...c.G....

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2352)
Category:	downloaded
Size (bytes):	7656
Entropy (8bit):	5.3284832593529785
Encrypted:	false
SSDEEP:	192:TC2zUtewjQn4j4KNAhKXwghOFc7MoZ+dAfA5/5E98fa:eoOTjQ48KGghOFEPI5/5Eefa
MD5:	D95E11DC69673B831906B34FAA68F2E3
SHA1:	73F403E429DFE280C8627C82AF77C4DAFEA723A5
SHA-256:	C4B813F7AA04ECA20BE469B259CCA2779799F58E280D73488BD7386940D2D146
SHA-512:	E410CF8D24531C253512C276D0B772C7031EFE8EC77CC08C9E843EC9A7D5D6987A04C488EC703297908336518C6D86AE3F8EFADCB90D7199C5CB45494F850BD9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240109/r20110914/elements/html/omrhp_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var g=this\|\|self;function k(a){k[" "](a);return a}k[" "]=function(){};function l(a){let b=g,c=0;for(;b&&40>c++;){var d=!1;try{var e;if(e=!!b&&null!=b.location.href)b:{try{k(b.foo);e=!0;break b}catch(f){}e=!1}d=e}catch{d=!1}if(d&&a(b))break;a:{try{const f=b.parent;if(f&&f!=b){b=f;break a}}catch{}b=null}}}function n(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function p(a=document){return a.createElement("img")};function q(){return new r(a=>a(void 0))}function t(a,b){if(!a.h)if(b instanceof r)b.then(c=>{t(a,c)});else{a.h=!0;a.i=b;for(b=0;b<a.g.length;++b)u(a,a.g[b]);a.g=[]}}function u(a,b){a.h?b(a.i):a.g.push(b)}class r{constructor(a){this.h=!1;this.g=[];a(b=>{t(this,b)})}then(a){return new r(b=>{u(this,c=>{b(a(c))})})}};var w=a=>{let b="https://pagead2.googlesyndication.com/pagead/gen_204?id=rhmss";n(a,(c,d)=>{if(c\|\|0===c)b+=`&${d}=${enc

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7743
Entropy (8bit):	4.77254534802572
Encrypted:	false
SSDEEP:	96:kNnfiRh1RXcXMjrpkYzoq09ZRhGFGQPbv2Pcq2Ce4MPbv2Pc6fMwePPpPAWPqA58:4+ZXc8jrTzIz8bu2gsbu23PBbqV
MD5:	9B2C5E200BFA5850B09A2D3C21C41ABD
SHA1:	A9132180961E2A58D23C5DEFFA468EF98709C7DD
SHA-256:	09C95E7866DC630CF6CC71AE23B829DAE3B05F38BBE64CA9E6A7CEF65A12103B
SHA-512:	0538E5F4D944653DF3C97EFEFE1BA95E55CD358AAE1589BBC22CDC335DB0FE142DE315B0CFECB6CBA5816E0A126DC102D5E02C5139E794781EB8EED228E57CD2
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/headline2.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<g id="headline2.2">..<path style="fill:#FFFFFF;" d="M57.147,116.682c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102...v6.119c0,1.689,0.773,2.388,2.169,2.388s2.168-0.698,2.168-2.388v-6.119h2.102V116.682z"/>..<path style="fill:#FFFFFF;" d="M67.688,113.467c0,1.92-1.247,3.115-3.473,3.115h-2.667v3.784h-2.102v-10.002h4.769...C66.441,110.364,67.688,111.546,67.688,113.467z M65.567,113.476c0-0.907-0.574-1.444-1.689-1.444h-2.329v2.894h2.329...C64.993,114.925,65.567,114.388,65.567,113.476z"/>..<path style="fill:#FFFFFF;" d="M81.229,112.133h-3.234v8.233h-2.101v-8.233H72.66v-1.769h8.569V112.133z"/>..<path style="fill:#FFFFFF

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAAB9JqIIl7qPwMJzhhVAAAAAAA&expiration=1705411490&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmReeph4lcMuO0rNAoBcDloxbJYZXOEvk8tZygEqrnXr8j8lZtrhNkiGMcOlzcXvdiB-U7GIysXT-IRM77SJ58MgfY-3oVgFTrQ"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x377, components 3
Category:	downloaded
Size (bytes):	111351
Entropy (8bit):	7.970795018921122
Encrypted:	false
SSDEEP:	3072:8xJa6clVECDUNSwfH4jxBiZVrUWTQGM297ic7bMZTE:2a5NDo4eS7Gv7icPMlE
MD5:	4DF7CB19C99E03AA869FD771064BF3A0
SHA1:	74D510A733BDDAE7A8373CBE67DAD64AE980D9C0
SHA-256:	7F7039EBC962FEA21125D2B4A73EE234CBBE4741ABC354967D3DC791E340E066
SHA-512:	1E9BEE3AE549DE22EB1CB8AC108F9BF55F40EC45D70941D8BAC0D55D0D04C12E95DE9669EF869439F6DECF7C7FD5BA98CF586C32F4847088D3FAD6A6A4835B78
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/daca_images/simgad/5009422677624458322
Preview:	......JFIF.............C.................................... ("..&...#0$&+-.-."251,5(,-,...C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......y...."........................................O.........................!1.A."Qa.2q.#B.....3Rbr...$45....6st.u...%7CS..DE..................................2......................!.1A."Q.aq2......#B....3R.............?..h..%.a..Q~q..C....K.m..0p.QG...7.I.M..q.n....A..f+GN.K.....F.P..?0...q\|.. ...B&..Z.w..O"...F.Ci?+...qp...R.q....1"9....G.[........x.z.....fV....pd....4.2..Uty.._U...k....[...Y.S$.". V$.{...w...)a...Ji4.Ew-.7=."....6...i).EB...c..%..V......k......,.`.nE. .LN..3.\|.R..t.R.".......e..n,..o...u...S.1H.T.....bm....x".8.$.~=k$.i..T.8.P.Dd.\....W...p.#.r....Uk.]~.(..F...I+q.t.[P;..%...eYg..OC.Jp......<..4r.....1..pG....#.cI.U.a-,.Y.pI.....o..a._,..........MP.J..:H..*.$FTn..fi.I...5m.-.Q.pA-.l......M.er...l.\|..."....x..S.T._R.v.bM.rF)54Tp...T..W.)....I....m.....FSAKM$.r.f..3.5Q......=D.....6.K/.+.b

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 760 x 193, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	7.958887741005671
Encrypted:	false
SSDEEP:	192:DxL0SQ/lY7e7eHIkkjExWn2SJ93U7OaH/h56fd1f9jvD1HyrpI5vn57wx7ISFy9b:dL0Sl7fokkwxW2E93URHH6F11Dsov57h
MD5:	8D0F348518CC30E73F75F9500746CEED
SHA1:	29F7161CC5C4A492BD0825E96D56EC68CAC6133C
SHA-256:	8379F1B1345E8F406E5E990CD9C59BD66CC31AEF04DECCE18B9141AB91B844CA
SHA-512:	83463705B6CF661061304EE42A9C3A3BEAE0C528B727DAD76F53FA0FE9E2033A1F9BB7D88F9962E5152AFCFF2877D8780E8D2ED7966B6590499E86B560F36A2E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............4....&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:9872E2F4DAF311E9832BAC518767CD0B" xmpMM:DocumentID="xmp.did:9872E2F5DAF311E9832BAC518767CD0B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9872E2F2DAF311E9832BAC518767CD0B" stRef:documentID="xmp.did:9872E2F3DAF311E9832BAC518767CD0B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.R.....tEXtSoftware.Adobe ImageReadyq.e<...HPLTEGpL.2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2.GpL.2.y.E@....tRNS.$..1......<..d.W.J

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187391
Entropy (8bit):	6.189155732085036
Encrypted:	false
SSDEEP:	3072:4lDcsYGzKxUphOkm0tE3kSqjjjgj5jNjujb/j/j60d0z0d18R1VR18hdKDQHbzrJ:4dDjzKxUp5twbWUhfHX5S
MD5:	3BB9853B7705E271D019422184DDBDA6
SHA1:	248AE57E4199A6CB8CF9224C8EE2457C6C7EAB47
SHA-256:	52EFE5E63829F4860DC65B9D254A9BF506278909B810A41B5EEF4865EAA37CD0
SHA-512:	B2360E747A78954F3BD0B59F2D60B6A3A75E671C37F65BB97F0523C21D40C75DED670EEC9A2EEDAAAE3780C50CC62EB27A4A26D13E00409E55127D97D605C017
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:flex-start;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240109">(func

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9866
Category:	downloaded
Size (bytes):	767
Entropy (8bit):	7.719935586644062
Encrypted:	false
SSDEEP:	12:XlZzT9GUMM9zHGB5+dqkzaoy4DcaCNb8xUswOdTgJO78QXBRdL4ygj4:Xl1564qX+NfDDWNIx/RqhQxL4b4
MD5:	CCEB6903874BFE432E58FE8E4872C001
SHA1:	A7DF26AED4AE2A1CE4AEE32A3A6515762BB7298C
SHA-256:	D787A4EA071029F900FACE7C8BC4340AEEF9CCB05C552EE2FB07C25B6CD5AA79
SHA-512:	F5A5A9046B18782B97CB8C56C9D239E83039B3FDCB44A696962B2B66C60700BBF3167AE0166709305AB959B05F7182B89416D7C8E66A5F04361BC349B58BBE17
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Noto+Serif:400,400italic,700,700italic"
Preview:	...........Mo.0.......ncil.Mw!o.Ml.0..e.Y....%^K....)c....XY........h{J...,K#5.F.=m.")r.&a.+..."."..SexR.By..i2<.5X.u.O...t...U...d....Y.$.O...3....rSf;sB.N5..F...$.FQ..-.[VlGm.tm.ZI..G.G..~{n}.?.$...r>?..........S.uDT.r.......EHv.....o.4.c........a.....S...Pi3a...{?..q=...:.]...@..>...h..v..9Q....,.d..sa3a.......BK.q..kG.1@.)8.1...KHn.8Sczb...e..<\.U.%.~s.. .6z]V.RH....hB.......p.4GLs0.....(....!.....t....tA.`...+L.(..k..j..(U.`.r..O......P.....(..,}.(]!\|<,n......yc.P..}.......W.Y5..0................5....,.........X..!l.C....o......7y..G.~.^.x.:..I.+D...Z.(oRk...I.5.}R..>.IbD....3D.........U.<.-o'G.q.\.]$...A..>.r.T<.-x......{..&..s.....M*p...gR9..r...L*.,_.}4.W..>Y?.h....D.v.I...."{4k.J..dw..fR.....O........N>.&..

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=toutiao_usd&google_push=AXcoOmR1rXiOjpQnseGmYTjPFo7J5m9RLCOnPTctxzHZrc6O5Aiz0SHgc6_yH9afZnxXCCJtYIL5yu2n-gUfVzwiQEB0sRjZimeExA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	642860
Entropy (8bit):	5.855809172994545
Encrypted:	false
SSDEEP:	12288:ynSVBJKc9zJ2rLmS2438npJTiszBv3U2CotJ+NUDeCyA5+CUyLct/v:ynSVBJKc9zJ0mS2438npJTiszBTCokrB
MD5:	FEC58FFACA2106466FB6031E15F3E5B0
SHA1:	57CF74CD0D0703E0DC524AC251B24B04B376B390
SHA-256:	6917B0A320EEC548694F257EA7C0D31BCE680B9A7034AB7FBC42383EB9EA20E7
SHA-512:	114E2AC2F3AFCB60EA05D70274536A41276AF5CFC13742AF014627F5D30CAB0FDD6DA104BCFE9B0CCA15DA8C84794D232E0CB215230CF8C97410704F4590F70C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325050&plat=2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x612_l%7C404x612_r&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325050529&bpp=122&bdt=218&idt=122&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=7739714387177&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=203
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3clink href\x3d\x27//fonts.googleapis.com/css2?family\x3dRoboto:wght@400;700\x26display\x3dswap\x27 rel\x3d\x27stylesheet\x27 type\x3d\x27text/css\x27\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {displa

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7743
Entropy (8bit):	4.77254534802572
Encrypted:	false
SSDEEP:	96:kNnfiRh1RXcXMjrpkYzoq09ZRhGFGQPbv2Pcq2Ce4MPbv2Pc6fMwePPpPAWPqA58:4+ZXc8jrTzIz8bu2gsbu23PBbqV
MD5:	9B2C5E200BFA5850B09A2D3C21C41ABD
SHA1:	A9132180961E2A58D23C5DEFFA468EF98709C7DD
SHA-256:	09C95E7866DC630CF6CC71AE23B829DAE3B05F38BBE64CA9E6A7CEF65A12103B
SHA-512:	0538E5F4D944653DF3C97EFEFE1BA95E55CD358AAE1589BBC22CDC335DB0FE142DE315B0CFECB6CBA5816E0A126DC102D5E02C5139E794781EB8EED228E57CD2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<g id="headline2.2">..<path style="fill:#FFFFFF;" d="M57.147,116.682c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102...v6.119c0,1.689,0.773,2.388,2.169,2.388s2.168-0.698,2.168-2.388v-6.119h2.102V116.682z"/>..<path style="fill:#FFFFFF;" d="M67.688,113.467c0,1.92-1.247,3.115-3.473,3.115h-2.667v3.784h-2.102v-10.002h4.769...C66.441,110.364,67.688,111.546,67.688,113.467z M65.567,113.476c0-0.907-0.574-1.444-1.689-1.444h-2.329v2.894h2.329...C64.993,114.925,65.567,114.388,65.567,113.476z"/>..<path style="fill:#FFFFFF;" d="M81.229,112.133h-3.234v8.233h-2.101v-8.233H72.66v-1.769h8.569V112.133z"/>..<path style="fill:#FFFFFF

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x627, components 3
Category:	dropped
Size (bytes):	95291
Entropy (8bit):	7.870822762278626
Encrypted:	false
SSDEEP:	1536:sU9XreGrGUCDuw+B0pGqQ2TYXqso4KAL0tp9XYmXO6GJJUtWcX:nXzPR0jQA2o4fwtpW3JM9
MD5:	18EB35CD7E8444BE9EDBE92BD174698D
SHA1:	97A2AF7CBEFA498E162CC4708467176409A1E949
SHA-256:	50EE88E5427BB76B5036F281E7CF465B19C18DFDD797830DADFDA05AD5314BD3
SHA-512:	6B771253B4F00F119CE5726A3943CBBFED97CDA3DEF3F9EB097CCD80CD6386F2D2D975D9B41F315EF3507189C9353B03C4BCC6E04FC5FF1621674B07502D8063
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////......s.............................................E......................!..1A"Qaq....2....B....R.#br....3..$C..4s.S..........................................................?...d.P...@e.@.@PD...2.........A.@P\.........9 ...g..W.P.;..Z....r.H.U..^.1..u..N...v.....N.... ....h....dAR.........A!.....A.@a.A....J.4.k..e..@P...A.D..A.D..A.D..A.B.,.@..@...w...P..X.. ........H'..yH....$......O.....r.. t 9.T... Z.Q......7.... .j......AA.@......r.B...V.Q...nAB...J...IARPT...@...qA....~A..UC..7A...\..@}..u.....@.P..AA..A.Z.3q<.u.P3"..Y@.@P.PT...P{.@%......^...%..@PD.( ..T......$ .PL..j.("......A.VPIA%....\..t..eI@Z..A!.@... C..yH.R..:... .b....B..........A2..PHA!....D.j..g..j.B... ..B..$ .... .".. .".. . EJ(.h.....R.."...:..:..:..:.h N".i.y.]a...T....n.`.9AR.J........ ..jK.K~.4 .,....(.@..kP41.j6.gxA\.!j...."... wAL....(PP...

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	5.150933022197709
Encrypted:	false
SSDEEP:	3:Oxo9koPr4uxICkuWthbRmEtKG0YnKvVNKNdVSk:OO9koPr9kuqa2KGnnuKNn
MD5:	84196CBCAA3387FA37B7B0F4825C16C7
SHA1:	3B916AE6486357DF475F1E88F06C5FFA0D61146B
SHA-256:	00C028440233F3ACA9E6421BCD52606B3F12647548B5DD8EFA28B06579251B9C
SHA-512:	53A715D94858504B59CDBCF01269E1D568DD2F025596EDF934FCA17726AE80B69FCB6DEB3228922CA1048830902C97653E2CCE71F9F30B5176EF55B71321CCFB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQnMeDbNYULggRIFDWl5tVoSBQ3DEv68EgUNHdzPXhIFDVNaR8USEAkBd6m9shO6bhIFDWl5tVoSHgk75lPDJIHN3hIFDcMS_rwSBQ0d3M9eEgUNU1pHxQ==?alt=proto
Preview:	CiQKBw1pebVaGgAKBw3DEv68GgAKBw0d3M9eGgAKBw1TWkfFGgAKCQoHDWl5tVoaAAobCgcNwxL+vBoACgcNHdzPXhoACgcNU1pHxRoA

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	98928
Entropy (8bit):	7.9314519754503765
Encrypted:	false
SSDEEP:	3072:9YFlXX1mlmBD62X9znsG/lnZUu4u1R9MG:9OXcIBNX9Iknj4GH9
MD5:	2F9385045CD3F03E8720DB8EC38A53F3
SHA1:	0B982DAE9C519A7443E5EAB82C81CC312F15785C
SHA-256:	2F7E11AC92F868B68DA62130A1C12591FC8F3D95E587070E912B08951BFE9800
SHA-512:	D82BD73ED2260134AC6F25FB144B6E36A299B9965FD539C95466B9A8ED045873154651192BA8DB57C9E493CB5B4DE72B8BFA13491F68C88B6F458959C8829EC2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3301803488142544470/14763004658117789537
Preview:	......JFIF............................................$....& 0/&.0 . 06&(00>>> .8I70H0120.........../ . /00000//0000000000000/000000/000000100000001/0001;......t............................................S......................!.1.AQ.."aq.2..BR......#S..3Tbr......CU.....$Dst.4c..5%d..................................1......................!..1QAa."2Rq..#B......34.............?...."..(..(....(....(....(....(..@P...@P...@P...@P....(..4.h..@.....(......&......@.....(..h..&..........4..@P...4..@P...@P.......T..5A@T...@M.4.....P..&...h..).(..s@M.P.....4.....T.@M...4.h..(..&.....4.h.....).s@......h..(..sP..PP...P...@P...@P...@U.@......(..(....&...h..(..h..(..(....(.....h.......@M.4..@P......4Q4A@P....@M.4...@..&...h.h....&.. .&...h..S@.M.@P.@P....@P.@M.4...@M.4...@M.4...@M.4...@M.4...@M.4...@M.4...@P.@M.4..4...@M.4...@P....@M.4...@M.@P:(.(....(.....(..h..&....@P...@P...4.....@P...@P.@M.4.....@M.4..@P...@P...@P.@P9.S@..M...4Q4..)M.4...@M.@P....@P.@.....(...(..h..&.(....*....(. .&...j.4..

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5064), with no line terminators
Category:	downloaded
Size (bytes):	5064
Entropy (8bit):	4.893189910695674
Encrypted:	false
SSDEEP:	96:57osUc17WlOajf4mYC8DdLdTJk93ik8oLrWrzrsrT0:571eYC8ZLz
MD5:	216D791E61641ACE57D8D11A12BDE01E
SHA1:	28BDE6D98D1C689A712EFE037A9592E9FA103B09
SHA-256:	029DEDF319BC4536D9C663AE9C0B10C95D1E9F5DD1DE0AA73172E9E89AE254CC
SHA-512:	CD31993E3719A13C971386CBCA73AE88CB95E0833F2E8D9CD8FF9E0D070CEE43589A4DC34FD973A9E2001AEEEB0EA9CF44E96B7536F85F2A31A47F33E6C9FAC8
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/wp/plugins/cookie-notice/tags/2.4.13/css/front.min.css
Preview:	#cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto;z-index:100000;letter-spacing:0;line-height:20px;left:0}#cookie-notice,#cookie-notice *{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#cookie-notice.cn-animated{-webkit-animation-duration:.5s!important;animation-duration:.5s!important;-webkit-animation-fill-mode:both;animation-fill-mode:both}#cookie-notice.cn-animated.cn-effect-none{-webkit-animation-duration:1ms!important;animation-duration:1ms!important}#cookie-notice .cookie-notice-container,#cookie-notice .cookie-revoke-container{display:block}#cookie-notice.cookie-notice-hidden .cookie-notice-container,#cookie-notice.cookie-revoke-hidden .cookie-revoke-container{display:none}.cn-position-top{top:0}.cn-position-bottom{bottom:0}.cookie-notice-contai

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.090012084439345
Encrypted:	false
SSDEEP:	3:INhtq4btxbKBf+BiAIFRNVC3h0i7GeYHoIp//uxbKBf+BiAIFRNVC3AYZtXL1h8T:otqWtxbQLZVVi7GeqlcbQLZVZYZ7qT
MD5:	938464F4A51E80A29886967E2DD10247
SHA1:	6CA208768620D334DC104B093C6B816BEFD75CAD
SHA-256:	E5E1650378525B31C2E2805A4CF471C306C690A4F01466044490D53753E83BBF
SHA-512:	D432657412D9A0D75171CFC35F9F3A1DF6383406D76BF299A1EC230E859C2DDA71BF452129956E66538CB652732ED4F8E47BA363691F18C77D61A7442391C30C
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 386
Category:	downloaded
Size (bytes):	249
Entropy (8bit):	7.0841858676720335
Encrypted:	false
SSDEEP:	6:Xt7SUMJFr2Gp/mI9lFytm4+cEDNEM7bmcaZYobZnaMFsVk/:X4UaNz/mIjcMcEh/7aJYYaUCk/
MD5:	8070D369E1DBF55B57BF7760F2F99AAE
SHA1:	F352FB396B1036D7FC6275EAE4B5624A93D4813B
SHA-256:	7FC5BC5E91B6480C50187EB27D17C8B00944E1E7DFA3B6BDB6D2C66CBA3F9400
SHA-512:	A4AC4207B715AC3C5D98E043F47A2D5F551B7C84E28AAAB775879B078B232C86BEFD19364D4D12AC8499DD71112E62B7609461FC27F0ADCAFF6ABFA84AA06482
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/genesis/lib/js/skip-links.min.js
Preview:	..........u..j.0.@.%.#....`.e=..>aC...4.K,..M.}xkY/.I...R......v.0:..!/y......>.u..{$n.....F....b.<.E%k..Q^R.#.U[ob.T...c...>...-......O.^..pD..C..f.3. _.N1...V1...GY...m..Y.V...........'..n.H...#.~.E..6.P.y...rQ..b.3.."..,.....dT....

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=2AGeIjQlUEOPwEHomUdE7g&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2724)
Category:	downloaded
Size (bytes):	60822
Entropy (8bit):	5.529935697473053
Encrypted:	false
SSDEEP:	1536:/d5r+rr9TSSWsgwk6ZvEFnr93WJX4mY37O:b+rrsMg6vEz3y9T
MD5:	3FF2E894490785A3060E67FEDB0B1C1A
SHA1:	F972927B5BC5FD3D9C265BF7B494EC47C4C90EFF
SHA-256:	3DF5746A25AB4DC32517DF57DECA8ECC5C425A2ABD15C6D6F5FC817472E4D632
SHA-512:	62951FE690537FA1C273FAB5CC2EA04D6AE695A4115FC09E01BEE9B5033E59747E8CB9B5F28B59F2B63794A62DF7D8442EBA88BF5275FAE508E0F6167E547D95
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/impl_v99.js
Preview:	(function(){var ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},q=da(this),r=function(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRndEC44ZGVhEOFo7-wPeJLUuKApy9O0c21KgE_ao33A_V6pNEosSbBB0AwicewbcVdhV2RJPwYhdEY6nwq7Vy90LctSvYjTJk1PudnvsNmLoMKXVQymj2UOfX6yGmajQADCSxXfAH960AIknXKAXlXbJk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA&google_hm=eS1iLk5QRDRsRTJwRlNUdjhZdllmTnFQOU5JSV9pdTh0RH5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	67012
Entropy (8bit):	7.966962826214043
Encrypted:	false
SSDEEP:	768:4YyHH7MSMFELmdvBC8HY9miGBGALgxTu+Q/izyFbHjUPa6ppRU0h8npZG0SLXwgE:4cS01BJSO+aCyN4JbkHG0Owg8cQPiM+I
MD5:	30211A0E1FBA101EAD9C0DAE457D8D9D
SHA1:	488BF84361E4954FFCB7D763EE326F70074EB063
SHA-256:	D634A4045EDFC6C10BEFC3D21E763B42A69EA92EFECECB0CAC6220BBF8AF8914
SHA-512:	7E642EE17C9D673068F583AB18307384B99A8DDB39EC2B81F26A1F08D7C94B414857D2AFC601146AD3B9A9C6F69975B909A139586AB84E895E69A8BA511DF4A2
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/772535680019461723
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70738
Entropy (8bit):	6.0324676544050595
Encrypted:	false
SSDEEP:	1536:0Ian4EQfbV5ZrcxROplbfUW8xIMpVvEIc:MQtrhEW8LM
MD5:	AF12263BAF0606F68CA223BC6D82BE8C
SHA1:	BD75EFDC8F8522BB0B76814B734175B627CA2059
SHA-256:	0D1BDD54B903171DA1323BA8FEB63685FC31A1DF9A583AFCFA45570FCA2707F5
SHA-512:	B0DC4223DEDDAF6B140CB27DA355271B60F92FE07A6C258E571EE2047158140FADE16E2F420CC45BFBEF6D92394B972E7CB3C811F091B91804FF7F5BA47816DB
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378038567;dc_ver=99.292;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1974493702;ord=yuhjdd;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCVHmZKjKlZfzlB_SextYP34a2iAXPzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_Q3BZ6hx1PJCUg3GpkGt-C9RqqzNj6uMdvPLsMSq2JmjFQpJc7mqgceGgxOeY5MsBrG2xNANrP3xJ5DjaHAT3oHCtw0OaVqvxYVJHmQW_nsBaqMXO8fnH5rYxqHMSUDOvCOnTw6jtd64UouL7ZsTO2KIeVBAqJqpXlnjcTZzZFVmUDj6y7wLtQRYY5-EdY-VS__w4cF_25MXvkYNsVMwvIsmbq1nhqV6KOyNbfCpi7b9b35alWn9hVaBbu9z0Wm6rF7znFUBKCt0E4QArFvbLZyQRYbVVF2Shr2kfE6f5ysqyA65Aw48AEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPbszIW_34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxDgopbYroOz1pwBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI_KLNhb_fgwMVdI_RBB1fgw1REAEYASAAEgKHoPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKlGAE%26sig%3DAOD64_0ad0bt9QwfP2EILrFN3Rw5skWKKg%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=1,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=C-l3qWwv;cmpl=8;gcsr=a;stc=1;asnm=1;sttr=39;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_246159989"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_LTKlZbjaJaO3oPMPrqO-2Aw"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("object

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFRQU9zbnpVTlFCZA==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRtKbMdrq9XgH6tlmWc5eawPgrzguh_C-RH2QZodKiKq5Qb4yaUnfchmynLT8HYVXXuW3BJ07AsN5C5ehdsgfDLgui21ryKPwI
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 125x125, components 3
Category:	downloaded
Size (bytes):	6435
Entropy (8bit):	7.931509857208459
Encrypted:	false
SSDEEP:	192:uv8IVoOrcEHSyloCOZOUjsoyvhhV0zw/FJZ3nsLWDm6Dc3:uUI9BOZvwRJhV0zmVGWDm6Q3
MD5:	C92474A85202C5482C846778649A4A30
SHA1:	7F84E5A9EA1FE0C9A0B5B34B8813FB165DBBCB6C
SHA-256:	65C48E2F5086A8076CFB277EF46F693B6AFE76F7909FA53F5926C589F5531FEC
SHA-512:	3B0018306309C8BEC4E1E0B73A2E6F3A68410A40E0BC900AD5E1C982D63226BF0D5478E89D9D196EDED19F6983D08CA0F87F0478ED855D84F73BA94C4C6FAC28
Malicious:	false
Reputation:	low
URL:	https://2.gravatar.com/avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................}.}.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..5T.z.....N....).7 ...NU.lS..9....d.q.c6.ZP.R.X.s.P;...\|m..j.\jz..p..+...=...wF.....)v....`.!M;U.......].Z.l.u*.LP...T.i.z......M......S.z..E.....j]........t"..}.... ~5.....(W{.......m....O.8.Zw....{.(os._..ub..R..Uc..)..de.g..e/.rO.:g....y>..#.....9......}..}".)..p.X.Pr9.z\|.....+._....D...#...e#c

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTHuv3Gb-mHtSeYaCb0U4tcEmwp6oYY3ZY5w7thL3IhoTHX6RMVrq6B6j9i-Ad-0leNseCbJx6xrqF9PKjZrOVReYbJ9ywp2HJP
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://ag.innovid.com/trk?tid=11711&google_gid=CAESEG1r7n0k6n9VMjo8-C80kIE&google_cver=1&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmRx9fT50cXuGaFpq8-K6rMJYT5BO1Y-dFW2Z7vh-IUo3bYI8knlDk3kqAYsvdoaJgI_L_7p1VsqJpHL0DBFrhB_O-yuWu_nAcA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=acuity&google_hm=877145267063&us_privacy=1---
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3440
Entropy (8bit):	5.4388679655747065
Encrypted:	false
SSDEEP:	96:AOOglwOOgZFZOhOOgMOOghVc+odOOgSZNAOOClwOOCZFZOhOOCMOOChVc+odOOCk:Nl9QupttSflDQ8PtzST
MD5:	721E9D38C58A9F9F832B6B3CD01243C3
SHA1:	17FEAC566DF3ED37BDED4B8A84B2DE0B280BC2B0
SHA-256:	2B502160761371191DEA3D9C2CE9E81549903AA5D37429E817D9679AD8F1798E
SHA-512:	AD34B809FB42879257445DB7F91796F56569B69657FDB8BCA10AF77280CE060B3986A335E146F563E3C2800B13A87E14436092B95392A5B70C7C775D37B0F872
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Montserrat:700,500"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 500;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 500;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ vietnamese /.@font-face {. font-family: 'Montserrat';. font-style: normal;. font-weight: 500;. src: url(https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;.}./ latin-ext */.@font-face {. font-f

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 628, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	90067
Entropy (8bit):	7.974398087977511
Encrypted:	false
SSDEEP:	1536:uKyozeNsOPIsJZRRZtsdd9ZJu9fl7a4mbRwA+lSkvc/7CWkK2JaJmt+:lznOQsjBSdRJu9fU4mteMT/3JRmg
MD5:	75CD3E01BAAAE3DFBD05DE2D5FE3F15F
SHA1:	C270BB992982D622B74EEC64245F0E685CBB719F
SHA-256:	5D6A02A049BC7EA346742D45393CF935C05BE21F182AB21C8E6B1687E3C44B31
SHA-512:	6195A173B2B6FC537CB778F9AC63F8FE0AF0352E32DB739BC29493094D5A549D85AA1532EAB06234E2DFFDD52C546B09E18C9A3EED07916D252FA8A6974278C2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/5096939622281030695/14763004658117789537
Preview:	.PNG........IHDR.......t.....5Ve....PLTEI-~.%d.........x..w.......6.w.....+.p...Z....................'.......+..F...].\|.,...F..].\|.i....ze..,aI..f...............\|.U;.....N..6.)q.s.mW..X..D..O.p....h../m..........q...q.:w.<S-\|.9.zt.oK.-a.'kiIo.OVr+x....._.[.....b..t..5.yV.(n..fr...8.g..qA.......<<...Ly..s.%.f`_@t.L....`PsRj.T...f.....B.B....D@UV.>...o:..Q.@\.r.....B....\e....@..Q.Nv....7.eN7B.. V.cF.Y...$.;mo~y%Y.l.~ ...DU..6....8#a...Y....=.mHWw...X.qviYz.^r...v.....^i..Qo..n....Z<...g..ezh.;r...Y.]......../.........SM.....l..Md....6....r>..cqG....z..n.0o..^cR..c.YV].n...t.g...lofxA.m.....).....cj.QAnx W.gK...!v.X!\^...qW.k>@.u..#..\...=G<\rsUP....\.Be......v=g.IE.\|v....<g..G'5c.r&... .IDATx..wT.....6.c.. ..c!.Je....".AE4z....z..P.. ..$.@..x.......D<...Y...v&'.:.<w...5....z.../~...>.{...k%..U.u....=.W.i3..5...9..-....k....z..J.f....k+gC]]..?...ZU...H...S.N..3..Y..2N.x.t...U..qL:W...W_].i.C.l.....P.Fwd.....L[

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvK6atsDxTAKVolSWuIQW2qPy7QKtDhN8bvUXg3Qc2nmUv2PqQ-wqKcObybG4lhff-bkk9h0v_BJ5KlS3LmSr6z7amGV4OOc_kqiDf2bZtMsqTsK7eV__7bRpy3cKTFXb4iuvuATjLZTAXdHu-CLNQkvksqkqke5KhsXDp1CQIdMKwXT03K7nY&sai=AMfl-YSX19GBOqnedHi5k1TRifkmifliFYFasGhjO8Uc7ISjg_Dw5r9W09gplTPPlP82n_yELqTgy7yTjBcZvy-xpIwwHD8fl-fB9AdX-3Fe_thc2gbxf_aOap-uzxs&sig=Cg0ArKJSzNcYqM-SmZqhEAE&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5GAE&id=lidar2&mcvt=1008&p=0,0,280,1200&mtos=0,0,0,1008,1008&tos=0,0,0,1008,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=0.32&if=1&vu=1&app=0&itpl=22&adk=3088186576&rs=2&la=1&cr=0&vs=4&r=v&rst=1705325067011&rpt=2143&met=mue&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 43212, version 1.0
Category:	downloaded
Size (bytes):	43212
Entropy (8bit):	7.994563495640996
Encrypted:	true
SSDEEP:	768:h3oJ8YvMowqzhLKzrzlLnowbJf2q4SpFfKQ9DWYNMdz1cEC7IEJTjfbag1iR:1oRvTwqzBiKwbJSSnN+c77IEJv+se
MD5:	7A373A43F71D0FAD2CD02B5A3E91E7B7
SHA1:	BEBFC4CF365B6B2EA96EF20AAC8EFB6A8199E120
SHA-256:	9D3959DF4EBD84904A1622B6D7C9728F487E0C4D372F9BC2F59D0C480702F9C5
SHA-512:	F30D8E239840AC7EB653DB8BAD7ED4037FED3D1EFE0F2A123CD20F154C332B2723B8AA1BB3C26E20DA7099ABAFF2B3D508BF2DF6E972952361D87778F975E905
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/notoserif/v23/ga6daw1J5X9T9RW6j9bNVls-hfgvz8JcMofYTYf6D30.woff2
Preview:	wOF2..............U....W.................................?HVAR.P.`?STAT.N'...4/l...........4.0..\.6.$..d. ..R..6..[.Aq@....5.6...&........y...IB.(`..q;$.l..f...%.14..m.QA....8....2. ...=.......F...a...ti.nv......!....v.K..?"o{ .B..u..I..../JU..J.CW..rQ....t...]\|.\|...k6..v..Y>..F...w.w....1..1..I.3L....}i7.g?./.G...-9EU........l.a..a=4.'.?...k.[qu.....y..O...%#.......^xQ.....y."^q..V3LR..T.K-.r.r\J..T?...f.....m...X.-.U....1.%....1............^.+.uV#.-.8...~......Rs..#S.E.S..JACqVeUVf.CSu...d[6/.sc_...v/._.\.....c.,..........7...Z!..ys....!.".C(....T..owo[..G<...T.;b...8.....o._.Q.M.I.4I...f.~.~]....)......29....?...8q.-i....u.'..6.!...$.................._.vlE&1.f4.2.9...UW..MC.............e..0/....mQ..f...0X...........S-.{W....O..D......$c.'.K....\.P.......iy(3..,.'..&..:.d..q7M..........6.,....r2..._\:D.F..I.....D....... $..<...V.\|..x@{.&...U...{,%......hYm\|.....Z........W9...7.. .....^....%3..x.M.{..W...D..$Tt.._:...RzX...8...t.g..'..:1!...JO.Q6%.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-BPfgmvsz0RTYEg53KGKBJdYhPZ2T27uB3yI6oEHaivHABRYWoQ-VKWrcUwJVtm-u7xQZCPFQGj3VoajnvNBuXAGqmsH3XWTu0xysYv38zFSOrNqJg
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=265092338&col=29305905,5876516,358438444,549485209,207486733"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	4.741534528953829
Encrypted:	false
SSDEEP:	3:zMS1Rc/P0+D4Qy88HpRBEBc2LGRFlekK8MxPtxNeGffDqiML4QYZf:gMKF4Q18HpULeet7eGXuvL4NZf
MD5:	5EF26B5E47E6951F43ECF2B1FC645222
SHA1:	081AFB52577F6F3BB044FDEA6D34A632C3CCE7E8
SHA-256:	50679E0E3933C945348A2DB0CC128BB14B57A60A74FABF8CAE13ACC14EFBB2E1
SHA-512:	A0876397327A5C6B4BCA75605FA97ED7243AD78D9FD285F8A55AD2525E1070FDB197D1AE0687B3FB603946BF6DFB567EB3BE3A636FB9FCA6E36D03055CE7794C
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/add-to-any/addtoany.min.js
Preview:	"function"==typeof jQuery&&jQuery(document).ready(function(a){a("body").on("post-load",function(){window.a2a&&a2a.init_all()})});

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 33092, version 1.0
Category:	downloaded
Size (bytes):	33092
Entropy (8bit):	7.993894754675653
Encrypted:	true
SSDEEP:	768:c+2lFKscxQAuDJ5m/xiYEQNMJjFaf0TteqKt:cZlhcxJuDa/xiMMJhaItzKt
MD5:	057478083C1D55EA0C2182B24F6DD72F
SHA1:	CAF557CD276A76992084EFC4C8857B66791A6B7F
SHA-256:	BB2F90081933C0F2475883CA2C5CFEE94E96D7314A09433FFFC42E37F4CFFD3B
SHA-512:	98FF4416DB333E5A5A8F8F299C393DD1A50F574A2C1C601A0724A8EA7FB652F6EC0BA2267390327185EBEA55F5C5049AB486D88B4C5FC1585A6A975238507A15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
Preview:	wOF2.......D......6...............................a......Z?HVAR...`?STAT.8'2..F/~.....\|.M....0....6.$.... ..x..<..[.%Q.i.<.N..t.Yx..5.A...\|..g#l....5.....D.Bt.......l.Y].)..(..H.s..V..ruM....[.....I.0h.v.Hc.R..]....`$.I)G.+.}....E%.H..\|..%nEE.....+.x..7\|........[..V....[.......0...CA.._....)2.$.....s_fw....+.V.H.B.<?.?..mloc..1.Q....a.r#...)......\|.F>..../6-.......t......>......tO.:f@b....u.I(.Bc..b....7.?A.....vE.}...kb]W7.h..$@......T1t.8.._?...~..,..I..."Y...1..s.V........R.Bf2..I....s.........u.P.&..D./"2qf....p.sv..)b5.yR.$MR3.@.E../>{w.....f...cN...2.v.....]>..Ow...9/!v...r..1.4.n.w...T......=...hRH!.....2`...u..82L...S.v.ik^.V.....@..N....d{..{...NN"'.H...H$..H.<..{?..x.....zv.}.~.N)4.g...X.....8\|}...e,%.:..;.Q..88...@..=UVHe....g..zD?..U...~.J...oMoP..6B"Y.{BN...vY<.o..r.7.7j%.Z%.'...]...........YK...,.a-;.M....>\.......%'+8Z.1K.y...9.(;.5 ..M..L.(..9...T)........hx..i2Y...m..{ulY...d......")^.,.n.~..r..S.o.$.....6=.i...N.....q0 ....

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmSXuAXQ02yhFRcDGwMMSAmvwiBMi_7MfOumNkm2KiEcZB4iwbpR7tMo9ispAVU61bb2jggHKu5HPL1HOdRHDTdSIG7RGOSV9Q&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appier&google_hm=RU0yb2pWemlCbWlTeDBpUzlqR2xaUQ%3D%3D&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 8047
Category:	downloaded
Size (bytes):	1667
Entropy (8bit):	7.870325153892479
Encrypted:	false
SSDEEP:	48:XH+0rcwlOFDUkosyMesb8czE2+LUWiClBY:X+acwQosYsb91ubU
MD5:	A024DFEC14B0DD4802399EA26DE54F5F
SHA1:	51D43D8FB7D6B7BBD1F640236AC9E29DD0E5E123
SHA-256:	39B6DED7EFAB29546A0EBF462C2D5C655840B6C86F14E4F9A630FD11C7A1CE71
SHA-512:	249CC31D0AFBD0AFE908D8A543981861B8100240AAD7963607662ADBE7731C610B43668C41692CE4522DFDD893EF5464F9418D843F4540928095C79417991B5F
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/magazine-pro/lib/gutenberg/front-end.css
Preview:	...........X.o.6.....D..q.:...[;...a[...6..t..R$KRq."..@R...m.....w..]....7./........_.F..Fmp,..n.....:%....k......#B.T>.FO=w.,3FT...]..QK.;....g<../_.........j.h.&JH...qa...3=...U.`..j....A:...D-).P0.!E.$...!.....@.......<~..re...U..Z.-.?...x...&.K...et"I.P....F>....T...#.+...%R~E(@..D..sr.\...p<.,......".pl....b1...u.@,.1T..e<..(...{......J<x...p1.."=,.E'mMp.W...Fz.L. ...X;.UM..>.]....]...9......?.yf...b.1X...^l.uo.,..{......;...We.6+.,..f..!.W..c..[k.@.S....U.0..4.d.{..ibV[.7\|...%&,>C8...5.DS......9.5....G.!w...a`M.....b4..."I..\.)....%Y.6.JF.`....n...z..w.8.w....Ve......J..l.t..8"<AgU..\|.[p/)h..gn....).:..h.....X.,t\..p.\|....^]...g..s.i.,.l.....R...q5.:..iB.dd.!.3.m...{.q.J.N.[.~.9..y...+.....j...o4...}).[Wx.2T...b.......]W.m.p.M..m.T...z.O.HB3.!....-...RPn@.r..$.l..7...5..@.p.5(j.mml.E...7.F...B......m..W....`..2s...&..DQ.h..^%M...l.`.)#..]Z.k#....EflSt.=..$Q.M.,S...`4Aq..{>....4\|e5\...6:.m#..t.}g.C.n[<.,.O.0.]B..t.....@2c.!.)...

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6607), with no line terminators
Category:	downloaded
Size (bytes):	6607
Entropy (8bit):	5.020780697171515
Encrypted:	false
SSDEEP:	192:DRcpPh51vRAANNaqDHqpVSTmtqlr4YNkS:DRczPoxG+q8YNP
MD5:	9A4F28A615173DF36CB84BE2B345816E
SHA1:	F709263841708D9E40268F24A0072FF4FE811B35
SHA-256:	6974BFD8FA06B7831F05CB4B25860C851A5AD3F02A6699EBE688987DD7A6EBE6
SHA-512:	2685373F6522C039F17123683DBC4A2D6EAF572BCA72B6019B7FCC9B15B2AA295CACAB19B99A1161CC3E317D6BDFC3BDC2BFFBFC87D9EA9086DA58A013849910
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js
Preview:	var runtime=function(t){"use strict";var r,e=Object.prototype,n=e.hasOwnProperty,o=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStringTag\|\|"@@toStringTag";function u(t,r,e){return Object.defineProperty(t,r,{value:e,enumerable:!0,configurable:!0,writable:!0}),t[r]}try{u({},"")}catch(e){u=function(t,r,e){return t[r]=e}}function h(t,e,n,i){var a,c,u,h;e=e&&e.prototype instanceof v?e:v,e=Object.create(e.prototype),i=new O(i\|\|[]);return o(e,"_invoke",{value:(a=t,c=n,u=i,h=f,function(t,e){if(h===p)throw new Error("Generator is already running");if(h===y){if("throw"===t)throw e;return G()}for(u.method=t,u.arg=e;;){var n=u.delegate;if(n&&(n=function t(e,n){var o=n.method,i=e.iterator[o];return i===r?(n.delegate=null,"throw"===o&&e.iterator.return&&(n.method="return",n.arg=r,t(e,n),"throw"===n.method)\|\|"return"!==o&&(n.method="throw",n.arg=new TypeError("The iterator does not prov

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 960x300, components 3
Category:	dropped
Size (bytes):	21422
Entropy (8bit):	7.676642561635676
Encrypted:	false
SSDEEP:	384:QRFdbCzQLeve3LCqQJIm8NxE/b7j1o3MafkF9VFEnfYJle7m+pXKU0ppV:AdbC8LevGf6Im8NyD7IdkjVFEngle7mb
MD5:	71B051E13C9642EFECBA43A061DBACC7
SHA1:	9F4157455C9BA102F16308690C2B6320D25EF0CF
SHA-256:	4D6EC21F10BA9CD0991DCDD78D9BD58D8353CBE7B579CF15969FF67D63BB1DB7
SHA-512:	3B7A720DF24B26151FAC591BA3595F42AFC94670CAC6E2727603C5F95A29F2E595BD03797F1B941D3F80F5233DBEFD935E763B287A8E870CEC9804131DAFF26E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*.............................J...........R.(...........i.........Z.......H.......H.............................Y...........:.......bhttp://ns.adobe.com/xap/1.0/.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.............................................................................................................................................,...."........................................N..........................!1..AQ."aq2R..#B.br.....$3Cc...Ss..%4...&56Duv....................................5.......................!..1A.Qaq."..2B..Rb.......#.............?.....................lL......^..O....0.../....?O..&h....e]7.......-..x..wv{K.....xE..................................

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA&google_hm=eS1hT0RVTjZSRTJwRjIxTWdOMDNzMjI0Q3NXN19QaWxaNn5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2718)
Category:	downloaded
Size (bytes):	23840
Entropy (8bit):	5.499330723371192
Encrypted:	false
SSDEEP:	384:ZCRT3Adsd88StEj8wTdbZNaTeGS+NvaQV7RrBeDHMDSB1d27RrHcH/zy4nlDWyv1:ZCRT3AmdxStEj/dbZNaiz+NvaQV7TPDs
MD5:	C2479366DBD9D018908EA8733B281489
SHA1:	7BAF69F5AB3F98B4C25E1160D4D92D31E3B1DF66
SHA-256:	428F4D59E61CDF9887AD4CD7C4592A24B214D2D9C0BA09DB01C4CFDE66A3CD11
SHA-512:	A0A4C790ED38E3801BB67431F999C231C8CC619780D5E4B9236677069F7C2E122E0FF133B28690CE38AE42658B3C3C931F310635536E81FA11A6351B441EDD75
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a){return a};var ca=aa(610401301,!1),da=aa(572417392,!0);var n;const ea=m.navigator;n=ea?ea.userAgentData\|\|null:null;function fa(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function t(){return ca?!!n&&0<n.brands.length:!1}function ia(){return t()?fa("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(t()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(t()?0:q("Coast"))\|\|(t()?0:q("Opera"))\|\|(t()?0:q("Edge"))\|\|(t()?fa("Microsoft Edge"):q("Edg/"))\|\|t()&&fa("

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3963)
Category:	downloaded
Size (bytes):	151878
Entropy (8bit):	5.59720012711584
Encrypted:	false
SSDEEP:	3072:hUrpPxMlOtoAURP8G8aeWkgvM0568JDJPQAnBJD75PDD7l6qGfwL3bptvk0RB438:hepPxIOtoAURP8G8aeWhvD568JDJPDn9
MD5:	3107392499F4522C9D0EEAD61198817A
SHA1:	AD680A8C8D4FE57A2B95B28160BF3B6256A532A3
SHA-256:	732267041D6D85B0761B7A674316AEEC89F02F67627614946F0652B4D9703691
SHA-512:	C82CD39E03D408E3D796B42B864B1E9BEDF0FE5C8623FEFE19D24F87A263BAA639683D3232989F42AF62740DA361CC9B91448DFEE74D2ABC01879D4DBF1A84B9
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6163292317333011&host=ca-host-pub-2644536267352236
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return null!=a?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,arg

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI8eXn8L7fgwMVOi6zAB2_HA6yEAEYACCzm49j;dc_eps=AHas8cDjTgMsODAHF3k93xLgW20u1mFN_-ro3Nkd2_JR1k586NBURXu0nNh4mzTu7V4HyeP456aR0XIniA;met=1;&timestamp=1705325077326;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	104313
Entropy (8bit):	7.9521964072962374
Encrypted:	false
SSDEEP:	3072:SnJMfTxvE8tgaxFH3QKwVILxlx5buhTV6XI2/Y:0UHearH3pwAxlxULgQ
MD5:	4A45DF8C21CA24A5A37F1F3CAF5A6BE5
SHA1:	1F92D6D679137D24AA55C63BBAB0D26AD0AEBD40
SHA-256:	2865842A3CAB09268EE6CAE3AB17814FAB5F19C04B5DD0248261F83A33AB0588
SHA-512:	B546F729C26B14887637D9947FA41F8D5DDE5846EC5C7DE4364A447F0C2A63178B175C0572FA9039480530E96F27F2B1BA63BBA800A543702F34A3708F8A5DFE
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................%$....&+0/& 0 . 061000>>> .8I70H0120.........../ . /000000000000//000000/000000000000000010100/00//1/......t.............................................U........................!1"AQ..2aq....BR......#Sbr...3...CTU...Ds...$%4ct...E&5...d...............................4.......................Q..!1.Aa"2R.q.B...C...3b..#............?....".......&....S@M.4..:.4...@P......@P...4...@M.4...@M.4.....@P........@U..4..@M@...@M.E...D.QD.QD...@....M.4..P.T.@M.@P...@P...@P...@P...@P...@P...@P....t...(........@P...@P...@P...B..t..@P...@P....(..@...@...@P.@M.4.....4..@P...@P.@.....(....(....(....(....(....(....(....(..@P...@P...4..@M.4..J..@P....(....(....(....(...M..(....(....S@M.4...@M.4...@M.4K.E.@M.4...@M.4...@M.4...@M.4...@M.4..,M.M.4...D.4Q4...@M.4...@M...D..@M.@.....(....t.......(....(...M.4...@M.4...@M.D...@P...D..@M.4...@M.4...@M.4...@M..(..h....X..&...bhX...&.bhYP.4,M.M.4...@P...P...@P...@P...(....*..(....(..h.....@P...@Q..P...@P...

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmRP7oEenP2bLB8uL4-ej4aZ-pQp8DKIdq5hUie18zO8-2ShzV6AB5zinpnjToCYEM5jTXoe5iIDV0GzxJDTK8pyRDAerNtrYBnK&google_hm=82nPL-gDAe41xcnm3Ha0dg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1228
Category:	downloaded
Size (bytes):	438
Entropy (8bit):	7.490521386164622
Encrypted:	false
SSDEEP:	6:XtMAR71JkVifFDw8u9MgDqv7rwcYY4PXI0wfP8RCoG2mbTDtSDz10nWUqQOop5J:Xe671DwbCLTgPYRokDiQzqQO6J
MD5:	83713A932975413AB12AA62243F18C66
SHA1:	9D98F05F10E6066AC915D6DD724EE4E7B64245A6
SHA-256:	795882E9F27E2668574B8A10CAFE9DC785426EAE645520C38EB896A4D23CD074
SHA-512:	AC237D1DD4515D1D868588E08027BDAF843E6B242E1C0486C0A63B49906D459C8708FD0B12172B2D551774BD893EB30C66088A4E75EEE9459CFAD398EB9AA20F
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/simple-social-icons/css/style.css
Preview:	...........S.n.0.=._...U.............EAb....}..fNg..t!.#.H..] .-..h.'.N.OK&......z(.w._.7.JV.e.0.2.J.'..kb{.....+...,...^.$...'...S){....`.+....;...._.O...s.....u.2.3.E?..9..`."....6..Jy..>a.8..+......4.FE.d.0.Nr!.r...pU...^=}..-.O...~.fhaU...E.../Cn.^.K.e......c.Y...4.,(v...-.'..x..8O[.D......K..m.[_).^ .9.X.F.....D.S.[b./a.g.C.r..%=....tu...f.....F..#..Qg19g... L......B?..`...z.......JE....AM....q..j.F8....

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.558694969562842
Encrypted:	false
SSDEEP:	3:mSmLPr4uxICkY:mS4Pr9kY
MD5:	5D2458A72C3E8467CE0A2744E7CA35E1
SHA1:	E1F0ED48BBF9E3A9087067A0AC940AC39AAB0FEA
SHA-256:	AEB2C5B5D9BB1E636DDC9876B95096CAAD43BDCAF1E3945E72F1A6E8F4CFBF60
SHA-512:	E387745CA6A91E4F566E62A4BA2B15769D529B12265B7ADF878A5EB154375811F0CDF62370AFDE03FC1A6D8327C0FB4994C831110904CD6DD853C33F115B83A7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgk75lPDJIHN3hIFDcMS_rwSBQ0d3M9eEgUNU1pHxQ==?alt=proto
Preview:	ChsKBw3DEv68GgAKBw0d3M9eGgAKBw1TWkfFGgA=

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3468
Entropy (8bit):	7.9103119344745245
Encrypted:	false
SSDEEP:	96:rbCuM96aruedkdL4RcOkkqMHKXliQDSUV:rGh6ar7d/RZktYUMQB
MD5:	8CB953BF77E5B4C33E90D8D2F2661381
SHA1:	A4D1B2C309C9909AA2914D15057EEAB8F2643125
SHA-256:	C4D19428E755307951C517FD91F3FBF6C1796A0E29563BC84892359A18FDD330
SHA-512:	D8E79505C85F2D96FC4EF191B4C7B3882ED0717FBA1A254889E0DA31D0B4B0A05D78B22C18AE93049544DA501B993EC698B9E5F982B2AA6ED96731015D98E8AA
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/uploads/2018/12/mylovelybluesky-icon-a-100x100.png
Preview:	.PNG........IHDR...d...d.....G<ef....pHYs..........+.....DPLTEGpL................................................y..c..f..v..M}..,E...`...h.....h..7Y....Ba.\..c..g..m.......S~.1Ny...p.....Z..v..x..t..r..X...........n..l..h..V..p.....{.....p...........z........j..^..a..Fw....\..d..t..Z..Y..............N..V..J\|..........T..f......\..v.....Y..Iz....S.............U....g.....x...........+tRNS..:.......+%.4.2/E...G..e...g.7}.$..iQ......j....IDATh..X.W.;...\|.[.Sd._h......la.a...m...)"..)...wf..f.ok{.x.d3.d2.L.X....lmm..Lfmm-.zMH.`..$........%..."C.@....n...../.dRo.I..t+....!..."..M.\|.p,..@...ck....6..0.L.Y..Tb.....I!.....%.[?...D.G..f}...W.9G.[.....=.o.A../..M.m.D...>..C.....x...i$..uN..8'......L&...G...)Tt..j.+....*.f. .6C.$COs............./.Y/.c.P..F.o,...xb.T.JU._.......8'MT.<u....n..1J..B....s...3at_o.<.p(.......3X...".+..2.Mq...W..]b$b.i.p$e8.X.eU.Ygy......M...XB.O.N%.Y3,......w8....#.X..'...O.`; .)....$.9.J(..X.T.....>WT2..7._.......T.....=.B.N..>..o

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRQvqnsHmlzqj4-T2TITOUL1y59SmTx7B5_DRd9jArckWnxvNeYiHD6VG0_Vyisnbp0DHicKpt6UqxtzwEGhzDakpjWCs-Jow&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48208, version 1.0
Category:	downloaded
Size (bytes):	48208
Entropy (8bit):	7.9958232364340525
Encrypted:	true
SSDEEP:	768:4niiDrjlhOaQ/MCUsBD7rYJPvL8HLaJagHkij8pKoA8caCAW61V8AMdE:dArpQ/MCUsBctoHOMokiAk19ur
MD5:	C49B7C3643F781D71645C5A40A78B5BF
SHA1:	E71138026B38AFC443FB60DA5FFC2244C4F5EB11
SHA-256:	8CBC049DDBD7CA67068451CE754401833499959C4C6ED7B98F664D42E0597808
SHA-512:	B71533F82F759AD7BEC575C8FA3F4D76E78362718E56934D5D5629A906AB66BCD402E177A80D0072E816B1290EA7C091E919CF3EB8444BFEBA116437EE2EB22E
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
Preview:	wOF2.......P......................................o...l..P?HVAR...`?STAT.8'2..4....../~.....$..U..,.0..<.6.$..T. ..J.. ...[;mq...v..>.7.......e..f..P.^...]....a.. ..4...._.TD...i......p.T!..).).......}.Zm...Zq8.....]$C;9[...0...H..).....)....F.eP..G.t^..}V.Y.hO1..T&m..3.GLP&}.R..E.pC7.......Q..c.D.'....:d..$7D2D2....zu3.W. ..z......\...d.....o.[..,.....7[2&76.P.^..X.M.b.;..Atu..N.M.....b...#..K. AE.v.....P%..u.....u.:..$@... ..z5S.x9.UbN.f.:..[.$..BK.!......@h...... b..0 .....ky.k^....".C..8.......a.....3r..HBB..P..L.../.Frfx>.....!..;+e(.z...r...9\|.%..n1....Yv.\:..e..%v].....r.%v.#.-././.]"..,38$H.1.(.1..{d.dE..I.S.8.Jy.2.....p....66.....E.X".....}W...!.gw..&+2...2.Yf.p.w......8.9...IL..7.$.W..\D....@.:m.JjN...4.c=@.kUu2..0{.d...~x..=c......~n.Y..-.R!FM!.....1V`@.....K.eH...C...U.u...'{../=8Yd.M&.g.}...GI...}b.0U........&E.T4)S.....dY@...j... ..3..'.d.{._.*.Z.!:......,......\|.n.......N..a..=..A#.(.@ ..#......U.".g.;.WJ.....LP.. C...!

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	downloaded
Size (bytes):	42048
Entropy (8bit):	7.977452342361958
Encrypted:	false
SSDEEP:	768:ylyPz+4dF5ORxwB+CLUpT70nJ0UpqpBKaZ0y64LuHo2lGKdzwGDmzaR:3PzNORW+lT70nWeqpBay6quI2lGq0GD9
MD5:	A113B91926B7FEED34215978E7C53BD6
SHA1:	EE88F8356AE28A287E9810C77ABCCE6022214A32
SHA-256:	1770C55EF69B2E3797255CB896F77867E9C3D748A8CE63AB26D0350B23B6C475
SHA-512:	3AE7CDD881735EB5F46CD64367276934EDDED5BBEB75A9C01A92763A2A96963E039366E33C5E4A29B59F6324B073FC6A73B1F599D571A7D7147C21A101CC47F2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16953559709754582055/2728354180183721846?w=600&h=314&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. %%(((..-1,&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......:.X...........................................O........................!1.AQ.."aq2....#B....Rr..3Cb.....$ST....cs...D...%d.4...............................+........................!1.Q."Aa2B.q....#............?..2...G.O..Zr..MaG.<].e.y.4..L...WS..1.m..F..ev..m..D.. .ZYt.e..vg...l~......ov..=)p._.[.D.......HQ..]_...[...f.b4)......4....4....V.....r...J.r.Y..[{..Pm....p........q5]V...y.8\|!..$...s2..Ib-.c.$.'./.y.cx......\`.GK...lh.Q1k_..)...!.fUeE......<.yd./._.Y..eu..#.K{>.2.....O.>..u.4<.L3..g..(....w.$o.>Q].yL.Y.q..(.A`.x.F.!v...:Y..X]..4.!bL.B..$....27...X.f#..:iA.E9."7'.9...#..x..0..s...!d.Id.1..A.;.4.:.....A...>...z'`.R...5..4.....Gd[. !..p~.H... ...0.. ?.w.RoL.\|..Nf...5.,o...1.{I.....>....r..K..D{D.RFZ....0P...nI...p.j.v...r..J...~T..B.;..t.=.....w.....T..q.a%.RI...jgl.IE..;...-.`.@

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_hm=MjYxNjEzYTk0YmVlODlmOWMwOGI5YTY5ODUzNjE2MmM=&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x665, components 3
Category:	dropped
Size (bytes):	166603
Entropy (8bit):	7.9825334674828134
Encrypted:	false
SSDEEP:	3072:oQZCh17FTQFnny8s3HX53T5YIT2ITZFptJ1BTO0d8og98kXPecOfWt6d3ieEoWG4:Rkj7Ryny8sX1NVS0ltJv7d80shOOdjoq
MD5:	556EFC82F400A513EC6B6AE579D50E40
SHA1:	8004305B1F4E8C0239ADF350417AE96A1D9C30B7
SHA-256:	D72EF416C3BD82F81BC204CAF553D943CD069E67C0667565CF88DABF8BFC15FA
SHA-512:	EE4E72E2E668265496AED224A64FF1A7D6C35B68A175E7409923D9F5A61452207AF5FF65051DB632EB32B81B8009B2F7D078BBDEBCE36450A7082EC1CF161422
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................%....!"!..&)% ). ! ........... ... ....................................................Y........................!."1A..2QaqBR....#br.....3......CSs...$4c..Dt.....T...5du.%..e..................................7........................!1.AQ.."2aB..3Rq...#.....b.C............?....rV..I.E.R..Tf.....Q.....cJ.n.t.. .1M..\..VNf.bM.l........P].e7.1v..Xz...0.,.F....y...uV..xp.3~.e.Y...[.F.".$pe^.r.X.F.Y.{@.:.sV..3..?Je....C....3...l.rx..4kl<z......8.3...ZH3e...%.<.M............2.ad...e.....7x...A.C.#K...#....'1y.G.H.e.C.W"..f...Pz..ZHRvt..cc.;..H.J..[.c.6.....CqQ$.4....a.I.G.{.....d.t]U...R..4h.da......dl.i~-.....e...]t..gL............6#...es...z.m....f.8..H.E...h.^.Y.I...dl.e<8..Ki+E#.....q.....2.........I.3.v..R.....W\A.2.4j..U.r=....J.D.!O..c...f...Iv.V...J.9..;.Os........h.&el.E..%.v.roi.[^..sbX.....3....aE..27..e.6.F..j.E..p.V...Y

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmQA22W9PHHVcPt-rd1JHBkm5wPdjeFC36VHj7NrENCvWzsqK23YfTdLfE7PQscs5RBJiwlpVZZv5mYRzdNWY2zuuxC1KJGhYSB5Mi-RwuwAbuzn9ev5vUOliHZfVe5NbB9JwH68svzksz351ubmupyWmw&google_hm=82nPL-gDAe41xcnm3Ha0dg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4232
Entropy (8bit):	5.3923507588964394
Encrypted:	false
SSDEEP:	96:1OLNFlOLNTFZKOLNZOLNJyOLNwOLN8Vc+omOLN+1N1OgNUlOgNXFZKOgN5OgNbyn:ANFQNDN8NJXNtNGgN+rNU7N8NHNbsNWQ
MD5:	10ACF12873EC2D590F15B02AB8184F63
SHA1:	C401EB1D269B023F6AE76E50BAE6AF541962AFF8
SHA-256:	F8238CDD1CC6032F1C34CF7E559B55A936097F78CC8839628E5CC39A6FC3F390
SHA-512:	76D4A9E5E1A1F782E2D29C9CF0563EC3A01190347855BB38E0BD96B497B6A040B585673A3B3FC88DA4A05C3078B3F3E27247EDF55A357581478882FCD6289362
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A400%2C500
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2) format('woff2');. unicode-range: U+0370-03FF

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACgaV4n6JqYAM6N8lQAAAAAAA&expiration=1705411486&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmSIWwpu2d7EpxSLlpMRX10KM9Xopn2_Sur4228ZcKnFRdBnBEQe3iVp8YxsoRqmqHnArJQYl_rQsNSMydqu2JD6JPffspjvAElw"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMInLvO777fgwMVv-mUCR3TZgZYEAEYACCN_vdi;dc_eps=AHas8cDj9yyY35qwlD4wiMuJzpgNYHPzx1_RDpRwdyYUXkgUZfECoC1DEKl7T52Jsb7N6mfiMknUSmbMjg;met=1;&timestamp=1705325079330;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4540
Entropy (8bit):	5.396267137178851
Encrypted:	false
SSDEEP:	96:1OEaNFlOEaNTFZKOEaNZOEaNJyOEaNwOEaN8Vc+omOEaN+1N1OpaNnlOpaNiFZKr:KNF6NBNWNJFN/NGqN+nNnXNTNINmcNTM
MD5:	0D09CC7E9425E82E7EAF394FA7D1EF93
SHA1:	BAE208ADF079D3BB4D302D8981AEC9821A90786A
SHA-256:	2D0922BD18F06DF3C7413FCD6A3F1C5EC9545B4B07B131E362F30DF7275FC058
SHA-512:	B7BE44D75B926215A076B61702FD94825B5267E1C7FA2E7275A6A0CF48EA429F2215E5467A26A82978D066B69B15E7C4B08B0FB3844FC552E318AAEDC7A6E06B
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@400;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtPDhc-WmUsdaNXtFh0WHfzg25hOMBAsFnSqfZbkENZlHkg5ItukozRuyb4-l_zmqhEOtLeOKSC9CmbbPXi1K477IEWRK9Jy8&google_hm=82nPL-gDAe41xcnm3Ha0dg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2897)
Category:	downloaded
Size (bytes):	11264
Entropy (8bit):	5.312435330995533
Encrypted:	false
SSDEEP:	192:ojQJmSicf4frtcXeobGw+hrkiFhFCgggmE3a3jrH3RVUJ/EXTBMm:V0Sdz9+hr2gB+6/Ejym
MD5:	ACF0EEA73DC3935EB4AB2BFAB62ED2F2
SHA1:	E79B401E7D50ED2AD4EAC853766321F140D32DBF
SHA-256:	712BF11A3755C81FA1CE57249E7A61F6845B843B84AEA09889A11478515234CA
SHA-512:	3A757AEFB08D464210889E0D72594F13F2645647E9F63BE35045B28016A5D165D98EBD43C65AE652E3EABDFF5093755831B9901D74DB9CD9A50C6A63C8F683CB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240109/r20110914/elements/html/omrhp.js
Preview:	(function(){function k(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var m="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function n(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var aa=n(this);function ba(a,b){if(b)a:{var c=aa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&m(c,a,{configurable:!0,writable:!0,value:b})}} .function p(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:k(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function q(a){for(var b,c=[];!(b=

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvh0F_iHD5eJdixZsAn2M7QO8g5fqYEQtVhVXkSXXKbu-eQWj8wVYQyg3PkvdxVD70aNZSc-EjZ8lTG6ILd_epGT_FSjaahO2psRmUMgMnxLTTNxV8cLuzA3c8gSS5R814Sv_CIwQQF0w56kTDX13uHVa-DNowecgzgXXowlPL83oCEBzQZpI0&sai=AMfl-YQtmw7uZikN_NyOGd-RUg_HZcwwcniKahvWIo2DSC2ssh8DaG-tJ7OTT1cwFqKPFmdLUqX0Ov4dAYBPod9N976dZqH4gOXTXeoN7IkxpB1kwOKHqwMMElPtLQw&sig=Cg0ArKJSzNQEzyhA7zStEAE&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1FGAE&id=lidar2&mcvt=1004&p=0,0,124,1005&mtos=1004,1004,1004,1004,1004&tos=1004,0,0,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=22&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1705325068718&rpt=1718&met=mue&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=xdmXEDM5sk22n9PM2iy-bQ&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&google_hm=NkQzWnBMR2F2aTdzaHhud29CRXE=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	7888
Entropy (8bit):	6.014641898397765
Encrypted:	false
SSDEEP:	96:OaVnZul69AhK4y9iIL3RF0ujU8utSNo4iKWJHYzov0GeRi+Uq/Errhb5e2nFxAR4:5itecuL504zg54srrhw2FGiH7HOih
MD5:	578CA30AA67C4345E7BD3AE9D721C304
SHA1:	C1D864AF6C86A642E3D8ECD6434F852109B41E8A
SHA-256:	E8D4614C964F5C45ACAB9008501431A554002C2A06CFE776C0CA73B9D95FC8DD
SHA-512:	4A899BFA3C94451967A84B7B91DA2D2452F3B741CF7025835089DAC8B4F354FEFC1FCA3AB57330D78B5D5BDD99F6B415562AE37AF6F3C7E0852E698424E551FC
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=xfad&tv=01_250&st=int
Preview:	{"sodar_query_id":"EzKlZfurHbuXvPIP38CVoAo","injector_basename":"sodar2","bg_hash_basename":"MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8","bg_binary":"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

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4350)
Category:	downloaded
Size (bytes):	165541
Entropy (8bit):	5.495661666005004
Encrypted:	false
SSDEEP:	3072:GKwO6SHDAi2qgdrC8yocpPEg8tJaRhYXNVxrZnlTEPengB/YR05sKHEf6mgaUE+7:dwO6SHDAi2qgdrC89cpPEg83abYXNVxu
MD5:	4C99B3428649413CC884AF1B240E75DB
SHA1:	B66E240421F52D2C7868A866C67F911A3849D2C0
SHA-256:	76C560D948D609155FA8CF26B44140404A3A0D4589B89B1E56913E591446575C
SHA-512:	D3C8E82BF862B8FC00686AB6585616D433D90977B63E1962DAD5EC5FD92D39B64F048C6CE60FF16B35F7631ACC1368F0A0F29DE43037CBF66EF5663A88283AA8
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202401080101/reactive_library_fy2021.js
Preview:	(function(sttc){'use strict';var p,aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var v=this\|\|self;function ba(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=v,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ca(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}function da(a){var b=ca(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}function ea(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function w(a){return Object.prototype.hasOwnProperty.call(a,ha)&&a[ha]\|\|(a[ha]=++ia)} .var ha="closure_uid_"+(1E9Math.random()>>>0),ia=0;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function la(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2100, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2100], baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	31026
Entropy (8bit):	7.40203562054631
Encrypted:	false
SSDEEP:	768:MUWcQ0/32AZw7iUWcQ0/32AMsBYy+Fqa4:xFQ0/mA8FQ0/mAMsBq0r
MD5:	80B139A12D790E6B72F585091EE618D3
SHA1:	CF95C4A5120C57E9C5DD734478704C7661E3F3D6
SHA-256:	488796FDB153A9C597F59A276363BE145EDB3DF48BF3B99D0B9223A31055DD9C
SHA-512:	123FB0FD83113C6197371CDB7698385774884EFE1FF7D7C34E2D350AE04104159E3A67EA65570FAEB5523464ECF12543D57671362BF8032E6525901A02E4ABAA
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Exif..MM.*...............4...........4...........................................................................(...........1...........2..........i............. .......-...'..-...'.Adobe Photoshop CS6 (Windows).2016:08:24 10:21:14.............0221.......................4...........4...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.IJI$.R.I$...I%)$.IJI$.R.I$...I%)$.IO...T.I%)$.IJI$.R.I

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 314, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	13332
Entropy (8bit):	7.945978521205666
Encrypted:	false
SSDEEP:	192:FvfKoZpK5GaFkFnD9XkBg8n3ubjqzLAJHh4h4siwfsAg8Hl7X:ZKonzainDlp8n+bmEteqJAgIlX
MD5:	86C6A336BD0219432CDFDC49D13D4564
SHA1:	87374A0703B415B334D48C59EB6FA5D73D35897F
SHA-256:	5AB51E5FA80687A0267458FE1A48C3AF0BB900DC0A2680746A8F53CE62B5BD35
SHA-512:	38A06251B1FAACA047F996E0F7750CC2EA41789D39EE26CF13E314D94FA121BA0FDADBE26212A447E410C1A9C01E4B74E735288B310B9DFCE9FE3D0C74F5A880
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...:......l."....PLTEDJQint......AGN...........a.....}+..#.....N................=CJ3..R.........]8>F......5<C...RW^%,4sw}{..cho....LRY.......4<W\c;5=K]cv..sahj..b..}..Sqv...o..;..X\|.]..ckw>;C..72. )H..........]..:CQRms.{#qqo......3...Xf}..N\|...._..\..3.........b..y......>.z;fk..B...).}^5....C+9Q..?..oTUP...M...9..B..V.wfg.jM.vS.......d....o}hB..3rpT..Z.Nf\H..O..U....[............M+4p....z..S...u.....A..l.....Q...W........,...T'z...m.g..[.+...GZ....q>..1...4._...qG.s[f.h.k.y..RX.n.b>oXF.n...}.......u.L..]*....R...........l._.\iHKvZ.?..K..35.. .IDATx......G.=c. ...c3zY..F...q.."a.@..$$vC.K.$.........6.i....}..i.6.........w..{.{.,.%...\|b.....~{..HR....\|.."..Z..V3.W!...Eh.j5BAJ....Z.Z.P.....V..,$.a'....@.s.jvV....V....Z..Vs..D>.H...z$J...VCS.D...jh....V.S.....R.yY.D>.$...UI..9j5+...Z..V..Z..C....^".v.Z...%..:B..dM.h..Z...%.a....Qb....jB.....Z..c=..<m.V...\|..j5..TA..j5..V....O.Vs...Y..S.....HX.vSz3`...<..f..H...

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=liveramp&google_hm=WGMzMDcwSlVRQWtHd0g2N0hMYlJHRjJON0w2UVlTMGNrWHRKTDRoOVZ3UUhsYmFRSQ==&google_push
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTg1oVVJq2CzUaXoIbGqF1uMwtljfn6vOzmRR5X7hdfNWWGBomuPq9RwBaSi75INbEp5WDTR_E4Drg5dZClVvi31-yzmKlq6Qx0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1699)
Category:	downloaded
Size (bytes):	20441
Entropy (8bit):	5.522783400382476
Encrypted:	false
SSDEEP:	192:9PjU7iCW960mS2oxf8fWiF9Qxw4BaWZKlDk651ixa6th2JFIBbhgNFfSwm+M27Ky:9gI2SejP4Bd56u8iAXNclstV9tRmU
MD5:	D0C418FD7C3C9B1FA25E4B07B8F8EE33
SHA1:	DFCE7CC5D1F3A589A5B0D6823A449220CE5CA926
SHA-256:	7275579CAE6C93512A73F3A929764EDA9E88331F6BC4C44021229276C23775FE
SHA-512:	B80CA86BCAEBFAD4F8837F0AF59671084D07C8993341D7E5C25DF28059D36C2481525CE9071F56498D7A7192367913AE90AD5DD35A92CB8C2DF9D7F285FBD489
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/d0c418fd7c3c9b1fa25e4b07b8f8ee33.js?tag=pingback
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function r(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})}i

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x798, components 3
Category:	downloaded
Size (bytes):	123870
Entropy (8bit):	7.967776497636629
Encrypted:	false
SSDEEP:	3072:CXW5kN1bYddty+/9CjIzXzNiD2Jvbxm+4onXvbU75LZ:CXWcFmy+FCoDg+vbxmHoXvbUtN
MD5:	5F1385D5984B0F75981E9F63A44C85A8
SHA1:	6B5DA05EC842010D1586895361776A4E3B878335
SHA-256:	26478106447BCF7AC8440F2CD8935458D375092CECFCD73ECBA12FAAA83106E3
SHA-512:	2814DA156845C918920CAA1ACADFE1E61C360018174AC4DB0E2EDFA75A639DD80360789E0F9AC1064B09FA9C223120A10CCEBA25D4D5B810C910FE11E76FB297
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/10752980151486266585/14763004658117789537
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....................................................E........................!1..AQ."aq2....BR..#r...3b..$S...C.4..c.%.................................-........................!1.A.Q"2.aBq#R...3.............?..z..~..0..-..L...V.-.]8.....L..\..WLU.....KF..,.e.sF.D..^k4yP.@ !.G.z.....Zf.61....L....v6C.@.X.[s.w..0...@ .a^{...\|..<...w..8O...#...2.A...4E..b.`.a......!...h...!X.r..........R..K.....f.q.X......j.6YR.D..F...@.. 7(..@...E....R.."..@.X.GU.M...8.^Y...~..].l?.~....?..:.FW.L....+...@"..V ......f..r.b...&..E.F.A.....h.r.a`.+.,.h.E...i.........)\......fZ..H..7.Vr....n..W..?.~..q.o.c...<....U.8.#......+....@......7.\..!.+.....@@V......f.1.l.$..EA....b.&..H...F.T{...I..J..l........9...Qg.............~...7..\..R...D.p.JH(Of...JNV..&Y....s...'u;a.....5..q..yO>...y.\|...X{s.z..*.a.....6eGP.R.."....b9i.V..L..<...&o

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstR35MF-_TfloSar2pdEnktaW-tHRO-xSNhM0HdBJC7LJK3BailQeFMhuiTQeX47PYbHNpmXfqc6g81HmmAtfWuHqPeT59BWhbQFF89q5Qu3afp2WI-2eXIV27ccVU&sig=Cg0ArKJSzGgNMuIp4PdPEAE&id=lidar2&mcvt=1006&p=0,0,90,728&mtos=1006,1006,1006,1006,1006&tos=1006,0,0,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=32&adk=1974493702&rs=6&la=0&cr=0&vs=4&r=v&rst=1705325100088&rpt=1039&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2718)
Category:	downloaded
Size (bytes):	23840
Entropy (8bit):	5.499330723371192
Encrypted:	false
SSDEEP:	384:ZCRT3Adsd88StEj8wTdbZNaTeGS+NvaQV7RrBeDHMDSB1d27RrHcH/zy4nlDWyv1:ZCRT3AmdxStEj/dbZNaiz+NvaQV7TPDs
MD5:	C2479366DBD9D018908EA8733B281489
SHA1:	7BAF69F5AB3F98B4C25E1160D4D92D31E3B1DF66
SHA-256:	428F4D59E61CDF9887AD4CD7C4592A24B214D2D9C0BA09DB01C4CFDE66A3CD11
SHA-512:	A0A4C790ED38E3801BB67431F999C231C8CC619780D5E4B9236677069F7C2E122E0FF133B28690CE38AE42658B3C3C931F310635536E81FA11A6351B441EDD75
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240109/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a){return a};var ca=aa(610401301,!1),da=aa(572417392,!0);var n;const ea=m.navigator;n=ea?ea.userAgentData\|\|null:null;function fa(a){return ca?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function t(){return ca?!!n&&0<n.brands.length:!1}function ia(){return t()?fa("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(t()?0:q("Edge"))\|\|q("Silk")};function ja(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function ka(a){ka[" "](a);return a}ka[" "]=function(){};!q("Android")\|\|ia();ia();q("Safari")&&(ia()\|\|(t()?0:q("Coast"))\|\|(t()?0:q("Opera"))\|\|(t()?0:q("Edge"))\|\|(t()?fa("Microsoft Edge"):q("Edg/"))\|\|t()&&fa("

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2670)
Category:	downloaded
Size (bytes):	11238
Entropy (8bit):	5.52893899649489
Encrypted:	false
SSDEEP:	192:fjgIiKKAmA8+Dff83GCLnK7FxBmzr63JVfNut3Qi5QF3y8+WInD:fjgIiKN/8q8zDQxBuu5VfNut3N5C3yhT
MD5:	67B2CF2770E31C0FA9735C0B8B540980
SHA1:	F8A76A056B7F8907947EBA1B84A0C8A69CC0E452
SHA-256:	559ED27B48F52AD1C65466A95A120B8264F7DEA4A23D31F2EBB3B5BECA3321F6
SHA-512:	334C84C52BAE9ED29C55CCD4EF34FF0BFD53408EF05080BEE17B0F95007A46DF95F7FB294C29E40CE869CA08C802FA0B2BEC8E9CA27530CFDA58F417A97D1389
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/67b2cf2770e31c0fa9735c0b8b540980.js?tag=text/vanilla_highlight
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var g=this\|\|self;function m(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=g,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};var n=m(610401301,!1),q=m(572417392,!0);var r;const v=g.navigator;r=v?v.userAgentData\|\|null:null;function w(a){return n?r?r.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function z(a){var b;a:{if(b=g.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function A(){return n?!!r&&0<r.brands.length:!1}function B(){return A()?w("Chromium"):(z("Chrome")\|\|z("CriOS"))&&!(A()?0:z("Edge"))\|\|z("Silk")};!z("Android")\|\|B();B();z("Safari")&&(B()\|\|(A()?0:z("Coast"))\|\|(A()?0:z("Opera"))\|\|(A()?0:z("Edge"))\|\|(A()?w("Microsoft Edge"):z("Edg/"))\|\|A()&&w("Opera"));var aa=!q;let ba=!q;function C(a){return Array.prototype.slice.call(a)};var D=Symbol();function ca(a){const b=a[D]\|0;1!==(b&1)&&(Object.isFrozen(a)&&(a=C(a)),a[

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 38650
Category:	downloaded
Size (bytes):	14147
Entropy (8bit):	7.98433412282866
Encrypted:	false
SSDEEP:	384:RZKOmm9fU/6D3pTlAnrxTph/vaQEhhqCwY3NGI:bEEC6T3iNhnJgCY3NP
MD5:	483B0A2F475A670650D3F88E3C80C66D
SHA1:	452D3EA702067D5C153AEB91B21ECA2702273E15
SHA-256:	F449EF3B253FB12401E7CF442699568EFA0989A087644BA9126D4B9B2420637D
SHA-512:	ED252D62AE999C5C0BB63D13325C8C7643D269B0B6F9E724628BD8D4BB7BC51556F5DD08467297264B1E06689B48A7C36A97677A7925EE78496A26E08DEDA826
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/simple-social-icons/symbol-defs.svg
Preview:	...........}Ks.7..~~E.....\{..7^....bvr.c2..Lw..............F..H$.@........?.7......r..n..:....r.?..w.......l.7w?.^..............7........_.{.\x...../....^.....o.....Gr.~.........f....~...2.1.7............o.........wo.Nw......?}....xw..........o)n)......o...o.._.....v;.?..{...f....6.\|.e....z.>..j......j.....{..I...7.JLY...u.Y\j.#_s}x........-T.r....-z......S.[...\.%.....w.k>.4.I..~)..1.....V7.6^...f...c.HK.r..IR..k....z.FWW....C..iU.8\.V.+...QR`_j..}8...<;?rI!..!E.9vW..p.:.IB.I...]i........p.f_#..#...+>..?:/#.."v.nT.+.W.@...Q0.`.P..j....D$z...)....f..XX..].QY.+E'.5GJ.0h+.Xt....\\.T...A y..].[.F{....g.I.N..l?l....m..._.........@..1....-.!.........\.$..&d.....6..L.'W...6x!..3.;.>r.5......WH..].6.M........XX..Lj....IsR.n...{..\v..$Z.NRH..d....C6>_.....kB..\|...=.E..`GPBfiv.+FG.XLL.......F.:..ilr.<.ou2}r.>{.34$...W.....(..0....&a..b/..3.....i"$..,....9R[1...tX....-.\|...B1..s+.).{W#.z....Xs.0o:..1.*..$..[....JC;"...7.....d.Sj.)

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmTb8M6WaBdVD-tiaORcKUKHq8ie2PBxXFkO-m-1AEVtWcxzqhi_F34lwh_hNBlOsJS5mKNPfzcZPb5MaEY9f8XCOJLBLaeyuA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_hm=OTI0ZGY1YjAtNzEyMS00N2E1LWFmYjgtMzhkZTNmYzhmMTM1
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=216, bps=182, PhotometricIntepretation=RGB, orientation=upper-left, width=800], progressive, precision 8, 720x194, components 3
Category:	downloaded
Size (bytes):	54995
Entropy (8bit):	7.784139729412211
Encrypted:	false
SSDEEP:	1536:phmO8hmOL2r1a8IPig/mdisObN5weSoh0f0kc:bBg6ymdiFN5wC0Pc
MD5:	8D30F741B28E5F5C22E584607B2AAB6F
SHA1:	DA3123D9A203664B27657E9BA05DF33BB33012B2
SHA-256:	0D943D08622D3583BDEF5EFB62938D61AC06656666D315EFB69A9660CDCB5062
SHA-512:	721E73E0500AD0EA07AC7D8DCD53432DF551F156EA75FD042FD060A0311C0AB6D0B7FCE937CA05A561324EC405FF6CCBB2DAC1CA631C0AB8F23FC98BB0301A09
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/banners/Travel_Journal_Preorder.jpg
Preview:	......Exif..II*............... .......................................................................................(...........1...".......2...........;.......................i....... ...X..............'.......'..Adobe Photoshop CC 2019 (Windows).2018:12:16 23:00:52.Lee Kuen Hoong.Lee Kuen Hoong...........0221................................................................................(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................+...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....,...o`...~......

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmRpPqbdw6uSenbFaK0R23iAP78nBE5lH0LVZSXkbUPmSekqKtgWHQA-opdYCPHl2OTu722sJjb7QUwI4di5_XZh2z5qu3B3qZ8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-Dod8kHO0cPh1zuehJ-LuqGl4OFN64s57US6xbA7Jv57pXpXZhKtKXrei94XMP7SvOT7rcA3nWaad0Qaxi8bqqRYXCcOukbsUkfd5VvlB3j3qki27w
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14061
Entropy (8bit):	5.6096980977443165
Encrypted:	false
SSDEEP:	192:o/y/XMYmiG9Ir5zEwTNRhiZqxyHFU1/s3jZi5aTAGoEbIqehlZN+yc4:hncpIPkCT
MD5:	2371135568EEF24255D4BFF01EC173E9
SHA1:	70AD97570DF72685D5F947395A4B95B230B7B1E6
SHA-256:	AADE7746342F608807B7EB107059C842FE200E1FF09E146DB822250055CECAED
SHA-512:	D557E663F1ED55445C4E212D3F863A432819541E44F1FBD4E36C7A1DFD85B8A44E25F4DBA3329F57C3424EDEA5011028278A0DDD49EF1A25093543021072A5E6
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0964-0965, U+0980-09FE, U+1CF7, U+1CFA, U+200C-200D, U+20B9, U+25CC;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPj8UvaYr.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	146119
Entropy (8bit):	7.956739787679404
Encrypted:	false
SSDEEP:	3072:MhpD4Zji0mKhclWuDtoVPkjn139uK38YqEojvlAHI:MhpcZjiQQ1tX7BqTAHI
MD5:	25B6982FAF304D7E007A19435A8C7F7A
SHA1:	29F0215554011F0F6C2CC012B02CBDDFAE265788
SHA-256:	EA2A22F6FE11EA4997A06450DD6DC09B84E40463F1795873C0829EF79A62F738
SHA-512:	9F3FCDD7A77BBF1D4B4957511D214A9B0308064DF29EFD008CE7AF9DEF9D1F3FA3ACA8659A03CC62516B2FCA7E7390643A74862E592D80FB1EE7F04608525846
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz...,kcaBX..,kjumb....jumdc2pa.........8.q.c2pa...,Ejumb...Gjumdc2ma.........8.q.urn:uuid:befeb453-647f-4fce-a5f5-d66d33a87f2b.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,wdnamenjumbf manifestcalgfsha256dhashX .I/.1AFy...."E.M.b.\|.!A...TF....cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated imageidc:formatiimage/pngjinstanceIDx(xmp.iid:5F7FE096912811EEA2FFBE4CE44DE99Boclaim_generatorx6Adobe_Photoshop/25.2.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameoAdobe Photoshopgversionf25.2.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX Ji.....A0x.$...1:..d.4

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI1tuc-L7fgwMVRoJ3AR0j-wUOEAEYACC4jvhi;dc_eps=AHas8cBpFSdk0zfjDy7D5ovbwXRhEGJyzzgRhRdemV1RjnkMXHbtrixFGUc51nYYfxN84BNpFFFkqIMwkA;met=1;&timestamp=1705325084331;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3772)
Category:	downloaded
Size (bytes):	30483
Entropy (8bit):	5.477787273130533
Encrypted:	false
SSDEEP:	768:oRk6p6ueUOaezP3SK0HfeYH5ieyt4txui4oMM2K:oRk64u9rN5ie+nhhK
MD5:	9D00C1C177232F089515D3F7D511F6B5
SHA1:	5E4FD6FE02E1346BAA44239FD7CD84F4B2732065
SHA-256:	B7F80935106390CE68B498562C40C39863298CF9EDD85FAA71D35FCDF848A6C7
SHA-512:	8629D7AD940481661F82709C0D06564779DEB069A6FA05E66FA8EED448715D4D26A4FFC87A1990A14287ADCC59D34E06E6ADB6BB7794B81A15FD9289A9A3AEDB
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/show_companion_ad.js?fcd=true
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},q="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object"); .},ca=ba(this),r=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&q(c,a,{configurable:!0,writable:!0,value:b})}}; .r("Symbol",function(a){if(a)return a;var b=function(f,g){this.S=f;q(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.S};a=1E9*Math.random()>>>0;var c="jscomp_symbol_"+a+"_",d=0,e=function(

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	98928
Entropy (8bit):	7.9314519754503765
Encrypted:	false
SSDEEP:	3072:9YFlXX1mlmBD62X9znsG/lnZUu4u1R9MG:9OXcIBNX9Iknj4GH9
MD5:	2F9385045CD3F03E8720DB8EC38A53F3
SHA1:	0B982DAE9C519A7443E5EAB82C81CC312F15785C
SHA-256:	2F7E11AC92F868B68DA62130A1C12591FC8F3D95E587070E912B08951BFE9800
SHA-512:	D82BD73ED2260134AC6F25FB144B6E36A299B9965FD539C95466B9A8ED045873154651192BA8DB57C9E493CB5B4DE72B8BFA13491F68C88B6F458959C8829EC2
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................$....& 0/&.0 . 06&(00>>> .8I70H0120.........../ . /00000//0000000000000/000000/000000100000001/0001;......t............................................S......................!.1.AQ.."aq.2..BR......#S..3Tbr......CU.....$Dst.4c..5%d..................................1......................!..1QAa."2Rq..#B......34.............?...."..(..(....(....(....(....(..@P...@P...@P...@P....(..4.h..@.....(......&......@.....(..h..&..........4..@P...4..@P...@P.......T..5A@T...@M.4.....P..&...h..).(..s@M.P.....4.....T.@M...4.h..(..&.....4.h.....).s@......h..(..sP..PP...P...@P...@P...@U.@......(..(....&...h..(..h..(..(....(.....h.......@M.4..@P......4Q4A@P....@M.4...@..&...h.h....&.. .&...h..S@.M.@P.@P....@P.@M.4...@M.4...@M.4...@M.4...@M.4...@M.4...@M.4...@P.@M.4..4...@M.4...@P....@M.4...@M.@P:(.(....(.....(..h..&....@P...@P...4.....@P...@P.@M.4.....@M.4..@P...@P...@P.@P9.S@..M...4Q4..)M.4...@M.@P....@P.@.....(...(..h..&.(....*....(. .&...j.4..

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DvPGKVmsb2KTnl1XvdsTv7HW5zItWD4w1CTMjOoXnYAnHEhaZFjE2BIT30wRvAMF2XrFGuPMGyRQd4rDos2bP692bM_6IjQ06qA02E8UzeQe7ZZPk
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtj-J0ASOjeM_vXHQWXN2alj92a_XNICpb_jtl1QdyQujDXJX1SqFWZoi0H707zRv6SHczXhGpyJToXSRM1rteplQtNwsfNA&google_hm=82nPL-gDAe41xcnm3Ha0dg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 132 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1901
Entropy (8bit):	7.595857670009179
Encrypted:	false
SSDEEP:	48:wQIZD+JMyKZIA7Try21PurBeaubJqntHDHuW:wQW6IIA7TrDcea6OHuW
MD5:	F2C7A7EA44FAA05D1714A64107B74651
SHA1:	94BB93359A58649A3E2C1411D12F768A8132790D
SHA-256:	351F4D3BC28A7D9AE26E0E57EE25B63BAA638682EA5F51BB01804EC88AA17C5B
SHA-512:	66285AEEFC0567C8961FF697BB7354293A70E68892B4C19AD1D730BE89F856671DDE7CDCCFD395EE870CDF01BD23BBE81C998DD99E16BA9D5A4CFFE0A3B4300E
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png
Preview:	.PNG........IHDR.......2.............PLTE....................................................................................................................................................................v....5tRNS..@.p.`..0..O....H....".h..z9..c.\.U4)..s....w..-.&^%`K...EIDATX...0.F?..L.)....[...j.H`.I6e.....Q.ttu...w..-..).&a{..Ik...;.1K".-..)!.?^.h.....w.!....,.S{.-4p.c..7..?\-...3..,..x.7..k.qB.!J..t.P.t.H..S.W>.,G.s.......I.....r.....,$..<...B..yq:.b.....$..C..\!.E..!...:.1.!.........b.]..c.[KO.c\|....a...!...6....2....l.d..w..]....EB...>.p..0..8.....C...Czrn.:%...{.t...j.=....0X..p\|.....1.&......eE`.R..+... ..`..].&.u4mca....y..).. ...I..T.i.rQL.^..hH.....1EG.9..o............,.k.uS...$..Rj.."..zJC..U.u.....V.D...D.%..{.....j...K-...x<3 ....L.v.wo..U.8...@b...........w......D .0pve...R..R)!.V..[..t.2.:.....V.N.".U.....m..W..\.n..h.x.\|h"K.V............}.t.,..Gu9%.U9XH.D"XR...$.l.<...+C...!5.@..$......_...Zw..p.n..X.v.fe&O..%"......!.b.D<W....

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65185), with no line terminators
Category:	downloaded
Size (bytes):	65185
Entropy (8bit):	5.7607503545240215
Encrypted:	false
SSDEEP:	1536:aQSGx7LZTaxbIlUv0W/TasCkrKDHDKsbvcu:NSKZTiPPHCkrKDHORu
MD5:	F4095D260455B34C88916B9E410E46D6
SHA1:	742D617CB760EAADB872A84960028FDCB73EF7AA
SHA-256:	0CEBC115778DFDCE30E339427C3C30ED236ADAEB38AAD3D4367E4CE31C963C68
SHA-512:	DD3756B7F867848DC3A7E2944827FC25D1A4067CDB13C2C7F773C89EB866AC2D8EC006B9BB79D4BB4E96B6533AE0C4F6A14135103419E211A7198C209537DA8B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12,1.12);-ms-transform: scale(1.12,1.12);-o-transform: scale(1.12,1.12);transform: scale(1.12,1.12);

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=12, height=2100, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=2100], baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	31026
Entropy (8bit):	7.40203562054631
Encrypted:	false
SSDEEP:	768:MUWcQ0/32AZw7iUWcQ0/32AMsBYy+Fqa4:xFQ0/mA8FQ0/mAMsBq0r
MD5:	80B139A12D790E6B72F585091EE618D3
SHA1:	CF95C4A5120C57E9C5DD734478704C7661E3F3D6
SHA-256:	488796FDB153A9C597F59A276363BE145EDB3DF48BF3B99D0B9223A31055DD9C
SHA-512:	123FB0FD83113C6197371CDB7698385774884EFE1FF7D7C34E2D350AE04104159E3A67EA65570FAEB5523464ECF12543D57671362BF8032E6525901A02E4ABAA
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/1529310626074118471?w=100&h=100&tw=1&q=75
Preview:	......JFIF..............Exif..MM.*...............4...........4...........................................................................(...........1...........2..........i............. .......-...'..-...'.Adobe Photoshop CS6 (Windows).2016:08:24 10:21:14.............0221.......................4...........4...............................n...........v.(.....................~...................H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..T.I%)$.IJI$.R.I$...I%)$.IJI$.R.I$...I%)$.IO...T.I%)$.IJI$.R.I

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	111499
Entropy (8bit):	6.050373414745672
Encrypted:	false
SSDEEP:	1536:BZWhj+UE5/UjdXu5ORpPGb9RkiyXArPP/0JU3if3i3MhxUyNYqSHKMcmfi6H:BZWhrE2hKXje0TmpkKQaG
MD5:	F322B7BEE94621C3EF86FA01D8DC606A
SHA1:	2937B9C7A514443D434B7650ED50071841F89216
SHA-256:	7A16BA355FF65CAA235998973E00521629E401D1489464352C9BF01C395B4466
SHA-512:	0CDB6F4CED9738C89B604818578899EAD0442190A2192DC57A09D20B33CA86BB2C98B2A36CD6B9DF05591A142091E4FD4D201B1BF824F21EF701D14B0D39382D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0px;width:100%;height:100%;position:fixed;pointer-events:none;z-index:-9999;"></div><div style="display:inline"class="GoogleActiveViewElement"data-google-av-cxn="https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuQUk-DlmchDGJQ-enn_3vKjxuEZvupfvWwJSyjMihwCSTiU4jOzFqHYVH6-3uGmXUP_m-SXdmrx9zK3rbcDFPpLOQhicdUEExP-nEVCM06lfH1-Mv910aIGBS6buwj48-NcozvdAZdKfjCiFkzqQqhmPTB&sai=AMfl-YQQnRCM8h7bCYxofmkYdn53KRxJ01GwKEHJZahRP0XjTZ6sowLi71KvFtNDfYhWdPUomIYkLnq3uXlFBf4ZN0tTAOozWNiK8RduRmqMJW3VmtJXcpdQstwuQL0&sig=Cg0ArKJSzNpy-GhrBRUFEAE&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_eGAE"data-google-av-adk="279133150"data-google-av-metadata="la=0&xdi=0&"data-google-av-ufs-integrator-meta

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1246x652, components 3
Category:	downloaded
Size (bytes):	128644
Entropy (8bit):	7.984332330531988
Encrypted:	false
SSDEEP:	3072:fYZu98kt3KiN0MJJNnEY2xH56DlSMDXWaH/yVOhc:fYZZkzTqZ6DvXD/yVOy
MD5:	E898D618F880E0D244E94031BE0E165C
SHA1:	4977F56655241B3D3E2AF8846681D33CA468E2C3
SHA-256:	2382723FADBD5CCFE3198DF5F8277CC9C11970C0C9FAA4E7146F743980BD00BB
SHA-512:	AB5A979C25EF6D9185B54692C78D22FF76676B841B5BE0329EAF4685254D252E63A9D96703BE8C6BE09EC2FB93FE7442EE8D7C9C8191D13CAB5FA292735C209A
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16169899710128606630/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////...................................................O......................!.1A.Qaq..".....2R....B...#Sbr3C.......$cs..4T...D................................../......................!1..AQa.."2q.BR.......#............?..o_U.1....($......PD.PI@e.A.ITE.A.D..ED..:.Z....4.[.M...SLN..M...SD.....2.....J.J..............SA.PU.j.4.>.a.....".b.c.....&1..1..c...Lcz.c...oTI@PIA%.A.D..A.D..A.D...D...Q....A.D...DTDE.TD.PD.PIQJj7x.M........=sw...;Cw.;C......v..N....N...Cw.............w.!....=dq.N.z.....).&P....).E.&..yAO......=.}..S..p....Y>.N.b......Tur3c....7X.......X...N.2.Z...N.eg....&...V...ag.......^.N...N..X>...M..8..v...T...:.....h.hq........N...O.S..RI...R.9.........:.;.w.N.:.{.3a....R.H\w.u....h^.nU5:.k!...!MQ5...5.S`z.w.ju...:....N......o....{}...:....S.o......&&........{.....C.OYn.;D..{.h....v..L.l.Yf.69.z.

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	1600
Entropy (8bit):	7.625299864300048
Encrypted:	false
SSDEEP:	24:bHmG+m80Uki2dKKHM4r2wjvKjbsFT39kylU6QFm8fwYd9Nm5F+6slK2CfNB:bGG2ki56jEmkQU6fAdG7mCf/
MD5:	1D178DBE62144C2935C64E4274721849
SHA1:	F361611AD79EAD1BBC381B3651B90802C159DA23
SHA-256:	9602EE8486C2D8236D848D5F4D40957DF198E39A8C405C73583E54E66A37EA71
SHA-512:	D1294F765B2371CF2D185547E8A47C6502CA3FC2215523CBC058EF82331D4A3F91FC4B5B720DE505042E103E971935E7DDE3012427EBC64C5F12BCC26E906E08
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................". "!....7. 0%((4..92,2<%+-+...........2"."2./-20'&)22+-'-&/2-.-&-'2/-''&&/0/'&2-2-'-'&-2&-((......d.d..".......................................6.........................1AQa.!."BRq....#b..2C...S................................/........................!1..a2AQq..."..#3b...............?...D@...DD....D@...DD....E[??w.....6..duF.o"..L..w...'..E.:da.5.8W&.v]dw.....u;...X.>.\|.........l..4.d#....ixk9.P`....pdxlm<D[Z[tIE......?O\|..5=...?..E.6E..."C;9.....k..5g.N#K.'......".DD..V....3...`.I.GR.i..O...3...`..G.......i....DbW...HL.....d4.H.-..1.O .{'oO.(.....4a.T..T.....9...^.K{z.....+A0...I.xn..^&}...S........x..&b....q...q....x...LX@.$...d.v..H.~.C.rK..vKu...._...m..\..x_{......F~8.V%..D.vsN...... u......Y.}m.l....m..\..x_{......F~8...'.q.K....i5..._=.vE..."C;9.....jz..dD.!....t..b...0.Hgg4....V.K&.cs.q..c.ZI}..z"(M3......,...4>GU.\..........V.P.7FuU.@0.v ..M....4>GU..(pV.+ja..ez2.B.._...(G.

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstg_B7XW4UXbLbw8-4Oj6D_ExRArs_eNK_DCpin6VYC5A_4m71Ma3Ia_UthpbOo7QTG3YaoJRmI0nifKnVtL6LSjwarHaEnA0YNmN4bmVxEnRHZeguCSnTev0csO6JYGdoorUfL7u9PjOGsOD4p244QDeJ9&sai=AMfl-YSAguMjQ0zmhdCSg7j_eT2u-OTduOMW87eUTNFhYFY8VH98ckUi7UQksntU40I_aJpRsKrtWKmn93AHoDI3uVMlM1BZ-iv6Aa7V4gink8Z0Hq1NMUaojoWRd8g&sig=Cg0ArKJSzCoodmd1tvuUEAE&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE&id=lidar2&mcvt=1454&p=-1,1,123.265625,1006&mtos=1454,1454,1454,1454,1454&tos=1454,0,0,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1705325085669&rpt=2920&met=ie&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQIJVymrisTvq3NhL-ezDUJdmE24nSJTzs56erMwQJw1qFuwikvPCckM7tXc7kepqtBHxvaw5MK4XlaDHpDevsGPirMl_KQkGeR
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	"https://d.agkn.com/pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=2281214538&col=29305905,5876516,358438438,549336255,207488824"
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 125x125, components 3
Category:	dropped
Size (bytes):	6435
Entropy (8bit):	7.931509857208459
Encrypted:	false
SSDEEP:	192:uv8IVoOrcEHSyloCOZOUjsoyvhhV0zw/FJZ3nsLWDm6Dc3:uUI9BOZvwRJhV0zmVGWDm6Q3
MD5:	C92474A85202C5482C846778649A4A30
SHA1:	7F84E5A9EA1FE0C9A0B5B34B8813FB165DBBCB6C
SHA-256:	65C48E2F5086A8076CFB277EF46F693B6AFE76F7909FA53F5926C589F5531FEC
SHA-512:	3B0018306309C8BEC4E1E0B73A2E6F3A68410A40E0BC900AD5E1C982D63226BF0D5478E89D9D196EDED19F6983D08CA0F87F0478ED855D84F73BA94C4C6FAC28
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C.......................................................................}.}.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..5T.z.....N....).7 ...NU.lS..9....d.q.c6.ZP.R.X.s.P;...\|m..j.\jz..p..+...=...wF.....)v....`.!M;U.......].Z.l.u*.LP...T.i.z......M......S.z..E.....j]........t"..}.... ~5.....(W{.......m....O.8.Zw....{.(os._..ub..R..Uc..)..de.g..e/.rO.:g....y>..#.....9......}..}".)..p.X.Pr9.z\|.....+._....D...#...e#c

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	35678
Entropy (8bit):	7.945221223713711
Encrypted:	false
SSDEEP:	768:NI62oxhgjFKnRRdexhh7R3gI7EKkYAQWlfUpU4Yu1SkHS6HMQpN/av8l:NIHoDgjFKRrsl6FQWl+UmlHMQpe8l
MD5:	209EE16A4108B9728DB1FF5E8754E5EF
SHA1:	E2920AF8A255082A2A71895A96629BFA1278B489
SHA-256:	84E7B5E9E0C767E8F54140F4EA50713BC3F8E60188DB65C2FCD0C192C66E479E
SHA-512:	91D576E4441F81A09CD82618B477E5BA7DB8653932AB184F7FD6173B13DC703C9F9822BB396D4D47CF1D766FABF56D12A0FBFF6E3E74DF5733667D0B725C31CE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,..........mz.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.2 (Macintosh)" xmp:CreateDate="2023-12-11T10:12:32Z" xmp:ModifyDate="2023-12-13T06:27:37Z" xmp:MetadataDate="2023-12-13T06:27:37Z" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7d36967e-68d6-4531-8739-680ec07b8d7c" xmpMM:DocumentID="xmp.did:7d36967e-68d6-4531-8739-680ec07b8d7c" xmpMM:OriginalDocumentID="xmp.did:7d36967e-68d6-4531-8739-680ec0

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80757
Entropy (8bit):	5.834506523243648
Encrypted:	false
SSDEEP:	768:N1zQ9PUQI9wE39NsCu/HvCGvU2EZQymWUyKpAkbgChFEwEXUKIl5mTLhEI5XOB68:zQSGx7LZTaxbIl8TLL4B6Ksbvn8
MD5:	B164AE6CB189C0F092E22590C0B22CF0
SHA1:	31AF420019C239266B6730581AC5813086171670
SHA-256:	6686848D0F76B8AB796E20E30B5A6A5C3C4BBF80B9639A4281A29521CF5E8F83
SHA-512:	590EE46486EA8C2439FC026F379875A219D0EC4350F5537431948BBA78F0048A6B907CFB0D35C3FD1645FCD63F0BF94592581D17292415227CD9C4ADECE8E3E2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325096&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325096593&bpp=16&bdt=559&idt=111&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=5149972078852&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=150
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.3804945054945055,1.3804945054945055);-moz-transform: scale(1.3804945054945055,1.3804945054945055);-ms-transform: scale(1.3804945054945055,1.3804945054945055);-o-transform: scale(1.3804945054945055,1.3804945054945055);transform: scale(1.3804945054945055,1.3804945054945055);left: 138.5px;top: 17px;position: absolute;}\x3c/style\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv id\x3d\x22google_scaling_div\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscript data-jc\x3d\x2240\x22 data-jc-version\x3d\x22r20240109\x22 data-jc-flags\x3d\x22[\x26quot;x%278446\x26#39;9efo

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70379
Entropy (8bit):	6.030717404339535
Encrypted:	false
SSDEEP:	1536:IiSKan4EQdbY5ZrcxROplbfUWCxvm81Bc:QQirhEW61u
MD5:	A3E5E01DB7BD50AAD3AB94B9BCE5AED8
SHA1:	93D9C4194E0D4B7F147C1A8759E97774350BD220
SHA-256:	8AF834D504266ED96971F04AD956B54C100F2E1ED1D2FC846F5D53D621AC27B7
SHA-512:	EEAB94ACC20E0620C85DB54C56BAB765CF3CFD72A873A900AA5F884B4E87D07D7B4A8CD902800B909F9C05C2F8DAC0DA8727FE96D8401DE7E6175AFDBBAE20AC
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378038567;dc_ver=99.292;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1892844450;ord=sbrk40;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI-tjZ_r7fgwMVj7zRBB0jIwXQEAEYASAAEgJxT_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE%26sig%3DAOD64_2cMVrnYOZ9MSKq-FMOtnFYcp9EeQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=1,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=p*sDjw-_x5;cmpl=8;gcsr=a;stc=1;asnm=1;sttr=83;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3967995682"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZbaHJMHZoPwPooGhyAQ"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("objec

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2539)
Category:	downloaded
Size (bytes):	18834
Entropy (8bit):	5.5644020782252
Encrypted:	false
SSDEEP:	384:nEFsbD+/gZpVjtArWE8nx9FZJ0xg5WGsIg:EibKF8xH0xWtsIg
MD5:	EB5B888B7826D54D4AE296DB8EA98110
SHA1:	182B2F8031B0FF7327D8C62CB51A8403E520ED0B
SHA-256:	62CF47440CBF69B9D0A37C238C923E6544394913A5E5E615D017B1537AA06EC2
SHA-512:	6F761874A7AC14AD09F198C55CEF2B0E95324946BDE3C233F887F63AD3FC6FD95046DE5426D983053DF8B8F9B32B6B8CB937F41945DEB0A2C86DBE054ECE8C07
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/dcm/dcmads.js
Preview:	(function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.h("Symbol",function(a){if(a)return a;var b=function(f,k){this.l=f;ba(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toString=function(){return this.l};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2246x1168, components 3
Category:	dropped
Size (bytes):	170448
Entropy (8bit):	7.842078713808817
Encrypted:	false
SSDEEP:	3072:ix6J3AJMHuu+pdgFFoDNexg2PumPieey8zwA3KBTOHLlZC5EqhDx5EdBZJI6f0+O:ix6JGc+pdgTo/22Mey8j3KoJq9xCZJUD
MD5:	2F8E7AF886864CB54C6A7A37D8DECE96
SHA1:	8AC2F52547996219F05B547D7F4A3A40496E9F6B
SHA-256:	1B776551EC832A4434FA7DB7632DCB4142D6E5107F88DAE77709990E63A325F1
SHA-512:	7D43425BCFCF84DCDBF713DABBABCF9834D34DAEE5C0B6CC5B6A26F589F1E5BA01DFBC0EAC0C9448C5511D3483E677C1876D7E85790263BFF7F7118A9122813B
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////....................................................S.......................!..1AQq.."a...2r...#3BR..$4bs.......CSc...%..5DTdt.......................................)......................1.!.A"2Q.Ba.3q.#.............?....I.$...HH....(.........6#BH.T.....@5 .@..)9....Is.!.2..i.[r...u].D...<e'JM.}gT.J..OYJ....M2.....X].....v\|."Wi..........` .....%i$... 3..p.9]~...Oj..k...H.K..>R....k8..0.q.e$..`0.....]..R.I.;.2.......................... ..A...jtc.RV.i7.fDV(i.m....vm.k..W.,t.iR.f....E.!=+N9......a.z.G.....:x.O8.;p{......`......p.@....0........@.@..............`....\....\|s\7..aU.p.\'.(..................`...0..............` ..$.z....@.c.,....J]....Pu}...@KUp...(..q....P..M'fEG..F.\n.(.a.k....,....4J.2. fT.D..\|Y..h..@.d...\.M=Y5...6.i..E......(.d...................... .@.[OaQ...p}.^...F............@......Wex.....

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (6332)
Category:	downloaded
Size (bytes):	92156
Entropy (8bit):	5.45098654267403
Encrypted:	false
SSDEEP:	1536:xd44jGDiHrxxmx3CPPfc+u3zfa17wo2L3P9lnlv/1KOENE+/:qCPc50wgNH/
MD5:	4EEE6DDD36D02FBE6E76F68CD334399B
SHA1:	98B1BA3E36040D041B405DFADF46FEC54062EFBA
SHA-256:	006EB920F12355F3980DA74A242E6DA156626166E5B1D796DCB1486684C2BCD2
SHA-512:	EEA68B169AA222CCC017BD8FAD9064EBABE525746E51BD837A976860E693B6D9228FC9E01D5E7873F327A09DA6A1E7ED75383DF52FB2FB79F0E03B45351D7434
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250
Preview:	<!DOCTYPE html>.<html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJla8e39670696e1c663c4f4a2b9c7ae54b" />. <meta charset="utf-8">. <meta name="generator" content="Google Web Designer 15.3.0.0828">. <meta name="template" content="Banner 3.0.0">. <meta name="environment" content="gwd-dv360">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <style>gwd-page{display:block}.gwd-inactive{visibility:hidden}</style>. <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-transition-property:transform,opacity;transition-property:transform,opacity}.gwd-pagedeck>.gwd-page.linear{transition-timing-function:linear}.gwd-pagedeck>.gwd-page.ease-in{transition-timing-function:ease-in}.gwd-pagedeck>.gwd-page.ease-out{transition-timing-function:ease-out}.gwd-pagedeck>.gwd-page.ease{transition-timing-fun

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo&google_hm=82nPL-gDAe41xcnm3Ha0dg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32066)
Category:	downloaded
Size (bytes):	107961
Entropy (8bit):	5.359093244687028
Encrypted:	false
SSDEEP:	1536:jV4hHAqu0mcKYXcnNUyHTPLkABMyl9A7/nplFblCPgKDrNUK:jiRVu0lKY666LkABNl9YPb7KNUK
MD5:	499BA64A23378545748FF12D372E59E9
SHA1:	EAA4E4A08400DA3F22DEDDA706BA56CDCE5B0B7A
SHA-256:	001ACBB15D9C69510C0817E6DDE361BFF098406FAD182AB3C367F86FF3DA8343
SHA-512:	F16CB8287D0EF80BB38CC9B5C3941F6798F9FF2F10FE471492D2BD98F515694A01BE1DD03D4641F36D96FEFCBB50BAAB8B7C91F1D687DC5E7CF98F19D3CAB37A
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/gsap/latest/TweenMax.min.js
Preview:	/!. VERSION: 1.18.0. * DATE: 2015-09-05. * UPDATES AND DOCS AT: http://greensock.com. * . * Includes all of the following: TweenLite, TweenMax, TimelineLite, TimelineMax, EasePack, CSSPlugin, RoundPropsPlugin, BezierPlugin, AttrPlugin, DirectionalRotationPlugin. . @license Copyright (c) 2008-2015, GreenSock. All rights reserved.. * This work is subject to the terms at http://greensock.com/standard-license or for. * Club GreenSock members, the software agreement that was issued with your membership.. * . * @author: Jack Doyle, jack@greensock.com. **/.var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global:this\|\|window;(_gsScope._gsQueue\|\|(_gsScope._gsQueue=[])).push(function(){"use strict";_gsScope._gsDefine("TweenMax",["core.Animation","core.SimpleTimeline","TweenLite"],function(t,e,i){var s=function(t){var e,i=[],s=t.length;for(e=0;e!==s;i.push(t[e++]));return i},r=function(t,e,i){var s,r,n=t.cycle;for(s in n)r=n[s],t[s]="function"==typeof r?r.

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.589780198035243
Encrypted:	false
SSDEEP:	3:Hd1bTX9KLkRY:TTYH
MD5:	FF2A27083F57F6D9B4D29C8179BB1D89
SHA1:	D4029E61EAEEEA959F39A1540289749B12E92755
SHA-256:	AD7CBF1246D2D2F6E3F6A92C8B69C186B978EDD968CACB565A2BA157679B869E
SHA-512:	08D8DA6C4AA8AACEC627255299DF1FC8270D40C187687101D2822853A050DC5602661EA11065AD9C38ADDE2EF7CE2A56A0AE690273AF69400096134DD699C5ED
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkhaOuw2UjKNhIFDRM0Cs4SFwn-GK5lJGKMEhIFDcMS_rwSBQ0d3M9e?alt=proto
Preview:	CgkKBw0TNArOGgAKEgoHDcMS/rwaAAoHDR3cz14aAA==

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=OTEzMjIzNjk2OTI4OTIxMzA3NA%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (430), with no line terminators
Category:	downloaded
Size (bytes):	430
Entropy (8bit):	4.972483524869524
Encrypted:	false
SSDEEP:	12:cHTTyOGq/BWEBa5Xt3TdWdsApURTWpRhb1Jed:6TyOGq/BWEBcXtxWdyRT4hOd
MD5:	243F2A5CD6AA04E6F0D3E7F1F1A577A5
SHA1:	4B4943D6F2F483DD5ECDE6E0E94A40FD13E59B9B
SHA-256:	9EE1397F4DA0E0C981A979BC1EA43BE1D0C28BF3619636DF8AB9DC09FA770AAF
SHA-512:	463AD63338A4DDAD0A1E4D80F951DAFF91729E8CC1F16C9C2C8B36A2DED3A9987E845C25ADBCD8FA0BDFB4708A640CD94EAC06046201B5D7BFC0C1C83413C52B
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/facebook.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook:'<path fill="#fff" d="M28 16c0-6.627-5.373-12-12-12S4 9.373 4 16c0 5.628 3.875 10.35 9.101 11.647v-7.98h-2.474V16H13.1v-1.58c0-4.085 1.849-5.978 5.859-5.978.76 0 2.072.15 2.608.298v3.325c-.283-.03-.775-.045-1.386-.045-1.967 0-2.728.745-2.728 2.683V16h3.92l-.673 3.667h-3.247v8.245C23.395 27.195 28 22.135 28 16Z"/>'})}(a2a)

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70288
Entropy (8bit):	6.02574079373221
Encrypted:	false
SSDEEP:	1536:KbEan4EQKob25ZrcxROplbfUWGaCC3UW94MGGc:q/QKbrhEWGTCtPGj
MD5:	65A5122127B20A89BAD170B8CFACFDAF
SHA1:	19954E1655F10FBA797CD58E5CD1C4BFBC471E7A
SHA-256:	B6E2A9A2A231A6295ED25CF6D64B355674C095462F93C564E2DEAE87FEB74C6F
SHA-512:	2F9CCC8D2A2D65E6BF2190DF5F7A84AFFF869CED71FFB67FA537FC50F508C22B1E9DFFC826075ACE2738B2F5F7487F05DB8B0B8FAD4EDE98E23F3561D59BDBAE
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=4026222152;ord=3lxc7t;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMI597V6r7fgwMV1IN3AR2cmQuLEAEYASAAEgJWU_D_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYBgB%26sig%3DAOD64_2GiJB1vOZBCkjo8FmWG9nkmmarNw%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=1045;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_1680741234"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_9DGlZdqjE--boPMPjvqCmAU"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("objec

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003), with no line terminators
Category:	downloaded
Size (bytes):	3003
Entropy (8bit):	5.167242825547432
Encrypted:	false
SSDEEP:	48:FTaJfy+hiQFNB7GEGTbTzLEoPpKkVr54TH4y3yXHlrMPbEz2gqGC7samAw8//yYZ:FTsiQFNBGEGLco7DiH4eyXHhMPMoxmLo
MD5:	04B083BD0261502C1E0C01F7EDDE90D0
SHA1:	E3B6E90E0371A8050D525DA7217A9F18FD34647E
SHA-256:	C48B1FF73DB9191E083A11B99C66FAC0E506E01081B0358F81A98A26FACD8C45
SHA-512:	555CAB3589E67FAFB18A8DDA37DED9248B154A38E76CA14E9D08957C79AAACB1CAEAE7A978263906684DFCB1E8C545406E2DCA48AF7B2DA977DAF1526E98A7F5
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/page.js
Preview:	!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".KJQApO2n",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.init=function(e,a){void 0===a&&(a=n);var t=":not([data-a2a-url]):not(.a2a_target)";o.querySelectorAll(".a2a_dd"+t+",.a2a_kit"+t).forEach(function(e){e.matches(".a2a_kit .a2a_dd");e.a2a_index\|\|null!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:n.linkurl,linkname:n.linkname})),i.a2a.page\|\|(i.a2a.page=!0,s=[],["init_all","svg_css"].forEach(function(t){i.a2a[t]=function(){for(var e=[],a=0;a<arguments.length;a++)e[a]=arguments[a];s.push([t,e])}}),t=(v=n.static_server)?v+"/":"https://static.addtoany.com/menu/",a=e&&-1!==e.split("/")[2].indexOf("a

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (478), with no line terminators
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	5.248053994066718
Encrypted:	false
SSDEEP:	12:24pCOYsQNe+DMuDA/rP/0+pC51JNjhwU8CDRRxLhdH1MTQSkfn:24pXL8MuDA/gzXhwSRR1H1+QSkf
MD5:	5DD27F8F2B042194C3CDABD62FD80110
SHA1:	C035036A939799D4C29B9C0F7229AE1953D03109
SHA-256:	928131AB2183D971CDBFE2ED1329200212D0021DB70574A35C89AE169C0F6E0A
SHA-512:	95C7B2DBA57DD75E6120794C0FF14750258D8CA3C86E6EFCF04790D347BDA18E246E14D5FD8CE645E46E268F978132407BAFA93CA97FA003103B59C6135334BA
Malicious:	false
Reputation:	low
URL:	http://s6.qhres2.com/static/ab77b6ea7f3fbf79.js
Preview:	(function(e){function t(e){var t=location.href,n=t.split("").reverse(),r=e.split(""),i=[];for(var s=0,o=16;s<o;s++)i.push(r[s]+(n[s]\|\|""));return i.join("")}var n=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.so\.com)/gi,r=e.location.href;if(r&&!n.test(r)&&window.navigator.appName){var i="//s.360.cn/so/zz.gif",s=document.getElementById("sozz"),o=s.src.split("?")[1],u=t(o),a=new Image;r&&(i+="?url="+encodeURIComponent(r)),o&&(i+="&sid="+o),u&&(i+="&token="+u),o&&(a.src=i)}})(window);

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 38650
Category:	dropped
Size (bytes):	14147
Entropy (8bit):	7.98433412282866
Encrypted:	false
SSDEEP:	384:RZKOmm9fU/6D3pTlAnrxTph/vaQEhhqCwY3NGI:bEEC6T3iNhnJgCY3NP
MD5:	483B0A2F475A670650D3F88E3C80C66D
SHA1:	452D3EA702067D5C153AEB91B21ECA2702273E15
SHA-256:	F449EF3B253FB12401E7CF442699568EFA0989A087644BA9126D4B9B2420637D
SHA-512:	ED252D62AE999C5C0BB63D13325C8C7643D269B0B6F9E724628BD8D4BB7BC51556F5DD08467297264B1E06689B48A7C36A97677A7925EE78496A26E08DEDA826
Malicious:	false
Reputation:	low
Preview:	...........}Ks.7..~~E.....\{..7^....bvr.c2..Lw..............F..H$.@........?.7......r..n..:....r.?..w.......l.7w?.^..............7........_.{.\x...../....^.....o.....Gr.~.........f....~...2.1.7............o.........wo.Nw......?}....xw..........o)n)......o...o.._.....v;.?..{...f....6.\|.e....z.>..j......j.....{..I...7.JLY...u.Y\j.#_s}x........-T.r....-z......S.[...\.%.....w.k>.4.I..~)..1.....V7.6^...f...c.HK.r..IR..k....z.FWW....C..iU.8\.V.+...QR`_j..}8...<;?rI!..!E.9vW..p.:.IB.I...]i........p.f_#..#...+>..?:/#.."v.nT.+.W.@...Q0.`.P..j....D$z...)....f..XX..].QY.+E'.5GJ.0h+.Xt....\\.T...A y..].[.F{....g.I.N..l?l....m..._.........@..1....-.!.........\.$..&d.....6..L.'W...6x!..3.;.>r.5......WH..].6.M........XX..Lj....IsR.n...{..\v..$Z.NRH..d....C6>_.....kB..\|...=.E..`GPBfiv.+FG.XLL.......F.:..ilr.<.ou2}r.>{.34$...W.....(..0....&a..b/..3.....i"$..,....9R[1...tX....-.\|...B1..s+.).{W#.z....Xs.0o:..1.*..$..[....JC;"...7.....d.Sj.)

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3039)
Category:	downloaded
Size (bytes):	20692
Entropy (8bit):	5.52447474774703
Encrypted:	false
SSDEEP:	384:Rx/D/0b5Meagmd+1OAJm6J8I8g+iWCY2gNpBX4OXiQOQX6w32s6abwLXPyZkRc6s:Rx/DsbDaHqRZJ8Lg+iWHrJoOXiZQJH6m
MD5:	FE3D98AB94286FD185202A08B7D8637F
SHA1:	D749FDC6045F24B669C937221BE6FAB33C4C6CDC
SHA-256:	D58ACF16B5E4521C9EB24FE9FD97308E5F8BE1297E4B63A547E5B610611799AE
SHA-512:	48BF75B04B2642570B8E235C221B5AD0621766117BFB8BD93C334BA5142FCBBA3854D93E5789017526C3348B0B178FF017125F1795F41029469744E656165106
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function da(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3190)
Category:	downloaded
Size (bytes):	113329
Entropy (8bit):	5.5425534745301075
Encrypted:	false
SSDEEP:	1536:sEo6wmPpFI51aHP0/+MzVnks85XU3GkwE+nprJd0x5qFtSR37LyT/mCm:sIBFaAMm2ks85k3iEqw/R3/yHm
MD5:	B96023064158A454A208A49620C0734C
SHA1:	E3C1CC046EFDFABF65D41A8A3CB4EFC63E3C6C46
SHA-256:	1642DD5DC126DF4FEFF2255CBA0988528507973D842D0A73331A5873F6B9D4E5
SHA-512:	44F33B8D6FFFABBFC6FEF7AF60DC2D7A07EF59B6969F828C177AC5814C5D07C2C103ADFC165F07CE4B6D9B55928A913BEB5BFCD854BE09596E401A41B884585F
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/express_html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.fa("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ca(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x799, components 3
Category:	downloaded
Size (bytes):	121569
Entropy (8bit):	7.969479053976151
Encrypted:	false
SSDEEP:	3072:CI+m02dFjnWlH/n6Yh1Zac0i3zlKTbtSZbdqJv:CD/uWJfhHR36btS8Jv
MD5:	52EF864952015A61DDB5E35210545DA7
SHA1:	6A014D198087B37B2384224523D85043DA2E8138
SHA-256:	DDE1996E0FA1D49FAB1C9D7F079F9732DA159438FE6A66307215762613E02E41
SHA-512:	81D0742600017D4344C7FB952A0708E27C3D284A00CC59DAB4EE4C30C75E6B9F88718F987148F619A2A23BF27EF9933003B81D1AB5278B00916976D95C384D6F
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/18409596597223945621/14763004658117789537
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&2....................................................F.........................!1AQaq."..2....BR...#br.....3$...C..S.4s.T.......................................................!.1.A.Q"2aq..B..R3............?........kt..@...".@....$..".)".)"..D8@. H...$.. g..@W.r.....@..W.B.F.QM.H.......b..tQ.F-..J..y..)C.O.y<...W.....a..Yl....@.$C.p..$C....Z...@[V.$.....d......$B@...@.$.. b... .DVPR.....S..... ..A.A..7@..u..b.H...d......L....b.%A....+pAY.+pPVB"........!QY.....#........P@....!.r....T.....B..... P........4(........(D4 P.B...".".T..(@...B.....B.e@..P.B... P.B)eU..J..Z.TF.E..N. d.. t..(@. dC..PD..B..Q.e.We;;.J.U.^...Yh.:. H..... H..H....$RD$RD$..... H.)...@.2.....,...O_...AX..4.&s.d.V.../.#R..nV. ..O..y.;.%t.c....M.].x....=.....tRD:.. p.....H+z(W..(....$. b.... H.U2).B@.$.. H..H....( TUe.OTT..*pAC...A..m..i....D$..P

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70326
Entropy (8bit):	6.028965339501214
Encrypted:	false
SSDEEP:	1536:K9EEan4EQv8b45ZrcxROplbfUWK/ydy076fVc:f/Q9rhEW7yQ8a
MD5:	ED3868E8A31BD5D1226D8B7CAE260700
SHA1:	E07BA1DAD166998414B5E8729D50FB13DD86CD5F
SHA-256:	E5089B0240003B91FF5D4B15D4B826946A1F2CDBB4BDECFEEC7ABC6494227717
SHA-512:	5CC6653923A88524A5CA3BCEB353E1A153FB8F8C5AAAB6853A083E5CBDFBF9C966AD9D10BD3A668F121646E0927BE60BF86D35CE8E23BD8524B3AE28629857E7
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004000;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=155288948;ord=862oyo;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE%26ase%3D2%26gclid%3DEAIaIQobChMIg6PX6r7fgwMVzorRBB2MfQWDEAEYASAAEgK6nvD_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xhgB%26sig%3DAOD64_3JV_ze2I2VX1gDHVU4ZIx9eGzMiQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=826;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_784052543"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_9DGlZYKfEfSgoPwPtMSZgA4"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("object

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65188), with no line terminators
Category:	downloaded
Size (bytes):	83842
Entropy (8bit):	6.134194805744873
Encrypted:	false
SSDEEP:	1536:FUAan4EQ23i3XxxZVsB/bhZrcxROplbfUWA2cl/yrJc:OQnZViHrhEWAtl/S2
MD5:	628B75C1B564A95473002DFAFE270488
SHA1:	C7709B6202C7A2249690AEFF1D7CFD366D0536F5
SHA-256:	F0DCE5D2EBB69DE6273B1E10C128B045AFA5893BCB0FF9E9BC8F5D1B7566511B
SHA-512:	6A47A92D6D6F34D2686402D60BEA69A949C743DF042FD96A55CD4C61F51B358C0F3E5B36C007EF2AA90809FDEE6DF24B0CFAC8111F8D1D2BDDA7D1EB8D698B4D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/dbm/ad?dbm_c=AKAmf-D98bqk1f2DSGTVW9a8Fsu1hJzHsZPixphfFenb6L9PvOjoWsDhw3M509b-o11Kty5K9U5S5KBNr_xUDlqPz9Bq0gxTiQPSkGmgwdsdAMgNcJWSEHHHo8Om0JKqs6lWdbWALV-vGWay0oooBy-1syz_PP389wQEXXmoQTDkydSiodX4iVE&dbm_d=AKAmf-AS-BVzHGuJVWQJ4IwOWzFkgL0l8dxqlA623Y572r1mL9txyubAOk8BzbecQ0dqAAQk8kCJ7ehGY2W5Rc4s8HAKUdyR5ZyVnulqvNIMkakN3881e4cmUWsMYKX_kJ_r2fa2NfOwaAHsDULlCsquScwfhzNXchUT4yOvols8xAiJjRztpQFJN7iF1Jf-KQBNHf-EahKURV9f5-wYBVODZc7Ha0ld7l1Jy14wO_3FD4v5Q14cturGdZuV5akYa4rJ86WIhh_D56C3FkDWRn9FZMLneuRYPAuRPOAHnbCJKggRSxKCZKc5Zq4DDTifkE16zF7Dn6LTcCs2sbPfKPSS-0UiM81d3BP-ZP0Ga-5K8gK1wJKeZNpVMbdgaZfxzxJUxVmeYIONy-2iv3nWNUk-97RpstyF14mfCE3jZKY8J-l1f28oHoJnyUaBR_8Td8WgGsmB0QObeR0RWS58DAmZQkf1UuDA8sEuoQh76KzLujPJ2UsUKRDewysmxYBpeRjWK4e8PedjDm_unePnvvDPsbe3kXDogx0JORkLgwodqBkypgjScPg9yIriqT3lQzZQ0IOmrX5TDtAjD2QTHUDUx_o-2vC4e7Z9rgXDaQoEpIo_HF5msGY5Gg10WIMEnJ2kyQ3ndeJvCcXarB6oHYS8WSJtbjjXzXNTncafM_rFMT0Xnc4u4ztfPgG1ZC0yDDE0P1bvKB1l1umFWx777DApvVEYK2ZdBrjEXRbe5yRDkf_KAbLVGIuQSsexraj_RuoZAYGChrzjBTabcA0iVMenImGAz9wxue26hkxVgpOHkREhQmf2WNf_WG0dwiWpnveuB6PKxJj____sbdSb8U3T1p7j3Ybr7xATJSfZuriwTe5vKLBC5RyBcKAuB8-oQky3Ka--UKJydgIgDsEAcB0KMVY4axxGMZeR7MkKtZYKggeY-o-qpxmevtN6iuSz8V94FlxFr0RqkcpyRpnaNWdWrIuHdMjev8gYlptb-aMXcLdRATt4W4_TD8ZGgsy2S8MAVHBuBKxlgzH77EBFRRA5c7K9gOsMqFBNy2oy0DvMa9BufeXlAAc1GqgSSeSBq7rzR3_Ff2zSwwRPR_2-GeKSNPMyUhEz77R9hXE0IzReIads7gGjwISomxCJuHNwRQ0eBp1-KUGWnxH3zwaCNcSuG-Agg5pqNg4qFBEPcGEjysYi7a1KiWUf5xUcFINVs9EaMcTncixWyk13uH_e3BUaD2lCC7gLwknW9wJqq4J3BNafCzK7i3CP0E-gYRhT1gzxbK1seo_XWLrMtaqarDyhdkBzAE0kF4MgySquLt6L-RrTz3WLtK-bWBhPHh7idp16welB2dq4SQ0quEoL76hm6zq2hs9mWbDfAYHwZmhn9bYxuDX1AeNOYToDSAf4HdX1kSXTT9Fqe5rtwGWjUmH16aoAXDzN23zBq9IDuMjU4To86_vVWCc_lQKnAzSoqhpHEUtqtnV2er14wKqkaWL_V0w-x7dk24NNBgQ9IuVKYO_h-4wPAytYFMj3QtqBjxoX2ysL2uKW1h2ONZBV86a4gJjoXLoKjks0sBwOZnIPyZ3dAH9bw5O-Ew61nCfSbsdXqv_FprwDA3Ln2L93Kf7k3QO0Te0YymWfvCT32cey0s36x-vyTbut04MwOBBbIT1jqSOfjm5Dj6OP9rlrOcCHu1iMskGb8WRN9w0s48O1HVQBsrf77U_aRA2WSBvrZQtQM2MmMrvqDmpiDSjBPhZVkZCqL_Ivk_ahYyLm7omoUwtaL7QWmkevPBWEf_8caC8otdo-Rjjl3O2WoIY09oJr-CBeZM8UCRr2hqP9aF2xrUr7S6sUkHJB27LrdPCt3NE9O9r6ak4AmfrlkS6EE7MQQ0DjfXgtrvO3BBLozwXkvJ5p3WcDrsrSCf3DeX7a8ua6t2vszqMsL_zFAyX3UXGWOguMvey6PEmOBAdWnfShvaDYzm8PAR-rJ8ItmsFuVslxjuGGOjL3_d9geWXfyBAjLMo5FRan7c4dKK2r65JX0kNlfPaKYh7iRlGvcMQGkgdFaLR17NbRzwnwTn0IvKB_0u6dU5mLlTJ-Y1DOK3C0YHIg-HZMjUzEMR5mgW_xNRrfFzc5IiNfbmn_MQEBXaas5THsL9CgIXHgCS3S2dWEfGUsyWxdDOnF_M7ZE0y_Cvqy8M_XOPPrHfK3Y2fe2cEFE2dXnXsFzhkDkpAwlGSkI2m4l1SanhCEfOgMVzaBpyS4spbFg4B1xuNT1JYSKl_tpDrsMG-JcZCBuXuWAhUye-le8XNXSYSe06nFkgCwekUfigmig71GDdZqG0-mzzkilfMaFM5l4By8iZeDJOGzBnqwubr_DjRyIgwYeIYK06_qfL7G7vGgjvWhLfrCaZ140qxloKU5-MZfNGP6TixyPF2vzbpYTn8s9Ioh69MjJHl18X1uchR7j3NGgP5dvjjFnmnSreagE8_GAiTwGiup2wNOiKjp50LvLFkBXAcHfBJ3iRoxCo9Mcn4yky8gX2qolb0k5EbeWl1bPGEtQ1xi9UiISWhPhNGzLLk2PjGvBDR6hl1FbPZjbVEoKDMDqLcNLfqfXWY5YRkPY7N7wj8xmVuuIT62q8nL2kUXv0gCx6X7ReYY1ZEsU5tU1KcYeKkEz45zpWalJJLF6Qm4ybcoRQuKpctNZkB5z1BREwyI8OXY3tjjCcnjXtbsFeVkJQkbpaYeZN3fN1_78CvI4vXK4B0FY6W7RfY_oKfOYJL3VQePxqh1IxwheaVAUbbXbyU8Zii2o2IFuAoPlh6t16wLIlZdTDb86O7tK05qcb83YMQMU5-wbiTaaSz6F5S_Bkx9XFjPVzZIV6TqnQYioD3IPIKdFD3yujX42mgxZ8xjtffXgkan8OyIbD-TM4jmxDNX9PP1TILagzSMG2PcmJimdrXWfChhsGSwPrU3TAyURRHlxTYfsmYxNkQxnl72RpFdcaS_wZy8_4bXy3ksMIPIUQYlSgXS1_6x4s_Lg3SYH5tA9MpFYsdkpsZCHb4r9L2H87iwOGEw-86me-IlCV-UpqSN_UckTM56lxVidQ5cImY1Vz7VqlP0OurwnypaydnWbHfHWvPSdGrTbyAzGkl42cbf7prFmQCBjK73iURGMUsZmdCwIFzT7CwaWiJzNWYjuxymsmyHpDJqr6gPbbP6lNRKDgW2TbmBqOLqyT2ZVJA8A9zRz0CayZG-dg6Yt6UCjczvl_-fkYNZUU3H_Bb82Ler9RHt3ap06n7olulb6bgbSkgWVByVe2jj1VBZDJNHhbaO_5DXlddTNaTrfUIlDzK7b3D7wLXKy31CqPoIMxOM7zLs2dWfRH86UPbv8udBJ2eEpxryMvpUrW_DjOz22LgrMh5Zy6pdffrIZP1pF7uQk2fZUwcRCvuQ73c6IrubiiDEl8PtDBIXHRYWcl9--5jxZr5BAP0Gs8xVlcWi1jJDzkKjfMpyXwvGLFGfQVzGG63nQ5dI2h26gHOq1sHche7eyXOCuNqNcwIOtkAbDfPJr13815ChaLhq-TCfpo8ZqEfnEqdR5TDK95-cm9Vbv6mZymLlS9N-Ua0syvEuyyC9I_6UWOyZTyfCY7nFJqvTBFuKJ8pa7hUiybNNNf1HIrMQkvpOHyW94eM9X3ouEGEvb2kYfqGI27Q8kKDXUXYwXc1YK3YYNQ&cid=CAQSOwAvHhf_wPBaE5IrSf5SVnjTZgH9-XtVGBmjHKHRbqt0X5m5pSYDZgNvJmTLjTu8WfxfYHVRRgLSuwLrGAE&dv3_ver=m202309260101&nel=1&rfl=http%3A%2F%2Fmylovelybluesky.com%2F&ds=l&xdt=1&iif=1&cor=8061403577741055000&adk=3062569611&idt=685&cac=0&dtd=9
Preview:	if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_EDKlZfSSB56coPMP1ZinmAk"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("object"===typeof c&&c&&"creativeLoad"===c.type)

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR6u1drK2729o5c18wG9Q3s2LyiDDPuQX3X4eZLFn6k0-HgSvtCKKoTwKUgqaR0H-Cu3hOr6onHd0khznnN_6tpsk-fzr4VMkt2
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59324)
Category:	downloaded
Size (bytes):	96328
Entropy (8bit):	5.539620940559966
Encrypted:	false
SSDEEP:	1536:aCvTI4HJDZe2km8ms2ZnsWpUMOboMls8w:ZI4Hbe/JOnsAdObouw
MD5:	299F39D3DF38D3DFB14859648743E2D9
SHA1:	9578DA82EB9410F80CDD40C8FD8832DDD7BF1C0C
SHA-256:	759CE2A2CE00D61D23C78B075F72880DBA5CEC69876073FC1313CCFE536C7101
SHA-512:	5AE8B35AC5D32E0F6667209B620A88E83E2D2A11E7546A003793EF34D5D06E76FBF9E67B05CE2396202694C7C232D6E9886AF279EF83C2D41AA06BDF085A2C3A
Malicious:	false
Reputation:	low
URL:	https://adsdk.microsoft.com/native-to-display/sdk.js
Preview:	(()=>{var e,t,n,r,i={8572:(e,t,n)=>{"use strict";n.d(t,{iv:()=>ke,cx:()=>ye});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.before:t.tags[t.tags.length-1].nextSibling,t.container.insertBefore(e,n),t.tags.push(e)},this.isSpeedy=void 0===e.speedy\|\|e.speedy,this.tags=[],this.ctr=0,this.nonce=e.nonce,this.key=e.key,this.container=e.container,this.prepend=e.prepend,this.insertionPoint=e.insertionPoint,this.before=null}var t=e.prototype;return t.hydrate=function(e){e.forEach(this._insertTag)},t.insert=function(e){this.ctr%(this.isSpeedy?65e3:1)==0&&this._insertTag(function(e){var t=document.createElement("style");return t.setAttribute("data-emotion",e.key),void 0!==e.nonce&&t.setAttribute("nonce",e.nonce),t.appendChild(document.createTextNode("")),t.setAttribute("data-s",""),t}(this));var t=this.tags[this.tags.length-1];if(this.isSpeedy){var n=function(e){if(e.sh

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x627, components 3
Category:	downloaded
Size (bytes):	95291
Entropy (8bit):	7.870822762278626
Encrypted:	false
SSDEEP:	1536:sU9XreGrGUCDuw+B0pGqQ2TYXqso4KAL0tp9XYmXO6GJJUtWcX:nXzPR0jQA2o4fwtpW3JM9
MD5:	18EB35CD7E8444BE9EDBE92BD174698D
SHA1:	97A2AF7CBEFA498E162CC4708467176409A1E949
SHA-256:	50EE88E5427BB76B5036F281E7CF465B19C18DFDD797830DADFDA05AD5314BD3
SHA-512:	6B771253B4F00F119CE5726A3943CBBFED97CDA3DEF3F9EB097CCD80CD6386F2D2D975D9B41F315EF3507189C9353B03C4BCC6E04FC5FF1621674B07502D8063
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/17326472923532759135/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////......s.............................................E......................!..1A"Qaq....2....B....R.#br....3..$C..4s.S..........................................................?...d.P...@e.@.@PD...2.........A.@P\.........9 ...g..W.P.;..Z....r.H.U..^.1..u..N...v.....N.... ....h....dAR.........A!.....A.@a.A....J.4.k..e..@P...A.D..A.D..A.D..A.B.,.@..@...w...P..X.. ........H'..yH....$......O.....r.. t 9.T... Z.Q......7.... .j......AA.@......r.B...V.Q...nAB...J...IARPT...@...qA....~A..UC..7A...\..@}..u.....@.P..AA..A.Z.3q<.u.P3"..Y@.@P.PT...P{.@%......^...%..@PD.( ..T......$ .PL..j.("......A.VPIA%....\..t..eI@Z..A!.@... C..yH.R..:... .b....B..........A2..PHA!....D.j..g..j.B... ..B..$ .... .".. .".. . EJ(.h.....R.."...:..:..:..:.h N".i.y.]a...T....n.`.9AR.J........ ..jK.K~.4 .,....(.@..kP41.j6.gxA\.!j...."... wAL....(PP...

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSi_oDA7vinFeFX0bVgjwOSb9BUwloWwKgl2quBqyM4WgB_WR1ca3JPR6JygCfxYimVY7TVS2vFZdZp5n_c_Pf4vwpFPzIXYBY
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1604
Category:	downloaded
Size (bytes):	533
Entropy (8bit):	7.541446803870621
Encrypted:	false
SSDEEP:	12:XKCOk8yUsrKs9tifrvZbwUW7dmun0h3Uo2FcynzAegngrL4TgeeyJQcS3uG:XCuDKs9+vI7ALh3vuLI3OZ
MD5:	D9CD68296C84E973A934515D36BB738A
SHA1:	EC8D8A89A763E497260F11E4F81A6E59B0C929F1
SHA-256:	C8B442AC9387F0E0A63AB704C06163606894ECD1045E46E954C2581479395848
SHA-512:	887AB1F91DF507595706224136C2BFE293B1F0FDD570689A4876B6FA1590E2DE847629B8F11DC1AEE09B31800EBBDA0A9DC9C7DF721259D2C24586C67D682AFB
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/add-to-any/addtoany.min.css
Preview:	...........U.0.\|.z..r.......Z...V1^d/.(.w.0.%....$........`.Y.V.J_...r.:m.Ud....A'..\|.k...?!..:.PW.C^zM.5pTd.YL.O\#U...\|..$..M+..e.Wa..??.....a.=.V5....Yg5.dQ.\|.X.8.!.U.'].D.>g..u..!.5h...m.qn..%[.=..{..d+.....t.N........6.T"j...].n. 9..w.J.{U..h..9x...I\|..._.a.{*.u....M......s..,...o. 0.G..._~..N....!,.IK}..?.....4u^.MY.x.\....J.'!.....N..n..O..Y.Y.%.._...M9n.9...qg...GV.K...F{.<..B.}.....?;s.y...~....$.0...4.w.2.t.`6.h.>......%.h..P....P.H5.Q.8....3\....._...lCB...T..An..i...kd.^..4..U......D...

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	65540
Entropy (8bit):	5.7867765148655685
Encrypted:	false
SSDEEP:	1536:aQSGx7LZTaxbIlgNyYfpYMA6qoSi+WFKsbvSvu:NSKZTilqV61jgrm
MD5:	123E3771086AED9C6D5210CF6E1F4318
SHA1:	49232BDF3C45362BE5A586AD6E1C09F5A577236D
SHA-256:	1C1AEE5418BAA91860B57E83E103D6C6325E2B2467B1198B93AC04AE3FB5DA95
SHA-512:	18CFDE68261F67A822AC65E90D997E4A61B18BD1938E32F43BABB2C4ADE346ECA661DDBAFC813E7DC5F5E6F24E1A4A7BB30848D90EE43CBBC65D3EDD64A91C97
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12,1.12);-ms-transform: scale(1.12,1.12);-o-transform: scale(1.12,1.12);transform: scale(1.12,1.12);

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2894
Category:	downloaded
Size (bytes):	1016
Entropy (8bit):	7.802723236230675
Encrypted:	false
SSDEEP:	24:Xv8U+1EPwwLJ0MwKVDj6QPi7FK6NqJWEx5KLWbJlzfB50LdbTm01R:Xm1EPbajKVP6QPi7kwqBjK4vpqLVmuR
MD5:	3FF09CEE0A6CD607CF08F834A0D08ECA
SHA1:	430741A450134DC90E907C8A5EA4BA8601ACB27D
SHA-256:	8469873E25513A6BEB943A9E203E93A4D1CCCB14ABAF61C6467E8F429EEFE171
SHA-512:	5F28C992DA02EBDA58429C5E878916EA2DD720D59E1CC4C8914EF3821026622CF564AD6CE9041834AD2C0E0D3C156B138D221E11DFB908023B70781BDC93AD28
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/contact-form-7/includes/css/styles.css
Preview:	...........VQo.6.~...."hR....i&c.0....}+.<P..9.".#..-....v,.R.!p .........5..[....'....xg...}>s.c@k&jou.`=..G ..b.(%..\|.ht.#h...=].....w".W...p.N..{..}...z>.......AS1._....b.z>.-I....$.........~..Y.....\|..0.....g..v.u!B=.+.e.b.-[B;..(.?...y.Q.wE!.Y.....O.....E......\...<..f.&k..-.f..I.N.]...KV...TfqsF...-U...u}....qF........0i;.^6..e&.........Z]Cy...C.l.+.(b...3.i.MC..;.k..N.o...xP....e..Z.. q....@V'y..L.E..~/pc.O@y.d>M.LY...oP.%.>l.r.B\....y..:.\i+b..x".Ne2..,XW1^B...T8....T.e....X...Z4......Q..\|...&..O...........@ch4..{...H....\..tU.,...P.(...0.b'...;4&.<...5.]oVO.y..........z`.I..MQ...N4.s....S...a.._.5.....$$v>....?..w1..3p....a.....j._O..#l.Z.Il...g..{.R.f$.W..G.....s.H...n..a7.)...0.fi..B."..g...EQ.~.....U.i.M..A....=..v.04.s..?Z.(.#P@.....[{.c\|?..O..'..F..u.Gy..#%..;E....Gw.l.....".Y!as...jM.]^...R^..G......r....)t..(.E...V......m.9..D...d.t.cs:.&......E....N.Jtzp.:.+.ntS..".I .Bv.O...V..8..@g`..m3.e....J.%.;...=O.....N.O7.1?.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmR0eEZeu1eoKWXu8ClmtLE-D7LavDnr2MLhNFT0QMkdFcdkZvPa8nr99yzRoOwA8gduVD5tp-6NYFMhqJbg_3Z1ITlzUHvzcaE
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQAM6iz3S6L8BZ4luW_x_vWTBswUNOvmkN9Fm7ymub2lZeKCdXGLUEYKkROurc9Ohpw3Sn9CN5TvfUsSAqWoZe4DVyUqVJ2zeL5e8Rc6AKhtx5ZdK4kTZFPFzh86xrpcf7ipFVST3niqISjPbr2Ng3fgKM
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80686
Entropy (8bit):	5.829789908568432
Encrypted:	false
SSDEEP:	1536:zQSGx7LZTaxbIl5olSVe/+lmOXKsbvdC8:0SKZTiLECbvF8
MD5:	59863F6A13A24F34401AD1E65F20CCED
SHA1:	98C05B0C2D4113543DAD448B706B9953E55EF142
SHA-256:	6BF3AD8FEFE9637D20AFD339B9496074F05BFFFA7B0A45A10091824CA708B9D4
SHA-512:	7915A63579CD328548B43471ADD6D487285CEF9DDF1CAB03F620A49A11E99527C6B83B07E13491F02CC3A06C1E200AA05D252A6ED41BA10A1530D7C728C02A6C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325081&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325079738&bpp=176&bdt=1433&idt=1645&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=1063240671184&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1737
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.3804945054945055,1.3804945054945055);-moz-transform: scale(1.3804945054945055,1.3804945054945055);-ms-transform: scale(1.3804945054945055,1.3804945054945055);-o-transform: scale(1.3804945054945055,1.3804945054945055);transform: scale(1.3804945054945055,1.3804945054945055);left: 138.5px;top: 17px;position: absolute;}\x3c/style\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv id\x3d\x22google_scaling_div\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscript data-jc\x3d\x2240\x22 data-jc-version\x3d\x22r20240109\x22 data-jc-flags\x3d\x22[\x26quot;x%278446\x26#39;9efo

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 132 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1901
Entropy (8bit):	7.595857670009179
Encrypted:	false
SSDEEP:	48:wQIZD+JMyKZIA7Try21PurBeaubJqntHDHuW:wQW6IIA7TrDcea6OHuW
MD5:	F2C7A7EA44FAA05D1714A64107B74651
SHA1:	94BB93359A58649A3E2C1411D12F768A8132790D
SHA-256:	351F4D3BC28A7D9AE26E0E57EE25B63BAA638682EA5F51BB01804EC88AA17C5B
SHA-512:	66285AEEFC0567C8961FF697BB7354293A70E68892B4C19AD1D730BE89F856671DDE7CDCCFD395EE870CDF01BD23BBE81C998DD99E16BA9D5A4CFFE0A3B4300E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.............PLTE....................................................................................................................................................................v....5tRNS..@.p.`..0..O....H....".h..z9..c.\.U4)..s....w..-.&^%`K...EIDATX...0.F?..L.)....[...j.H`.I6e.....Q.ttu...w..-..).&a{..Ik...;.1K".-..)!.?^.h.....w.!....,.S{.-4p.c..7..?\-...3..,..x.7..k.qB.!J..t.P.t.H..S.W>.,G.s.......I.....r.....,$..<...B..yq:.b.....$..C..\!.E..!...:.1.!.........b.]..c.[KO.c\|....a...!...6....2....l.d..w..]....EB...>.p..0..8.....C...Czrn.:%...{.t...j.=....0X..p\|.....1.&......eE`.R..+... ..`..].&.u4mca....y..).. ...I..T.i.rQL.^..hH.....1EG.9..o............,.k.uS...$..Rj.."..zJC..U.u.....V.D...D.%..{.....j...K-...x<3 ....L.v.wo..U.8...@b...........w......D .0pve...R..R)!.V..[..t.2.:.....V.N.".U.....m..W..\.n..h.x.\|h"K.V............}.t.,..Gu9%.U9XH.D"XR...$.l.<...+C...!5.@..$......_...Zw..p.n..X.v.fe&O..%"......!.b.D<W....

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1129x592, components 3
Category:	dropped
Size (bytes):	181366
Entropy (8bit):	7.978353788409037
Encrypted:	false
SSDEEP:	3072:ELH7Yt650bm4+tXUnzY21ZCEWiDgiq6XD/YdgUAwCgm05r4/uSFs0zE3V1nnOv7+:AH7W8XOk21wTiDgNA0iUAFw/SOn3LnOi
MD5:	F6D851123CEF66ED45413415D63DD1FA
SHA1:	5815B703C314658F614A332C7C00A1A1E023E819
SHA-256:	A867196C3646629B379F39A019866D16F37EA9D756404431CB232AC0D25B9C44
SHA-512:	A84A95DACD4B66BB64C8CC8CE8DD3AA278E815CF149F1A23D76F60993E283256ECFB495D66E830FAAF31228D9787F3EDD6695BA98C50FEC572CBBC6FEDD9E58E
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......P.i...........................................T........................!1."AQ.aq..2..B..#Rb...3r......C..S..$...Tcs..%4...Dd..................................'.......................!1.A."Qa2.qB..............?....~..d8.....ir.F.z..8g..?.pb^.@azP4.T....#..rK.h{..io...,@b.Def..i.c'~.AW.<~!...T.a..Hr..0...B...6........F}uv{.....E...f1..CB..s...CZ({.qo.-a...0@A.3....]d.2.....b.>v...[%tR.n....i>s['G4.l3.... @e'R.$#.^.V=.TNN.1.$7.o.l%.02H..].iN"...\}...8X6.aX1...R.......T.wh..r]T,d.b..)........tA.#z..x.._...D?..X.?...zf.f..M....>=...I.J.r\..%.G0.R+9R4.l..+>..+](.. .....E..q{.r.0`..._#.+U.Me."..b$..U9A:eY.z.35.;4.h.b1.o.l.2...t...o.6.H......g6.v4.D....._.H.........(...(...~P}.(...`-K...9...yJ...V...M.Vd.O.Smr..10.<.h.tP=&.j...[..K.0U...9e.P?.1K.(lS:.]..1........R2g.!..[3(.5e:...])U...e....ng$...H..U\|..J

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2047x1065, components 3
Category:	dropped
Size (bytes):	165183
Entropy (8bit):	7.912159984876535
Encrypted:	false
SSDEEP:	3072:vbYGNEqoC+fYf5n/X2RGD2xKNg+StpQ6Y5o1ejuh43ZiQu6xtdUL:vbYG0wxQKN5j5oyq48R63dA
MD5:	2F50B9CE5FA73BB62FD48E5BB27C978C
SHA1:	810A56FCA8CCD9642D5DE3528AC02AC3CA5D5A9D
SHA-256:	781448F262CDCCC96A1A89AA5C432CB417B9EE754EB34956236D93A0F4754FA4
SHA-512:	282EF4A1EEC12EFDD1C5A40FAF4B0B90A89871EB7495B91E238EF42A3BB38A035320B9B0A35604F923957D2B054D3771D06A0AACF7F9AE999F49572DCA005157
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////......).............................................F........................!1.A.."Qaq..2..#BR..r.3b......C..$ST.D.4c.s................................%.......................!1A.."Qa2.B.............?......4EC .0. .......@...@p...0..d)..@(.......k%Xi........l`.ro)...W...=7..f5Y..;e.D.j.Y.9...H....-....E...-$..p........X.....:@N...@.... +..5.. . >,...H.....P..............@..P.....9.... `.......@T.....P..@..P....H....r.............@...P.....H.E."`.....@..kE.I.F..$"A.@....2......2).....$.M.=0.#H..P.,..mK...V.....u.E....Z...8[V....h.{.%......F.-"+.U.v1].bx._......P...@....(..P.`ckK./. ..?k.}M1^..?B. ._ .P...................P............./...ic.s.}...G.F.P..@......@... .......@...P.....(.....F.0...9}.....W...9W..BY...".P.E.@.)..)....Ti.....@="......@2....k..S.....r.@\.....p.=>%j..k......no).{...V....MP.j.k.v....H..a.....

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 4499
Category:	downloaded
Size (bytes):	1891
Entropy (8bit):	7.900798888212697
Encrypted:	false
SSDEEP:	48:XIZ71kSdfLjaO8XrsDhw/SIlwA/YxZFXsVxh3o:YZ7zdfLjanY+S9UIZF8jO
MD5:	C893833E643E1F779E28681C429A1048
SHA1:	239AEC081C68DF0FD00A967D386B28ACA23591D7
SHA-256:	FCF5CCEA84A80FA400C0295AA315616F83495E6AC8AC29A4DDBC19C674E00C3F
SHA-512:	6B486EF68A6532A0CA723C2364A257268227EFF42BC93EA1B49794CC61FE12DB5DDCEC465C1B6714B3F934628D197C91E4DE5C060EC90F53C2FBB467B018578F
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/genesis/lib/js/menu/superfish.min.js
Preview:	...........W[..6.~...2.0.....e....6.&E..").0...y$1.I...1f....%[.g.}..sH..w.\..J^%...=&...l.\....&.u[..$...o.Y..?..hUY.....k.....@.........7-..Z...d.j.6..$..}J....n.....J^...IW....L....`..q.j...`M.<;U.v..ljV.}}..Z]]m.E..WFcNs.Z...V.....&";m ....k.\.\q.[.R.v.#...9...h.. ..ZT.y....G^[k.g..K.:.....x......o..~SZ..Kn+...D.....I..IV.yp.k..J.e........o.N..c......a$Z.E.5Fi...f4F.V....ic.B.......4...l....~....A....X.t.KT....W..&W5...Ax1...],rv.........l.f..@.L.S.y....[.qq...]........q).%J...y......qA:Z.E..GW.Bi.Q.......2. ..4......a..,Ye. b.:6...B..,.pE...#LT...4..1..G.Axc....L.....V..}..6..O.......)..E.l.Y:...{,.$!HG?O....#....VT7..#B...".OO9..j..9.,........$.O>^.....:../3.F.2Q..@......[..`N..c..M.:D:....!^Td5..V...'...z,.+.%4gN.....K3F!..0.rN........1g.<W....L....c.......!.......KA..p.......#...p.~'k`..5...$..a.r.Yc..#.dcB:j..Or7..4..`..\|w.....??N..P.c...\...(]f5....s<.>..l......kY..... Y.-6.pg.`..0x...r.L9..JI......f4.....D..B...C.{c.:.@...

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (378), with no line terminators
Category:	downloaded
Size (bytes):	378
Entropy (8bit):	5.072926103190719
Encrypted:	false
SSDEEP:	6:qQQHPAKTyryGqMrwBWEBafCgXtXIepjcaCufVUk69qJYvjuhEsgoFuapcst3xifa:cHTTyOGq/BWEBafC4t4eqaDNUOYvj8QK
MD5:	B285F29D96B60AE611551C8D6F1B3838
SHA1:	69523CE7BF3C5888DC17BD5014393D9227CF3FA4
SHA-256:	705DDD320C7AFE5895ED0BB7438874918110BAAAEC1AD4B7DA72BD13DE82F96D
SHA-512:	E16ECED65F0C03C616450FD3D3F518C18422BBDD940DC462975C35A2BAA19F261AB57235627FCF3AC7B6693E9938771A5669E8847594FD76230D60E5263E9767
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/facebook_messenger.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook_messenger:'<path fill="#FFF" d="M16 5C9.986 5 5.11 9.56 5.11 15.182c0 3.2 1.58 6.054 4.046 7.92V27l3.716-2.06c.99.276 2.04.425 3.128.425 6.014 0 10.89-4.56 10.89-10.183S22.013 5 16 5zm1.147 13.655L14.33 15.73l-5.423 3 5.946-6.31 2.816 2.925 5.42-3-5.946 6.31z"/>'})}(a2a)

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	314444
Entropy (8bit):	5.847786534489296
Encrypted:	false
SSDEEP:	6144:pZ7CMnSi8dzjFKFW9xgaw+tRrO0XyBmCk+9ccXZTicZaJBNEC:5nSVBJKc97tVX4mO9PJTicZaJBiC
MD5:	CB7537BC39301D9118A9A4CE73315D3D
SHA1:	3E8B80A43D1387DEB6F77F639D54744D976723EA
SHA-256:	DB3B65A47754B7636C2327B5991E37ED7E99ACD1C1A14EEEF6CE835F21C9E62E
SHA-512:	B0A18BEEE35144762EBB3DB900B6CA006FA9AC441305B3FDC33FC85773952BBCE06011C1104F647B4E2D9AE5F3B180AB6F324DF692FD284F90E22F3C6A164F70
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325035&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=1&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325034192&bpp=3&bdt=3599&idt=1676&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=4342792276688&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1739
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3clink href\x3d\x27//fonts.googleapis.com/css2?family\x3dRoboto:wght@400;700\x26display\x3dswap\x27 rel\x3d\x27stylesheet\x27 type\x3d\x27text/css\x27\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {displa

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQvis-t3_6M4QEWDBG_KHgmNpfrYG3utLScePpT0XUhvezDgkECHNSG5Ud6V3JQ02WA0SAzggh07t82ukwqMFIhV6vAKANsjw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24578)
Category:	downloaded
Size (bytes):	27348
Entropy (8bit):	5.307161621653439
Encrypted:	false
SSDEEP:	768:A9/llMtCGsOU2Rfz4wDQjZvy/1QWwY4RXrqt:AxQtCGY29DQjZK/1QWwY4RXrU
MD5:	A9A76A46227547E6290282D1B1721500
SHA1:	7B6BFD9AA975061DC1A7286C0806803D7233DAE6
SHA-256:	EC5D0F941CBEC10144DE0D34A32A852C46BA05A8E9C08A73B56DF14422804439
SHA-512:	EF90A2E75BF520B6DDE12F458D5D245ABB674F4C7C90C1624A43EE66FAD336FD9549A0B3244C105D347BE08266D0B0EC91A36D82476E8A6E1C35C10F50546ED7
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUU9JF8H&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"6","lookup":{"g":{"name":"g","time":14,"cookie":"data-g","urls":[{"type":"img","url":"https:\/\/cm.g.doubleclick.net\/pixel?cs=6&google_nid=media&google_cm=1&google_hm=<encb64vsid>&google_sc=1","eu_url":null}],"pvid":77,"isBl":0,"g":1,"cocs":0}},"ussyncmap":[],"hasSameSiteSupport":"1","csDelSS":true,"batch":{"gGroups":["apx","csm","ppt","rbcn","son","bdt","con","opx","tlx","mma","c1x","ys","sov","fb","r1","g","pb","dxu","rkt","trx","wds","crt","ayl","bs","ui","shr","lvr","yld","msn","zem","dmx","pm","som","adb","tdd","soc","adp","vm","spx","nat","ob","adt","got","mf","emx","sy","lr","ttd","yie","mgt","tst","ats","pts","mdn","mts","trs"],"bSize":2,"time":30000,"ngGroups":[]},"log":{"successLper":100,"failLper":100,"logUrl":{"cl":"https:\

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI1tuc-L7fgwMVRoJ3AR0j-wUOEAEYACC4jvhi;dc_eps=AHas8cBpFSdk0zfjDy7D5ovbwXRhEGJyzzgRhRdemV1RjnkMXHbtrixFGUc51nYYfxN84BNpFFFkqIMwkA;met=1;&timestamp=1705325094322;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4&google_hm=eS1BRjguYnZCRTJwR0NTYVBjLkJ6Qkk5T1pkRm9JOGJYRH5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 768x512, components 3
Category:	downloaded
Size (bytes):	94730
Entropy (8bit):	7.964905882599774
Encrypted:	false
SSDEEP:	1536:nB5MtTo3H9z+IOGWUxcKf7MkWF2tbPXOe5QoDm+VZj1mtT6Qf7wNtvRs4494rcfw:nvcg9z+IDWwcEOIvOeTmUj1mVBgO9Kco
MD5:	11917A0A8EB5740D1B148B84ED1370D2
SHA1:	D137C4D820C553CF292AA51B7C11897B5D18A605
SHA-256:	5359AF53921F8D7F44072082A5AEC6F82E5616566CC39398B4B2118B768CAE63
SHA-512:	3AFC7310AA0AD42D6DD8DFF1F9A2CBFD0CC488F9749AD29A433E7F095F6D9C9437B21EF41666ABFEEE2B9B11C4611363F36A9CFF8C226943754FCD8EF6D28F42
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/uploads/2024/01/AirMacau-768x512.jpg
Preview:	......JFIF.....d.d.....,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Canva" xmpMM:InstanceID="xmp.iid:207399F0A94C11EEAFFDA2143F58168D" xmpMM:DocumentID="xmp.did:207399F1A94C11EEAFFDA2143F58168D"> <dc:creator> <rdf:Seq> <rdf:li>SockPeng Ng</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Untitled design - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:207399EEA94C11EEAFFDA2143F58168D" stRef:documentID="xmp.did:207399EFA94C11EE

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2222)
Category:	downloaded
Size (bytes):	42217
Entropy (8bit):	5.396200966239423
Encrypted:	false
SSDEEP:	384:/xEVUMByh/fa6cSOUkxHT72sDWB75/0D0PmfDpl2yk/Z7SNJQ0Wu3PI3Prx/ttoI:hRS6cbHTi7iFkOvLbAN9gzRON1Rxwi
MD5:	1C33A4D6D63C7E6E38CC72E6245FC107
SHA1:	19EA40DED1698EC0617604DC3E09897F7A8FF640
SHA-256:	435DB380C9936C0970DCD3D9941EAB6AEC2FCF2A38C3E2B4E02D957E8E76BD1F
SHA-512:	CA55321C3C847819553238850525E59C6ED5C37BCA116358D5080971037E56A3407D256B6A78DBE38F4B91CC97E62D899296C620F80701598983BA0624E086E7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/Q12zgMmT.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Aa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Aa};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2189)
Category:	downloaded
Size (bytes):	411220
Entropy (8bit):	5.580137810310274
Encrypted:	false
SSDEEP:	12288:QAYJXzmhHLgiVTlYDuTO8CWWOUw90aKrXf+ja5YBSoqp8tOPKoNqIj+1b2tyxkjD:QAYJXzmhHLgiVTl8uTO8JWOUw90aKrX7
MD5:	8E044FDAD329C55CDC8CE3884E712AF0
SHA1:	730607CAF7381A8158939B0E9D9D67250FF4A10D
SHA-256:	0D8FEBC745A872A03D95074EED23F5533C31B0BD157433A258B1CA54159E4E65
SHA-512:	4A8D2381C97F2C60CF584221295B4E18BB4DF607AA5657B41B2CC57B067C59DFC6B8E0AD864D89AFAA5114BF29D95775516426E4C2384021B701153BDE016A0C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202401080101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var ba,da="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ea(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var fa=ea(this),ia="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),ja={},la={};function ma(a,b,c){if(!c\|\|null!=a){c=la[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function na(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in ja?f=ja:f=fa;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ia&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?da(ja,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0===la[d]&&(a=1E9*Math.random()>>>0,la[d]=ia?fa.Symbol(d):"$jscp$"+a+

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	85415
Entropy (8bit):	7.974182214192493
Encrypted:	false
SSDEEP:	1536:4UancbSsaJzMzOfr8UzB2/FzLQk2gqYKujdQI3bTGJAvdrZPpx:4Ua9DMrUzQNwk2gqluBQybTGJAvdVRx
MD5:	2B5C0112F0EC12382E357B4A53A7EE5E
SHA1:	33329F871AE6C880900A4BAE4D5335F713666B83
SHA-256:	12EBFC02DD988FC9C1B58FF4804F7C69F29874B020D485EC5DB5BA8910A2B6E5
SHA-512:	B5DB001D3D2746325BEA5B34FE82ADACC97BA4BF1A79AFD45308BE2586417810889CF9387CEBE66232F370E03C169A01107CB5BEBA179287F052A691A5346C3B
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmQ4WbFLt-sFxBPeC-_jGKwAZ-LP2OfZdU90EnhnXFClUZ7Q6-JlFc7F5LWqS8suZCs_GBHINfgMevKYodH_maJZBV2mLPcYfqzK-AlE9s6nmpHYi8kXwSklwA0gzVU0sFLlx6o1YrZ38PkZswVQEHweQg8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSWdQlnelggeqzsGYn4RL9bgsfbgFyQIYWl_3K9de0FlDl4L9PoBle-aRC9lvZMomnO0GmPvs27-nieQa-DRR9EXNnVQFcIgCk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRsCKk1AGngUx3OjQPwUkO0pcy8ZdI0fQU8sffR5EvQxMDVeylmTt7WRWsQkqlQAZAqf3TLxUqLhL59jo-n6wZgLUoZn_MmnG5c8t99F157kyCuaklMAsUU1Ppwed5vpYaEr5rhF-7tCjXbPmz-kSmfqvI&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQMe6yedC9x7ONOqxW_EfrAC7YmR56mdWKhHdrPd1epL1YDbJ_iIertI1e1K5OqFqRPy1-0uStYHtE5qiqSiftBk4zocVw1_0s
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (521), with CRLF line terminators
Category:	downloaded
Size (bytes):	4500
Entropy (8bit):	5.23528371936621
Encrypted:	false
SSDEEP:	96:DKZkjZk6NJt8j47OhxZ6PMrUrTa+0xcAA4LzfXgbxC5:DR/r7OOMrUrTa+0xcAA4LzfsC
MD5:	3DAB3C1DEBC83486CCFBE2D51FF90E4D
SHA1:	44A64AB1C683FA7E13DCDF76F54E6B03582B8ADE
SHA-256:	A85904E098CD1B968434E3BDCEDD5A1465FEC7D762B06D54348F334DC51BFC54
SHA-512:	624CF04FA776D60B877F5EE49D28AFAB2CF16535C1B64634E342A58BA79B1E50B1EFD185DF47834B46399E2D8E783C2E4B7F9333D4A6385482417E2E3ACC47D6
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/js/wpp.min.js
Preview:	var wpp_params=null;..var WordPressPopularPosts=function(){var noop=function(){};var supportsShadowDOMV1=!!HTMLElement.prototype.attachShadow;var get=function(url,params,callback,additional_headers){callback="function"===typeof callback?callback:noop;ajax("GET",url,params,callback,additional_headers)};var post=function(url,params,callback,additional_headers){callback="function"===typeof callback?callback:noop;ajax("POST",url,params,callback,additional_headers)};var ajax=function(method,url,params,callback,additional_headers){var xhr=..new XMLHttpRequest,target=url,args=params,valid_methods=["GET","POST"],headers={"X-Requested-With":"XMLHttpRequest"};method=-1!=valid_methods.indexOf(method)?method:"GET";if("POST"==method)headers["Content-Type"]="application/x-www-form-urlencoded";if("object"==typeof additional_headers&&Object.keys(additional_headers).length)headers=Object.assign({},headers,additional_headers);xhr.open(method,target+("GET"==method?"?"+args:""),true);for(var key in header

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2134)
Category:	downloaded
Size (bytes):	13188
Entropy (8bit):	5.4223896155104025
Encrypted:	false
SSDEEP:	384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d
MD5:	7C96A5F11D9741541D5E3C42FF6380D7
SHA1:	D3FA2564C021CF730E58FFDDB138CF6B57ED126E
SHA-256:	81016AC6BE850B72DF5D4FAA0C3CEC8E2C1B0BA0045712144A6766ADFAD40BEE
SHA-512:	23C162A2E268951729B580E5035AD6CA9969CFCC5CE58A220817B912E76B38BE6C29C3CA7680CB4E8198863D95A72EA65BD06FF7189B5C8475E4C1CE501AEAB1
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js
Preview:	/. Copyright 2016 Small Batch, Inc.. . Licensed under the Apache License, Version 2.0 (the "License"); you may not. * use this file except in compliance with the License. You may obtain a copy of. * the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the. * License for the specific language governing permissions and limitations under. * the License.. /./ Web Font Loader v1.6.26 - (c) Adobe Systems, Google. License: Apache 2.0 */(function(){function aa(a,b,c){return a.call.apply(a.bind,arguments)}function ba(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(c,d);return a.apply(b,c)}}return function(){return a.app

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	104313
Entropy (8bit):	7.9521964072962374
Encrypted:	false
SSDEEP:	3072:SnJMfTxvE8tgaxFH3QKwVILxlx5buhTV6XI2/Y:0UHearH3pwAxlxULgQ
MD5:	4A45DF8C21CA24A5A37F1F3CAF5A6BE5
SHA1:	1F92D6D679137D24AA55C63BBAB0D26AD0AEBD40
SHA-256:	2865842A3CAB09268EE6CAE3AB17814FAB5F19C04B5DD0248261F83A33AB0588
SHA-512:	B546F729C26B14887637D9947FA41F8D5DDE5846EC5C7DE4364A447F0C2A63178B175C0572FA9039480530E96F27F2B1BA63BBA800A543702F34A3708F8A5DFE
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16133055517167780552/14763004658117789537
Preview:	......JFIF...........................................%$....&+0/& 0 . 061000>>> .8I70H0120.........../ . /000000000000//000000/000000000000000010100/00//1/......t.............................................U........................!1"AQ..2aq....BR......#Sbr...3...CTU...Ds...$%4ct...E&5...d...............................4.......................Q..!1.Aa"2R.q.B...C...3b..#............?....".......&....S@M.4..:.4...@P......@P...4...@M.4...@M.4.....@P........@U..4..@M@...@M.E...D.QD.QD...@....M.4..P.T.@M.@P...@P...@P...@P...@P...@P...@P....t...(........@P...@P...@P...B..t..@P...@P....(..@...@...@P.@M.4.....4..@P...@P.@.....(....(....(....(....(....(....(....(..@P...@P...4..@M.4..J..@P....(....(....(....(...M..(....(....S@M.4...@M.4...@M.4K.E.@M.4...@M.4...@M.4...@M.4...@M.4..,M.M.4...D.4Q4...@M.4...@M...D..@M.@.....(....t.......(....(...M.4...@M.4...@M.D...@P...D..@M.4...@M.4...@M.4...@M..(..h....X..&...bhX...&.bhYP.4,M.M.4...@P...P...@P...@P...(....*..(....(..h.....@P...@Q..P...@P...

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9213
Category:	downloaded
Size (bytes):	766
Entropy (8bit):	7.739632903415752
Encrypted:	false
SSDEEP:	12:XNsVirW5FMZcoRZFg34YLFsAOLLzYrkD5dfpp1+wNJCnIt4GE2B7uXJq7JEXErbp:Xyw6bIgIYZ5OX9Rp1JJCIt4GhgXMeXEZ
MD5:	3E7508C41591131E28B17A8A17EB351E
SHA1:	B2A29D424C13AEF03118914BCC116E71000B7EF6
SHA-256:	B8A222FDBED72C0A1DCD9CA7F04D0328B6521DE0594F018A5FCACD6E98A9D1A7
SHA-512:	1C09738FFB3FEF65133DA89128BE48D30DA37E78B92D87088A29DA053A310B7DB97C548A2EB76D531FE29EF9BB58A6B3FF329944B67B10AA3B0601D9C999BEF5
Malicious:	false
Reputation:	low
URL:	http://fonts.googleapis.com/css?family=Roboto%3A300%2C400%7CRaleway%3A400%2C500%2C900&ver=3.3.0
Preview:	...........[o.0....)xK.b.KB.2 x...U/..41F(..H.t.w.1v.v..Ai.2^...e8.sU.=._.Q.G....2x;..R.y~ }.H.PI./'........>...2.&R....~].QxSN$.!.[...i..;7e.e.(.Lq...WF...%J...f..>+........q..._:.......lFv...rgX...{.<...s .^...\.A..d.....;c$.c..A.V.S..dJ....!.2.JP..2<....@....xn..Q..0!......S..L. ....].....E.Y.G.q`Ddx.......s...A.....C.....1....>..;..U.2..1f._..U....\.]j.(.lA<...N..I....XTPY.y..1 <)..at(.C...9.....p.....q...g.\|D .G.>%.Y...rQ.)bL.'...Sg...H#...m.........'o.v=A.p.H.........`..?l.U....t.Ku}.......<..Z..7.5....kP...}a..h-x......o@k..7...7...".....B...b.NE.1=....;7...Irq..s_s....hC\|,.>..-(....R......Um....}...XW\.Xg....X.%....4!....JW.G.(.._.._../.'...............l:7B..&.Q.c\|h.8.C.?.ith.}.,....h.kB{KG..R.....?........6...#..

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=eYNxQOhAVEaQ0WOGha3j5g&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 41242
Category:	downloaded
Size (bytes):	8297
Entropy (8bit):	7.971208685021627
Encrypted:	false
SSDEEP:	192:Kd846hC8iads5kot1lehhop19V0WjvGGv4S1Ku9q9uMUx:V467wzKhop1hDv4S1wuMU
MD5:	312B830087A11645569ED1EE6DC308F5
SHA1:	7169A7477EB6E2309D5377235CC9F55AD377C02E
SHA-256:	D0713BC16F7A6244A8AB37B0AD0B51D499911944F4687B711D49C28870726968
SHA-512:	9DA25C0E47BE183541920C2FD08805BF79433D89A779EF1D9B7D54D0B17E6D0BE0998DD6B56A5D748C3EFF0FAC0A43C5B3D01A1784FC9741E332B3BD42864497
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/magazine-pro/style.css
Preview:	...........=k..6..._.K.l2+..g...}...l&w....Z.medQ+..H....O.)..p;..E...b.XU,R7o.....w....[........,....._.=!........nP.&.>......D...k.fMQ..Wk..H.3>6-..W....6.".,..LK.OP.7e..j....g..:&8&{....HP...n..J......U........z..J...d..5x..~G.F.........AM.:2KfI:..~..v.p.....C.....6.d. .=.hK....6.h..^{.-..x.......\....Q.q@.1.....E`. 96(....6.[..j..".!B..eI..>&.P..2.%E..9.qK"...q....... ....R...\|...2..(....)OD.k.C.j..+....d2...)2T.h....x..1nb..W...U->6.Jp..)9X{...X<$..ft<..5>..Z.).q.........nJDE.-....x......7..=j...F1..l....ps.e......./~+..{.K.!.oK..V......K.s....k.k`./2X.?......!...?...W.....e..g..7...........=..@{K.}O.cF..M.o.3>./.b=.E....-.L.#...Ux.....m...1.....JF1..7..I.l9.I..l......h~..;'.W..}..<.....w...~"..Qn........#.H..Q[.-..x_.9..Q.....f.._.u..{......X.c..CQ.o.........t...U. g..x.....b...g......g..=.p.{^\|%f\....:..a\..sE.B..;.+...[1.9.L...a......^L..Ey..?.Ha>.'.Q.`2Y...S.Ngn.j..]...9CJ......_..@...4.....P..I..a.L.......?....%.Y.2\.6..

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2670)
Category:	downloaded
Size (bytes):	122888
Entropy (8bit):	5.440233200848619
Encrypted:	false
SSDEEP:	1536:rwbsrHKnIyp5sjLWcgk27Zvzfi5m/OfzFu7R/p+pPRFOo0XifSOKfQ29j:N++WtiBQ/San5f5
MD5:	5652DA563FF106C6A24852F92AB1D14C
SHA1:	04F2F5DD2590CD7BF593D7E9B43B09BA7EF63146
SHA-256:	31D02F43DD0C7FC5C0D95DB087A23F1C2D729C93F10450884C8DA6B415F7839B
SHA-512:	31A0036F85A983F3F4C6036C074B90BD74216561EC69369F7789D1524A1B8E0A245C73D0D6ACFD5B61BC94069BB5108A25D477EB86898377F8F82199B398098A
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/Enabler_01_250.js
Preview:	(function(){var DEPS_GRAPH={'enablermodule':[],'configurablemodule':['enablermodule'],'gdnmodule':['enablermodule'],'layoutsmodule':['enablermodule'],'videomodule':['enablermodule'],'layoutsfillermodule':['enablermodule','layoutsmodule'],'rad_ui_videomodule':['videomodule'],'$weak$':['configurablemodule','enablermodule','gdnmodule','layoutsfillermodule','layoutsmodule','rad_ui_videomodule','videomodule']};window.STUDIO_SDK_START=+new Date();/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)r

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	146119
Entropy (8bit):	7.956739787679404
Encrypted:	false
SSDEEP:	3072:MhpD4Zji0mKhclWuDtoVPkjn139uK38YqEojvlAHI:MhpcZjiQQ1tX7BqTAHI
MD5:	25B6982FAF304D7E007A19435A8C7F7A
SHA1:	29F0215554011F0F6C2CC012B02CBDDFAE265788
SHA-256:	EA2A22F6FE11EA4997A06450DD6DC09B84E40463F1795873C0829EF79A62F738
SHA-512:	9F3FCDD7A77BBF1D4B4957511D214A9B0308064DF29EFD008CE7AF9DEF9D1F3FA3ACA8659A03CC62516B2FCA7E7390643A74862E592D80FB1EE7F04608525846
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/background_300x250.png
Preview:	.PNG........IHDR...,..........mz...,kcaBX..,kjumb....jumdc2pa.........8.q.c2pa...,Ejumb...Gjumdc2ma.........8.q.urn:uuid:befeb453-647f-4fce-a5f5-d66d33a87f2b.....jumb...)jumdc2as.........8.q.c2pa.assertions.....jumb...&jumdcbor.........8.q.c2pa.actions.....cbor.gactions..factionkc2pa.editedmsoftwareAgentmAdobe FireflyqdigitalSourceTypexShttp://cv.iptc.org/newscodes/digitalsourcetype/compositeWithTrainedAlgorithmicMedia....jumb...(jumdcbor.........8.q.c2pa.hash.data....{cbor.jexclusions..estart.!flength.,wdnamenjumbf manifestcalgfsha256dhashX .I/.1AFy...."E.M.b.\|.!A...TF....cpadH............jumb...$jumdc2cl.........8.q.c2pa.claim.....cbor.hdc:titleoGenerated imageidc:formatiimage/pngjinstanceIDx(xmp.iid:5F7FE096912811EEA2FFBE4CE44DE99Boclaim_generatorx6Adobe_Photoshop/25.2.0 adobe_c2pa/0.7.6 c2pa-rs/0.25.2tclaim_generator_info..dnameoAdobe Photoshopgversionf25.2.0.isignaturex.self#jumbf=c2pa.signaturejassertions..curlx'self#jumbf=c2pa.assertions/c2pa.actionsdhashX Ji.....A0x.$...1:..d.4

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.287698118276452
Encrypted:	false
SSDEEP:	48:bFj15XHuJcXl2E9R2jc2u8aYlPFs3v0YxnHS:FrVl2Emjc2u8bl9sfO
MD5:	391C73545274E78E6615C6449FF6FF1D
SHA1:	C9D581335ABDBFD51679827E8B24F9896CA1DA16
SHA-256:	41D2526E9C4595FC1FC747555BDA18A041033A863A9B2ED180E7B5836918FACD
SHA-512:	843D8CC8703AA9808F7D9807AB4CB24795279A015F1EEB2632C0A289C0427157FEDE3BB988FF857DC994BAD22EC5CA83654B6FBF0FA24390E14816F66072ECAB
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&"26"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);"application/xhtml+xml"===l.contentType&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(0<a.length&&!(.01<Math.random())){a=(a=h(document.currentScript))&&"true"===a.getAttribute("data-jc-rcd")?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (910), with no line terminators
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	4.477261466019717
Encrypted:	false
SSDEEP:	24:6TyOGq/BWEBat4ikVXkPWniEVCfH8daOk:6Typq/BWEBSSkPciEVCUdaOk
MD5:	FF55943015CBC49F0B1A2233D5DC3178
SHA1:	09BE66115B6CA62FAE73783AA9FD7DEAA4A0D662
SHA-256:	CE2663215D5107114BD76EB82ADB12BC060769036556B6C45D8D703564B79429
SHA-512:	F750E3A6B2418BCAD4D118BE5AACF2584D00DB034F76CF794EBA6F93AE31A9AE42B3EE779BC6603CFD3E5CF282C987BB939EC7390A37417CA9E0B55F9E70BAAA
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/line.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({line:'<path fill="#FFF" d="M28 14.304c0-5.37-5.384-9.738-12-9.738S4 8.936 4 14.304c0 4.814 4.27 8.846 10.035 9.608.39.084.923.258 1.058.592.122.303.08.778.04 1.084l-.172 1.028c-.05.303-.24 1.187 1.04.647s6.91-4.07 9.43-6.968c1.74-1.905 2.57-3.842 2.57-5.99zM11.302 17.5H8.918a.631.631 0 0 1-.63-.63V12.1a.63.63 0 0 1 1.26.002v4.14h1.754c.35 0 .63.28.63.628a.63.63 0 0 1-.63.63zm2.467-.63a.631.631 0 0 1-.63.628.629.629 0 0 1-.63-.63V12.1a.63.63 0 1 1 1.26 0v4.77zm5.74 0a.632.632 0 0 1-1.137.378l-2.443-3.33v2.95a.631.631 0 0 1-1.26 0V12.1a.634.634 0 0 1 .63-.63.63.63 0 0 1 .504.252l2.444 3.328V12.1a.63.63 0 0 1 1.26 0v4.77zm3.853-3.014a.63.63 0 1 1 0 1.258H21.61v1.126h1.755a.63.63 0 1 1 0 1.258H20.98a.63.63 0 0 1-.628-.63V12.1a.63.63 0 0 1 .63-.628h2.384a.63.63 0 0 1 0 1.258h-1.754v1.126h1.754z"/>'})}(a2a)

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://a.tribalfusion.com/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQ8ogzHaMw7e9DcIX0MAeg91mlimq91PEwhHhGvl_AXvH80qUFfoVe_wo5m-03edH0l1UbhNF_V1nFTzRIMyywHT-I2baj1_CPs1EFeo6r8Mgnb_Y193jbUeeau7_oyGliPNE3nNkUeCSIF1VdcJqIl_Cc&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmTGz4UZLqS-5gc_aHR-pPbF1CFhusTIvhGVoMfznNnv6WGyVzNc4aqfIK6aes2bqDSA3MbEGuALffi9U0O9kZ7H0XfE2cOfUrds
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x799, components 3
Category:	dropped
Size (bytes):	121569
Entropy (8bit):	7.969479053976151
Encrypted:	false
SSDEEP:	3072:CI+m02dFjnWlH/n6Yh1Zac0i3zlKTbtSZbdqJv:CD/uWJfhHR36btS8Jv
MD5:	52EF864952015A61DDB5E35210545DA7
SHA1:	6A014D198087B37B2384224523D85043DA2E8138
SHA-256:	DDE1996E0FA1D49FAB1C9D7F079F9732DA159438FE6A66307215762613E02E41
SHA-512:	81D0742600017D4344C7FB952A0708E27C3D284A00CC59DAB4EE4C30C75E6B9F88718F987148F619A2A23BF27EF9933003B81D1AB5278B00916976D95C384D6F
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&2....................................................F.........................!1AQaq."..2....BR...#br.....3$...C..S.4s.T.......................................................!.1.A.Q"2aq..B..R3............?........kt..@...".@....$..".)".)"..D8@. H...$.. g..@W.r.....@..W.B.F.QM.H.......b..tQ.F-..J..y..)C.O.y<...W.....a..Yl....@.$C.p..$C....Z...@[V.$.....d......$B@...@.$.. b... .DVPR.....S..... ..A.A..7@..u..b.H...d......L....b.%A....+pAY.+pPVB"........!QY.....#........P@....!.r....T.....B..... P........4(........(D4 P.B...".".T..(@...B.....B.e@..P.B... P.B)eU..J..Z.TF.E..N. d.. t..(@. dC..PD..B..Q.e.We;;.J.U.^...Yh.:. H..... H..H....$RD$RD$..... H.)...@.2.....,...O_...AX..4.&s.d.V.../.#R..nV. ..O..y.;.%t.c....M.].x....=.....tRD:.. p.....H+z(W..(....$. b.... H.U2).B@.$.. H..H....( TUe.OTT..*pAC...A..m..i....D$..P

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 298, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	54447
Entropy (8bit):	7.980314780619371
Encrypted:	false
SSDEEP:	768:8sg5or45tRJ++pznCc1DQZRdVtDnnMhpPAANLA6Yy20PlrDArMKC+r49xYoqosrZ:8V5o+tRJ+Gz35AnM7JLbtHnxIDTN
MD5:	E9D6E315708629982D04F080AB39FC7E
SHA1:	41D032BFAA798A3A70C62122AC7AEA59F96C61F7
SHA-256:	8041EFA124AE6AEB6412B4F5EDAB86BFDDE79AF5229FCDE71FD8AA282A69519D
SHA-512:	5071E064DD1363231E8F1B9B1B9D8C1986DBB97156E91DE603D22B88B289B5FDF1C89B5DB7F5D62D1E9AB9E0FA579C66C3B7C8835C2F020524BA9565A97D8376
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............D....PLTE...............................................63....".. ............ #.eYM.n\........................................YluZnz...^nu...UlxUit^qy^s~bu}ZjpNbm......Ugo...ex.......Per......L_i...Sdl.......!....Rahj.....GYc...Qhv......c{.k}....%&.40).............]v....:60...M]dcrx..........Wp..............y..n..Xfk>MTF^lIB;................AVa...s..DS[.....8P_........C:2NGB.......)"8EM.~.....vnm->H...ogf......x.......}ur..>Xh...t.....0IW......{y...iv\|..........m]A-*.&...ia^iE1~XCSMJvO:.................`..ZTRb[Yh.....]QHhL:.\|e...y.....#p.~.........ez..@>:fYOs..Gcu.s^m..v`T...XI?d..T9'..o..tUw.....\|lLl.._E..\|5}..pb5g.L.....U...k..hK..}j^pUF...b..iU.cQ..........sU...@s. 3>.{q......{\G/.,Vr.;.....pzz\|.W{.....x.c.N8j1".;\.oN#BW.....tRNS../.Fc.{.[xF..<.a..c.p...........HIDATx..k.f.....Zz...R...`<h.5.<H...b<uR.z8..M.`........(....@ ..11h.T...y^EUS...nI....~s7~x.?^y.^iwwo..........{{.;[..w.......?9>99...f

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3963)
Category:	downloaded
Size (bytes):	151833
Entropy (8bit):	5.597307059561772
Encrypted:	false
SSDEEP:	3072:hUrpPxMlOtoAURP8G8aeWkgvM0568JDJPQAnBJD75PDD7l6qGfwL3bptvk0RB43p:hepPxIOtoAURP8G8aeWhvD568JDJPDnC
MD5:	D875355FA60F493D7235372FE2B00402
SHA1:	0B5D89251E7D468D04651C66C93D6E9B2011F525
SHA-256:	05487D1B5A159DD238CBA913FF996BDFE2C214E8B57C2F1595F1B1114F16D923
SHA-512:	3611840EE8E7F5168C945E3EF42527105CDF199421DD63E166F851A3775717997DD94063A605D49505F7E36EE96E3CBEC6AE51EC2DCF4316365B51EF7F1718B7
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return null!=a?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,arg

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=JA0jvjkdJEyhrXrvc-004A&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (503), with no line terminators
Category:	downloaded
Size (bytes):	503
Entropy (8bit):	5.1767689688016185
Encrypted:	false
SSDEEP:	12:kxP4L8BMHrpbqWGQL8BMspbqWGeeZD7K8KBGPJfD5WQ:kDBAGVBXGltKBGPJfYQ
MD5:	AC451C1007FDAA1CF058ECA4B7F51CEB
SHA1:	3239DBB461D0DE917E833C4FB13D8E2803F560D8
SHA-256:	58644B7DFA826A3291E2E5D6C2974B47906616E1AA03A2F757FDD1BDE7796621
SHA-512:	B23779A3A2E6A05D2B33B9DEF2E0E1EB8109487BB725D9FE94A3EC1015493C2B9496E904806363737E25C1A18B668E4BF0A8508CEAD2477630F55D051AFF2ED6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://sync.search.spotxchange.com/partner?adv_id=7025&gdpr=0&redir=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dspotxchange_dbm%26google_hm%3D%24SPOTX_BASE64_USER_ID" style="display:none;"/></body></html>

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 728x90, components 3
Category:	dropped
Size (bytes):	67012
Entropy (8bit):	7.966962826214043
Encrypted:	false
SSDEEP:	768:4YyHH7MSMFELmdvBC8HY9miGBGALgxTu+Q/izyFbHjUPa6ppRU0h8npZG0SLXwgE:4cS01BJSO+aCyN4JbkHG0Owg8cQPiM+I
MD5:	30211A0E1FBA101EAD9C0DAE457D8D9D
SHA1:	488BF84361E4954FFCB7D763EE326F70074EB063
SHA-256:	D634A4045EDFC6C10BEFC3D21E763B42A69EA92EFECECB0CAC6220BBF8AF8914
SHA-512:	7E642EE17C9D673068F583AB18307384B99A8DDB39EC2B81F26A1F08D7C94B414857D2AFC601146AD3B9A9C6F69975B909A139586AB84E895E69A8BA511DF4A2
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65524), with no line terminators
Category:	downloaded
Size (bytes):	166501
Entropy (8bit):	6.119956639436554
Encrypted:	false
SSDEEP:	3072:6NMwYGzKxUphOQm0tE3kUVnxzPtdFGFQAE7:6NMwjzKxUz5twRpxJj+VE7
MD5:	0E1916800459AF43F860F019A05B7493
SHA1:	C9EE8A86C42BA4AF0B35A87FC4C5C12E684793B1
SHA-256:	63C3AE47C32205EC61E21FFFA4622E8030894DDF054D0E02E438CA3C7DF01DFB
SHA-512:	AD2687F342E5A3F1BFD7C1803CD98AF1F8E1D27B76B2FCFFEDB3721B793EC6AF5932BDAB8DA6F840681927E1FFEC65A1F0E44D48A67215DDF669E387E1BCCBE2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213
Preview:	<!DOCTYPE html><html lang=all><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240109">(function(){(function(e){function c(){null!==this.parentNode&&this.parentNode.removeChild(this)}e.forEach(function(a){a.hasOwnProperty("remove"

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2246x1168, components 3
Category:	downloaded
Size (bytes):	170448
Entropy (8bit):	7.842078713808817
Encrypted:	false
SSDEEP:	3072:ix6J3AJMHuu+pdgFFoDNexg2PumPieey8zwA3KBTOHLlZC5EqhDx5EdBZJI6f0+O:ix6JGc+pdgTo/22Mey8j3KoJq9xCZJUD
MD5:	2F8E7AF886864CB54C6A7A37D8DECE96
SHA1:	8AC2F52547996219F05B547D7F4A3A40496E9F6B
SHA-256:	1B776551EC832A4434FA7DB7632DCB4142D6E5107F88DAE77709990E63A325F1
SHA-512:	7D43425BCFCF84DCDBF713DABBABCF9834D34DAEE5C0B6CC5B6A26F589F1E5BA01DFBC0EAC0C9448C5511D3483E677C1876D7E85790263BFF7F7118A9122813B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/14756390021424714105/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////....................................................S.......................!..1AQq.."a...2r...#3BR..$4bs.......CSc...%..5DTdt.......................................)......................1.!.A"2Q.Ba.3q.#.............?....I.$...HH....(.........6#BH.T.....@5 .@..)9....Is.!.2..i.[r...u].D...<e'JM.}gT.J..OYJ....M2.....X].....v\|."Wi..........` .....%i$... 3..p.9]~...Oj..k...H.K..>R....k8..0.q.e$..`0.....]..R.I.;.2.......................... ..A...jtc.RV.i7.fDV(i.m....vm.k..W.,t.iR.f....E.!=+N9......a.z.G.....:x.O8.;p{......`......p.@....0........@.@..............`....\....\|s\7..aU.p.\'.(..................`...0..............` ..$.z....@.c.,....J]....Pu}...@KUp...(..q....P..M'fEG..F.\n.(.a.k....,....4J.2. fT.D..\|Y..h..@.d...\.M=Y5...6.i..E......(.d...................... .@.[OaQ...p}.^...F............@......Wex.....

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (624)
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.2368725597776615
Encrypted:	false
SSDEEP:	12:qTjxS1BKFaGCGT9MTkKqqzi8EmpGe3whGe3OgyGhlzUNBfgxy02sUf0OPv4S:0jE+FaGCTTqq2Vmce3wUe3gBkFUFXf
MD5:	41B7ED0CBE240173EEA85148FCBA633E
SHA1:	39ACD5FE099974486A1C9BA11BA0FE7BE6BC97CA
SHA-256:	274D4116239B63097BB7C16E56E27CBB5A77BE20392FB8E2317C0A0235185CAD
SHA-512:	1EE1D21B138A9F55F823B93D809B3BC58453DDFC3B3EE4D00A1010BBD4EC296546277C6777819CFB744C393BA93FE7578B60CCF0259FD17901F4542714D6C06F
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/sm.25.html
Preview:	<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>.!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&&(-1==(t=o.indexOf(";",n=n+t.length+1))&&(t=o.length),n=decodeURIComponent(o.substring(n,t)),a[e]=n.split(","))}),n={a2a:!0,h1:(t=!1,"function"==typeof performance.getEntriesByType&&(n=(n=performance.getEntriesByType("navigation")[0])&&n.nextHopProtocol?n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65269), with no line terminators
Category:	downloaded
Size (bytes):	65269
Entropy (8bit):	5.775266069925025
Encrypted:	false
SSDEEP:	768:sJ7zQ9PUQI9wE39NsCu/HvCGvU2EZQymWUyKpAkbgChFEwEXUKIl58223TVEIage:aQSGx7LZTaxbIl2x3TBag5uvIHKsbv4V
MD5:	8CCA54CB1ED71B27B66045BD01DA649F
SHA1:	CEF92EF9A054D84512094F2DFAAF653FDE9C4C1E
SHA-256:	DCAC61C9B122634468CDA12705409AC76ADB9903538D794E667B0586DEA12035
SHA-512:	0E61F484025D294AEC71EEEDB6B611C86AA13DDD6E1F614928C663DDF5B61CEB7610BBF479F9E396770C94E156824EDD88E506C51DA6A309F9D099C1CA77518A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12,1.12);-ms-transform: scale(1.12,1.12);-o-transform: scale(1.12,1.12);transform: scale(1.12,1.12);

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 505x342, components 3
Category:	downloaded
Size (bytes):	49968
Entropy (8bit):	7.984543174664297
Encrypted:	false
SSDEEP:	1536:iYxgqbbr+z3Fumo7wupy40IdOKFqpexicx:iej+z3EmoUXIdOKFu+icx
MD5:	646AE3C31C2821C1F7CAFA9690B18672
SHA1:	904266F712D0D0C9DDD1F46601FB86BF95ADA562
SHA-256:	1FECB902BEAB910F9F69EF4C32D68ECE27D9B9CD03EB042C85F37A777F82AC98
SHA-512:	E95FCA147BAC832FC84D1D2AF0F2E4483E58990A405D8C448DD3616120A40E486FB6D296B9A208F1D42D3035D619A57ACE281E606C16FA2DB6CC8F8BB49A957E
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/uploads/2013/03/20120822_Europe_Trip_Provence_Day2_22Aug_0344.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................V...."...............................................................................f...^9z........W...../.=K.P.z.....`3....x....../..l^&...x..R..x...k.'....b.Ti...=..M....,...^W.=My\|...].^..,N}Myb.S^X... ...K..~.!P.F..1.%.'a..^...uA...Qf7N.J=.tU.3..g;...%......N..l..^+.Vc.Q[.4..bZ)"..s...E.BF.....g....4n.F,..6{>..v~..gA.... .O...q..7..H.>.0.a..8.7nr+c.X......4.=H.^.i..\b...=..r...n~F.....D%.`7Y..@.g.I[%...1....<#I.......K,iRwpW...N......:=.s.4.7.......'.;rz.N.`N=.h..h.@O...'..U.....[s.ug.K..F....i.....8<.....l.j...].F;.7..2'=.^..}8q..c]C....".&.At<........,.. .p.Y..U.."nHTf.....KL....je.@^=..\..J.Y..>v..........mh.M.6.Ga............(B...^p.@jp..[.tk......x.s.Z....j]G:...XL.0..,..'Hu.-.....].Q...<.vpF...t.6......>...u..\.uk..`.cu.=.re\.8y.....o..0..u...X..l.<.5L.oA!.:;.Iqd...8..r.`.5

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstEC79bBqnZiOnd4dgH61zbuf3ES7LSlmTL6n3uzBhygQP_btzyuwChLk7qjf4DKiJEGHe4COPyM54BDCMQTAegwfCZi4lSfGr0m1B4cKrgg1IqrVxmIzbdsZEoXBeWoLcWHMp9HWklJYAp9l_CvoCixpG3&sai=AMfl-YSdkz54Bqw1XVSL4lbv2nQAz5IMkVlezyX1j_b5aNWhFNvUV8LKjaRox2HWcaTo-Uv8qUBlU1dzybtn0ZhezSi6azhlYuyawf3OPl0Jhbvn8L6WQhfTOmW3OVg&sig=Cg0ArKJSzM5UWS12MvIzEAE&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7GAE&id=lidar2&mcvt=1001&p=0,0,90,728&mtos=550,840,1001,1001,1001&tos=550,290,161,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&vs=4&r=v&rst=1705325053353&rpt=393&met=ce&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmRfk3Bxs_Sbl_E6Flm5bXGgK4G1tb3a-vwRD-AXeHcvvmthsefZhnmA4QYs4BkwXgECX-2muWWGUTA84WyEnvCbdAEDVQwElQ&google_cver=1&google_gid=CAESEITSmp977taxVGXtUwfhpwg&google_hm=UTc1ODYxMTQ0NTE0NTg4NDI0MjE=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3212)
Category:	downloaded
Size (bytes):	16051
Entropy (8bit):	5.5029452890600155
Encrypted:	false
SSDEEP:	384:E4DDm4iCQJ+tAYj7P/BqKTUWbUTHvvLlvF3nec7Ts+f2OznED:E4DDBiCQJ+tAYj7xqKTWPvLl93jfs++n
MD5:	FB3892AD29EDF7DBD53726A1BCB5F3A6
SHA1:	DD79FEC2EBE9266B864D4F6BA6D1CE28AD5EA695
SHA-256:	972F7A26F860F2F122DCF2A4C5CAE616DF3A4A83E0C8318A1AFB824C766FB651
SHA-512:	065881B15BB1D7569DBF55E8A5EA2B78C5D142554741860B75BF67C122323F5A228D324A6C720A09A4F081015E6C27AFF15655B565D8949FA33980994958128D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=n,f=0;f<c.length;f++)if(d=d[c[f]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};var ba=aa(610401301,!1),p=aa(572417392,!0);var v;const ca=n.navigator;v=ca?ca.userAgentData\|\|null:null;function w(a){return ba?v?v.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function y(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function C(){return ba?!!v&&0<v.brands.length:!1}function E(){return C()?w("Chromium"):(y("Chrome")\|\|y("CriOS"))&&!(C()?0:y("Edge"))\|\|y("Silk")};function da(a){da[" "](a);return a}da[" "]=function(){};!y("Android")\|\|E();E();y("Safari")&&(E()\|\|(C()?0:y("Coast"))\|\|(C()?0:y("Opera"))\|\|(C()?0:y("Edge"))\|\|(C()?w("Microsoft Edge"):y("Edg/"))\|\|C()&&w("Opera"));var ea=!p;let fa=!p;var F=Symbol();function ha(a){const b=a[F]\|0;1!==(b&1)&&(Object.isFroz

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11117
Category:	downloaded
Size (bytes):	3226
Entropy (8bit):	7.9277860719363495
Encrypted:	false
SSDEEP:	48:XLToJe+G032cCbUgrID0FouUQNp6xNQawDNtOqbYR6/SWnGJTDwZN7YGf6ofr0gc:7T+5Gk2cMhvUcYPQd8usGf0MRhqVU8
MD5:	C42A21AC34C8C86F930CA5EAA969EDC4
SHA1:	10E3AB4D8C602F6793FE2540D8ADA64AEDD41AFF
SHA-256:	1D8EA78C9C02A2037B1AE1A904FF44B2132FF43E55365A7DFECBC5ABD31F3205
SHA-512:	29A5CDE4AE6E0522BB6AB79E1B48DE56A02A37EDB59AA1FF95A91B3877D1174242BEC3CD6703DCA691509517709CCEE05B0FAC256EEEC22C65468B291A450ACD
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js
Preview:	...........Z...8.~.[..iZv:..../w.....,vo....9.T..H...mu[.g_.....tv...i.....b."9....Lp...A.Di.\|.....h...j. ..C!...........g..).-.t..\|...2..."....F...1Hz..j.$;.+.a...D4.i..,A.$....).....{.~:.J...(..9.-.f0.P p....../..f...../Z2.....SZ.KZr>...+...."prL.....U.Ul.e..w.o.'Ve.".g.......z...-...).....7..CI.qi,C\|...o\|........\T...4..&7...Q...?..RoI..@{].;..y...K}u.Z\|.,.o.W/..........P..#7u...`6C.^..........@..&..D.7.I..rx.[\|B.[Ncx.....fN....W...o.....Z..6h.. ...^.-~........mE8.X..vT.vc..=....Ha."k&..8$...Ze3 T.F]...D.j.l\...}.."...'t_...1M.B.M`..w..v.\.Y..1.v.. C(!8......a!.{...........Z...M.,.?f.Wc.$&....&.q..ve.D..r...U+o.....A.'./..>'.S..@4'&1. ...,..-.IL..U.-h8.{.".h...X..G.F.wz?........\|.......[...^X.1.v....d.Q..r2..9...I..P.#..9.0..('..C,AN.r.%.sLx+......I..]. .wXw.<......L...B4.L{...R.f[.w].w.m.&.u..3.....Y.s79.=r]...Er......t=Wy^..X...{..zz....L_..i....m..4[A.pn74.....Y."Xi.2.....R..'......C.."/Y:...%.xQI.5...../............b:a...41+.......

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	162738
Entropy (8bit):	5.937210350902056
Encrypted:	false
SSDEEP:	1536:2uv0hfCN38n2gbdQSGx7LZTaxbIl3SzaakQHS3iHV9UxjFo2PXjYKsuf:Qfw38n2gqSKZTiszhZ3XTXjR9f
MD5:	40C09D77DEFA288529526202D5178B0F
SHA1:	613D660DF0A7E59139A9A81E8F9810A4EA0B63A3
SHA-256:	4C5CB2FEA0C95950292AEE8C28D1DC336ED2DE1F4E691BAFC1A067B92029113A
SHA-512:	CEF5DF96AFCF6D071993839E4372CE39FFEAEF8F05E4C18D8CD237C482F3A332046F8236B1B6D10A84F9DB10A093FE3885F296E44C8D202BE3AD484DC4B72C4E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325066&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325066514&bpp=16&bdt=581&idt=153&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=2458750656016&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=209
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!DOCTYPE html\x3e\x3chtml lang\x3den\x3e\x3chead\x3e\x3cmeta charset\x3d\x22UTF-8\x22\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3eHTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;border:1px solid #E5E5E5;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir\x3drtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}\x3c/style\x3e

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (901), with no line terminators
Category:	downloaded
Size (bytes):	901
Entropy (8bit):	4.405969110715618
Encrypted:	false
SSDEEP:	24:6TyOGq/BWEB2t1RrneVyL9ceBhDx74sBeFldPBgQDtHcfb6E5rGQuIAC1FRd:6Typq/BWEBI5neVs2eJ4sYYD5CIACFz
MD5:	615B17C66CC57716968C15FD9494F558
SHA1:	737E2BE21596A4538E1CC6982F96B92D3D577B8B
SHA-256:	AB86F686B2E5133D5A05B7A94D1294AD711858E6AEF9A931118AB1D8F1E2600D
SHA-512:	F197F973B68C8CA0C98A998476F11840CECAAAAEDD4B5FC5E7B75C20B83B93D84FB470D050B7449CDDC881BFA3E1FCEF6DA077DEED93FB0603194B76DDD24404
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/pinterest.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({pinterest:'<path fill="#fff" d="M15.995 4C9.361 4 4 9.37 4 15.995c0 5.084 3.16 9.428 7.622 11.176-.109-.948-.198-2.41.039-3.446.217-.938 1.402-5.963 1.402-5.963s-.356-.72-.356-1.777c0-1.668.968-2.912 2.172-2.912 1.027 0 1.52.77 1.52 1.688 0 1.027-.65 2.567-.996 3.998-.287 1.195.602 2.172 1.777 2.172 2.132 0 3.771-2.25 3.771-5.489 0-2.873-2.063-4.877-5.015-4.877-3.416 0-5.42 2.557-5.42 5.203 0 1.027.395 2.132.888 2.735a.357.357 0 0 1 .08.345c-.09.375-.297 1.195-.336 1.363-.05.217-.178.266-.405.158-1.481-.711-2.409-2.903-2.409-4.66 0-3.781 2.745-7.257 7.928-7.257 4.156 0 7.394 2.962 7.394 6.931 0 4.137-2.606 7.464-6.22 7.464-1.214 0-2.36-.632-2.744-1.383l-.75 2.854c-.267 1.046-.998 2.35-1.491 3.149a12.05 12.05 0 0 0 3.554.533C22.629 28 28 22.63 28 16.005 27.99 9.37 22.62 4 15.995 4Z"/>'})}(a2a)

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 336x176, components 3
Category:	downloaded
Size (bytes):	16481
Entropy (8bit):	7.947801573165788
Encrypted:	false
SSDEEP:	384:rOHlWnMfZBayLZQNlkPSWEQD8QJyS6uIsGq9iKyjULr:rq0g4y0l4SWExUySSsh9iKHr
MD5:	A550B94384C1972C45D7BD1C6935BCFB
SHA1:	2291BE5B458F5775797D648EAD1755349213442C
SHA-256:	E3E6E29BB31FDB6BE0672B2860493F1E234359FFB1FBFEEFC66E52AF96DDBD74
SHA-512:	01447F0C1E058E4A4DFDB3670A5463A99B394AAF4B37A585C2AFF8F2C40743D74CEEAD026627445AC5ED03C36C881FBFF894B9506C378F1198635F1A96ABBDE9
Malicious:	false
Reputation:	low
URL:	https://www.bing.com/th?id=OAIP.f54148dddac30210ad973cec3c9849a5&pid=AdsNative&c=3&w=336&h=176&qlt=90
Preview:	......JFIF.............C....................................................................C.........................................................................P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Q@....h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h.......Pi3@........:....Z.3A?.......Fh.....t...?..h.....:(?.......Z(.'......Z....4.....Z...tf..h....@?..h....O..h..............:....Z.3A?.......Fh.....t...?..h.....:(?.......Z(.'......Z....4

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 298, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	54447
Entropy (8bit):	7.980314780619371
Encrypted:	false
SSDEEP:	768:8sg5or45tRJ++pznCc1DQZRdVtDnnMhpPAANLA6Yy20PlrDArMKC+r49xYoqosrZ:8V5o+tRJ+Gz35AnM7JLbtHnxIDTN
MD5:	E9D6E315708629982D04F080AB39FC7E
SHA1:	41D032BFAA798A3A70C62122AC7AEA59F96C61F7
SHA-256:	8041EFA124AE6AEB6412B4F5EDAB86BFDDE79AF5229FCDE71FD8AA282A69519D
SHA-512:	5071E064DD1363231E8F1B9B1B9D8C1986DBB97156E91DE603D22B88B289B5FDF1C89B5DB7F5D62D1E9AB9E0FA579C66C3B7C8835C2F020524BA9565A97D8376
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/ads/richmedia/studio/60024164/60024164_20231221092021363_Hero-Image_Cat_Consumables2.png
Preview:	.PNG........IHDR...............D....PLTE...............................................63....".. ............ #.eYM.n\........................................YluZnz...^nu...UlxUit^qy^s~bu}ZjpNbm......Ugo...ex.......Per......L_i...Sdl.......!....Rahj.....GYc...Qhv......c{.k}....%&.40).............]v....:60...M]dcrx..........Wp..............y..n..Xfk>MTF^lIB;................AVa...s..DS[.....8P_........C:2NGB.......)"8EM.~.....vnm->H...ogf......x.......}ur..>Xh...t.....0IW......{y...iv\|..........m]A-*.&...ia^iE1~XCSMJvO:.................`..ZTRb[Yh.....]QHhL:.\|e...y.....#p.~.........ez..@>:fYOs..Gcu.s^m..v`T...XI?d..T9'..o..tUw.....\|lLl.._E..\|5}..pb5g.L.....U...k..hK..}j^pUF...b..iU.cQ..........sU...@s. 3>.{q......{\G/.,Vr.;.....pzz\|.W{.....x.c.N8j1".;\.oN#BW.....tRNS../.Fc.{.[xF..<.a..c.p...........HIDATx..k.f.....Zz...R...`<h.5.<H...b<uR.z8..M.`........(....@ ..11h.T...y^EUS...nI....~s7~x.?^y.^iwwo..........{{.;[..w.......?9>99...f

Chrome Cache Entry: 674

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53449)
Category:	downloaded
Size (bytes):	104484
Entropy (8bit):	4.91975104219658
Encrypted:	false
SSDEEP:	1536:6LeJFfvhk2u5SOV+UQ3Zo/xHHbweEEQze:6LeJjk2u5SOV+UQ3Zo/xH7weTQze
MD5:	03C0F2128C8DD615B1691C168F1D4456
SHA1:	DEFA44BED1F35EC899CFD358CA911390BCA53E67
SHA-256:	67447C3656CAAD630373253691F3E8F64467EAFD6E7305C9B0E98111B0B41694
SHA-512:	01485475AEC2D490E75DC76AEA6E011541EDCFF527E85A773644ACCF101175B619E10B4D3A5CDB5926669559782BC33DF483FE9CC3DE9D3431E08123CE5D0853
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/css/dist/block-library/style.min.css
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 675

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (1786)
Category:	downloaded
Size (bytes):	37633
Entropy (8bit):	5.516242310309862
Encrypted:	false
SSDEEP:	768:w1UPdx1aMF3VS8t5HVzuJd1W8RrlpSHRX78dKvs3IJZ5l0yOEoTJdEu7vFH4olHX:DgUtiYSKU4AtN
MD5:	4CEE352C918C506F58256258D534A665
SHA1:	2485E54F1E4D1232D8FCC1E6724C0D441AB6D348
SHA-256:	E6B20A1535A6D3CA3D7A611AE199A6F4B464E0B67B450379ED43A7EF3E66957C
SHA-512:	89DC6F4173CA9C1F87ADFAF7EC5A9B56C8FE67E15F39DFE24E4A5628478099F24E7D1DD13FBDD03AFB61CE9FFA453D9B6233D8E361A038EFEA8B44533036B11B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/4cee352c918c506f58256258d534a665.js?tag=mysidia_one_click_handler_one_afma_2019
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};function ba(a){a=a.o;const b=encodeURIComponent;let c="";a.platform&&(c+="&uap="+b(a.platform));a.platformVersion&&(c+="&uapv="+b(a.platformVersion));a.uaFullVersion&&(c+="&uafv="+b(a.uaFullVersion));a.architecture&&(c+="&uaa="+b(a.architecture));a.model&&(c+="&uam="+b(a.model));a.bitness&&(c+="&uab="+b(a.bitness));a.fullVersionList&&(c+="&uafvl="+b(a.fullVersionList.map(d=>b(d.brand)+";"+b(d.version)).join("\|")));"undefined"!==typeof a.wow64&&(c+="&uaw="+Number(a.wow64));return c}.function ca(a,b){return a.g?a.l.slice(0,a.g.index)+b+a.l.slice(a.g.index):a.l+b}function da(a){let b="&act=1&ri=1";a.h&&a.o&&(b+=ba(a));return ca(a,b)}function ea(a,b){return a.h&&a.i\|\|a.m?1==b?a.h?a.i:ca(a,"&dct=1"):2==b?ca(a,"&ri=2"):ca(a,"&ri=16"):a.l

Chrome Cache Entry: 676

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 677

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (640), with no line terminators
Category:	downloaded
Size (bytes):	640
Entropy (8bit):	5.262670628246078
Encrypted:	false
SSDEEP:	12:kxP4L8BMnupbWWGBfJHJK8KBGmUSaOWGQL8BMHXVpbWWGeSHAg8KBGzOzyWQ:kDBtGlxKBGmUjNGVBQVGhmKBGy9Q
MD5:	55447927D3FFB85B3BB272439D5193B5
SHA1:	F6E7F405D56EE6F5CE5ECB53CF20561C18AA4C03
SHA-256:	D0E8821E889280C3B745B859E6B3971924723A4562BAC65BA8AA0FE44BFC83B2
SHA-512:	08FF6B68FFB0B869EBED5FC7ADEF5AAC38C6080E9D2710F55CEF5528DCF64289349573293B35EE6AEBA710DA9BECB1602E2C5552D9098AEAB14F08AC10FDDFD5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNWVFmmYsV3u6gVaHonNMWgEEib1xMVcUmBc8ORWNWZDuk-TRhPMIQheD4Si9E96Sm_LjCegR_KqH35hk9vKdv0cWcMk-w
Preview:	<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=teadstv_dbm&google_cm&google_dbm" style="display:none;"/><img src="https://sync.teads.tv/um?eid=3&uid=&fb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dteadstv_dbm%26google_hm%3D%5BVID_B64%5D" style="display:none;"/></body></html>

Chrome Cache Entry: 678

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTaqq_6BNWrHV0bzlfZWXs5xp7LgvlQYGTewww6ndS78t2ywN2EEBPyetlTd3UaXvff-dGCYyFTwNK9oGfHtdcgIbIRWZVzag
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 679

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMInLvO777fgwMVv-mUCR3TZgZYEAEYACCN_vdi;dc_eps=AHas8cDj9yyY35qwlD4wiMuJzpgNYHPzx1_RDpRwdyYUXkgUZfECoC1DEKl7T52Jsb7N6mfiMknUSmbMjg;met=1;&timestamp=1705325069336;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 680

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	515472
Entropy (8bit):	5.694445641910104
Encrypted:	false
SSDEEP:	6144:5BFr62CZXtgv1BOziSb3qb5DUOzxklE+ceVGdAxIBhH27i6r9YPOPqJtUzl8m:5BovgvBXRAxCIG6remY/m
MD5:	F989B2A4486B04EDFF93AEF40F36584E
SHA1:	02234BA0B3DDA2CCCD38470F35DA5494069B1186
SHA-256:	52C308157B0F273A5F4F67BB4F28CCF47C24A68FBC7D0226D49BF4EEBACFDF97
SHA-512:	D725F9B39F13794BF0CE57F5821A49EECF2A0B55C73EFBF218826C9F001514FE5C6FD290D553638C36EBC7D6BD0FAB29C0307F00E894AB9D0353093E2288752F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 681

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 682

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 683

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRQzk3SCSYSzu6zA99kv6dQuxPPFQqFmH4KvXDTI2kpdGCWudIyLv3WlMNrUnGtX1143aCAOIe7eL0z7_sbouimKCk51xWKDuR2
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 684

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (8700), with no line terminators
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	4.901679221068419
Encrypted:	false
SSDEEP:	96:c7FZY7QB0zRHEFjedGgSrWN06CwuEUKj4vZPTxJpEMfHBE6J0/Pn07:uYNzRHIJgSaN06lj4BPl7E6O6JCk
MD5:	38F95416D5F7349B65699F64E6A587FD
SHA1:	2CA6F6F77481C3CDBCAACFC61A56C24F3C933ADE
SHA-256:	08756C47213D461BAA3B01F42448A76D11F524470C7A34F9018733889BD4F49C
SHA-512:	E855AB926916CC3A9AEF67E6BCAC01056180650710804624452F2D2ACB7CE5CE563FBDC5146D51FFE6607FBCDFF8D806765D4FE14C6316AE559BB0C6281EDAFA
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/wp/plugins/cookie-notice/tags/2.4.13/js/front.min.js
Preview:	!function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.prototype,window.CustomEvent=e}(),function(){var e=function(e){return RegExp("(^\| )"+e+"( \|$)")},t=function(e,t,n){for(var i=0;i<e.length;i++)t.call(n,e[i])};function n(e){this.element=e}n.prototype={add:function(){t(arguments,function(e){this.contains(e)\|\|(this.element.className+=this.element.className.length>0?" "+e:e)},this)},remove:function(){t(arguments,function(t){this.element.className=this.element.className.replace(e(t),"")},this)},toggle:function(e){return this.contains(e)?(this.remove(e),!1):(this.add(e),!0)},contains:function(t){return e(t).test(this.element.className)},replace:function(e,t){this.remove(e),this.add(t)}},"classList"in Element.prototype\|\|Object.defineProperty(Element.prototype,"classList",{get:function(){return

Chrome Cache Entry: 685

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61352)
Category:	downloaded
Size (bytes):	134577
Entropy (8bit):	5.507039736015093
Encrypted:	false
SSDEEP:	3072:57irSXfc3sH/tTE5IeD6QO/BWybG6V0caF:YmXfv1I5bbS4w3VBaF
MD5:	FCBDB2BCA5F700B9A47F5419B29673B0
SHA1:	85003DFC9E82053F234C67C8A3B1EA2C242ECF23
SHA-256:	C9E8CF385D3487165293A91AA1D3A279F70351501CEC32664258743B314346C1
SHA-512:	EDEE49C00987E329D3F9410CCA179E7AD47C8843BDE81A5ADA1A0AF6E6236FDF9A39E5FEBA84F94B571DE8C6FEBAB49E9CB9953D8A2A7B7C65CF95203E0AD79F
Malicious:	false
Reputation:	low
URL:	https://pxlclnmdecom-a.akamaihd.net/javascripts/browserfp.min.js?templateId=3&customerId=8CU7Q771E&noCookies=true
Preview:	var eti = "1705325044";var esi_ip = "102.165.48.42";var esi_ua = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36";var country_code = "US";var hs = {"a":{"64132025":0,"206045860":0,"300699676":0,"365702316":0,"412861393":0,"525825524":0,"536911269":0,"654016018":0,"729876735":0,"759082406":0,"775083514":0,"806577238":0,"816260225":0,"839383451":0,"913076335":0,"1021680307":0,"1033442334":0,"1127661596":0,"1129022789":0,"1144446031":0,"1240545330":0,"1314475968":0,"1387485314":0,"1478757702":0,"1503998266":0,"1596482645":0,"1603383869":0,"1678450928":0,"1702050872":0,"1731045655":0,"1962996637":0,"1968800963":0,"1983979651":0,"2009935923":0,"2079380331":0,"2120617929":0,"2210890688":0,"2575613921":0,"2907197173":0,"3018218091":0,"3157734649":0,"3335584073":0,"3344126862":0,"3376552087":0,"3433553946":0,"3439960642":0,"3590271009":0,"3598065404":0,"3608197814":0,"3641698503":0,"3655987792":0,"3738286970":0,"3758972278":0,"37

Chrome Cache Entry: 686

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 687

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7550)
Category:	downloaded
Size (bytes):	93389
Entropy (8bit):	5.458050543587093
Encrypted:	false
SSDEEP:	1536:U044jGDiHrxxmx3CPPfc+u3zfa17wo2L3P9lnlv/1KOENj+l:kCPc50wgNCl
MD5:	B08491B2085D53C449C09E74ED2FE006
SHA1:	9F64EF732D98D7B6D4693AB223CB4ADB878B5007
SHA-256:	88EF527F7AA096CE957AF15A92D779EFEC94F26A0E8E4E3B2A7FD43C362F1376
SHA-512:	ABE67F26320F2055603B22B32D0033B94C292BDA9FC5FEF0EE7F0BFC7353B9C709FEBD1152AC4CA4CF284BC79645C420DE712A3C1C24CE07D2B5FF79792CD3DF
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/2024815875537436803/index.html?e=69&leftOffset=0&topOffset=0&c=Dy5dGanKQr&t=1&renderingType=2&ev=01_250
Preview:	<!DOCTYPE html>.<html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJle27933b440f1f5455a135e9f76973ced" />. <meta charset="utf-8">. <meta name="generator" content="Google Web Designer 15.3.0.0828">. <meta name="template" content="Banner 3.0.0">. <meta name="environment" content="gwd-dv360">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <style>gwd-page{display:block}.gwd-inactive{visibility:hidden}</style>. <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-transition-property:transform,opacity;transition-property:transform,opacity}.gwd-pagedeck>.gwd-page.linear{transition-timing-function:linear}.gwd-pagedeck>.gwd-page.ease-in{transition-timing-function:ease-in}.gwd-pagedeck>.gwd-page.ease-out{transition-timing-function:ease-out}.gwd-pagedeck>.gwd-page.ease{transition-timing-fun

Chrome Cache Entry: 688

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 689

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	4.074504543107084
Encrypted:	false
SSDEEP:	24:HXKYUOrXry6L5f8hltmdsXDBrJJP2gSrAqqBUGEC/HTDBq9qe+d7RtJlnp:aYRxDdAnNPjPTDBGCdFz
MD5:	CFF4A50B569F9D814CFE56378D2D03F7
SHA1:	05CE39FCBC35A4D8748FC8B64579D29E8E471B8A
SHA-256:	291CF581B824E88D8E5292C399D39FE9940CC6D50C1CFE21E0525A510E9E0B2A
SHA-512:	05B855A5018F4E10CBB71AFC90774ADC51A47572D80CC45631A6F5C0628224E757404A99BE1415485AAC2AF430239E3AC04C16B4A0C09CB8D7402D94FE86108B
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/css/wpp.css
Preview:	/..Wordpress Popular Posts plugin stylesheet..Developed by Hector Cabrera..cabrerahector.com \| @cabrerahector....Use the following classes to style your popular posts list as you like.../..../* Styles the "Sorry, no data so far" message /...wpp-no-data {..}..../ UL - Popular Posts container styles /...wpp-list {..}.... / LI - Post container styles /.. .wpp-list li {.. overflow: hidden;.. float: none;.. clear: both;.. margin-bottom: 1rem;.. }.... .wpp-list li:last-of-type {.. margin-bottom: 0;.. }.... / Styles for the popular post in view /.. .wpp-list li.current {.. }.... / Thumbnail styles /.. .wpp-thumbnail {.. display: inline;.. float: left;.. margin: 0 1rem 0 0;.. border: none;.. }.... / Title styles /.. .wpp-post-title {.. }.... / Excerpt styles /.. .wpp-excerpt {.. }.... / Stats tag styles */..

Chrome Cache Entry: 690

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3129
Entropy (8bit):	4.957230272202348
Encrypted:	false
SSDEEP:	48:cVwAnf3LX8D0KOtuMFHLbPdoUxhoj2FEvpLkQuoyKuQIifMn5dxBW:kNnfA8tuK+UkPVpHZIEMni
MD5:	B62C0307751A82E716A92F4604B056F0
SHA1:	953BD687FD55098D0D3C2E2AE6E44770D5125995
SHA-256:	51153EEB8AC31543CDD2F92A91F6C2A516586F4BE5AE2C25624CE35F7D3EE36D
SHA-512:	A51C7A2FFFDF359111C0B8D4EA020ACC8C4ED8301F3AAA211265F8B83EF0ED42169557946B3E6457ED4AE3698D8CB7CFDD384E15FCCE6DED8BC02AB02839A3B2
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/Cta.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<path id="Cta.3_00000165920724345549932020000016349011262776072081_" style="fill:#FFFFFF;" d="M191.521,206.689h-83.041..c-5.31,0-9.614-4.304-9.614-9.614v-7.096c0-5.31,4.304-9.614,9.614-9.614h83.041c5.31,0,9.614,4.304,9.614,9.614v7.096..C201.135,202.385,196.83,206.689,191.521,206.689z"/>.<g id="Cta.3">..<path style="fill:#0C2340;" d="M125.98,189.991c1.295,0,2.026,0.695,2.026,1.739c0,0.593-0.288,1.024-0.814,1.255v0.036...c0.629,0.246,1.027,0.74,1.027,1.511c0,1.161-0.761,1.887-2.115,1.887h-3.226v-6.428H125.98z M124.229,192.649h1.493...c0.613,0,0.932-0.301,0.932-0.806c0-0.506-0.318-0.807-0.932-0.807h-1.493V192.649z M126.845,194.474...c0-0.547-0.

Chrome Cache Entry: 691

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS1lMHdNdnpaRTJ1RTV1QVBoaFlTOTZRblZoZ042NllQSH5B&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 692

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQaeUDlnVQurQazgNwTyK1O-t1nVsNOgTJQG5CLkAzceCnwgtZhJgh8AgE_RnXC0I1yvQ5PMwhmZ2At2LGxdtGd7ZgA3ozb
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 693

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 694

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2047x1065, components 3
Category:	downloaded
Size (bytes):	165183
Entropy (8bit):	7.912159984876535
Encrypted:	false
SSDEEP:	3072:vbYGNEqoC+fYf5n/X2RGD2xKNg+StpQ6Y5o1ejuh43ZiQu6xtdUL:vbYG0wxQKN5j5oyq48R63dA
MD5:	2F50B9CE5FA73BB62FD48E5BB27C978C
SHA1:	810A56FCA8CCD9642D5DE3528AC02AC3CA5D5A9D
SHA-256:	781448F262CDCCC96A1A89AA5C432CB417B9EE754EB34956236D93A0F4754FA4
SHA-512:	282EF4A1EEC12EFDD1C5A40FAF4B0B90A89871EB7495B91E238EF42A3BB38A035320B9B0A35604F923957D2B054D3771D06A0AACF7F9AE999F49572DCA005157
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/1608152452710936237/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////......).............................................F........................!1.A.."Qaq..2..#BR..r.3b......C..$ST.D.4c.s................................%.......................!1A.."Qa2.B.............?......4EC .0. .......@...@p...0..d)..@(.......k%Xi........l`.ro)...W...=7..f5Y..;e.D.j.Y.9...H....-....E...-$..p........X.....:@N...@.... +..5.. . >,...H.....P..............@..P.....9.... `.......@T.....P..@..P....H....r.............@...P.....H.E."`.....@..kE.I.F..$"A.@....2......2).....$.M.=0.#H..P.,..mK...V.....u.E....Z...8[V....h.{.%......F.-"+.U.v1].bx._......P...@....(..P.`ckK./. ..?k.}M1^..?B. ._ .P...................P............./...ic.s.}...G.F.P..@......@... .......@...P.....(.....F.0...9}.....W...9W..BY...".P.E.@.)..)....Ti.....@="......@2....k..S.....r.@\.....p.=>%j..k......no).{...V....MP.j.k.v....H..a.....

Chrome Cache Entry: 695

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAAB9JqIIl7rAwMZjHwkAAAAAAA&expiration=1705411500&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmQHUJT8PIlimOu-CXh6oKF6FUegxb0mep4oqaLpPp31dfmS1uHKqXR2H7v7jgmCACjqSqRhKI_IVG0jpncC_fd4cWr6jEQ2jWY"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 696

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTKWZ3yMf-3_CsEXUqjAdlIV_5gFGzWhnooUcJ8VlTI6sCXsUWxg9WBixS_Y77eZusjVUhr3Xu3sCcuwGMLYI7ITQ4BTuZDWmml_bwNLtn_KLhsquxail4EYcn9cKpeU0IJgs0DWedPcGEYslaCA3PzLA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 697

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE&google_hm=eS1CZ2hVUFh4RTJwR05uemUwNUxzZE4zSTA3Sm0xSDg5T35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 698

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 699

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 700

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 701

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1911)
Category:	downloaded
Size (bytes):	176565
Entropy (8bit):	5.506938860984675
Encrypted:	false
SSDEEP:	3072:hhIUpsEL6FQ8SGcSybNaqrDePIBEklDmCT/e2Y2:NLGQewBE4DzzeW
MD5:	5957752C381CF9529801EDEDBF54FD4B
SHA1:	1B66998302E4DAA5E4E01B889B3EDF3DF18665AB
SHA-256:	A6D36AA3D742CCD6F1CA3C76DCF885AF72F7BEBE2FCC001EA011A7AEA2F55678
SHA-512:	3C914D148CD0B38217504AFB7165BFFF3CD5904A5316DFBC680EE1458EBC1EF92C4B2A22447B2E3F2F4A425C81BD1D335BBC61772E51A0D9D85401B81E29BEA0
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/879366/html_inpage_rendering_lib_200_278.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ha=ca(this),ia=function(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.ia("Symbol",function(a){if(a)return a;var b=function(f,g){this.j=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=functio

Chrome Cache Entry: 702

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38536)
Category:	downloaded
Size (bytes):	39518
Entropy (8bit):	5.651460640507762
Encrypted:	false
SSDEEP:	768:jhNblGwIvmOJpbYgZtswi/27kG4HNVsavgVvw2GAtIINUMRr78GoW+LGtmWJejlE:jLJymxzXvokALI3TweflWAPIN3
MD5:	5024DA521CD4CB88E7D364C7DDB93B4D
SHA1:	301CE4301453F6E8D100247F120B15510C744815
SHA-256:	30216B447644D7908A8EF33A44BC268E0B88EE6AA1D379B9E80EE803D189362F
SHA-512:	04D37C30263E6C408B6A865383AB804C82BAA3FDFA1A71D92AA99CCB286B8C69EE824D07992BFC072DFACFBCC7ED8F2CFB9ACDEBA4493A9213D5436EAD3FFE72
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function C(X){return X}var d=function(X,P,L,q,G){if(q=(G=t.trustedTypes,L),!G\|\|!G.createPolicy)return q;try{q=G.createPolicy(P,{createHTML:u,createScript:u,createScriptURL:u})}catch(c){if(t.console)t.console[X](c.message)}return q},u=function(X){return C.call(this,X)},t=this\|\|self;(0,eval)(function(X,P){return(P=d("error","bg",null))&&1===X.eval(P.createScript("1"))?function(L){return P.createScript(L)}:function(L){return""+L}}(t)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var O

Chrome Cache Entry: 703

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 704

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DdrPSIBGjccK1BCpjNAw9UlNMagnA8QeavzTx_TTBj9FRVjk2HRuj0OcJUDRmAyUB4zLrUw1jg0aL07_gGXrsBUPduFz4UIRdX-UGxRkhX5fXittM
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 705

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmTF3ezaLmYOz7Nh2RaJSZqLFbD3AxsHaxKL62-HjPNokkeI8LPO18riMOgTp21BtNJvoa3uGvruAuLto-2mvxlgNOu22fEJwjw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 706

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 707

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35678
Entropy (8bit):	7.945221223713711
Encrypted:	false
SSDEEP:	768:NI62oxhgjFKnRRdexhh7R3gI7EKkYAQWlfUpU4Yu1SkHS6HMQpN/av8l:NIHoDgjFKRrsl6FQWl+UmlHMQpe8l
MD5:	209EE16A4108B9728DB1FF5E8754E5EF
SHA1:	E2920AF8A255082A2A71895A96629BFA1278B489
SHA-256:	84E7B5E9E0C767E8F54140F4EA50713BC3F8E60188DB65C2FCD0C192C66E479E
SHA-512:	91D576E4441F81A09CD82618B477E5BA7DB8653932AB184F7FD6173B13DC703C9F9822BB396D4D47CF1D766FABF56D12A0FBFF6E3E74DF5733667D0B725C31CE
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/Border_image_300x250.png
Preview:	.PNG........IHDR...,..........mz.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.2 (Macintosh)" xmp:CreateDate="2023-12-11T10:12:32Z" xmp:ModifyDate="2023-12-13T06:27:37Z" xmp:MetadataDate="2023-12-13T06:27:37Z" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:7d36967e-68d6-4531-8739-680ec07b8d7c" xmpMM:DocumentID="xmp.did:7d36967e-68d6-4531-8739-680ec07b8d7c" xmpMM:OriginalDocumentID="xmp.did:7d36967e-68d6-4531-8739-680ec0

Chrome Cache Entry: 708

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3468
Entropy (8bit):	7.9103119344745245
Encrypted:	false
SSDEEP:	96:rbCuM96aruedkdL4RcOkkqMHKXliQDSUV:rGh6ar7d/RZktYUMQB
MD5:	8CB953BF77E5B4C33E90D8D2F2661381
SHA1:	A4D1B2C309C9909AA2914D15057EEAB8F2643125
SHA-256:	C4D19428E755307951C517FD91F3FBF6C1796A0E29563BC84892359A18FDD330
SHA-512:	D8E79505C85F2D96FC4EF191B4C7B3882ED0717FBA1A254889E0DA31D0B4B0A05D78B22C18AE93049544DA501B993EC698B9E5F982B2AA6ED96731015D98E8AA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....G<ef....pHYs..........+.....DPLTEGpL................................................y..c..f..v..M}..,E...`...h.....h..7Y....Ba.\..c..g..m.......S~.1Ny...p.....Z..v..x..t..r..X...........n..l..h..V..p.....{.....p...........z........j..^..a..Fw....\..d..t..Z..Y..............N..V..J\|..........T..f......\..v.....Y..Iz....S.............U....g.....x...........+tRNS..:.......+%.4.2/E...G..e...g.7}.$..iQ......j....IDATh..X.W.;...\|.[.Sd._h......la.a...m...)"..)...wf..f.ok{.x.d3.d2.L.X....lmm..Lfmm-.zMH.`..$........%..."C.@....n...../.dRo.I..t+....!..."..M.\|.p,..@...ck....6..0.L.Y..Tb.....I!.....%.[?...D.G..f}...W.9G.[.....=.o.A../..M.m.D...>..C.....x...i$..uN..8'......L&...G...)Tt..j.+....*.f. .6C.$COs............./.Y/.c.P..F.o,...xb.T.JU._.......8'MT.<u....n..1J..B....s...3at_o.<.p(.......3X...".+..2.Mq...W..]b$b.i.p$e8.X.eU.Ygy......M...XB.O.N%.Y3,......w8....#.X..'...O.`; .)....$.9.J(..X.T.....>WT2..7._.......T.....=.B.N..>..o

Chrome Cache Entry: 709

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x665, components 3
Category:	downloaded
Size (bytes):	166603
Entropy (8bit):	7.9825334674828134
Encrypted:	false
SSDEEP:	3072:oQZCh17FTQFnny8s3HX53T5YIT2ITZFptJ1BTO0d8og98kXPecOfWt6d3ieEoWG4:Rkj7Ryny8sX1NVS0ltJv7d80shOOdjoq
MD5:	556EFC82F400A513EC6B6AE579D50E40
SHA1:	8004305B1F4E8C0239ADF350417AE96A1D9C30B7
SHA-256:	D72EF416C3BD82F81BC204CAF553D943CD069E67C0667565CF88DABF8BFC15FA
SHA-512:	EE4E72E2E668265496AED224A64FF1A7D6C35B68A175E7409923D9F5A61452207AF5FF65051DB632EB32B81B8009B2F7D078BBDEBCE36450A7082EC1CF161422
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3362779266687251578/14763004658117789537
Preview:	......JFIF............................................................%....!"!..&)% ). ! ........... ... ....................................................Y........................!."1A..2QaqBR....#br.....3......CSs...$4c..Dt.....T...5du.%..e..................................7........................!1.AQ.."2aB..3Rq...#.....b.C............?....rV..I.E.R..Tf.....Q.....cJ.n.t.. .1M..\..VNf.bM.l........P].e7.1v..Xz...0.,.F....y...uV..xp.3~.e.Y...[.F.".$pe^.r.X.F.Y.{@.:.sV..3..?Je....C....3...l.rx..4kl<z......8.3...ZH3e...%.<.M............2.ad...e.....7x...A.C.#K...#....'1y.G.H.e.C.W"..f...Pz..ZHRvt..cc.;..H.J..[.c.6.....CqQ$.4....a.I.G.{.....d.t]U...R..4h.da......dl.i~-.....e...]t..gL............6#...es...z.m....f.8..H.E...h.^.Y.I...dl.e<8..Ki+E#.....q.....2.........I.3.v..R.....W\A.2.4j..U.r=....J.D.!O..c...f...Iv.V...J.9..;.Os........h.&el.E..%.v.roi.[^..sbX.....3....aE..27..e.6.F..j.E..p.V...Y

Chrome Cache Entry: 710

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 711

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 712

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17050), with no line terminators
Category:	downloaded
Size (bytes):	17050
Entropy (8bit):	5.536134509854456
Encrypted:	false
SSDEEP:	384:eP1CJ7Lm5uohkZ97DrD0Y/JZFnfeV0B9d0637Cx:8SKYohQ973D0yv/3+
MD5:	387099637DF506FFBD3E00CB7D5C474A
SHA1:	F50240A6D036B68BC26812D87F8C887538691178
SHA-256:	927DA8C0F53BE094EC3B04C6B72D1AA149574522922628425B104CCC4DDA2D0B
SHA-512:	4430E0BCB2EC094AA52857FBCD32E384E8B82B0BFCDA24CA5667DBC99767CE3FBBF445FB0B39F44558CEEC6A909A82699E4E9601EB02C50E2C946D427F7B8238
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var X=function(u){return u},S=this\|\|self,g=function(u,v){if((u=(v=S.trustedTypes,null),!v)\|\|!v.createPolicy)return u;try{u=v.createPolicy("bg",{createHTML:X,createScript:X,createScriptURL:X})}catch(y){S.console&&S.console.error(y.message)}return u};(0,eval)(function(u,v){return(v=g())&&1===u.eval(v.createScript("1"))?function(y){return v.createScript(y)}:function(y){return""+y}}(S)(Array(7824Math.random()\|0).join("\n")+'(function(){var u3=function(u,v){return[function(){return v},(u(function(S){S(v)}),function(){})]},c,vn=function(u,v){return u[v]<<24\|u[(v\|0)+1]<<16\|u[(v\|0)+2]<<8\|u[(v\|0)+3]},Xk=function(u,v,S){if(3==u.length){for(S=0;3>S;S++)v[S]+=u[S];for(S=(u=[13,8,13,12,16,5,3,10,15],0);9>S;S++)v[3](v,S%3,u[S])}},Sh=function(u,v,S){if("object"==(S=typeof u,S))if(u){if(u instanceof Array)return"array";if(u instanceof Object)return S;if("[object Window]"==(v=Object.prototype.toString

Chrome Cache Entry: 713

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 714

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58981)
Category:	downloaded
Size (bytes):	59016
Entropy (8bit):	6.036924444025019
Encrypted:	false
SSDEEP:	768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq
MD5:	D68D6BF519169D86E155BAD0BED833F8
SHA1:	27BA9C67D0E775FC4E6DD62011DAF4C3902698FC
SHA-256:	C21E5A2B32C47BC5F9D9EFC97BC0E29FD081946D1D3EBFFC5621CFAFB1D3960E
SHA-512:	FD0956D1A7165E61348FDA53D859493A094D5A669AA0BA648BE3381B02ED170EFD776704AF6965F1E31143F510172EE941D4F2FC32C4751D9B8763B66301486D
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/css/dashicons.min.css
Preview:	/! This file is auto-generated /.@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:application/x-font-woff;charset=utf-8;base64,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

Chrome Cache Entry: 715

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 264243
Category:	downloaded
Size (bytes):	49910
Entropy (8bit):	7.9929917736048886
Encrypted:	true
SSDEEP:	1536:aeQoxlNmgK3wyMAB+PepUQCLN+inEPPO9irS:aeQoxP1KS6UQCLN+inEPP8
MD5:	5CA85615D6B5564913A57EC2EC875DA8
SHA1:	C9E475DE8141E20F763AE8B694CFB75E0C6833A6
SHA-256:	ED14A287BF688A1EC503EA73323610C23AD7439A935AF103FF99B331E489A94A
SHA-512:	7971B529570227C23A7A006ADC90D57A792538C8E318A4CE206495D5DACC6C194038726D08F4DA620468F8AA838C1D2C066A1F3423421F2F0F84DFB1F3DBB8BC
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/
Preview:	...........yS...7.w\u.CG.k......\o..;.....). ..4.....O..nV.6....0^0`c#.V......W..N.h4..F8..S..V..fz9....>}...OO\|....D.J0p......8._o...y.<...9.y.+..4r...z..._ZkL.y!pA\oj.qkH..........{..z/n.=.J.X./.........zg~3e.. *r..H./x....rW.\|..ckH..W]......8...Z..B#/#.W0.e$..>......W....DNV......... ...~^@-.....g...3..FE..uv{.T.y..U..!...U..2...j=r....^..#.?&.....F">..^T.....t.!...F.E...L>L?}.N.f....u.K.....R#.zA.L....=..~V.rU.P;..%/...Kn...O....G...w..FR...x.s;...'lj..z......a..tZ..3.Y.k]....K$:g..D....&6.$b...V.]..,..}..Trs 9...i.R....^hF...<. .....P..}.......b...5..Xnn.S.....(.......k...$1.%...$..."..al.p.....+m!c.V...sq..C.....h..%7y./,....b..7..x....P.q.W.^...L.....xh.Y5 ..C....v..YmwT.... ..V.gV@\,.B...QG..@J.......7...U.P\...Q....I0}ho.....x(...`...I^.Yr8.........+....e.CW....'#..bPn....S...4..u.NV...}.Yu...c_.w..>y..x...........`+P`m....=\..VI..?.......\U..j...^9u1t.........h....Z9gX...:...x.2m..@..........k+.nw....8k...qT4l......#........

Chrome Cache Entry: 716

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, baseline, precision 8, 336x176, components 3
Category:	dropped
Size (bytes):	16481
Entropy (8bit):	7.947801573165788
Encrypted:	false
SSDEEP:	384:rOHlWnMfZBayLZQNlkPSWEQD8QJyS6uIsGq9iKyjULr:rq0g4y0l4SWExUySSsh9iKHr
MD5:	A550B94384C1972C45D7BD1C6935BCFB
SHA1:	2291BE5B458F5775797D648EAD1755349213442C
SHA-256:	E3E6E29BB31FDB6BE0672B2860493F1E234359FFB1FBFEEFC66E52AF96DDBD74
SHA-512:	01447F0C1E058E4A4DFDB3670A5463A99B394AAF4B37A585C2AFF8F2C40743D74CEEAD026627445AC5ED03C36C881FBFF894B9506C378F1198635F1A96ABBDE9
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.........................................................................P.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Q@....h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h........h.........h...h.......Pi3@........:....Z.3A?.......Fh.....t...?..h.....:(?.......Z(.'......Z....4.....Z...tf..h....@?..h....O..h..............:....Z.3A?.......Fh.....t...?..h.....:(?.......Z(.'......Z....4

Chrome Cache Entry: 717

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 718

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 719

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3386)
Category:	downloaded
Size (bytes):	9152
Entropy (8bit):	5.526012605064
Encrypted:	false
SSDEEP:	192:Bl2s0yrpk1Eri7SkBFBWDfVeF6qCkWO6fU0P2iG+Mf8:H2szrW1Eri7SUFBKQ6qCkWBfUU2B+W8
MD5:	9043C2947E2D9E4035289D10C320C39F
SHA1:	C06DF557C3B398AA7513129067C94EAB0DC53CBF
SHA-256:	E93B8C0AE5B5910B7107C8B455EDA029935C56EFA8DE0BE2443D8EABBA207197
SHA-512:	CDE5F0C89A0D4E1F452A9C7D082D65291D19DB511441D68006F95075A73AA3470FD98DCE4DE0821AC6AA1E3C200216E2AA073FA10E9585C6FA6BB612C90DF36A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240109/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><html><head></head><body><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],null==z){v=null;break a}v=z}var da=v&&v[610401301];n=null!=da?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function E(a){return-1!=ea().indexOf(a)};function F(){return n?!!B&&0<B.brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge

Chrome Cache Entry: 720

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 721

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=qXJB9OnwRUuAk11aba0hXA&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 722

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMInbvO777fgwMVv-mUCR3TZgZYEAEYACC1jvhi;dc_eps=AHas8cD1CtkfFy49UjtqvC0-DA7iQdhGlsEqMlF1y3-Nvsdo5fdOVHCQ1yTJTm1CntMvfD2iOi1NIlmY6Q;met=1;&timestamp=1705325068321;eid1=871060;ecn1=1;etm1=0;eid2=2;ecn2=1;etm2=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 723

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk&google_hm=eS1pTktXdFp4RTJwSG1WQVlvUE9RdW9EYUpJU0ZvRC5acX5B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 724

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 725

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124069
Entropy (8bit):	6.117348181781082
Encrypted:	false
SSDEEP:	1536:vww98/zKxP8pSmOBajNYXEqCE3fcxnqvyBBd0SbseKlVErx9XHKj0i68:vwYGzKxUphOQm0tE3kxnxJ0jeKqHO/b
MD5:	F986336AF55C80329034E6A1FC16695D
SHA1:	EAC8B2B5F7DA3F1A8E00E85BE5D8BC72B3340E71
SHA-256:	FA73EE75D15C8AF497DBE467BE319CB743BE5423D1F141494514AB412ED5C8B9
SHA-512:	E7814E60FFB3A5EF760CD3F24A87EBDDF5B0D031CE7456FE4B0764B20D3BD84A643A26F4D5E7C384BA7331F523452C94C34A9487F018F72292A7EE3545A1A5C8
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;border:1px solid #E5E5E5;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="bannerB" data-ns="ns-4hvor" x-phase="assemble">.ns-4hvor-l-bannerB{opacity:.01;position:absolute;top:0;left:0;display:block;width:1200px;height:280px;}.ns-4hvor-e-0{

Chrome Cache Entry: 726

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRk8aAOzcL4YDJzbs3Jk5669CA18yOSK12ynhlqEeBV8XROypkoUtnq4I4PJ6nNicocVYSfGYXW0qxStfQK1Swa2IYIyql2iAHQGlw4llcFkMf8yWYz0rFgDOVXKmspoP9m6kHGuuSyHalgTNOpjM-hMWI
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 727

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3129
Entropy (8bit):	4.957230272202348
Encrypted:	false
SSDEEP:	48:cVwAnf3LX8D0KOtuMFHLbPdoUxhoj2FEvpLkQuoyKuQIifMn5dxBW:kNnfA8tuK+UkPVpHZIEMni
MD5:	B62C0307751A82E716A92F4604B056F0
SHA1:	953BD687FD55098D0D3C2E2AE6E44770D5125995
SHA-256:	51153EEB8AC31543CDD2F92A91F6C2A516586F4BE5AE2C25624CE35F7D3EE36D
SHA-512:	A51C7A2FFFDF359111C0B8D4EA020ACC8C4ED8301F3AAA211265F8B83EF0ED42169557946B3E6457ED4AE3698D8CB7CFDD384E15FCCE6DED8BC02AB02839A3B2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<path id="Cta.3_00000165920724345549932020000016349011262776072081_" style="fill:#FFFFFF;" d="M191.521,206.689h-83.041..c-5.31,0-9.614-4.304-9.614-9.614v-7.096c0-5.31,4.304-9.614,9.614-9.614h83.041c5.31,0,9.614,4.304,9.614,9.614v7.096..C201.135,202.385,196.83,206.689,191.521,206.689z"/>.<g id="Cta.3">..<path style="fill:#0C2340;" d="M125.98,189.991c1.295,0,2.026,0.695,2.026,1.739c0,0.593-0.288,1.024-0.814,1.255v0.036...c0.629,0.246,1.027,0.74,1.027,1.511c0,1.161-0.761,1.887-2.115,1.887h-3.226v-6.428H125.98z M124.229,192.649h1.493...c0.613,0,0.932-0.301,0.932-0.806c0-0.506-0.318-0.807-0.932-0.807h-1.493V192.649z M126.845,194.474...c0-0.547-0.

Chrome Cache Entry: 728

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2025)
Category:	downloaded
Size (bytes):	31872
Entropy (8bit):	5.461594615615002
Encrypted:	false
SSDEEP:	768:ULl06VVOzM34XSGdbgJUv0iXUq2eQIB0LsRJ:kl06VVwRdbgJU/UzIB0Ls7
MD5:	EC9330C0B0E72CBE42901EE65453EC3F
SHA1:	C1D9A3632473848C988FA57D1A497A12C96429E6
SHA-256:	9DFBB8E1BE036059AEA6DD87BDBEFA7ECADA3617FB3F404BA4647EBBBF8160B1
SHA-512:	6D4BC20D4E4E132CF13164542256441DD660818DE0620DBFCC4C7C5B906FA5CC8F4E099C8FAD49A5E38E37709D39C031643DAFFA9B4679B6FA4831386E1EA297
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/r20240109/r20110914/abg_lite.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var q=ca(this);function u(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var g=a[d];if(!(g in c))break a;c=c[g]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function da(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var ea="function"==typeof Obj

Chrome Cache Entry: 729

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 730

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50348)
Category:	downloaded
Size (bytes):	51535
Entropy (8bit):	5.7435968871023855
Encrypted:	false
SSDEEP:	1536:jb7bn0cWQrzzJnFUjLFgq5oEOw9veRmdUnrPYwJ:z70c2jLFRdOMdUcwJ
MD5:	741FD1E4E5C37BD105B9C2786BF6D309
SHA1:	B993829E75E4F0D31AFCB4BAC455D54827456D80
SHA-256:	16AEA80C6752A1CC048F9BACB41D9B9F92A56B9E021BBC3D72E5B245F4F21892
SHA-512:	0B6578CA4A570020AEEE49BFB434F548A4E4F86BF8D260D8D9E07FE6790F62DBF1EED430F63FF798349E5FBE6D5526CB2DB31CC22BC8BB541C943592D0DB2110
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/Fq6oDGdSocwEj5ustB2bn5Kla54CG7w9cuWyRfTyGJI.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Z(G){return G}var g=function(G,M,N,C,Y,D,K,O,W,U,p,m){for(p=(U=M,27);;)try{if(U==G)break;else{if(80==U)return O;if(4==U)k.console[Y](m.message),U=91;else if(U==M)O=K,W=k.trustedTypes,U=1;else{if(91==U)return p=27,O;1==U?U=W&&W.createPolicy?79:80:U==C?U=k.console?4:91:79==U?(p=61,O=W.createPolicy(D,{createHTML:w,createScript:w,createScriptURL:w}),U=91):U==N&&(p=27,U=C)}}}catch(v){if(27==p)throw v;61==p&&(m=v,U=N)}},k=this\|\|self,w=function(G){return Z.call(this,G)};(0,eval)(function(G,M){return(M=g(15,56,42,47,"error","bg",null))&&1===G.eval(M.createScript("1"))?function(N){return M.createScript(N)}:function(N){return""+N}}(k)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;bas

Chrome Cache Entry: 731

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=NzAyMjUxNDczMjI2OTQ1MTY0Mg&google_push=AXcoOmTXQtNWdcta8yfPq670zhfPsOnDIBDv3eQMeeMwH6By8x23HeGHcA-dRtyoA_YJwr9NBNOopwfjyw510NPMJM6Zshq8-Q_E3-4
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 732

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 733

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 734

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50348)
Category:	downloaded
Size (bytes):	51535
Entropy (8bit):	5.7435968871023855
Encrypted:	false
SSDEEP:	1536:jb7bn0cWQrzzJnFUjLFgq5oEOw9veRmdUnrPYwJ:z70c2jLFRdOMdUcwJ
MD5:	741FD1E4E5C37BD105B9C2786BF6D309
SHA1:	B993829E75E4F0D31AFCB4BAC455D54827456D80
SHA-256:	16AEA80C6752A1CC048F9BACB41D9B9F92A56B9E021BBC3D72E5B245F4F21892
SHA-512:	0B6578CA4A570020AEEE49BFB434F548A4E4F86BF8D260D8D9E07FE6790F62DBF1EED430F63FF798349E5FBE6D5526CB2DB31CC22BC8BB541C943592D0DB2110
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/Fq6oDGdSocwEj5ustB2bn5Kla54CG7w9cuWyRfTyGJI.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function Z(G){return G}var g=function(G,M,N,C,Y,D,K,O,W,U,p,m){for(p=(U=M,27);;)try{if(U==G)break;else{if(80==U)return O;if(4==U)k.console[Y](m.message),U=91;else if(U==M)O=K,W=k.trustedTypes,U=1;else{if(91==U)return p=27,O;1==U?U=W&&W.createPolicy?79:80:U==C?U=k.console?4:91:79==U?(p=61,O=W.createPolicy(D,{createHTML:w,createScript:w,createScriptURL:w}),U=91):U==N&&(p=27,U=C)}}}catch(v){if(27==p)throw v;61==p&&(m=v,U=N)}},k=this\|\|self,w=function(G){return Z.call(this,G)};(0,eval)(function(G,M){return(M=g(15,56,42,47,"error","bg",null))&&1===G.eval(M.createScript("1"))?function(N){return M.createScript(N)}:function(N){return""+N}}(k)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;bas

Chrome Cache Entry: 735

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 736

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 737

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR8-7nf_ZGrmK5pgWWgz_1AJSNOk5or24NWFPdluzEmrbrv4St3Qf1vE_HEwGVqGPIBY5PKDJJDc-6tuY8YJirEpuR0wi2p
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 738

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057604
Encrypted:	false
SSDEEP:	3:APr4Y:APrV
MD5:	AC1981771A4F94EF40BAA578B55343BC
SHA1:	3B5C34AE086FBB783D36DA0CF885D8A7524B17C4
SHA-256:	B58B527345904E6AA688675309BE6441AB302B1863D52DB7D12DAD9E03014293
SHA-512:	69F5E441B7F026EC5A71A8FF836CC06ECEED14C337DCBC98E5A74E654A1E423F7C7A54D132627F1A999CF26088304EB54B8DB684168EA09B1B7A1F409D128C32
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn-GK5lJGKMEhIFDcMS_rwSBQ0d3M9e?alt=proto
Preview:	ChIKBw3DEv68GgAKBw0d3M9eGgA=

Chrome Cache Entry: 739

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 768x513, components 3
Category:	dropped
Size (bytes):	155266
Entropy (8bit):	7.975421310012775
Encrypted:	false
SSDEEP:	3072:nSD15M1k2Q4KWrxR5pm1tvCvjapkm0clHawhPvQ3DcsvoFpmrxuG3n:SD1lU3WtvC+kwaw9vQ3p2kt3n
MD5:	ECF5D2E34154B3BBD9BA0E32D904FF7B
SHA1:	0223B2DF0A3671D79ACD45B0C4FD88D16FD01F5D
SHA-256:	07B2CAB59D5CF132C992BBC774686CBFDF097BD94F72C7E69900C481211D885A
SHA-512:	73182BEC5D8779425C55EDCBAAED6FF10CB362E94B2BC958993A8E8FAE5F137F6EF17CCFC87D118A6CB4FFC643234D23474A058DA7ADA955777439ACACE5ACDA
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d.....,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Canva" xmpMM:InstanceID="xmp.iid:271681EFA88411EE8913B1BAB7F7B246" xmpMM:DocumentID="xmp.did:271681F0A88411EE8913B1BAB7F7B246"> <dc:creator> <rdf:Seq> <rdf:li>SockPeng Ng</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Travel (Facebook Post) - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:271681EDA88411EE8913B1BAB7F7B246" stRef:documentID="xmp.did:271681EEA

Chrome Cache Entry: 740

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 741

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 742

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRfr734V0ahK5eHYkp2NUscxxd_eDTKE8uEJe1sOrER9_ievttcWs1pYvuZhdRbABu5E5VQci2lJ2xgCXwYnGd5juco1O9P2S0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 743

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

Chrome Cache Entry: 744

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1832)
Category:	downloaded
Size (bytes):	22919
Entropy (8bit):	5.513977703838414
Encrypted:	false
SSDEEP:	384:/k81pfgxLtEUyQW52Lt37X/DxZ7cKBYbTXib2ag+jeqK1akMJN2GB6rR4kouXxWl:/RpfgxLWMW4t3LbxZ7bYbbag0eqOah2o
MD5:	ADAA96527B0AAD7E0029DE30E965CA10
SHA1:	CADE60217F37E4453CC2E5A1074B3B81D870E0B2
SHA-256:	7A519C62E734157227E61CE5209158E1B7B484B5F2B68E3CCAED1FFE444DE36D
SHA-512:	7013328A5954BAC9D72821748278CB4DA060FD32EE37EE11B1F7B7C2C7C2906162764DA9E86B26D2767E6310FF23AFFEF4C6DCFBAA7DA03B28B892F6D4E0DCBF
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var p=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=p,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function q(a,b,c){q=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return q.apply(null,arguments)};var ea=aa(610401301,!1),fa=aa(572417392,!0);var t;const ha=p.navigator;t=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function w(a){var b;a:{if(b=p.navigator)if(b=b.userAgent)break

Chrome Cache Entry: 745

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 746

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3035)
Category:	downloaded
Size (bytes):	172657
Entropy (8bit):	5.526646220846135
Encrypted:	false
SSDEEP:	3072:6COStJ7+C8a4Ctnlw1yNtkMmYyktV9eQdYTF3:fR+vVCAStYktV9eUsh
MD5:	946BC5AF205C5CA5842F7969335DF893
SHA1:	FCD5C43DD3A5A2F72A33F8B23C07C9A1A22DAD3C
SHA-256:	DCD1A938E8D8278045157C242344C6EF755ABF974E607C30846DA51A1F85ED1B
SHA-512:	841ACE798123DE3265D0AAA71E5187D399DFF8CC9E049881E009AE6DC67F42BE22811BA17BB9A0FC412E2AAB4D45466ADAAAEF718AF58CB0F3963BA72DABE271
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NF4V4T2
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-JJ7DB92BJ6","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":3}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__googtag",[46,"a"],[50,"m",[46,"v","w"],[66,"x",[2,[15,"b"],"keys",[7,[15,"w"]]],[46,[43,[15,"v"],[15,"x"],[16

Chrome Cache Entry: 747

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	39038
Entropy (8bit):	5.430664050428052
Encrypted:	false
SSDEEP:	768:a5/nVk+G9hMlWTSwx832cQyHaSaSmAjiT:a1Vk+G6lWuwx8fLabSNU
MD5:	E073798C657A0FC59453B8B6ADEDCEBA
SHA1:	401AB66A92A6716CD4C981894D47F679FC1AE9AB
SHA-256:	EB66C7C9D097D5BA414230F422484C17FA6F37157D30E1DED2CC5F65A9667987
SHA-512:	866345625C19C0256BE9BF9F383291E645C6B64124A43BDD1C02F92FC2AE0F0AD985A15FF39319456B679B73B058290C0A0FE10C073D76F2C5976D8ED8D84A49
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/62bHydCX.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ba(this),t=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&p(c,a,{configurable:!0,writable:!0,value:b})}};.t("Symbol",function(a){if(a)return a;var b=function(h,f){this.Ca=h;p(this,"description",{configurable:!0,writable:!0,

Chrome Cache Entry: 748

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 749

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87462
Entropy (8bit):	5.262148110388299
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV
MD5:	E6C2415C0ACE414E5153670314CE99A9
SHA1:	5A9EEAC34D86E92E5660E0F4F87204F1ED0C8FF6
SHA-256:	D8F9AFBF492E4C139E9D2BCB9BA6EF7C14921EB509FB703BC7A3F911B774EFF8
SHA-512:	DE027062931EDD07B01842EFF24FC15FDBDCAA1AF245DCD133155FABA9E0C965F0A34DC6144CE3B149BC43B4597073C792CB6DABBFC6168C63095523923BCF77
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/jquery@3.7.0/dist/jquery.min.js
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 750

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 751

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 752

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMI7cKB8b7fgwMViyezAB1diAZNEAEYACCzm49j;dc_eps=AHas8cAYoTc9wQXl0OyK1GlEZXcmPbA-3olV4kd0AEStnKH7jnStsJQAbNX7CFAhGi7muVziEKNHOhW0eQ;met=1;&timestamp=1705325067363;eid1=2;ecn1=1;etm1=10;eid2=871060;ecn2=1;etm2=0;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 753

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=992917243&google_hm=NTNmOGJjN2VhODlhYjlhNg&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 754

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.323962444639199
Encrypted:	false
SSDEEP:	3:2LGfDD6pRbXJRNVlS9LRH:2LG36pZZRNVlS9L1
MD5:	A07180E65BA4D17FC6AC8D6BC0003DF8
SHA1:	0E89A9BD153A4F21B45129450408A88769FD571A
SHA-256:	C45C8B81CCFCBC08127B74787D1B5974078756233DE947986C357E28ED8F13AC
SHA-512:	2139690DD0EA4F194A05E2B596A3CFADF700B1DDD56D0063793FB1E5E8AFFE40B4983F23744F581D3A496ACB801A5DBA348E42F86486323E5F597956CE33974B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/osd.js?fcd=true
Preview:	(function(window,document){}).call(this,this,this.document);.

Chrome Cache Entry: 755

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	90
Entropy (8bit):	4.876761469259771
Encrypted:	false
SSDEEP:	3:5IGEmXbArf6S3fXQVe9tLFSKPEbMXgsFeBBQ:Wfxn/oe5RTXgsFr
MD5:	DB3D5EEE8BF313C2C2E11A14ED7F287A
SHA1:	0F6039A0DA1CB7FBBD0BCB24678BC6C6FE408565
SHA-256:	E04A1F2AEBC7B917508869D302A674F265B0CC51CE245690B52836A2E8193525
SHA-512:	9947ED261858EBD617A3F818ED906456B1943B9A91FF4EAEA9DB6C7545F2F91B1F4744FBEF22C1D9367889A71D48DD99BDAAAF5198D60FB82F6B116ACA048891
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/ld-core.css
Preview:	#main-container {width:300px;.height:250px; background-color: #0b233f; overflow: hidden;}.

Chrome Cache Entry: 756

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 757

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 758

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQKnbnaV4TG-U97_v64H__QwyOBp2b9ebutC3UrjRj_XsJNR82ga2abClIlEnSXnCYhtbObnS4pxTxKpQwPviot5HqL1FGi-Q
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 759

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRsyfmssQvlfgCMIxYiuCM7UJGGFPYm6LjzV82_59PxamG4vKclbfhCb5E95v9kpy0_Y0v8nTaJTVy06HW1c7aGcKF82arnvA&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 760

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7092)
Category:	downloaded
Size (bytes):	92954
Entropy (8bit):	5.454366633701606
Encrypted:	false
SSDEEP:	1536:uoS8X44jGDiHrxxmx3CPPfc+u3zfa17wo2L3P9lnlv/1KODNV+n:cCPc50w3Nsn
MD5:	FEE5D7E59D60C90056332AFFB151299A
SHA1:	8C81666598491466E996CD5DF0C5EEA64FFD28B9
SHA-256:	B728648A2AFA07BA5965DF3975E13F4FC1A0DF98093043BD80322A6E9DB8726E
SHA-512:	4987A425AD15DF0E7EC1C08498CAC125669B7D0D02CB395F810F31C24BD474CDAF16B7C6651FB26E4188A9277301B1B4A8F41D805B89BD57BDC9A1F5C9EDC088
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250
Preview:	<!DOCTYPE html>.<html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJl5745ce7a289eb2e97b9fabd081399ef0" />. <meta charset="utf-8">. <meta name="generator" content="Google Web Designer 15.3.0.0828">. <meta name="template" content="Banner 3.0.0">. <meta name="environment" content="gwd-dv360">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <style>gwd-page{display:block}.gwd-inactive{visibility:hidden}</style>. <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-transition-property:transform,opacity;transition-property:transform,opacity}.gwd-pagedeck>.gwd-page.linear{transition-timing-function:linear}.gwd-pagedeck>.gwd-page.ease-in{transition-timing-function:ease-in}.gwd-pagedeck>.gwd-page.ease-out{transition-timing-function:ease-out}.gwd-pagedeck>.gwd-page.ease{transition-timing-fun

Chrome Cache Entry: 761

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRDum50lrWXz5Yhu0Czgd0D5fL_h_Rscn_AHruSbuLJuNWan_vL9POHqlOScdmDES34uhh3bxcbFm3ejitO9U9jC15TrQLo3FSN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 762

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 763

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=acuity&google_hm=877145232820&us_privacy=1---
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 764

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 765

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:Hd1Y:w
MD5:	FA9C17CE126A76733ACA269345EB7D47
SHA1:	F1D8AA71F281509D55041F671B1A7BD94524AAD8
SHA-256:	15F88A501BBE49A103551BA087FE6FC7E101894E71C3A74A42E8EFC07DCEC0D8
SHA-512:	DD2E08D8D294E24330DDACFCC602D5AB9C9BD65346E0C6540F599725AB711E1F1621D3939318BFC069E67CEF889B80E781DA3E935D61C26E2086DAC79428818C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkhaOuw2UjKNhIFDRM0Cs4=?alt=proto
Preview:	CgkKBw0TNArOGgA=

Chrome Cache Entry: 766

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTwgIEN1LQK4KZCH0XtrVcRtsuq2iH3k-hQ-KJZNB5p_u2XmHIyypSS8zqmgNzSkYLWifF7P5x6gJAoSTXkNQu9Z3_NsV9sop4
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 767

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=YzkxNmVlYTItNWExMS0yNjBkLWUxNTctMzFlNjk5MGQ4ZDk3
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 768

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 769

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48428, version 1.0
Category:	downloaded
Size (bytes):	48428
Entropy (8bit):	7.9957734998879335
Encrypted:	true
SSDEEP:	768:TReRawPBQjCvguNFXr1BolsuCR9SMiSY3f1xbG535aDHkUmPDR2PDrhfTcLvft0/:1ebP6+7rzJR9S1Sc9xIaLmPDefTczftM
MD5:	472A20F7AD824E27B398A88B1E6E7C32
SHA1:	63DA4C5A48A5A0E47EAA682ED7036BFBECAA3100
SHA-256:	BEEB07FB8C29EFBC5A8A805F860A8550E56D5EAB9E6883F58DB91581BE08214B
SHA-512:	E5471692A6A37F5B14C2AA3C1866DAFC57116986AD3FF743D65F70A2F4DBD7A15FFCF711CD13B2188781C651A901ABF4CBD6EEF97AF8C4B5938FC1DE4BC6F631
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/notoserif/v23/ga6faw1J5X9T9RW6j9bNfFIMZhhWnFTyNZIQD1-_P3_ctw.woff2
Preview:	wOF2.......,......~...............................'..\...?HVAR...`?STAT.J'...4/l........T..@.0..Z.6.$..\|. ..l..z..[<hq....R.....m.....?.6.m..6...N2...-.nG......O:N.(X14S...ceFN..i.:...F......y....[....B+l..!.-.....^.]t...?..@.n.p..t.-g..%.&d?..9a...:.9%....N.......:.....h..d3I...V..5.nh..0<...wK....H[2:.6...6>.G..oQ.>.H...}.........A.6]..u....Rh..../\|..]? &.$.Y*._..n... .P.H....nD.X.#..cC..4D,.!.EDTJ.......P1TyD^.Wl ...........N..;. ._.H....7nl@F.E......f.W..w.V...\|..(...N......\p..p...v.....D......'%.66...F..#R....{b_...f.......W^.?........B.^...B..#.O.2..2..{;...+.....Y....t`.!.?.\...&.]...I..".4oN.%..2.....4..tZ....4@Y.A.A;.pZ......N.T.kY.qNS2..9.0....Wg.i...'...).h.....@.3a....,K.e..qp...gF.9i..1.f.$....{.i..-..3..o..;.0]..Si.....Bq=_..o.......s...f..@D.....d....P.q.\..._t0gU.c.e...'..X.\|.\............&Pp...MUC.'.U1A......$....v.VJ...fT x..{..N................ ..5....[."]..$d@.:....].BX`z.JW..Y......ij]Q-~.iiv!iCQ....EiC...6.x...B

Chrome Cache Entry: 770

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRwpmsk5b1hrjAm10VAPEfsx6x0LjA3R2w-RSEmr9o8N0sK8owjEUqz-fnfglySi_0qL_A-s3ZQHzJFuL3xTXICom7dzcbGQsk
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 771

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 772

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 720x377, components 3
Category:	dropped
Size (bytes):	111351
Entropy (8bit):	7.970795018921122
Encrypted:	false
SSDEEP:	3072:8xJa6clVECDUNSwfH4jxBiZVrUWTQGM297ic7bMZTE:2a5NDo4eS7Gv7icPMlE
MD5:	4DF7CB19C99E03AA869FD771064BF3A0
SHA1:	74D510A733BDDAE7A8373CBE67DAD64AE980D9C0
SHA-256:	7F7039EBC962FEA21125D2B4A73EE234CBBE4741ABC354967D3DC791E340E066
SHA-512:	1E9BEE3AE549DE22EB1CB8AC108F9BF55F40EC45D70941D8BAC0D55D0D04C12E95DE9669EF869439F6DECF7C7FD5BA98CF586C32F4847088D3FAD6A6A4835B78
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.................................... ("..&...#0$&+-.-."251,5(,-,...C...........,...,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,......y...."........................................O.........................!1.A."Qa.2q.#B.....3Rbr...$45....6st.u...%7CS..DE..................................2......................!.1A."Q.aq2......#B....3R.............?..h..%.a..Q~q..C....K.m..0p.QG...7.I.M..q.n....A..f+GN.K.....F.P..?0...q\|.. ...B&..Z.w..O"...F.Ci?+...qp...R.q....1"9....G.[........x.z.....fV....pd....4.2..Uty.._U...k....[...Y.S$.". V$.{...w...)a...Ji4.Ew-.7=."....6...i).EB...c..%..V......k......,.`.nE. .LN..3.\|.R..t.R.".......e..n,..o...u...S.1H.T.....bm....x".8.$.~=k$.i..T.8.P.Dd.\....W...p.#.r....Uk.]~.(..F...I+q.t.[P;..%...eYg..OC.Jp......<..4r.....1..pG....#.cI.U.a-,.Y.pI.....o..a._,..........MP.J..:H..*.$FTn..fi.I...5m.-.Q.pA-.l......M.er...l.\|..."....x..S.T._R.v.bM.rF)54Tp...T..W.)....I....m.....FSAKM$.r.f..3.5Q......=D.....6.K/.+.b

Chrome Cache Entry: 773

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACjsqaDTbTDANPRTk9AAAAAAA&expiration=1705411500&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmQelrR0_Yned384IxkGpatfGdXF0H5xIowJ-GLR6s4fvvzw4SO1bJlLC4JZbJ19skP5WxBFYni5q6a5O94Sz7jpqo659_K8DADkPdZWsTJ7iGbt93dKsDu1cXhCaEFiGsOkBiP6PjPmme1_EAOhjyfUAsg"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 774

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is&google_hm=UjMzNjQ2XzEwRjU0MzhFQV8yMEI3MjM0RA%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 775

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 776

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Optimized by JPEGmini 3.13.3.15 0x8be7bc3d", baseline, precision 8, 260x600, components 3
Category:	downloaded
Size (bytes):	74414
Entropy (8bit):	7.961978575734755
Encrypted:	false
SSDEEP:	1536:v1l29wxcW4i3rc0j74tWsN25eqZg1891gCtv+z6mLEkPPxXethp0WcMmtEhn:mahAN25y180yhmgknxXetQVE1
MD5:	DEC13E5E96ED3DB66E4DDDC81FBEDC17
SHA1:	9113FC9EEAE81770DF5DD40D4C7D639F5518F85B
SHA-256:	A7B0086ED303111A7E3515D61A8F4D5C2C7CBC5AE6DEA99D0332F4F3EF398A78
SHA-512:	A5EAA5EB6E5689522C30F8E39149F5229533F2F2664E66EEF50EEB911468A8282EADEA41320A0374A452F1F0321B73E9854EC4F0D1EB9FB7FC5B36D99EE26A69
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/banners/travel-with-mylovelybluesky-vertical.jpg
Preview:	......JFIF.....H.H.....-Optimized by JPEGmini 3.13.3.15 0x8be7bc3d....C....................................................................C.......................................................................X..............................................m.............................!."1A..2Q.#BRabq3r........$%CST.....46UVcsu.......(8Dv...&'5EWdt...)...Fw.......................................O........................".2R...Bbr.!#1.....34AQaqs....$%5..CS...Tc...6...Dd....................?..`.s.\.GYC.l.....M.G.."........[..\|..K.b<U;y^>..#\|....\|.%....y.. .?....8u.../...S..{w....,]..L=G..5.0h0...........0...........0...........0...........0...........0...........0.......;........O...j.>.S..Y....X.^;.w...n...t.......L]8W.B.......h3t^.%F.1..=.C...f8.a<.E.V..1......Kv.f.=..3.}?....y...%...Sq....;/~........~I.hw>VS]..LU....z.9K%..M...IIt.U.....?1+0.....-...k....S.\Z........?..q....._d..\|k..[.............0...........0.....m.6..E.ll......~..o....O....\..._

Chrome Cache Entry: 777

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 778

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 779

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 780

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1394), with no line terminators
Category:	downloaded
Size (bytes):	1394
Entropy (8bit):	4.297807353591199
Encrypted:	false
SSDEEP:	24:6TyOGq/BWEBMJnXhnBkaZiSMBJ3MNvUwUOt2tsS6CN77etv3iFsTdSf78HsI:6Typq/BWEBMtRnBka05BBMNvUwUSS6CG
MD5:	92E9A351C50B6CFB11EEF892AE040B65
SHA1:	79E985961A331B814A0F82A3CDEDA31E78825840
SHA-256:	0128E2697468DC3BA1F9C39133535667DF66B0F8BE770B12199F2A17DFDC7881
SHA-512:	312C97838B568EACBD333F65BB5E020A6D613A821F2A08A9DF4052EB4B3CF631ACF5D525D26FC200834EE2101748F50F0A99F2C45DFE79F6C84432EADC2C8AF4
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/sina_weibo.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({sina_weibo:'<g fill="#FFF"><path d="M13.92 24.99c-4.303.424-8.02-1.52-8.3-4.346-.278-2.827 2.987-5.463 7.292-5.888 4.304-.426 8.018 1.52 8.297 4.345.274 2.83-2.987 5.468-7.29 5.89m8.61-9.38c-.367-.11-.62-.184-.428-.663.416-1.046.458-1.946.01-2.59-.846-1.204-3.155-1.14-5.8-.03 0-.004-.834.362-.62-.297.406-1.31.345-2.407-.29-3.04-1.435-1.437-5.255.055-8.53 3.33C4.422 14.77 3 17.37 3 19.617c0 4.3 5.513 6.913 10.907 6.913 7.07 0 11.776-4.105 11.776-7.37 0-1.97-1.66-3.09-3.15-3.55m4.693-7.87a6.89 6.89 0 0 0-6.55-2.12h-.002a.997.997 0 0 0-.765 1.182.99.99 0 0 0 1.18.765 4.91 4.91 0 0 1 4.66 1.508 4.899 4.899 0 0 1 1.02 4.787.995.995 0 1 0 1.894.615v-.004a6.883 6.883 0 0 0-1.44-6.732m-2.622 2.37a3.343 3.343 0 0 0-3.192-1.03.852.852 0 0 0-.655 1.016.854.854 0 0 0 1.016.657v.003a1.655 1.655 0 0 1 1.564.502c.406.453.514 1.066.338 1.606h.005a.858.858 0 1 0 1.63.528 3.345 3.345 0 0 0-.7-3.28"/><path d

Chrome Cache Entry: 781

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 782

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3684
Category:	downloaded
Size (bytes):	1425
Entropy (8bit):	7.861533037793503
Encrypted:	false
SSDEEP:	24:XtWf+yL8REVktnCJ5ZClkxVHGXz4Rmb8xHQBNZf3YnQl83TCcK5YsRUAOm3jStT:XIf+yLTOnCzZCS7kFuyNZfI3TCvYuzO1
MD5:	08E6204BAB4B1CE2CA709530373DB6CE
SHA1:	ECB4DD7231513E570FFE21A83F8859524966AAF2
SHA-256:	C5F90B5BFA14F082DD3896F193253E5661CF48ECAEC40E658E07A4ACAAE0AFBF
SHA-512:	31D71C26F16DA9C28C9176C5B22EF2C83738F2912AFA5F3AE9B1C5655BA49555D20BDACB2F138503357331BED7C5FB33974DA4B9B7A119FDB05CD72DFB3B913D
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/magazine-pro/js/responsive-menus.min.js
Preview:	...........W[o.6.~..p8.%kJq.7+D...V`.:..K...yd..)U.\|...>...K.n.K....s.....~.^.. /.Lz(G/.G4...&...1.].=.L.n%..1}.W.....?.6.5Y..g\..c.A@._.Pz_Rb4a.I(....X..J..- O...-.!DF%.LhLI..[.>_,2..].+r...........(aa..\|.o2..%Ry...4ic....l.i5h.n.....k.9...o..s..6...a,..)......\U@..... ../.-.H[.LV.?.v..=M..;....of3..YJT...B.s..\|Mx.f...k.G........n.+...$.y.g\|..j..J.y.~.!.. ..1...-l<%V...d..~..iLU.?..$,\J.Rzm.*xX.\|........I....J$.s%...#.".....y({p...[.J.Ui.r.:.Wu..h..T)....b....R....0...\..\|.C....LuXB.I...5.BY.`....).WY..\|`..=...s..F.elN..,.e...I....s.............:.@........IDF...M..A(t.... Kkt.....@....o.._..L...p...r...b.T...Fc.[.Df...l..^.'..i.KY4.._......./..T.-.G.V..N..i.1...Rq....$.q..!..Yc....0.L.d.>..}ZBr.@......<QM.".L....=N&p\..D.....L.4..L...$....O.f.S.......IQ...?d.....H.................2/...?dV.%."..a...1.5<... f..I..!D<....k..,......~......u.l.\...d7.Izc1.....gE.....PLU..C...J.M:MX.[...N.....Y....O..3..I..[..3W..n..\|[...@.... R.vp/....4.

Chrome Cache Entry: 783

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1209x633, components 3
Category:	dropped
Size (bytes):	148234
Entropy (8bit):	7.972758805290917
Encrypted:	false
SSDEEP:	3072:8S+SbfPNs2SC3e2RJTigzh4M3CbupKS01cynjPZG7Vo5yxeLKuhtc:/fGuJugz3G1nnjx2neWwG
MD5:	B943802D754B8EFCCCBD5FE355527CD0
SHA1:	64F950B4BA193D83322EEDB985C0AAD013D9F27C
SHA-256:	6A0C83BCB836534D091613F24EB7822A6B8E05050139A93659605340E4CECF13
SHA-512:	B19BD162BD73E631D14A4CFBDFEAF6F39A1108495BB41F500CD5F07A2918882EEDAC9F09879C2D6B80CAE43112D8B12594C5BBD24EEA5394E9AFA06A264AE872
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../%.%//////////////////////////////////////////////////......y.............................................W........................!1A.Qaq.."2..B......#Rr...3CSb....T......$Dc.4Us.....dt%.Eu.................................5........................!1A..Q."a2Bq.R....#b3.$...r............?...~..F....(D.DB. TH..!IH...a.. ....@..".5..h..xE#..M.C.\^.2.<c....s....D.L...e....{c.C.....;+.&Q..3.....}EOc:1.>.T....@).J@......%.j.-.x..t......,.F%...F;N.EVRW.+.)..Z...xu....rr..(....h...X.z.Z>+..`....\|.l4&.."........[b..m~....1S..r^.!....J.......&..h'.S..e.K.........H..L.2.....B..ll....O.....C..#..........]...!.....7!..v]..y3~.....6...I3.......Y.f.......m.J)}.(...../..#m..E.J~...m-.v..ap...o8..."m5.{.<..Z../..Q..[.......Y...%..M...u......[.'`..3.....(...6.....ifd....S...Dk.b...>...(..Uu4m...y,Z.}.h[..K.l.....P..O.Q~.D...-l...T.`FDa.K..Ue.KH..V...xB_.?..g7KH..c]

Chrome Cache Entry: 784

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1464)
Category:	downloaded
Size (bytes):	1499
Entropy (8bit):	4.983141781132298
Encrypted:	false
SSDEEP:	24:Q77GSHLWBBB7c0pP30RddMUq2TXWtMr39tNsSlCtMyrjXsFXrTBF0Z005O6xcHT:Q7CSHLWrxccP30RA2Tmte9/TlCtdcFbp
MD5:	8C0498E2F1F7A684A8D2A3FEB934B64B
SHA1:	76099689CCAEE466D4608DA621C403B368DCAE03
SHA-256:	ED5B5DF9CEACFE76857AC51964972B0B417A215B2F50E837FD6B64BAD7339C40
SHA-512:	5689B6B18071D6020A8A2733BB9E17C07960D9E65F4012CE93F21347FA24A24175509BCA6920FE1B03D66FBC054D718671C23071AF115B64000C01DFBEA2E8DD
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/hoverIntent.min.js
Preview:	/! This file is auto-generated /.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof module&&module.exports?module.exports=e(require("jquery")):jQuery&&!jQuery.fn.hoverIntent&&e(jQuery)}(function(f){"use strict";function u(e){return"function"==typeof e}var i,r,v={interval:100,sensitivity:6,timeout:0},s=0,a=function(e){i=e.pageX,r=e.pageY},p=function(e,t,n,o){if(Math.sqrt((n.pX-i)(n.pX-i)+(n.pY-r)(n.pY-r))<o.sensitivity)return t.off(n.event,a),delete n.timeoutId,n.isActive=!0,e.pageX=i,e.pageY=r,delete n.pX,delete n.pY,o.over.apply(t[0],[e]);n.pX=i,n.pY=r,n.timeoutId=setTimeout(function(){p(e,t,n,o)},o.interval)};f.fn.hoverIntent=function(e,t,n){function o(e){var u=f.extend({},e),r=f(this),v=((t=r.data("hoverIntent"))\|\|r.data("hoverIntent",t={}),t[i]),t=(v\|\|(t[i]=v={id:i}),v.timeoutId&&(v.timeoutId=clearTimeout(v.timeoutId)),v.event="mousemove.hoverIntent.hoverIntent"+i);"mouseenter"===e.type?v.isActive\|\|(v.pX=u.pageX,v.pY=u.pageY,r.

Chrome Cache Entry: 785

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x798, components 3
Category:	dropped
Size (bytes):	123870
Entropy (8bit):	7.967776497636629
Encrypted:	false
SSDEEP:	3072:CXW5kN1bYddty+/9CjIzXzNiD2Jvbxm+4onXvbU75LZ:CXWcFmy+FCoDg+vbxmHoXvbUtN
MD5:	5F1385D5984B0F75981E9F63A44C85A8
SHA1:	6B5DA05EC842010D1586895361776A4E3B878335
SHA-256:	26478106447BCF7AC8440F2CD8935458D375092CECFCD73ECBA12FAAA83106E3
SHA-512:	2814DA156845C918920CAA1ACADFE1E61C360018174AC4DB0E2EDFA75A639DD80360789E0F9AC1064B09FA9C223120A10CCEBA25D4D5B810C910FE11E76FB297
Malicious:	false
Reputation:	low
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&....................................................E........................!1..AQ."aq2....BR..#r...3b..$S...C.4..c.%.................................-........................!1.A.Q"2.aBq#R...3.............?..z..~..0..-..L...V.-.]8.....L..\..WLU.....KF..,.e.sF.D..^k4yP.@ !.G.z.....Zf.61....L....v6C.@.X.[s.w..0...@ .a^{...\|..<...w..8O...#...2.A...4E..b.`.a......!...h...!X.r..........R..K.....f.q.X......j.6YR.D..F...@.. 7(..@...E....R.."..@.X.GU.M...8.^Y...~..].l?.~....?..:.FW.L....+...@"..V ......f..r.b...&..E.F.A.....h.r.a`.+.,.h.E...i.........)\......fZ..H..7.Vr....n..W..?.~..q.o.c...<....U.8.#......+....@......7.\..!.+.....@@V......f.1.l.$..EA....b.&..H...F.T{...I..J..l........9...Qg.............~...7..\..R...D.p.JH(Of...JNV..&Y....s...'u;a.....5..q..yO>...y.\|...X{s.z..*.a.....6eGP.R.."....b9i.V..L..<...&o

Chrome Cache Entry: 786

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	116290
Entropy (8bit):	5.919933099794818
Encrypted:	false
SSDEEP:	1536:s2Mkh+Xv4Lc4mpmb66vTYay9JmYd2SXvaC8fHRk2VL6T4Ln3HUxrOuNGLJXjcohJ:9rh+ALJ77YLXvpU7LaOdJX9s4
MD5:	389816D650432FCE6120314B76642723
SHA1:	00C6E3BD6216DB99982D7ECD45D02EF87F4849E3
SHA-256:	2FA0E3C13BE44D712AB386A3FFF950D88132F49F4D2243542F5FD2E296B1569F
SHA-512:	214E5DE0F6EA6F814312C4E6BE6A155671A80915633BAF60F079DB13766C67DAF721ACA9B7EF085118888921D873D30B9463ECEF7C2E5B2E94EB3A99A03557B6
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;margin-left: -150px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="300px" height="250px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22style\x3d\x22lef

Chrome Cache Entry: 787

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 788

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38536)
Category:	downloaded
Size (bytes):	39518
Entropy (8bit):	5.651460640507762
Encrypted:	false
SSDEEP:	768:jhNblGwIvmOJpbYgZtswi/27kG4HNVsavgVvw2GAtIINUMRr78GoW+LGtmWJejlE:jLJymxzXvokALI3TweflWAPIN3
MD5:	5024DA521CD4CB88E7D364C7DDB93B4D
SHA1:	301CE4301453F6E8D100247F120B15510C744815
SHA-256:	30216B447644D7908A8EF33A44BC268E0B88EE6AA1D379B9E80EE803D189362F
SHA-512:	04D37C30263E6C408B6A865383AB804C82BAA3FDFA1A71D92AA99CCB286B8C69EE824D07992BFC072DFACFBCC7ED8F2CFB9ACDEBA4493A9213D5436EAD3FFE72
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function C(X){return X}var d=function(X,P,L,q,G){if(q=(G=t.trustedTypes,L),!G\|\|!G.createPolicy)return q;try{q=G.createPolicy(P,{createHTML:u,createScript:u,createScriptURL:u})}catch(c){if(t.console)t.console[X](c.message)}return q},u=function(X){return C.call(this,X)},t=this\|\|self;(0,eval)(function(X,P){return(P=d("error","bg",null))&&1===X.eval(P.createScript("1"))?function(L){return P.createScript(L)}:function(L){return""+L}}(t)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var O

Chrome Cache Entry: 789

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQ3O00v06J6pWRrAmYBQdt0ZzVZpACR4WTb8ujiVz4OfQYN5CS5pdt2tZ6Fya9Q_wprKdOyOlQD4H1GoBrxZA_H_N97Ee4bdkc
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 790

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 760 x 193, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	12288
Entropy (8bit):	7.958887741005671
Encrypted:	false
SSDEEP:	192:DxL0SQ/lY7e7eHIkkjExWn2SJ93U7OaH/h56fd1f9jvD1HyrpI5vn57wx7ISFy9b:dL0Sl7fokkwxW2E93URHH6F11Dsov57h
MD5:	8D0F348518CC30E73F75F9500746CEED
SHA1:	29F7161CC5C4A492BD0825E96D56EC68CAC6133C
SHA-256:	8379F1B1345E8F406E5E990CD9C59BD66CC31AEF04DECCE18B9141AB91B844CA
SHA-512:	83463705B6CF661061304EE42A9C3A3BEAE0C528B727DAD76F53FA0FE9E2033A1F9BB7D88F9962E5152AFCFF2877D8780E8D2ED7966B6590499E86B560F36A2E
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/uploads/2019/09/mylovelybluesky-header.png
Preview:	.PNG........IHDR...............4....&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:9872E2F4DAF311E9832BAC518767CD0B" xmpMM:DocumentID="xmp.did:9872E2F5DAF311E9832BAC518767CD0B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9872E2F2DAF311E9832BAC518767CD0B" stRef:documentID="xmp.did:9872E2F3DAF311E9832BAC518767CD0B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.R.....tEXtSoftware.Adobe ImageReadyq.e<...HPLTEGpL.2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2..2.GpL.2.y.E@....tRNS.$..1......<..d.W.J

Chrome Cache Entry: 791

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 792

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 314, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	13332
Entropy (8bit):	7.945978521205666
Encrypted:	false
SSDEEP:	192:FvfKoZpK5GaFkFnD9XkBg8n3ubjqzLAJHh4h4siwfsAg8Hl7X:ZKonzainDlp8n+bmEteqJAgIlX
MD5:	86C6A336BD0219432CDFDC49D13D4564
SHA1:	87374A0703B415B334D48C59EB6FA5D73D35897F
SHA-256:	5AB51E5FA80687A0267458FE1A48C3AF0BB900DC0A2680746A8F53CE62B5BD35
SHA-512:	38A06251B1FAACA047F996E0F7750CC2EA41789D39EE26CF13E314D94FA121BA0FDADBE26212A447E410C1A9C01E4B74E735288B310B9DFCE9FE3D0C74F5A880
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3865532571172175858/14763004658117789537
Preview:	.PNG........IHDR...X...:......l."....PLTEDJQint......AGN...........a.....}+..#.....N................=CJ3..R.........]8>F......5<C...RW^%,4sw}{..cho....LRY.......4<W\c;5=K]cv..sahj..b..}..Sqv...o..;..X\|.]..ckw>;C..72. )H..........]..:CQRms.{#qqo......3...Xf}..N\|...._..\..3.........b..y......>.z;fk..B...).}^5....C+9Q..?..oTUP...M...9..B..V.wfg.jM.vS.......d....o}hB..3rpT..Z.Nf\H..O..U....[............M+4p....z..S...u.....A..l.....Q...W........,...T'z...m.g..[.+...GZ....q>..1...4._...qG.s[f.h.k.y..RX.n.b>oXF.n...}.......u.L..]*....R...........l._.\iHKvZ.?..K..35.. .IDATx......G.=c. ...c3zY..F...q.."a.@..$$vC.K.$.........6.i....}..i.6.........w..{.{.,.%...\|b.....~{..HR....\|.."..Z..V3.W!...Eh.j5BAJ....Z.Z.P.....V..,$.a'....@.s.jvV....V....Z..Vs..D>.H...z$J...VCS.D...jh....V.S.....R.yY.D>.$...UI..9j5+...Z..V..Z..C....^".v.Z...%..:B..dM.h..Z...%.a....Qb....jB.....Z..c=..<m.V...\|..j5..TA..j5..V....O.Vs...Y..S.....HX.vSz3`...<..f..H...

Chrome Cache Entry: 793

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 794

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/jquery/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 795

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3172
Entropy (8bit):	7.909558632589116
Encrypted:	false
SSDEEP:	48:2PzpqMshrWSnywEEo8UE84b0BC6Nn134pZqP4xxl6b4WKrobgJhrTEuNIYkkv/jG:ulqMshr7B5v84Jy3cqPul3xrJ5RkqFwv
MD5:	C2F051ABEBEF06C61C32753D77F6387B
SHA1:	D2F8B7EFE81166D4B7366F03FCB01CAFEB06CDD3
SHA-256:	960FA8164DBD0B4359C2C0E99657625324CA09DCC67F92F776201AF72EF4B21A
SHA-512:	252F2B10CA07CEC354D873B7669816E972A7E64C948ADC0BE982B2AB88B8ED164B655FE94AF4E415C07DF41A6081A3E9418F34AFEC5185E2351095F9DA0C40CA
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/wpfront-scroll-top/images/icons/17.png
Preview:	.PNG........IHDR...@...@.............PLTE........................................?Pf..............p..f..w..Ml.3V.....,Q.&F.\y....r..g..Ch.^z.I_~..........Wr.(M.Ys.EXtu..d..Qj.Y~.!F..3.=W.$B....Me..........Wp....b~......p...........h..8U.Pm.n..Om.6[.Eg.......v..<NeAToo.....F[yRi....m.....Rk....Zu.~....e......G[wOm....y......>..3.9O}^y....p..H^}...Wq.F\{c........k..Vp.............8...#?..}..%w...y.....4.....(J....O..U...1..s.V..l..<......n.)z.?..C..?W..6....G...Dw..3.1P.L..a....St.)D.....h....f...w..#m..L..8....J}.?u.8o.<f.?c........b.^..?...e....}...Q.Ny.r...;..?.y...f..8}.A..}..^..f...@.2L........./z..o...\.[..9y.X..i...^.+d..?.Ib..?."s.......n..M..2p.'h.O...Z.Dl./_..l.T...U..[.t..C~.g..`...B..P.+W.5`..J..9.?]....G......[..@q.r...X.s...9.s..`..3l.0s.$.....rtRNS...............5$....L4...#...........G......................ndOE.................ssrb]N?9....................G.._.....IDATX..u\.a....6.6i.%T......%.B.0P.pl.....l......IA........m..

Chrome Cache Entry: 796

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x317, components 3
Category:	downloaded
Size (bytes):	33038
Entropy (8bit):	7.968766023615182
Encrypted:	false
SSDEEP:	768:96GwpOU5ZRXZNUm8c2YBZ/N5drj4RxNRzghJqcHqFKl7bpm:96pp3ZR/0+Z1r47ghgyqyA
MD5:	221655BD1F23E631749185D89F7C8258
SHA1:	7D98A42C962746BF69347D6FA5CCCC04AEF03E0A
SHA-256:	E647A5AD373786DDDEFEACEB90FCFF3BF5C895FB668415AFBD02B906D6AA3CA1
SHA-512:	14844F90F48F7DCF840AF794EAC103E971B2E65E1CE3C93BB36BA1E560F43F86ACFA2A22DE6AFF80EA98805FDD67366E50AAFE2569F9124AD297574099742FD7
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16420637654214467393/14763004658117789537
Preview:	......JFIF............................................................%....!"!..&)% ). ! ........... ... ......=.X...........................................P........................!..1AQ."aq.2....#BR....3Sbrs...$CT........4c...D...dt................................'.......................!1..AQ.2."Raq.............?..+...TC..Q@b.1E(...A.4.!EU (...(...(...(....P (....T.....R.@b.E...E..Q@r.Q......QD(.1E(.Q@.......(.Z...-...Yh...(.Z.E@..E.....(.P".....M...]...T..P..T].P.E.N+l.T...... ....1D(.1D(.QE(..P.(.P(..P(.......QU....(.......(.P (.P..4.j...(.P.(.P.!E..)P(.Q@..E.b.Q@..E...........(.P(....(.P(. ..R5.....n.s.{....='..+8..o<5.j+..EP..QP..QT..1Q.(..1P (....!E.b.1D(.Q@..EP..E.....(...Q@..1@b..D:(.QJ(.P(..P...T.(.P(.U.....(.QF(EPr..*)E.......E...@..E.....(.P(.Q@...QK-...Q@..DQT1.:.:r.R\|._...F.J!^Q.m....=.].n4..H.^.n...O..2.......h..R....0Q@@..Q.(...(.Q.(.P.....-.r.(.@P(.tP.."....(.@.QT...P(..P(.Q@b.E.....(.P.(.TQ.)E...)....

Chrome Cache Entry: 797

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (356), with no line terminators
Category:	downloaded
Size (bytes):	356
Entropy (8bit):	4.963284638023303
Encrypted:	false
SSDEEP:	6:qzxO96IqjyUVYZLAjIFdq91M/IL8SYSds2P1LfRbqq91M/lbgRpucAq91KHj:kxPt2Um1cwdWGQL8BMlpbqWG5yurWQ
MD5:	B2852AFD840EE4083135F40012F4A9A7
SHA1:	91B55BD14E4B2BE383AEFF9299628C9788554B2E
SHA-256:	55F56026D86468DB4135723445D1DF3498809CE536FA7A518B2847D7E6A27A96
SHA-512:	74260E1493F5E2A2660E2867E0F0CD095BDB483A6473EFF970145BDEAB78355D34F4B4A8334E0092B226C51E73EBF28431461FC0C732F2B8393E87922EF1AD7C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXiYm1YXrfnFjUvJubGg5pw3v2O47jrwf3r9y31kIOzL7zGB4mz_9ZWas5ICwawGQFAU2gPDyPIJdsP1zXg25sPc5T8pIcYNLX79j0BEyTRl4Wd1lM
Preview:	<html><head></head><body><img src="https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://ads.stickyadstv.com/user-matching?id=11" style="display:none;"/></body></html>

Chrome Cache Entry: 798

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70196
Entropy (8bit):	6.027995228117822
Encrypted:	false
SSDEEP:	1536:ccFan4EQPbQ5ZrcxROplbfUW4HR7Cddxdc:rGQgrhEW4Hwdm
MD5:	9E80124B06B0381BC1387D154347731A
SHA1:	02C9538E522AAC4FE7F346F8B03A93FAC79F3750
SHA-256:	833B76244A28BCEC3EFFBA5E7E7BEEBDCBEA790526D6C7B22CDAA30E1916F8C0
SHA-512:	36ED28A1EC85669E417D55CEDD74346DCD9EDF3F65BFA53AD0D97EC03D42A9EBC7CB07B319476DA96D6037647008159379E4802D01CE8B7E291638EE5D84C5AF
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004001;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=2095948214;ord=z3ghd5;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIgtiXgL_fgwMV_oN3AR2GGgY5EAEYASAAEgJvv_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlmGAE%26sig%3DAOD64_02e9gsl6i-jkDtMLHrPNvFtOpCcA%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=p*sDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=9;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_2601638145"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZciWO_yUoPMPhLiyuAQ"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("objec

Chrome Cache Entry: 799

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=141&userId=CAESEEKiEH7bu76eLHcqCarDpZ4&google_cver=1&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 800

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=42F6C9VsIUWMcvSy0Mjpyg&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 801

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 802

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 477
Category:	downloaded
Size (bytes):	322
Entropy (8bit):	7.210666384369115
Encrypted:	false
SSDEEP:	6:XtrAHhAhIZA6YzDlmRYkAgNrS38GKj/T+A4Y1mTbDgQcneWX/j:Xp2A+ZAzzSYPgNNGK2Zb0eWvj
MD5:	68DC00B5192D2306E95760842CF9F798
SHA1:	2E16F5E31B19E8B8F48A87291D9DB6361519D670
SHA-256:	74D097053B87AC11A61D18BAA78F4B37CBFAC6CDDCF713833B9090FF8D763A42
SHA-512:	D51E11855A910EED2DD159130601333D46880C6817EFAAC027751E11B43C2F0DD9D594DE488D62AD0E6E6717464D91688744CC323C1FEBA6E43B861EC5A5709C
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/themes/magazine-pro/js/entry-date.js
Preview:	..........U..j.0....S....b....-..J.)....7.%#.4.....\|.....R@..={...1..!..d.;..@.l$o..7....` ) .....\|.l#.)...6L.....kn.x...ku+o.*......b.>.;..d....Bq.".kxP.v...:B..{).4.f....z.a..\|V../Ol....Z../..(.....(..a.....o.........7.V..`._..r....N"I.. ... .C..-..g2.....5.?G..;...+..c....]....HF..J4:..X..........

Chrome Cache Entry: 803

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-DG9gOt7DPlWC2gjh824xUEsoM0jha--xm5qmbTP_DiOEUhy6c1H-c4ClcQUnA6NCCCBQsf6joTEshJryBUo12lr57z2TXHhTSghHoaorU7O6vE-s4
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 804

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 805

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 806

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1828
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	7.719453272450399
Encrypted:	false
SSDEEP:	12:XVal2Ne+PTw6HrRLgt3RDNaa1Uxw3Z5HxAAB3AmV4q8s+PG9NJ8u:XVal2Nt9FLpm3jHaABssf18u
MD5:	7E367401964BB373A8491493DE190858
SHA1:	9CAFB5F7AF2306976C0D51DB6B2EB91381E8ACE0
SHA-256:	203C59AF640EFC3600E22EFE6969578D5BA3E5ADC9A23906C9BD52E44B1FFEC7
SHA-512:	9664D8564804046F850D2F75E57FF6C77506F0090A52D710B9243B286BC6A48BA139B71B12580080517583316FADEEFCA10079EAEAD744CC0C8E228274E8CAD2
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/captcha/css/front_end_style.css
Preview:	...........U.n.0.<[_.EQ.5.XvR4./Ish.=.m....Z.P$Anb;... %.R....Z.cvfHO......./.\.......5:.`...u....}..B>...FX.+...@..z...6fy....lvv..x.$.8.g.y.o....gQ(#.@....$..qe.v..P8..i..]2..6.+.-.i4.f(.[%..4..s.......mv..h..T[.Xh.3...&_.'....y.r..4...K.j m..-..C..eI.J..9.K...b..U...[..Q..E...._..2....X(..d$..0>f.e.e.6k.MWm\-...5...o"...J^.0.O.dT.M:..f.zz&].P.W.K....y+d<z..q.PT...1=hL........l....9\|..K...`....4gQ(L.Y..Z.......'[Fs\|..#.E..l..q......t...p..:&)TGRMe...E..U+.t.[..E5.B.&.G.>8.a...3.0..,..r.qn........4....jrCMwA.:.u...oq....[8..*>4../....Cd.N.a.......sJ...P..#z.f..^...'J..\...q.k..ej..jl^..h..V..K....[.3E.pw.....I.......).{....-.^=.Q.........C. t..............{..7. j..S....?yj..$...

Chrome Cache Entry: 807

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2576)
Category:	downloaded
Size (bytes):	82359
Entropy (8bit):	5.542314841888001
Encrypted:	false
SSDEEP:	1536:sJIrJmBImu6Pd2osbkL+8kK3CD0Qt6/rOcOejqk+tQ:+IQVd73EqrJOwd
MD5:	CCAC3AB7F323B8743D099010FCCE15A4
SHA1:	904821F60D39DF1CB31CA02BD8D1E1E0B5693262
SHA-256:	519E50788224B3422C6E6B1CCE48D5DECB83EECE248558B54E48F88491E48AA4
SHA-512:	8EE847955FFF5EAF9C00BC76D82C6EF157650606698173EF2673D7222A17342406C85361F903771DA913662EB0305C4FB0F78753E4BC21F34C741372005922D0
Malicious:	false
Reputation:	low
URL:	https://cdn.adnxs.com/v/s/240/trk.js
Preview:	if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var Hb='undefined',Ib='',Jb='iPhone',Kb=0,Lb='//cdn.adnxs.com/v/s/240/',Mb='//cdn.adnxs-simple.com/v/s/240/',Nb='v',Ob='script',Pb=1,Qb='s',Rb='lnt.user.agent',Sb='safari9',Tb='iOS',Ub=1000,Vb=2,Wb='unknown',Xb='edge',Yb='edge15',Zb='msie',$b='trident',_b='function',ac='native',bc='ie11',cc='webkit',dc='chrome',ec='chrome52',fc='safari',gc='gecko',hc='gecko40',ic='android',jc='linux',kc='ipod',lc='iphone',mc='ipad',nc='macintosh',oc='mac',pc='windows',qc='win',rc='CrOS',sc='chromeos',tc=3,uc=4,vc='355EB940B5BCDFF13359AFC2F0DEF56B',wc=':1',xc=':2',yc=':3',zc=':4',Ac=':',Bc='DOMContentLoaded',Cc=50;var g=Hb,h=Ib,i=Jb,j=Kb,k=Lb,l=Mb,m=Nb,n=Ob,o=Pb,p=Qb,q=Rb,r=Sb,t=Tb,u=Ub,v=Vb,w=Wb,A=Xb,B=Yb,C=Zb,D=$b,F=_b,G=ac,H=bc,I=cc,J=dc,K=ec,L=fc,M=gc,

Chrome Cache Entry: 808

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 809

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 810

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	8020
Entropy (8bit):	6.017010887031046
Encrypted:	false
SSDEEP:	192:qKJRQvx0lHxrWk7GFN4nIAev+lZOwXTlNkg/67PkyiVr:qK3QZ0uScFGhTwg/8FM
MD5:	2A7A5D04D48029F095D43D8614397D3A
SHA1:	20E1AB0D3855D2756A9B4529BF4E770402064BD0
SHA-256:	0948D890A075603376B4C4509F3BB708783A0D81382E290C1089886C610A6E1F
SHA-512:	51BFE8EA1436F7BF31137EE7174CC1E3A305E7DE6830491F214DB545BBCD7F9A150D75E9C5CFA27C010BF0D6EF1EE883D567CF54E1577F057DD4667C88EF50A3
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"FTKlZfGdPIjqxtYP4cyLyAc","injector_basename":"sodar2","bg_hash_basename":"MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8","bg_binary":"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

Chrome Cache Entry: 811

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 812

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMInbvO777fgwMVv-mUCR3TZgZYEAEYACC1jvhi;dc_eps=AHas8cD1CtkfFy49UjtqvC0-DA7iQdhGlsEqMlF1y3-Nvsdo5fdOVHCQ1yTJTm1CntMvfD2iOi1NIlmY6Q;met=1;&timestamp=1705325079329;eid1=2;ecn1=0;etm1=11;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 813

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2898)
Category:	downloaded
Size (bytes):	23349
Entropy (8bit):	5.524328197145549
Encrypted:	false
SSDEEP:	384:D1j5GuoW5Y5vH8Or77XdkYiuEnxFPdF7Q3BvrOAHTbM1p2t76oQi4lXaiTgjw+p4:D1j5GJWS5vH8OLyoExFPX7sv5HHYp2tS
MD5:	E9E356EC41155B008235C83648CB19BE
SHA1:	716CBB94B1EE8FBB5CFE79E10F2F60CB97B820DA
SHA-256:	D233AE3F0C2B48DC6F71E32AD7E23BA5E1D64B59AF7E8D5592375D14887F3E97
SHA-512:	D415D984B6E70DD0BDDF2B12EE5DEA7936C75C8902AE92E192AF27FC464A19091AFD87BFB6467F2EBDCC527BCE29ECA378BCB0F9EB39157A3A275587190A1825
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/e9e356ec41155b008235c83648cb19be.js?tag=exit_2019
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=n,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};var ca=aa(610401301,!1),da=aa(572417392,!0);var w;const ea=n.navigator;w=ea?ea.userAgentData\|\|null:null;function fa(a){return ca?w?w.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function x(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function z(){return ca?!!w&&0<w.brands.length:!1}function ha(){return z()?fa("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(z()?0:x("Edge"))\|\|x("Silk")};function ia(a){ia[" "](a);return a}ia[" "]=function(){};!x("Android")\|\|ha();ha();x("Safari")&&(ha()\|\|(z()?0:x("Coast"))\|\|(z()?0:x("Opera"))\|\|(z()?0:x("Edge"))\|\|(z()?fa("Microsoft Edge"):x("Edg/"))\|\|z()&&fa("Opera"));var ka=!da;let la=!da;function A(a){return Array.prototype.slice.call(a)};var B=Symbol

Chrome Cache Entry: 814

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 815

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187268
Entropy (8bit):	6.195039126709442
Encrypted:	false
SSDEEP:	3072:gICYGzKxUphOkm0tE3k3NcN6e1HTe/I/thNAwbCbqbHHyhtaAmAauvVeIO2Z6Yes:gICjzKxUp5twq8ay6uFS
MD5:	17B2DEF3DA97C989155B1D04BC823366
SHA1:	138F88887665D2A31BB396081E1E3BF21A548F26
SHA-256:	AD27FF711A4820256B82CBEF6F564661754DD8A88E753787D99622F8FC068DAF
SHA-512:	A1ABF3FCC3AA2A5D17D60779C891BB557EE2E1D310F1CA8ECD722319FA9F1FB1A0C2D8BA5F0C1E6868F77AE94ED4A2BE0A2465E7EB4B423B46327FAADBC753BE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:flex-start;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240109">(func

Chrome Cache Entry: 816

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 817

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQ5nhm6xIgjDRfadzioPySk6oufYMOwMIx6xd5oc2NHOLmJF7PC2NZT7FirCo__0WVOTvG1kVPTO2PDLNCAntZi0UVfjlF01a9Y4XSlbWwprMQZtYg5qhLQBElHRVdsQHBim7UWBAx0uF-WDmkg9rAWbRw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 818

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 819

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	7.625299864300048
Encrypted:	false
SSDEEP:	24:bHmG+m80Uki2dKKHM4r2wjvKjbsFT39kylU6QFm8fwYd9Nm5F+6slK2CfNB:bGG2ki56jEmkQU6fAdG7mCf/
MD5:	1D178DBE62144C2935C64E4274721849
SHA1:	F361611AD79EAD1BBC381B3651B90802C159DA23
SHA-256:	9602EE8486C2D8236D848D5F4D40957DF198E39A8C405C73583E54E66A37EA71
SHA-512:	D1294F765B2371CF2D185547E8A47C6502CA3FC2215523CBC058EF82331D4A3F91FC4B5B720DE505042E103E971935E7DDE3012427EBC64C5F12BCC26E906E08
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/1802905985297984481/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	......JFIF...................................................". "!....7. 0%((4..92,2<%+-+...........2"."2./-20'&)22+-'-&/2-.-&-'2/-''&&/0/'&2-2-'-'&-2&-((......d.d..".......................................6.........................1AQa.!."BRq....#b..2C...S................................/........................!1..a2AQq..."..#3b...............?...D@...DD....D@...DD....E[??w.....6..duF.o"..L..w...'..E.:da.5.8W&.v]dw.....u;...X.>.\|.........l..4.d#....ixk9.P`....pdxlm<D[Z[tIE......?O\|..5=...?..E.6E..."C;9.....k..5g.N#K.'......".DD..V....3...`.I.GR.i..O...3...`..G.......i....DbW...HL.....d4.H.-..1.O .{'oO.(.....4a.T..T.....9...^.K{z.....+A0...I.xn..^&}...S........x..&b....q...q....x...LX@.$...d.v..H.~.C.rK..vKu...._...m..\..x_{......F~8.V%..D.vsN...... u......Y.}m.l....m..\..x_{......F~8...'.q.K....i5..._=.vE..."C;9.....jz..dD.!....t..b...0.Hgg4....V.K&.cs.q..c.ZI}..z"(M3......,...4>GU.\..........V.P.7FuU.@0.v ..M....4>GU..(pV.+ja..ez2.B.._...(G.

Chrome Cache Entry: 820

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 768x513, components 3
Category:	downloaded
Size (bytes):	155266
Entropy (8bit):	7.975421310012775
Encrypted:	false
SSDEEP:	3072:nSD15M1k2Q4KWrxR5pm1tvCvjapkm0clHawhPvQ3DcsvoFpmrxuG3n:SD1lU3WtvC+kwaw9vQ3p2kt3n
MD5:	ECF5D2E34154B3BBD9BA0E32D904FF7B
SHA1:	0223B2DF0A3671D79ACD45B0C4FD88D16FD01F5D
SHA-256:	07B2CAB59D5CF132C992BBC774686CBFDF097BD94F72C7E69900C481211D885A
SHA-512:	73182BEC5D8779425C55EDCBAAED6FF10CB362E94B2BC958993A8E8FAE5F137F6EF17CCFC87D118A6CB4FFC643234D23474A058DA7ADA955777439ACACE5ACDA
Malicious:	false
Reputation:	low
URL:	https://mylovelybluesky.com/wp-content/uploads/2024/01/Teluk_Bahang_cover-768x513.jpg
Preview:	......JFIF.....d.d.....,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Canva" xmpMM:InstanceID="xmp.iid:271681EFA88411EE8913B1BAB7F7B246" xmpMM:DocumentID="xmp.did:271681F0A88411EE8913B1BAB7F7B246"> <dc:creator> <rdf:Seq> <rdf:li>SockPeng Ng</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Travel (Facebook Post) - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:271681EDA88411EE8913B1BAB7F7B246" stRef:documentID="xmp.did:271681EEA

Chrome Cache Entry: 821

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 822

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 823

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3696)
Category:	downloaded
Size (bytes):	36905
Entropy (8bit):	5.528333923926272
Encrypted:	false
SSDEEP:	768:mQjLZp+rjXyziG64Ml9he6NasKJH/6e84nED3ui8kYejGhC4lOXmuP7mrMv/QGYR:xqrqSqk3uXhC/EMv/QGdv25
MD5:	FFBA9D009415A65B6E2F46D1B35434D2
SHA1:	24CF82B24EE8229699ABA95F3D869C1A3C7565D9
SHA-256:	6A16DFE9E92661A05F6798C8520A71E2F68C4675FFD6428D60E9D4FC71744DC7
SHA-512:	3367BB64C8556B564A2F37A112535BCF3663791DAB0E8559153B4C34B45006EDA9F2D7199EE357F062FA3656BB1C18CCE9D8D14B405BBAF6737182C7343A3837
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240109/r20110914/client/m_js_controller_fy2021.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .'use strict';var da,ea,fa,la,ma,pa,x,qa,ra,sa,ua,xa,za,y,Aa,Ba,Ca,Da,Ga,Ha,Ia,Ja,Ka,La,Na,Pa,Qa,Sa,Ra,Ta,Ua,Va,Xa,Ya,Za,ab,cb,eb,fb,jb,db,ob,qb,rb,wb,xb,Gb,Ib,Lb,Mb,Nb,Pb,Rb,Sb,Ub,Vb,Xb,Wb,Yb,Zb,ac,ec,gc,kc,hc,nc,pc,tc,uc,wc,zc,Ac,Cc,Gc,Hc,Ic,Jc,Kc,Nc,Pc,Qc,Sc,Uc,Wc,$c,fd,id;_.ba=function(a){return function(){return _.aa[a].apply(this,arguments)}}; ._.t=function(a,b,c){a=a.split(".");c=c\|\|_.r;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};da=function(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=_.r,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b};ea=function(a,b,c){return a.call.apply(a.bind,arguments)}; .fa=function(a,b,c){if(!a)throw Error();if(2<arguments.length){

Chrome Cache Entry: 824

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9923
Entropy (8bit):	4.689782570943409
Encrypted:	false
SSDEEP:	192:4evwBrmNislEhQ1RsNGQ3pVI+3tpBIHe7w:4Gmrvs2uqG8VzW+7w
MD5:	D3AD1EC8B55899776B8E264C8F1F9F73
SHA1:	2D5145ED3EFC6524D86B93D39C89A786F8022415
SHA-256:	2C73E763D4EB19C863FED9C51B12CD493ABABDA27FB0534C03D12B42AA66DCD3
SHA-512:	B43620045DEF5EF2248B5F211382A1CE9EE738DA0486A1D1435422619E386740F56258EE0C8A0F32AD6610767145B45560CE273A9670E044690C52424B88C594
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/headline1.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>. Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<g id="headline1.1">..<path style="fill:#FFFFFF;" d="M100.617,114.652c1.241,1.449,2.943,2.69,4.921,2.69c2.023,0,3.656-1.311,3.656-3.242...c0-4.53-9.015-4.691-9.015-9.75c0-2.69,2.645-4.116,5.243-4.116c1.84,0,3.656,0.414,5.197,1.449l-1.357,1.495...c-1.126-1.311-2.483-2.162-4.185-2.162c-1.725,0-3.334,0.874-3.334,2.667c0,4.3,9.267,4.668,9.267,9.658...c0,3.334-2.852,5.013-5.887,5.013c-2.162,0-4.231-0.713-6.024-1.932L100.617,114.652z"/>..<path style="fill:#FFFFFF;" d="M123.759,112.882c-0.253-0.552-0.621-1.265-1.518-1.265c-1.472,0-3.403,2.001-5.266,2.001...c-0.553,0-1.013-0.184-1.219-0.828h-0.069c-0.598,1.84-1.104,3.656-1.472,5.335h-2.069l7.68-17.6

Chrome Cache Entry: 825

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 13182
Category:	downloaded
Size (bytes):	4170
Entropy (8bit):	7.949568058027972
Encrypted:	false
SSDEEP:	96:FUOiOI4BaLKQPDXEcjA7yZ4FAx0j6c+r0MrZbWMzTbwI5Y:yOilNdDt0s4+r0OZb13bwR
MD5:	92C422F84DBBBB11B7F80E52FAC19B33
SHA1:	1C9E6B59A2891E931DC11F5B5BA73850ACA89FE4
SHA-256:	7A90E1E46D87C6FF78B87E28CF82F8CF173728DB59C4BB63807155A9404B1791
SHA-512:	530F0ECEED284F7CD581AF40456A0CB06EF14184947C4DA98D4BA0E24C13FE0EA4AAA64F22EF84EDEA9111255C2B6E4DE8A89ABCD82EBC17BAEA2B62E1D9CFF0
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/contact-form-7/includes/js/index.js
Preview:	...........[.o.6..W..@Cvh9.]`Qy..h.{=.t..A......s.V&U.J&...?<..e[Nf.{8......#..>..=[52....mIc 2V..%.\Ic#. .\|+.:.KCk..\|'-.~q.....n.`..........X......7.u....mo.v.,......`EY..e3.k.[.e..... .)d...H...~x...Vi..qH.....k..d-.......5..I)KK....sr'...x..(+(\.ku."..B.p.)...q.H..~...p...Ym.....nDY]......7.....f.........@..=<...\|`_-.....~kJ...M..i.`3......1..Ln.R...Jk...P....C.KJ.WM.8...&wW>y.....H4..N.?.O....,^MKN"........d^M9.... w:...W..r.X...VL...1......IV..2.!1'gp.B.W.7...(...q..L..S.F....fD."eEn...."...^W.m)..mJ%...V>..F.~\.>y#K.A.....O,%.....u..?b...^k.{.{t;C.%.'_.y.r X..6ZF.....k.V+eS...E...H8.d..f....i3....Y....E...........Evi......F.k.mt.*^..Ns...U)mj..D..%_..!.8.dZ.$I.6.c{a..........-'.q.....k.3}%_.)y.S....<....,.lR..>.[QrEP?.,..+.IL...GVQ.}.3^f...H......b...../f.e....#.-/...Q9'.9...&.+..Y.".i....w.'~......s..U..C.d..-B:YnP..H..l.....&\|..[H...&...Z..XV..Z..RBBZ...Cy....~XC...J..J.Ie#....n..LH.I.}).u...P...?>.&T..~...[..#.hYb. )...ZmJ...

Chrome Cache Entry: 826

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 827

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2&google_hm=22210ca7b8f13f0e2q6keg00lreyi26g
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 828

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 829

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 830

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3386)
Category:	downloaded
Size (bytes):	9152
Entropy (8bit):	5.526012605064
Encrypted:	false
SSDEEP:	192:Bl2s0yrpk1Eri7SkBFBWDfVeF6qCkWO6fU0P2iG+Mf8:H2szrW1Eri7SUFBKQ6qCkWBfUU2B+W8
MD5:	9043C2947E2D9E4035289D10C320C39F
SHA1:	C06DF557C3B398AA7513129067C94EAB0DC53CBF
SHA-256:	E93B8C0AE5B5910B7107C8B455EDA029935C56EFA8DE0BE2443D8EABBA207197
SHA-512:	CDE5F0C89A0D4E1F452A9C7D082D65291D19DB511441D68006F95075A73AA3470FD98DCE4DE0821AC6AA1E3C200216E2AA073FA10E9585C6FA6BB612C90DF36A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1
Preview:	<!DOCTYPE html><html><head></head><body><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],null==z){v=null;break a}v=z}var da=v&&v[610401301];n=null!=da?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function E(a){return-1!=ea().indexOf(a)};function F(){return n?!!B&&0<B.brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge

Chrome Cache Entry: 831

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H8oL:HL
MD5:	AF91277A8263E7B2E3E8753DB2814BF5
SHA1:	2398C04946DE732AC6B3674DC8301D52F67A6970
SHA-256:	5A48E426BA20F4848D4B92367A45BAAB63DF650355455F2309F16795554E4114
SHA-512:	9EA32ACDFF6835498BB2180407350D07BBF3B0DB63F11EC703B4107995787237A7DC5E0365DE3FE03856480EC9F21270C1FE47FF892E74378A982D8ADCA9FC84
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkBd6m9shO6bhIFDWl5tVo=?alt=proto
Preview:	CgkKBw1pebVaGgA=

Chrome Cache Entry: 832

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (657)
Category:	downloaded
Size (bytes):	515472
Entropy (8bit):	5.694445641910104
Encrypted:	false
SSDEEP:	6144:5BFr62CZXtgv1BOziSb3qb5DUOzxklE+ceVGdAxIBhH27i6r9YPOPqJtUzl8m:5BovgvBXRAxCIG6remY/m
MD5:	F989B2A4486B04EDFF93AEF40F36584E
SHA1:	02234BA0B3DDA2CCCD38470F35DA5494069B1186
SHA-256:	52C308157B0F273A5F4F67BB4F28CCF47C24A68FBC7D0226D49BF4EEBACFDF97
SHA-512:	D725F9B39F13794BF0CE57F5821A49EECF2A0B55C73EFBF218826C9F001514FE5C6FD290D553638C36EBC7D6BD0FAB29C0307F00E894AB9D0353093E2288752F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that control, are controlled by, or are under common. control with that entity. For the purposes of this definition,. "control" means (i) the power, direct or indirect, to cause the. direction or management of such entity, whether by contract or. o

Chrome Cache Entry: 833

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=MTI3NDIzNjYxMDIxOTI0MzU2Mg&google_push=AXcoOmRdmYmZ4OVmK1WG5fslHU1BHTIcfL-6QRefX15D6m5hLPjPx2TWTJh7FH_sniuBxHdo-HwmTjmqhzezdpa3vtcO1Vh0RU2rtXg
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 834

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 835

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1662)
Category:	downloaded
Size (bytes):	5861
Entropy (8bit):	5.389246562314009
Encrypted:	false
SSDEEP:	96:u0ddCDNsUTU54r+5rz8JJEQQQQtgyP+vF5xHKx7YhmBU1v9:u08U5QDMQQQ4gy2vTxwTSB9
MD5:	92DA1C8E4790A69C4D76E84BA2E3001C
SHA1:	0B0F7A37F9CF915D1896FDDFC7583BBF531C4BF7
SHA-256:	E2B80247038739299B71545084DC4EBFF2EDD21E6F1FFAFE013376BB2E92C4BE
SHA-512:	5203B9F9FCA7330FE8B11883DDB2A845BACB4FB0F8DBA8C6BB0113D53199D1C184FB883481D86C75A02969EB67F27B3DA7E303C86CD780F53DEACAEB2E745D1A
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/92da1c8e4790a69c4d76e84ba2e3001c.js?tag=analytics_pingback_2019
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var e=this\|\|self;var g,h;a:{for(var k=["CLOSURE_FLAGS"],l=e,n=0;n<k.length;n++)if(l=l[k[n]],null==l){h=null;break a}h=l}var p=h&&h[610401301];g=null!=p?p:!1;var q;const r=e.navigator;q=r?r.userAgentData\|\|null:null;function t(a){return g?q?q.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=e.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function v(){return g?!!q&&0<q.brands.length:!1}function w(){return v()?t("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};!u("Android")\|\|w();w();u("Safari")&&(w()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?t("Microsoft Edge"):u("Edg/"))\|\|v()&&t("Opera"));class A{}class B{}Object.freeze(new A);Object.freeze(new B);function C(a){let b;null==(b=window.AFMA_Communicator)\|\|b.addEventListener("onshow",a)};var D=class{constructor(){this.channel=4;(this.g=!(!windo

Chrome Cache Entry: 836

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=14, height=216, bps=182, PhotometricIntepretation=RGB, orientation=upper-left, width=800], progressive, precision 8, 720x194, components 3
Category:	dropped
Size (bytes):	54995
Entropy (8bit):	7.784139729412211
Encrypted:	false
SSDEEP:	1536:phmO8hmOL2r1a8IPig/mdisObN5weSoh0f0kc:bBg6ymdiFN5wC0Pc
MD5:	8D30F741B28E5F5C22E584607B2AAB6F
SHA1:	DA3123D9A203664B27657E9BA05DF33BB33012B2
SHA-256:	0D943D08622D3583BDEF5EFB62938D61AC06656666D315EFB69A9660CDCB5062
SHA-512:	721E73E0500AD0EA07AC7D8DCD53432DF551F156EA75FD042FD060A0311C0AB6D0B7FCE937CA05A561324EC405FF6CCBB2DAC1CA631C0AB8F23FC98BB0301A09
Malicious:	false
Reputation:	low
Preview:	......Exif..II*............... .......................................................................................(...........1...".......2...........;.......................i....... ...X..............'.......'..Adobe Photoshop CC 2019 (Windows).2018:12:16 23:00:52.Lee Kuen Hoong.Lee Kuen Hoong...........0221................................................................................(.......................................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................+...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....,...o`...~......

Chrome Cache Entry: 837

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 838

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31595)
Category:	downloaded
Size (bytes):	103219
Entropy (8bit):	5.479253163675781
Encrypted:	false
SSDEEP:	1536:2NFNM3KxdVu8Z8OMIocFLH4XFrMplIeHiJp9WW4ITTMjFqOYc4U8oRHryE+:EqCJocJlfH2p9542MjFmcc6eB
MD5:	2C4171ECA0E1532375739418B89CCEF4
SHA1:	B9B010801FB0148BB96F0F3A245B05B90F392FF0
SHA-256:	D54BFC003390DAB9E8B16DC32DC5D1C5A6CC567C3ADC44251E541933DDB508E9
SHA-512:	E033C092636F6D4760BA4285D2222F30967698E90ED6B11D760F5808FF4CC59FF43A4766D261641B8842D1B3EE6184B0E8D89FD8FB47B5797FFCD4F22AEFE312
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 839

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 840

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 841

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	"https://cm.g.doubleclick.net/pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACgaV4n6JrAwN5bq-WAAAAAAA&expiration=1705411493&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmRovthUn9ad--FF3COqSWNtOau0e11oyFP4n2OT66zCHvYuLKeOikdgz_u_toRs8XLkEZduoXImTbtfgrVsWpFt0yiN9_OGKxY"
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 842

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 843

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 844

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 845

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	209778
Entropy (8bit):	5.400562349852921
Encrypted:	false
SSDEEP:	3072:j/2dbK89R6x4DFpAjJrOrJrpKazavcslvXc5e+okilMo/GtXL+:L2VP6KkJUdpKEavfKe+okilMAGtXS
MD5:	28A1965CE021C7131AF1205B13813181
SHA1:	DC2053834E05D4FA1E886E777DE134E9918E12A1
SHA-256:	C33412BA91028FEEC6A26B56C72F3CE03A24512785C25247447C2D1E81C8FF13
SHA-512:	8934E847355A27F479D7EF1A9618C376DA4F0A373BFABE4AB86497C9887D806B9E4EEB6E481E1E16F8CB659126D02569E515F2897A995A391E91BE35ADC03596
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js?cache=44809772
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Jg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Jg};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 846

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTk8OR8gBWBt_X4rJo3mqyvjSfpMFREwzRVfu-a9tidnP1zPIWnl6xJocxR1GtxysjKaW33LVe69BpxBN6leTKX_KXH9un53xoY
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 847

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61644)
Category:	downloaded
Size (bytes):	86366
Entropy (8bit):	5.472006556401782
Encrypted:	false
SSDEEP:	1536:pcCJoyhVR2bUtQ+KdhD8vRsSTuZVEpbCm9ug52IudMxh3tm4H:+WKT8vLKZCv9v2Ld0x
MD5:	0F45B882C3F19958ADFF25F5B2086D43
SHA1:	88F970E8DB04C533380FC59B555C95DCBED1FC82
SHA-256:	707C9AA55F2AA73C6B344823622028969B9F7DC7C083255AF7F8EC741A410796
SHA-512:	4CF4FF4E9988ACFB9AED22231EECFA9BC4E033EA0642826B3675FB67645562591F25A071B2924C11C5F916103B734B9F11DAE74514CFEA5EEC0B8B74871B9E35
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/lidar.js?fcd=true
Preview:	(function(window,document){var l;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function n(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}n("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 848

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 849

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 850

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	125860
Entropy (8bit):	6.126562350402853
Encrypted:	false
SSDEEP:	3072:/wYGzKxUphOQm0tE3kxnxfj+TeM0Q2r38WeIDzk3DhtiT6rb:/wjzKxUz5twixfj+T5Z4sTSQuTqb
MD5:	09B080C3279BCC2C15B5353CDEA1F67C
SHA1:	84D7D38F79A0AAD5DC2B690FB12BB6AB5035C650
SHA-256:	349E9E06A5EF9663DD52C58A69E32DB591C7D79B444497FFFF38BC99DAA1BF5B
SHA-512:	9310706020D888516E48D822351ED569CE468249C5CD70448D730FD57A7DB25CC10E55FB857FC3A394B152286DD5C81124518B20A09757C33F249DFD884164AE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:center;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;border:1px solid #E5E5E5;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="bannerB" data-ns="ns-oi9ll" x-phase="assemble">.ns-oi9ll-l-bannerB{opacity:.01;position:absolute;top:0;left:0;display:block;width:1200px;height:280px;}.ns-oi9ll-e-0{

Chrome Cache Entry: 851

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmSeIjwUFXvxwNTWjhprFrP8zvznMWF19iP2i-PlozM-pOpTtsqzuREHMn-yHs8qDsl59OOWhEbCvuRAH5dcRU3_JcH66va6klcBFnotonw0HOgeO8jsVWVHsT2NQowwdJ4FNnxLdKOgasLNhv18FTkkKXw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 852

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 853

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmS02cfc3YoX5Ze0ZRBF_ur_qZBrtCrgkts1LgiQ8a9IXvsclsk3RcR4qF8R-suGteR2wSI94yOfjjulWZO6QFQWYm83rzOikA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 854

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 855

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 856

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17042), with no line terminators
Category:	downloaded
Size (bytes):	17042
Entropy (8bit):	5.531136625767756
Encrypted:	false
SSDEEP:	384:kEwsyBuJhxxE/zb3wwNzrsCpxtn8iqy0buhCYsNH:rwwJhXmvA4z5tDqy0buBe
MD5:	17FD211C2A919C7CAF8DF394B4B052E0
SHA1:	B3CA2562D778E462638FD3CF891A47C01860FC75
SHA-256:	D02AA6C3AE2F5437578C6644A1237636315CEACF8000379A2757F7CA85D49760
SHA-512:	E9AEBB85B5E3282D7C7D1E0699304BE5BA2216A41DE0DA3306DB25FBE234A11D47EC6C18481DA76DFFA4E0AC237402C148AA755CD64006095A9ED0855B4DE534
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,L=function(f){return f},P=function(f,F){if(!(F=(f=null,c.trustedTypes),F)\|\|!F.createPolicy)return f;try{f=F.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(r){c.console&&c.console.error(r.message)}return f};(0,eval)(function(f,F){return(F=P())&&1===f.eval(F.createScript("1"))?function(r){return F.createScript(r)}:function(r){return""+r}}(c)(Array(7824Math.random()\|0).join("\n")+'(function(){var FF=function(F,f,c,L,Y){function a(){}return Y=(L=(F=fp(F,function(r){a&&(f&&X(f),c=r,a(),a=void 0)},!!(c=void 0,f)),F)[1],F[0]),{invoke:function(r,P,p,m){function M(){c(function(B){X(function(){r(B)})},p)}if(!P)return P=Y(p),r&&r(P),P;c?M():(m=a,a=function(){X((m(),M))})},pe:function(r){L&&L(r)}}},Y7=function(F,f,c,L,Y){if((Y=F[0],Y)==v)f.P_=25,f.K(F);else if(Y==d){L=F[1];try{c=f.v\|\|f.K(F)}catch(a){R(a,f),c=f.v}L(c)}else if(Y==rJ)f.K(F);else if(Y==V)f.K

Chrome Cache Entry: 857

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3385)
Category:	downloaded
Size (bytes):	209810
Entropy (8bit):	5.400755454017142
Encrypted:	false
SSDEEP:	3072:j/2dbK89R6x4DFpAjJrOrJrpKazavcslvXc5e+okilMo/GtALq:L2VP6KkJUdpKEavfKe+okilMAGtAO
MD5:	66E1394C6D18F34245D87144B9193055
SHA1:	A93C71AF5BE58C82693690E58E7411CD7B4D2E2F
SHA-256:	ED88D5A1C97DC43C114C0B289B3B5ABF077BE44E8E8765A9AD777F94AF433411
SHA-512:	FD3F6B472CA12DE8BB35F67E7B7F38A11A47ECE02206C74646AA0D1D5F56E91BB1A36735047E67DD0995DAC2F35FA4A3018719BB460C45A2C3B020EBD0092335
Malicious:	false
Reputation:	low
URL:	https://www.googletagservices.com/activeview/js/current/ufs_web_display.js?cache=r20110914
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Jg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Jg};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 858

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 859

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 860

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/gen_204?id=xbid&dbm_b=AKAmf-CJaE5PvjCW247MaPQkaj7GdbMpDoEQpzFGL37bb7gSPufwDb7ETB4TEHDLlnKKNOctGblCknFneWPW4ley7akYuLEdFtE19Uk-IOUwHAuM41KR0q0
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 861

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 862

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 863

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 864

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvJluDs2MBsf2eOIX1byP3UfZO6Ix_9pQUl4t7Htrh3ejB8Nkn2rg02Z3ozPVeLAbUfU4hhmrodqwAqVGXQSLCkPEipX4fmvimnUOo1Ys_fcbbOOYAOvS96qZTOUm4&sig=Cg0ArKJSzHySsfxTiBuYEAE&id=lidar2&mcvt=1013&p=0,0,90,728&mtos=1013,1013,1013,1013,1013&tos=1013,0,0,0,0&v=20240110&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=32&adk=1892844450&rs=6&la=0&cr=0&vs=4&r=v&rst=1705325085803&rpt=2602&wmsd=0&pbe=0&vae=0&spb=0&ffslot=0&reach=0&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 865

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 866

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	116152
Entropy (8bit):	5.924060755397189
Encrypted:	false
SSDEEP:	1536:iARkh+Xvun4mpmx66vTYay9JmYd2SXvaC8fHRk2VL6Tpr3Hr1Zx92zx1+H/2+0dO:iAuh+X77YLXvpU8t2H+uBdZJ4
MD5:	CBF9A2F963C8CDF381FED789CE7AA2A9
SHA1:	C63B90035D0600C90C0A389920DE6007BFCDE532
SHA-256:	FD38D484F0B5BF496AC1AAFE7EDEEFD149C8298478B82B0E298895E772313B21
SHA-512:	19138D089B8CFD3B13E139C004BDE6D65757A2A5A32AEDC15588AF0852CE196B9232073EA901640B15E8AF7940A11665BC0530A6DD81FD4C71CA6C540AC0054E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;margin-left: -150px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="300px" height="250px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22style\x3d\x22lef

Chrome Cache Entry: 867

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1201), with no line terminators
Category:	downloaded
Size (bytes):	1201
Entropy (8bit):	4.350293417551417
Encrypted:	false
SSDEEP:	24:6TyOGq/BWEBZ+E5pSeQ+I414jd4icP8oh+fxsoALPbkLp8KC6ofCA+1ulrJVXzS8:6Typq/BWEBZ/3w81cd41CxLsjkLnCn+S
MD5:	020134A6891327784822EAC97E95C30F
SHA1:	92988C95CBECAD62C6F85B755F6DCB3A5DC3C443
SHA-256:	9696FD253DF0B44E8913E3E02F1F67EFB294D895601B3C41BE0CBB4307F89996
SHA-512:	AC9B7F258823844206C6893D765355A8A719B9D20B5E329018C2F0460CE4C5070B89A9B745971FB82EE48679B0B68939FF5297CE6EBCFC53395142545F4A6829
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons/wechat.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({wechat:'<g fill="#FFF"><path d="M20.674 12.458c-2.228.116-4.165.792-5.738 2.318-1.59 1.542-2.315 3.43-2.116 5.772-.87-.108-1.664-.227-2.462-.294-.276-.023-.602.01-.836.14-.774.438-1.517.932-2.397 1.482.16-.73.266-1.37.45-1.985.137-.45.074-.7-.342-.994-2.673-1.89-3.803-4.714-2.958-7.624.78-2.69 2.697-4.323 5.302-5.173 3.555-1.16 7.55.022 9.712 2.845a6.632 6.632 0 0 1 1.38 3.516zm-10.253-.906c.025-.532-.44-1.01-.984-1.027a.997.997 0 0 0-1.038.964.984.984 0 0 0 .977 1.02 1.017 1.017 0 0 0 1.05-.96zm5.35-1.028c-.55.01-1.01.478-1 1.012.01.554.466.987 1.03.98a.982.982 0 0 0 .99-1.01.992.992 0 0 0-1.02-.982z"/><path d="M25.68 26.347c-.705-.314-1.352-.785-2.042-.857-.686-.072-1.408.324-2.126.398-2.187.224-4.147-.386-5.762-1.88-3.073-2.842-2.634-7.2.92-9.53 3.16-2.07 7.795-1.38 10.022 1.493 1.944 2.51 1.716 5.837-.658 7.94-.687.61-.934 1.11-.493 1.917.086.148.095.336.14.523zm-8.03-7.775c.448 0 .818

Chrome Cache Entry: 868

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16558
Entropy (8bit):	6.015921087856383
Encrypted:	false
SSDEEP:	384:OG7hSXfBs68GTp8zuBtswKQKoBM19QS9JdREohpqvFIDpc7:LVCUayKBiwHxMQqzpqvFIDpw
MD5:	755B78B1F67446B8847B5DE90706CD0F
SHA1:	7E56F23CDE3553894103317EDC7D0BB65D52C709
SHA-256:	FDA5615D4D0FE6ADC903271F7348A721C20FF5D66E5441D65F9F481B63E16B46
SHA-512:	43A1D4B1A31ABC249A2081D11BA3D16C1D738C364831C5AF4E4F2B89B2F65E300110E28A0A76C62808CA87BFE740254ADA97F983AF0D5F77A9E0DBF093395A39
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"MTKlZfmgFZ-XvPIPnYqB6AM","injector_basename":"sodar2","bg_hash_basename":"MCFrRHZE15CKjvM6RLwmjguI7mqh03m56A7oA9GJNi8","bg_binary":"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

Chrome Cache Entry: 869

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6362
Entropy (8bit):	5.394671909339693
Encrypted:	false
SSDEEP:	192:pNa5N4NXNRqNWNIJNENFQNDN8NJXNtNGgN+lNn1NhN6NmeNhNzFNM:vafWdRQciCFe5KJdjZwn73Am03/M
MD5:	2B9883233106E38B628134B62C687A20
SHA1:	7C8BDFE1FAFEAFD2DEA0EE3136686BBDBBE45905
SHA-256:	9A4EB2C9445287C34CB0A9ED5CC673460362483F0855BC91F8230DFA46A955E1
SHA-512:	6DF87A79A5866E3AD0446BF857287ADAA212FF32B8277561FE300158D3850F9D1717DA65DFCFC2AB325A66C4F021BA8D92871A0F59B862187C699D3A1E6D4682
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto%3A300%2C400%2C700
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 870

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	122281
Entropy (8bit):	7.977362339771749
Encrypted:	false
SSDEEP:	3072:O5ECQMgYvNDjg2TvGRH+x/yeAlD9CdthlEioOldbUjNeRnCSQ:Otj8WOZ+YeAlEXhlnoO7buNUo
MD5:	B14362883FF486ECB83C7DF0559006F4
SHA1:	F54F3400CDACA5389E8D221BFD16814A85D26694
SHA-256:	8EFDD369A09555F95E26A63CB9F6A5A2575DE4755B33458A80D0CA4DF225A823
SHA-512:	C45036F533795CBAFB95609D241CF881641AEF2E55AAF4CFFF3CE7A0C1D711DFAF5B7031FC51B6F829C06123ABABBA5E77F0E50B4D97A484477B70AA70036096
Malicious:	false
Reputation:	low
Preview:	......JFIF.............................. ...... . .% .... 00; 4 -"(M((98888%+@@@@@+@@@...........8( (8<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<</<<</<</</</<......t.............................................S......................!..1.AQa.."q...2BR...b.....#Sr.3C.....$%4Tst.5Dc....&6..Fd................................,......................!.1A.Q."a2q#B...................?..Z..0A'@.U..N[.,[@.....U.=uV.'..n..nV3.".#......mf...1t...t.{..8.....v..I./...{gJn..Z.8...J.i...5..k..`8.9....(............~..hR,lo>......Wg.../.r..Y..~.mfb.Zj.4.g.....<...m..p.%....{..d...r...."....7.....=...e...d...v....45........6..../jb0..e..2.-..u.-......r...1e..X..M.6....-..^7.Y{hts._U.u.2V..^Z....qO.@5]Q.f...q]..k...^eK...'.......=.c..Zn....\..l../~....\.._fb\..z.xefZ....e...:.../...-4..w.F.....4,...P$..P.B@%....p..`.$.....K.>...Ws........q.G2-.s]..Q..#......Oz;.P:......G.>e...F...P...:.EX......q...O.....x~g@"{.J.Z..{TC).....@.'u:c{.pA..a......O.M.....V.V4`......>...A;q/.Z9..

Chrome Cache Entry: 871

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 872

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	1174
Entropy (8bit):	5.74166936214599
Encrypted:	false
SSDEEP:	24:hY6t2eJJBewfHDdUg8EcvjHODQMJXeK+C6uS/MLmeK+C6uSGymWAuDSXeMzCUtVv:9V4goLHODS1CTXT1CTVyPyCM6Nu
MD5:	2FE2B1F17888E326B010A8CDA72D48D3
SHA1:	59CBBEEDE4C472024C482BAE8529144119BBBD27
SHA-256:	9A9B7FB32E01FD70747F32EFDBD0472FD681C85EEBB0C42D10C7A514820A0062
SHA-512:	30BE2E73020EB97A67709E47DED40E999D352DA9B94EDD946D1315BDA65AD616AAA3CDFCFA675D061E4ED4AE1BAE3F0D245908D44411B2425C49B4345D2F6607
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html
Preview:	<!DOCTYPE html>.<html>.<head>. <title></title>. <script type="text/javascript">(function(){var f=null,g=null;function l(a){var b="";n(a,function(a){b+=String.fromCharCode(a)});return b}function n(a,b){function c(b){for(;e<a.length;){var c=a.charAt(e++),d=g[c];if(null!=d)return d;if(!/^[\s\xa0]*$/.test(c))throw Error("Unknown base64 encoding at char: "+c);}return b}p();for(var e=0;;){var d=c(-1),m=c(0),h=c(64),k=c(64);if(64===k&&-1===d)break;b(d<<2\|m>>4);64!=h&&(b(m<<4&240\|h>>2),64!=k&&b(h<<6&192\|k))}}.function p(){if(!f){f={};g={};for(var a=0;65>a;a++)f[a]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(a),g[f[a]]=a,62<=a&&(g["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_.".charAt(a)]=a)}};function q(){for(var a=window.location.hash.substring(1).split(","),b=0;b<a.length;b++){var c=l(a[b]),e=window;e.google_image_requests\|\|(e.google_image_requests=[]);var d=e.document.createElement("img");d.src=c;e.google_image_requests.push(d)}}var r=!1;

Chrome Cache Entry: 873

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 874

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15718)
Category:	downloaded
Size (bytes):	18692
Entropy (8bit):	4.754375391922092
Encrypted:	false
SSDEEP:	384:VYz/VuPTb9Uh31//bEP+XgA1Q0efAJmpr:wNU9Uh31//YWXgAMfACr
MD5:	4CC444663C1E69CB8AC7B909E7192BCA
SHA1:	D00DDC5B9526193FA99BC3995A6D05F995452EA1
SHA-256:	4F79A89D16A5F717110FE080C0BF90B7E05FF95A4C4983F64D33110BF5F9C230
SHA-512:	AE37D08D11AA4337650CBEC0D0F1205A5505CB3E82373873E82CBA093019521CD2B93CFE2DBE4840CE098717287E1F732E9330C90063B122F1C6358664F1B8EE
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/wp-emoji-release.min.js
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return m.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,i,s,l=function d(u,f){var c,e,b=u.childNodes,

Chrome Cache Entry: 875

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	187772
Entropy (8bit):	6.19264973787713
Encrypted:	false
SSDEEP:	3072:oE4YGzKxUphOkm0tE3kCzmEYNohPo5J7VyeegE5ZSqfQoG44wtKW6HeuS:oE4jzKxUp5twfpbS4H6+uS
MD5:	92DDC37EDA9A9CE766BFBA558176AA32
SHA1:	C70978277DF4D67099D0651BA61BD0970F90C8DC
SHA-256:	8D0832775B93C040B06D7C4F7CEFA343049D98525A49DFBA37B95694141ABD82
SHA-512:	A55F884DA07756A3B69929B66247F4A1CE3D35D131CC3DB8E049AA61690428243267F3B3A0ED8234118C1C5AC92A0B3C8BD03BAA802C8F9C94772957F6293401
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922
Preview:	<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;align-items:flex-start;display:flex;justify-content:center;line-height:normal;}#mys-overlay{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:0;box-sizing:border-box;pointer-events:none;z-index:1;display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240109">(func

Chrome Cache Entry: 876

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 728x90, components 3
Category:	downloaded
Size (bytes):	35254
Entropy (8bit):	7.964166419470512
Encrypted:	false
SSDEEP:	768:mKR/lidVaEFqjiidRejcRzzXr3fASupgYx5jRsVXGpAA:Zlid0qJ2/bm3xeYF
MD5:	A2077D80BD47F15A505407947FAAC1D8
SHA1:	858C2073DD74104ABCECC4DD33ABE93F2EF6098D
SHA-256:	D93108B4D6B185AE7150D5BA9D0F77BD640C158FD8F8E2DE35BA30BDA932A326
SHA-512:	A7B98FA575D73282D4DA992481A986FB8203823210CE858864BF631EA48C478B016E8176F9635C6358A69C2F820E36525C9F80D50187CC76F8ED2A2A79F4BE78
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/11229060083375947527
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f21cd22-0b54-4b14-9101-6f7ef048f2cb" xmpMM:DocumentID="xmp.did:651BE292746111ED9451A2098CC9645C" xmpMM:InstanceID="xmp.iid:651BE291746111ED9451A2098CC9645C" xmp:CreatorTool="Adobe Photoshop 24.0 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7d094581-e61d-49ee-9001-713af6d885cd" stRef:documentID="adobe:docid:photoshop:c5e361de-0e60-2f4e-8963-709c8651f345"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................

Chrome Cache Entry: 877

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (27722), with no line terminators
Category:	downloaded
Size (bytes):	27722
Entropy (8bit):	6.07111562488752
Encrypted:	false
SSDEEP:	768:sA1YE18CBLXDj4LXDjpnLDNwZz5K4wZENQxAokKe8bW/:Fj8sbDj4bDjlX+ZlmZEKs/
MD5:	BC9E1D2722B9575201041F1BAAEADEE2
SHA1:	FCBE3C617A23CAC6BB6A77AFC00214D380BE9DA7
SHA-256:	7E562C4B1A7A29FD90AED6D975ABDFB9A85F8D3AA0C8145ECB2239A3C093BCF2
SHA-512:	D23701BDDFBC82ED2A4DF8457B9335C431A8F73331CB12A0409AE86137D0A8F66282F2C3D3E7ADDAFF4622012A5ED6CC97F7BEA31B997C0787529EABA98016E4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;margin-left: -150px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="300px" height="250px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv class\x3d\x22GoogleActiveViewInnerContainer\x22style\x3d\x22lef

Chrome Cache Entry: 878

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 505x342, components 3
Category:	dropped
Size (bytes):	49968
Entropy (8bit):	7.984543174664297
Encrypted:	false
SSDEEP:	1536:iYxgqbbr+z3Fumo7wupy40IdOKFqpexicx:iej+z3EmoUXIdOKFu+icx
MD5:	646AE3C31C2821C1F7CAFA9690B18672
SHA1:	904266F712D0D0C9DDD1F46601FB86BF95ADA562
SHA-256:	1FECB902BEAB910F9F69EF4C32D68ECE27D9B9CD03EB042C85F37A777F82AC98
SHA-512:	E95FCA147BAC832FC84D1D2AF0F2E4483E58990A405D8C448DD3616120A40E486FB6D296B9A208F1D42D3035D619A57ACE281E606C16FA2DB6CC8F8BB49A957E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................V...."...............................................................................f...^9z........W...../.=K.P.z.....`3....x....../..l^&...x..R..x...k.'....b.Ti...=..M....,...^W.=My\|...].^..,N}Myb.S^X... ...K..~.!P.F..1.%.'a..^...uA...Qf7N.J=.tU.3..g;...%......N..l..^+.Vc.Q[.4..bZ)"..s...E.BF.....g....4n.F,..6{>..v~..gA.... .O...q..7..H.>.0.a..8.7nr+c.X......4.=H.^.i..\b...=..r...n~F.....D%.`7Y..@.g.I[%...1....<#I.......K,iRwpW...N......:=.s.4.7.......'.;rz.N.`N=.h..h.@O...'..U.....[s.ug.K..F....i.....8<.....l.j...].F;.7..2'=.^..}8q..c]C....".&.At<........,.. .p.Y..U.."nHTf.....KL....je.@^=..\..J.Y..>v..........mh.M.6.Ga............(B...^p.@jp..[.tk......x.s.Z....j]G:...XL.0..,..'Hu.-.....].Q...<.vpF...t.6......>...u..\.uk..`.cu.=.re\.8y.....o..0..u...X..l.<.5L.oA!.:;.Iqd...8..r.`.5

Chrome Cache Entry: 880

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 881

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 882

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 883

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	dropped
Size (bytes):	1272
Entropy (8bit):	7.470472828093114
Encrypted:	false
SSDEEP:	24:6d+4MsZ6+nbtMr/gTuqNFdQnpFwsnuKy5u1PfSGvK3OBzL+l+rDD3:lOZ6+nZUgCQzQnbwJ5u1yGvKsmo3r
MD5:	F305CBEFF0D6D345B8C4B4CAE3944C6E
SHA1:	5CFEE374468FBF57A684B028C62AADF820E5894B
SHA-256:	C13B3872DCDF059F84970A890DD3698F4F1959194DC562BC4E349869750F5004
SHA-512:	97E0E107BED1384E6F8A5709766E3EF35FE85E82DA118A30904671146C5BB58B42F7C1B715A63ED6D9C400BDB0B7351ADA070306242320376AA23D6E3F479D7C
Malicious:	false
Reputation:	low
Preview:	......JFIF........................................ .........$#. ")#..(1!"014.4.'9=82<.14/...........-..!(2-&/'--'-'0&-)-0&&'&22&&0''--'-&'&'&'--2&-.(-......d.d..".......................................1..........................!..1"A.2BQ.4q..#$Ca......................................................1!AB............?..."." ""." ""." ""." ""." ""." ""." ".u..s..n.+;......;.sC.....;.8R.%;...\t.Tkd.......d?[{$n..>a.<......tX[.Q...v.`......fDZ#.....9....=....[.:.K......S.M......3......&..."..z.....vJ.*..e.JZY+Z.8p>@....uu.c.T.Z..?...5...q.F=e......Y-IE%.k..u.UP..}...6P...k`t........W....&..?x.Fh..G......sI8 v.....)jr,..W....Y..Y.-.cdb6.qw....?...'_..n..a..`1..v...3.I..."&V..Sx:...k.}+t...sYMPK......r. .q.A<U-..#....#...I...y..Er5<..)k&.S>...q..........;T.^.....L/......^.My#ys..N]...;\|...X.JAt....w]O..e..h.%... {`g..#......h.Gu...6Y..4.S^.3.../^v.7.e.`g.#<f.j.V......5U...I...n...?.I]....H...E..X.M7....+Met..70......<.y.g...].G.Q.7h[....7k.)..B...@.w...Fx...

Chrome Cache Entry: 884

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://ade.googlesyndication.com/ddm/activity/dc_oe=ChMIqI6B8b7fgwMViCGzAB1Ivgg8EAEYACCzm49j;dc_eps=AHas8cBrPYa5p_YWlcsJM48qKQhl4sqhg9eqnZKnMKO04EBjvRLTjK9ks6MKwAThU3zHJQWbcrSciSKX9A;met=1;&timestamp=1705325077326;eid1=2;ecn1=0;etm1=10;
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 885

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	70448
Entropy (8bit):	6.0266982336170996
Encrypted:	false
SSDEEP:	1536:s4Man4EQNbU5ZrcxROplbfUWfSliP80Bg+6m9hCac:vHQWrhEWfnPL56mGf
MD5:	FFC786970FB7F087C8E520113A3FD9AD
SHA1:	DF328D09B68C7E92DF65D2FC67C574D8F90DA8A6
SHA-256:	D82C483FB5342BC0120C19222101A0F0B578C1A4C0AC8E1CAEEC961FEB851E79
SHA-512:	F849FB64022244931724FD301651A13F17EA0489EBAEEB90FE84FFB176A45913563DA99BD1ECD7488B28D7EFA9890BD5CC95E47E8420D71A4696370FDABFB109
Malicious:	false
Reputation:	low
URL:	"https://ad.doubleclick.net/ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=435837736;ord=uhetnu;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIpL6e-L7fgwMVqqfRBB1t5wlKEAEYASAAEgJhNPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4GAE%26sig%3DAOD64_36maZYIRbAE4Hq57cPbZ-yYhra_A%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=_kzn67ur*D;cmpl=8;gcsr=m;stc=1;sttr=12;prcl=s"
Preview:	document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_943104489"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_DzKlZazBB7OSoPMPibeKwAI"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82');m.setAttribute('data-jc-version', 'r20240109');var ss = document.getElementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d(a[b]);++b);}}function p(a){return(a=a.ownerDocument)&&(a.parentWindow\|\|a.defaultView)\|\|null} function q(a,d,b){try{var c=JSON.parse(b.data)}catch(f){}if("object

Chrome Cache Entry: 886

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x100, components 3
Category:	downloaded
Size (bytes):	1272
Entropy (8bit):	7.470472828093114
Encrypted:	false
SSDEEP:	24:6d+4MsZ6+nbtMr/gTuqNFdQnpFwsnuKy5u1PfSGvK3OBzL+l+rDD3:lOZ6+nZUgCQzQnbwJ5u1yGvKsmo3r
MD5:	F305CBEFF0D6D345B8C4B4CAE3944C6E
SHA1:	5CFEE374468FBF57A684B028C62AADF820E5894B
SHA-256:	C13B3872DCDF059F84970A890DD3698F4F1959194DC562BC4E349869750F5004
SHA-512:	97E0E107BED1384E6F8A5709766E3EF35FE85E82DA118A30904671146C5BB58B42F7C1B715A63ED6D9C400BDB0B7351ADA070306242320376AA23D6E3F479D7C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/7237552574441489032/14763004658117789537?w=100&h=100&tw=1&q=75
Preview:	......JFIF........................................ .........$#. ")#..(1!"014.4.'9=82<.14/...........-..!(2-&/'--'-'0&-)-0&&'&22&&0''--'-&'&'&'--2&-.(-......d.d..".......................................1..........................!..1"A.2BQ.4q..#$Ca......................................................1!AB............?..."." ""." ""." ""." ""." ""." ""." ".u..s..n.+;......;.sC.....;.8R.%;...\t.Tkd.......d?[{$n..>a.<......tX[.Q...v.`......fDZ#.....9....=....[.:.K......S.M......3......&..."..z.....vJ.*..e.JZY+Z.8p>@....uu.c.T.Z..?...5...q.F=e......Y-IE%.k..u.UP..}...6P...k`t........W....&..?x.Fh..G......sI8 v.....)jr,..W....Y..Y.-.cdb6.qw....?...'_..n..a..`1..v...3.I..."&V..Sx:...k.}+t...sYMPK......r. .q.A<U-..#....#...I...y..Er5<..)k&.S>...q..........;T.^.....L/......^.My#ys..N]...;\|...X.JAt....w]O..e..h.%... {`g..#......h.Gu...6Y..4.S^.3.../^v.7.e.`g.#<f.j.V......5U...I...n...?.I]....H...E..X.M7....+Met..70......<.y.g...].G.Q.7h[....7k.)..B...@.w...Fx...

Chrome Cache Entry: 887

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	122281
Entropy (8bit):	7.977362339771749
Encrypted:	false
SSDEEP:	3072:O5ECQMgYvNDjg2TvGRH+x/yeAlD9CdthlEioOldbUjNeRnCSQ:Otj8WOZ+YeAlEXhlnoO7buNUo
MD5:	B14362883FF486ECB83C7DF0559006F4
SHA1:	F54F3400CDACA5389E8D221BFD16814A85D26694
SHA-256:	8EFDD369A09555F95E26A63CB9F6A5A2575DE4755B33458A80D0CA4DF225A823
SHA-512:	C45036F533795CBAFB95609D241CF881641AEF2E55AAF4CFFF3CE7A0C1D711DFAF5B7031FC51B6F829C06123ABABBA5E77F0E50B4D97A484477B70AA70036096
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/14368650770431110324/14763004658117789537
Preview:	......JFIF.............................. ...... . .% .... 00; 4 -"(M((98888%+@@@@@+@@@...........8( (8<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<</<<</<</</</<......t.............................................S......................!..1.AQa.."q...2BR...b.....#Sr.3C.....$%4Tst.5Dc....&6..Fd................................,......................!.1A.Q."a2q#B...................?..Z..0A'@.U..N[.,[@.....U.=uV.'..n..nV3.".#......mf...1t...t.{..8.....v..I./...{gJn..Z.8...J.i...5..k..`8.9....(............~..hR,lo>......Wg.../.r..Y..~.mfb.Zj.4.g.....<...m..p.%....{..d...r...."....7.....=...e...d...v....45........6..../jb0..e..2.-..u.-......r...1e..X..M.6....-..^7.Y{hts._U.u.2V..^Z....qO.@5]Q.f...q]..k...^eK...'.......=.c..Zn....\..l../~....\.._fb\..z.xefZ....e...:.../...-4..w.F.....4,...P$..P.B@%....p..`.$.....K.>...Ws........q.G2-.s]..Q..#......Oz;.P:......G.>e...F...P...:.EX......q...O.....x~g@"{.J.Z..{TC).....@.'u:c{.pA..a......O.M.....V.V4`......>...A;q/.Z9..

Chrome Cache Entry: 888

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 889

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 890

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 891

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 2499x1312, components 3
Category:	dropped
Size (bytes):	151697
Entropy (8bit):	7.7325975854327655
Encrypted:	false
SSDEEP:	3072:eqPGXJZHjTEyiGkp1pPirJhZe0uEWNZeP1WmhOpNU827TpO:Rwv2REh1IoPMmhOEO
MD5:	19989CE7A8237EF2BEF8AE7435C31DFE
SHA1:	39613182455F8CDE1DD547B8C6A6485F4B465FB1
SHA-256:	FCDE22C50880001CEF19931BC3E7230BEB1BB076D2648196E67C8CFE2337CAEB
SHA-512:	35A988EFAB9CE9B6F556D474D49D580C00A899302A4732B58ED0401AC66A3D767FC2374D2C43DD68AB642B52C0638736238A977D1034F7383199E2FDA7A4B697
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../...//////////////////////////////////////////////////...... .............................................I........................!1.AQa..q....."2......BR..#br3C$ST...D.4c..d..%...............................%......................!1.AQ..aq"2BR............?.............................................,....i...E(.....)@...#H..H..e.. ........4.....r...l@@+.\.p..W.....w...p...<...;.\.p...........p...\..+..........p....p..............p....Aq..0...1...r......p.............B` $.D..........(.P.7L.t.8@K..t...!.t....]0%.&.t..CS..YB...a.X`V& "..,\..........V........@. ...@..........@...@. ....B(..,.............U......... ..P. .........@. ......@...........B....@....@&.H......%....P.........`...... ... ._...Dd....].. .4.&@.........,P.....,.`...`..h....!...X.`..........C..(.Y.)@...)D!..J U...;..0...&..`..Ab.).........Rl.......p...P........`.2.......p...\...............w........p..\....ph

Chrome Cache Entry: 892

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 893

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x314, components 3
Category:	downloaded
Size (bytes):	38400
Entropy (8bit):	7.97748083506869
Encrypted:	false
SSDEEP:	768:ewIwWDqBel1dkyZI2DGXK7t4UPjcbLX4iGngOqGon8FZS+gaWI25/K:ewILqBwQm3IQDcbLbAgRl8Fqii/K
MD5:	0570E4BF5189264B78A935DBC8856FE3
SHA1:	A728A1A0BB0518308357D7583928198C18C3B6E7
SHA-256:	5722F44AE2DC4FF1A31468E88ADC0CDA24B03649B00B76A5EE61161F60C4D3D2
SHA-512:	EC61589263D7089C67A5C354D7B4F16F4B86D3BAF94CEE5847ACBF85CCC260849E375B206432AFAAF61BB862F37E45A8EB4753A2F8F2F199797FA32A29260793
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16236717193563531785/2728354180183721846?w=600&h=314&tw=1&q=75
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........'...'&'&&'&&&&&'&&&&&&&&&&&&&&&&&&&&&'&&&&&&&&&&&&&&&&......:.X...........................................I.......................!.1."AQ.aq.2....#BR.b.....3CSr..$..cs..%D.....4T................................:.......................!1.A.Q."a.....2q.....BR3.#Cr.................?..9@."..B..NP..AB$......X...[z2T...smAtq.d...O+TQ.+..0"batZ.S&t.B.II...2H....S&s..kR...X=..?.w....g_.<.7.O..d.S(.0..E.....\...Q..!..B....(d.3-.=.s$.H.Z..K...Q.Fp..\|...r.K..U....CJV8...D....N.....d./....Vn.%. .....f.%...VA..."3>...$'..BQ.'s ......*Y.;...R...}.\|...h..@.f.T ....$(A4(A....(A...(..d....m..7wT0w/..........-...:..q&u.iw....B..N.....Z..(..c..D.....T.d`.c.9....Gp....O.<...........Q.V.j.S....w.Sd....-.t.m...N...s.'.:.....i..qh(:...&..}z.zr.8.<.e5.....i..p..<:.L....i...H.Dul....:9.....kq.j.Pm....H.K<`.3...&:t..D.E.......I.#Qq...yt.BiB.a4.LV<:..BLOb.!.3..+..I...0?.F...q._=_...

Chrome Cache Entry: 894

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 895

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1209x633, components 3
Category:	downloaded
Size (bytes):	148234
Entropy (8bit):	7.972758805290917
Encrypted:	false
SSDEEP:	3072:8S+SbfPNs2SC3e2RJTigzh4M3CbupKS01cynjPZG7Vo5yxeLKuhtc:/fGuJugz3G1nnjx2neWwG
MD5:	B943802D754B8EFCCCBD5FE355527CD0
SHA1:	64F950B4BA193D83322EEDB985C0AAD013D9F27C
SHA-256:	6A0C83BCB836534D091613F24EB7822A6B8E05050139A93659605340E4CECF13
SHA-512:	B19BD162BD73E631D14A4CFBDFEAF6F39A1108495BB41F500CD5F07A2918882EEDAC9F09879C2D6B80CAE43112D8B12594C5BBD24EEA5394E9AFA06A264AE872
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/17999565487457502693/14763004658117789537
Preview:	......JFIF...................................................+#..(...%5%(-/222."8=70<+12/.........../%.%//////////////////////////////////////////////////......y.............................................W........................!1A.Qaq.."2..B......#Rr...3CSb....T......$Dc.4Us.....dt%.Eu.................................5........................!1A..Q."a2Bq.R....#b3.$...r............?...~..F....(D.DB. TH..!IH...a.. ....@..".5..h..xE#..M.C.\^.2.<c....s....D.L...e....{c.C.....;+.&Q..3.....}EOc:1.>.T....@).J@......%.j.-.x..t......,.F%...F;N.EVRW.+.)..Z...xu....rr..(....h...X.z.Z>+..`....\|.l4&.."........[b..m~....1S..r^.!....J.......&..h'.S..e.K.........H..L.2.....B..ll....O.....C..#..........]...!.....7!..v]..y3~.....6...I3.......Y.f.......m.J)}.(...../..#m..E.J~...m-.v..ap...o8..."m5.{.<..Z../..Q..[.......Y...%..M...u......[.'`..3.....(...6.....ifd....S...Dk.b...>...(..Uu4m...y,Z.}.h[..K.l.....P..O.Q~.D...-l...T.`FDa.K..Ue.KH..V...xB_.?..g7KH..c]

Chrome Cache Entry: 896

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 897

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Optimized by JPEGmini 3.13.3.15 0x8be7bc3d", baseline, precision 8, 260x600, components 3
Category:	dropped
Size (bytes):	74414
Entropy (8bit):	7.961978575734755
Encrypted:	false
SSDEEP:	1536:v1l29wxcW4i3rc0j74tWsN25eqZg1891gCtv+z6mLEkPPxXethp0WcMmtEhn:mahAN25y180yhmgknxXetQVE1
MD5:	DEC13E5E96ED3DB66E4DDDC81FBEDC17
SHA1:	9113FC9EEAE81770DF5DD40D4C7D639F5518F85B
SHA-256:	A7B0086ED303111A7E3515D61A8F4D5C2C7CBC5AE6DEA99D0332F4F3EF398A78
SHA-512:	A5EAA5EB6E5689522C30F8E39149F5229533F2F2664E66EEF50EEB911468A8282EADEA41320A0374A452F1F0321B73E9854EC4F0D1EB9FB7FC5B36D99EE26A69
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....-Optimized by JPEGmini 3.13.3.15 0x8be7bc3d....C....................................................................C.......................................................................X..............................................m.............................!."1A..2Q.#BRabq3r........$%CST.....46UVcsu.......(8Dv...&'5EWdt...)...Fw.......................................O........................".2R...Bbr.!#1.....34AQaqs....$%5..CS...Tc...6...Dd....................?..`.s.\.GYC.l.....M.G.."........[..\|..K.b<U;y^>..#\|....\|.%....y.. .?....8u.../...S..{w....,]..L=G..5.0h0...........0...........0...........0...........0...........0...........0.......;........O...j.>.S..Y....X.^;.w...n...t.......L]8W.B.......h3t^.%F.1..=.C...f8.a<.E.V..1......Kv.f.=..3.}?....y...%...Sq....;/~........~I.hw>VS]..LU....z.9K%..M...IIt.U.....?1+0.....-...k....S.\Z........?..q....._d..\|k..[.............0...........0.....m.6..E.ll......~..o....O....\..._

Chrome Cache Entry: 898

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 899

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSrEGajDc8cuZCwLV5lPHFtiKEraLgfzKNAiNtDNBCx4AS0SIIOP3Y9DuuAF3VAS-2R5GsgVTwrnGjH0I6gNp7VlqkN8skRgYdw
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 900

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15740, version 1.0
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.9866977438851
Encrypted:	false
SSDEEP:	384:RRlYHoE1mbF2cZgh17dAdJ0mB1cpOxvLTcZjh1LOz:JYIB2Sg/dYui1XBHwG
MD5:	B9C29351C46F3E8C8631C4002457F48A
SHA1:	E57E59C5780995FF2937AB2B511A769212974A87
SHA-256:	F75911313E1C7802C23345AB57E754D87801581706780C993FB23FF4E0FE62EF
SHA-512:	487AC3FD483F8EA131989857BCF1782C295AC72022BC2EBD4BF19001433D6DB65000E192E58B7A6F70F627D15C58F9FED9BA5FE0216363354BEC5A396299DAD9
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
Preview:	wOF2......=\|.......l..=..........................d..d..^.`.. .X..<.....x..s........6.$.... ..\|. ..:.(..l.V38.......;..'....F.........)..!B..V..U......;..q....O#..cx..mt.w[.......x.UG\|n}........]k[....;J.....<=..F.$'/.......w...r$`....b(g..9C4....#.BK..G..9".Q...ld...j..C.l.F.i#.+.UO...%.E.Z..C..."......k1._....M.Y....-..H......Gm3.....YiJ.s..b..>..W..U.."..2..-.O........(H...0$....7l.7}.j...".C...w?/.oB%<K..d...'H....M]...k.."...E_k.............8.\...A.1U.9 5.@Jb.)J....Hkb ....!.n._.s.:5E......k..}.^...7]f.,a.7..a.H...J^.~...uWJ),....Z.7A..Ra:..k...}.R....G k$.{...%...R...."X6...A......p..V..IH[... .m..H.q.x.?\|......b.#:.c..Z.V.}..:P$j..c..B..^...HH......?......=.#^ q.@R...I....#.$O.H.N03~.@`...........8e.......>!...d..I.........g<)2......P....u..V.........c.1sK.."G.#...^;....=w....[G.}k.y.?.........c.a..\9f..zx..("mGj.."...d..........>c.!..Z.xm...=....v.V..:.6s.....J.oz#.....Y"d.....6>1...i...IQ..;2......\d......n..y....K..Y.L...O.2.....

Chrome Cache Entry: 901

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 902

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 903

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 105
Category:	downloaded
Size (bytes):	117
Entropy (8bit):	6.282381920271676
Encrypted:	false
SSDEEP:	3:FttZC71LqXvoQAKV7GwP1o8DPbKBvQUXjLk7k/:Xt68QQAKVTP1h7GvQU3k7E
MD5:	807BB08BF1C51AAFF763EDB0F02719EF
SHA1:	6E089DA63E5751494B32D77031DF30EC3C8BE067
SHA-256:	7EB411AD7BE2E6AF85645F2A2B6401BF6085FE4E0436D004F33710BB84A7BE4E
SHA-512:	A5276EC0370F202A20DCDEB1A89863F740F8345DEB6ADE9D90EEE7409CD0B2D0DB6AC7A03A65E7C27D558EB9EB7D1565541927758728AAB2E8EE18430C25332A
Malicious:	false
Reputation:	low
URL:	http://js.passport.qihucdn.com/11.0.1.js?637b2e9fc4469011b21d1b91abc7fa3a
Preview:	..........%.A..0....n...D...p.v..5A`.....w....\........X..kR...D.&...*.?.l.GU...m%CBcJ9.<J..^r...6.D.wK...K...i...

Chrome Cache Entry: 904

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	73447
Entropy (8bit):	5.315425597976914
Encrypted:	false
SSDEEP:	1536:NNDF5DvyAoNTQaRX7tbMNC1fNZz4zKTGkvOsZ0CJ/h:Nn5D0kgxD/h
MD5:	841DABCE0B477A93D9CF7379B9EB1368
SHA1:	F1AFDA122D766036A7C3418D785C17168106A391
SHA-256:	1616C8CD083E6B17F6A75AB0695BD4A4573B31AE8398FFB43758288028F6A773
SHA-512:	F8B298EFFAB6828E6386061FBC87CF6924EB9DBCAF82C559F76F6A8D924A752D97B6FD750BEB90CAC7D32B995903A7A075A17D18060B632DA416444B81943406
Malicious:	false
Reputation:	low
URL:	https://warp.media.net/rtb/resources/release-20231121-135-adperformance.js
Preview:	!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var n,r,i=function(e){return e&&e.Math===Math&&e},o=i("object"==typeof globalThis&&globalThis)\|\|i("object"==typeof window&&window)\|\|i("object"==typeof self&&self)\|\|i("object"==typeof e&&e)\|\|i("object"==typeof e&&e)\|\|function(){return this}()\|\|Function("return this")(),a=Object.defineProperty,u=function(e,t){try{a(o,e,{value:t,configurable:!0,writable:!0})}catch(n){o[e]=t}return t},c=o["__core-js_shared__"]\|\|u("__core-js_shared__",{}),s=t((function(e){(e.exports=function(e,t){return c[e]\|\|(c[e]=void 0!==t?t:{})})("versions",[]).push({version:"3.33.3",mode:"global",copyright:". 2014-2023 Denis Pushka

Chrome Cache Entry: 905

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 906

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 907

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 908

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1489
Category:	downloaded
Size (bytes):	634
Entropy (8bit):	7.666878601798562
Encrypted:	false
SSDEEP:	12:XfcfciJgrfmViYo9nAwz2/3PXSc/uCfpkFF46HvD6bLUSNsY3inkllX3fVU:XZswfm05nAwmPXScLxkFbr6bLUSlCaxa
MD5:	67C52D2776EBF5D343F21E41F094E797
SHA1:	6CE17992AD0375E6B04050B153C6E282492A5836
SHA-256:	68825174A368CABB63EA299FE5F6EB9B7515CD9AF5BC77ACF9B58711E6F07563
SHA-512:	973466D5AE326891D42750C42721E051C3CA303B8F7CBAD97B7D0762199077E2CC6DEA074D53A3B364BD6649AF881386E4EB8084EA7BDD99DDCD13321A310705
Malicious:	false
Reputation:	low
URL:	http://mylovelybluesky.com/wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js
Preview:	...........TM..0..+.J.L.@.A.{..q...D.5v.L....+'\|...^.....{...j}.6x...w..x.8.:......<?5E..=q.....XOQ.$=.K.g...Y....Ph.,J.l.b...}s$0.j8..2%...zk....:/.h......Wk[..E;.d1.......2.U`uC\|^...`'....(=7.SD.K..;....L..Y_....dV..3.Vy......>....jSX..I/....i.U...d.x,.qa.{..-...1..2..P.....76.m.<S.......ms.u..^...-.G.8........g.?#"..[.h..Z.K......e.......U.iK..PeZ....G=6`..M.L.."...!u.=...W.4..p.I.o............[\.....tmbC?=.kc....y...e. .l88....~....L.2.n.....p..L.y.QN..)...d.....P..>b...]R..._-.....`..z....}.Ui...Mn.h6.eW...A4.*.S.o..j..#.....;z....2.4".L]./W...R.6....x.l.L)I.b.....'...W..:..p..N......

Chrome Cache Entry: 909

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 910

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 600x317, components 3
Category:	dropped
Size (bytes):	33038
Entropy (8bit):	7.968766023615182
Encrypted:	false
SSDEEP:	768:96GwpOU5ZRXZNUm8c2YBZ/N5drj4RxNRzghJqcHqFKl7bpm:96pp3ZR/0+Z1r47ghgyqyA
MD5:	221655BD1F23E631749185D89F7C8258
SHA1:	7D98A42C962746BF69347D6FA5CCCC04AEF03E0A
SHA-256:	E647A5AD373786DDDEFEACEB90FCFF3BF5C895FB668415AFBD02B906D6AA3CA1
SHA-512:	14844F90F48F7DCF840AF794EAC103E971B2E65E1CE3C93BB36BA1E560F43F86ACFA2A22DE6AFF80EA98805FDD67366E50AAFE2569F9124AD297574099742FD7
Malicious:	false
Reputation:	low
Preview:	......JFIF............................................................%....!"!..&)% ). ! ........... ... ......=.X...........................................P........................!..1AQ."aq.2....#BR....3Sbrs...$CT........4c...D...dt................................'.......................!1..AQ.2."Raq.............?..+...TC..Q@b.1E(...A.4.!EU (...(...(...(....P (....T.....R.@b.E...E..Q@r.Q......QD(.1E(.Q@.......(.Z...-...Yh...(.Z.E@..E.....(.P".....M...]...T..P..T].P.E.N+l.T...... ....1D(.1D(.QE(..P.(.P(..P(.......QU....(.......(.P (.P..4.j...(.P.(.P.!E..)P(.Q@..E.b.Q@..E...........(.P(....(.P(. ..R5.....n.s.{....='..+8..o<5.j+..EP..QP..QT..1Q.(..1P (....!E.b.1D(.Q@..EP..E.....(...Q@..1@b..D:(.QJ(.P(..P...T.(.P(.U.....(.QF(EPr..*)E.......E...@..E.....(.P(.Q@...QK-...Q@..DQT1.:.:r.R\|._...F.J!^Q.m....=.].n4..H.^.n...O..2.......h..R....0Q@@..Q.(...(.Q.(.P.....-.r.(.@P(.tP.."....(.@.QT...P(..P(.Q@b.E.....(.P.(.TQ.)E...)....

Chrome Cache Entry: 911

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (61564), with no line terminators
Category:	downloaded
Size (bytes):	61564
Entropy (8bit):	5.6970550121904875
Encrypted:	false
SSDEEP:	1536:AQSGx7LZTaxbIlOaqt2+6SO5hkrkV2fqhashAKs/:rSKZTimX+enkIV2yb54
MD5:	D5E401A1156ECBF6B6030FCC67AAF674
SHA1:	5DC7DB676B52F614431D716EB79D7E582831022E
SHA-256:	A91D06215485C99B9C8EA19EE0489DF9F7B3AD24CC25910DA732F1BE16C7C787
SHA-512:	03940EBEA100D6086EFDE539EC1E9638E640436F79C84610CFB507EF7D0F353D9F7128BD32F132EFC822A9D5A265BED81CB90CF895D8B9475A3AE8B835D9F8A4
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscri

Chrome Cache Entry: 912

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQLPQsGYxBPWhisDOKW-ucf0uP2dZrbKNvNLqzFdFTBpvmCCXbKJSXSB8DWT4TtdB9lIFxRkqG0L_c30Dlo8MNgekNcZ_tlxW8BS2E-4VFypeQcX5fRQaxy3ssFVbl4ITqMj0QnaIjXgaII6pCtVbQuTA
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 913

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 914

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 915

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (60517), with no line terminators
Category:	downloaded
Size (bytes):	60518
Entropy (8bit):	5.74538867854022
Encrypted:	false
SSDEEP:	768:sJPzQ9PUQI9wE39NsCu/HvCGvU2EZQymWUyKpAkbgChFEwEXUKIl5kFJWE6V+9uZ:AQSGx7LZTaxbIl6LnuaiOElKs/
MD5:	B7743296623D28861DCA33F61B224B9B
SHA1:	17072C3869F6A3E0D8010FD417E1639339BE5BE0
SHA-256:	C1F9CBE2F53AC39B869542C88545A19F3FD8F24D65CFF89352C5DF1A2131E517
SHA-512:	55DBAF5A48CFD5B3F55977AFC4E26D40C0A235715CBEDC1D41947FC286D2FC63751EB0427E334975AD104F2D072CEA2E0A5938E537207B0BFF45A6EAA9480B4C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;margin-left: -168px;top: 0;margin-top: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = document.getElementById('ad_iframe').contentWindow.document;doc.open('text/html', 'replace');doc.write('\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscri

Chrome Cache Entry: 916

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3963)
Category:	downloaded
Size (bytes):	151866
Entropy (8bit):	5.597236239595508
Encrypted:	false
SSDEEP:	3072:hUrpPxMlOtoAURP8G8aeWkgvM0568JDJPQAnBJD75PDD7l6qGfwL3bptvk0RB43y:hepPxIOtoAURP8G8aeWhvD568JDJPDnn
MD5:	E423E78602754C3F33894C4DF70126D9
SHA1:	F1CF5F0806125D77372116E9B29D7BC584DC1BF2
SHA-256:	AAA86128DAC2B83F2D205B870A8C4C06AFFB18144B3333B077F855A2D5C3F482
SHA-512:	FB26CE3CEB4888635945F87BAFD0DE05762977A9C2561E593386988C3761E83CC2503228258E58280BD0EA9EA65E11495BD503579543E0049236BBB793F1DDE2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-6163292317333011
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return null!=a?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,arg

Chrome Cache Entry: 917

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	36404
Entropy (8bit):	7.982818908225298
Encrypted:	false
SSDEEP:	768:uy6zDBxj2Jg+9TeqhZFoX+hBjJ7WX4RbnmAnTGWqcNNj3IDuD:uNL50aqlhBjJ7dBzTTpl3IDq
MD5:	2BA8990CC12919893EF0CC6A5C8DEB94
SHA1:	69A1D1D5154FED77022B489DB71367F1A0E76BB4
SHA-256:	6F0C6F49AA335EA47F66E4E480560CA6F5768BCB314BBC80978D813C3F1028F8
SHA-512:	B8944996CF012A8E0B979B41ABEA77CA8B1F1AD9B20C8C0B0CA8846D13E06E82C038C67A303E602A4A3EB77E3811B32C228BB859E11A7FC8F042D1E32D84EE51
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/simgad/8335829572458372918
Preview:	.....!Adobe.d@.....................................................................................................................................................................,................................................................................................. !.1.0"3.@2#4.PA..$%5.BC'8.)..........................!1..AQ"..aq.2.. .#.BRb3.0....C$45r...S.....D..Eu..cs.d.vw......................!1AQ. .aq........"20.R@.B.#.Pbr..3.$`...................o..........my2...-.x2.a.1<....~hH.2.C.@...(~..H!D....hA...h#.....t..W..Z.P......'..a.H${B4xa.HdY.. B......A..............Lt[..IuO..(.A..b..,......4h......Y..A..!d20..x..c2..A.]..&..._4.....no..<...I.G5....I.}.3.$x....#a.... ...Brjl.[L....+.D......~.t.n^....F.y...]]..b..rHuX.......s...T........M.0...h!...<E.)....#.@...tU W6....,.......H....O.%...3..Uu^.o.U....t1w/...77vXZ..<M..ca....9..@(..3...3.."..l.<a9.5.Y$QvQ.]TmunX4.#.v2.7..1!.l$.ru6...&G..).`..RF.m...n.p...aR.xn.]/.......+..L0C`.0.x..,.y....ii.

Chrome Cache Entry: 918

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88612
Entropy (8bit):	4.178492548277045
Encrypted:	false
SSDEEP:	1536:S441MvE/vq8FYv5VDWi5opnS20b4zBTGzUXJKRGOV3f:f8/5YRBU7zIcJKRRR
MD5:	901271A6D98D5DB3574C625980EB84E3
SHA1:	889F92414348EE85C5C88714E9CF83769827C98E
SHA-256:	8410910C0535C65D188F15F0BF4E0BEC6B67D8DB07302EB82E98B94D3FE09ECB
SHA-512:	4288C1387ED889C4F3F00747F60F6D87A7901603D26194AF8A359D34B527A66DF74493EA450BEFD6E9D1B356B661BCF1AD1ED34C67DE7948853535DBFA4DFF16
Malicious:	false
Reputation:	low
URL:	https://static.addtoany.com/menu/svg/icons.37.svg.js
Preview:	!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.set&&c.svg.set({_default:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"/></g>',a2a:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"/></g>',amazon:'<path fill="#FFF" d="M24.998 23.842a.901.901 0 0 0-.377.086l-.4.172-.193.08-.25.1v.005c-2.72 1.102-5.573 1.748-8.215 1.805-.097.004-.193.004-.29.004-4.153.003-7.544-1.926-10.964-3.823a.803.803 0 0 0-.36-.093.646.646 0 0 0-.43.164.591.591 0 0 0-.182.427c0 .207.112.395.267.52 3.21 2.786 6.73 5.376 11.46 5.378.094 0 .188-.002.28-.004 3.01-.07 6.415-1.084 9.058-2.744l.017-.01a9.07 9.07 0 0 0 1.018-.703c.205-.15.346-.385.344-.63-.01-.435-.378-.73-.776-.73zm3.666-1.54c-.012-.265-.068-.466-.178-.632l-.01-.016-.015-.02a.863.863 0 0 0-.332-.218c-.347-.133-.853-.205-1.46-.207-.437 0-.92.04-1.4.142l-.002-.03-.486.16-.01.006-.276.09v.012a4.617 4.617 0 0 0-.89.498c-.167.13-.31.297-.317.556a.51.51 0 0 0 .185.395.6.6 0 0 0 .378.13c.027 0 .0

Chrome Cache Entry: 919

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1129x592, components 3
Category:	downloaded
Size (bytes):	181366
Entropy (8bit):	7.978353788409037
Encrypted:	false
SSDEEP:	3072:ELH7Yt650bm4+tXUnzY21ZCEWiDgiq6XD/YdgUAwCgm05r4/uSFs0zE3V1nnOv7+:AH7W8XOk21wTiDgNA0iUAFw/SOn3LnOi
MD5:	F6D851123CEF66ED45413415D63DD1FA
SHA1:	5815B703C314658F614A332C7C00A1A1E023E819
SHA-256:	A867196C3646629B379F39A019866D16F37EA9D756404431CB232AC0D25B9C44
SHA-512:	A84A95DACD4B66BB64C8CC8CE8DD3AA278E815CF149F1A23D76F60993E283256ECFB495D66E830FAAF31228D9787F3EDD6695BA98C50FEC572CBBC6FEDD9E58E
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3530465661248220861/14763004658117789537
Preview:	......JFIF..................................................."... ....+. %%(((..-1-&0"'(&...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......P.i...........................................T........................!1."AQ.aq..2..B..#Rb...3r......C..S..$...Tcs..%4...Dd..................................'.......................!1.A."Qa2.qB..............?....~..d8.....ir.F.z..8g..?.pb^.@azP4.T....#..rK.h{..io...,@b.Def..i.c'~.AW.<~!...T.a..Hr..0...B...6........F}uv{.....E...f1..CB..s...CZ({.qo.-a...0@A.3....]d.2.....b.>v...[%tR.n....i>s['G4.l3.... @e'R.$#.^.V=.TNN.1.$7.o.l%.02H..].iN"...\}...8X6.aX1...R.......T.wh..r]T,d.b..)........tA.#z..x.._...D?..X.?...zf.f..M....>=...I.J.r\..%.G0.R+9R4.l..+>..+](.. .....E..q{.r.0`..._#.+U.Me."..b$..U9A:eY.z.35.;4.h.b1.o.l.2...t...o.6.H......g6.v4.D....._.H.........(...(...~P}.(...`-K...9...yJ...V...M.Vd.O.Smr..10.<.h.tP=&.j...[..K.0U...9e.P?.1K.(lS:.]..1........R2g.!..[3(.5e:...])U...e....ng$...H..U\|..J

Chrome Cache Entry: 920

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14575
Entropy (8bit):	3.8505764084300074
Encrypted:	false
SSDEEP:	384:WWlhcrdqJU7kXxQPWpHsXCq+qodZQqqCtJUwJPwJ5LbMIxZiZvy:bhHXxQPKSodZQqqCtJUwJPwJ5LbbiZ6
MD5:	CB448FCCCAC1204CCB86D069B7E01DAE
SHA1:	BB4E98189E51D206B47D81BB6382F3D73520E72C
SHA-256:	C30405C07044ED507DBEB116D0E8D192E312A4554C46EF1743BEFC29F5276B56
SHA-512:	FFE472C1D9675ED6C258ED159E92DEEBA02487244B5AA942CA554C17EE40E1EA9A011383E9919FF3E699E9874A2AD570DF128244C1CE2A7DF991586D4C98E108
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/sadbundle/12128317773909862788/logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 26.5.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 300 250" style="enable-background:new 0 0 300 250;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}.</style>.<g id="logo_00000126315863549042564930000014701254360129029549_">..<path class="st0" d="M216.8,60.8L213,50.7c-0.6-1.7-2.2-2.8-4-3.1c-2.6-0.4-3.9,0.9-5.9,2.1c-0.5,0.3-1,0.5-1.3,0.3...c-0.7-0.5-2-2.5-3.1-2.5c-0.8,0.1-3.3,1.7-4,2.7v-2.5h-2.1v13h2.1v-9.3c0-0.9,2.3-2.5,3.1-2.6c0.8-0.1,1.7,1.8,2.7,2.1...c1.3,0.5,3.2-1.3,5.4-1.9c2.6-0.7,4,0.4,4.9,2.4l0.5,1.3c-4.6-3.1-9.7-0.7-9.7,3.7c0,5.8,8.2,6.1,12.1,2.8l0.6,1.6H216.8z... M213,58.1c-3,4.3-9.1,3.6-9.1-1.6c0-3.6,2.3-5.6,6.9-3.6c0.5,0.2,0.8,0.5,1,1l1.2,3.1C213.2,57.3,213.3,57.7,213,58.1 M182.7,47.3...c-9.6,0-9.6,14,0,14C192.3,61.3,192.4,47.3,182.7,4

Chrome Cache Entry: 921

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8171), with no line terminators
Category:	downloaded
Size (bytes):	8171
Entropy (8bit):	5.072859919696532
Encrypted:	false
SSDEEP:	192:wRNh5qCAj4ZKBOZi9pFdInflm7ukrLjS9f89dmpb:wRrfViT685kfX
MD5:	DDA652DB133FDDB9B80A05C6D1B5C540
SHA1:	60C8514C57A5DB2980C4B046B0DD479BD427357B
SHA-256:	C1A9A3E223BAD631DFF12D33B5499EB145CB08D8621C20D9D73870E78D97AFE4
SHA-512:	05CB3673448A79AA81887C60A82ABA51F9A843DC13AB4FC39B3E6D8AE7D632732D9AFEFAF72FC3D197C2795A3364FDFD4F83C9B628644D98F1C9017BFD435E62
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js
Preview:	!function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}function d(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){d(this,u),this._inertManager=t,this._rootElement=e,this._managedNodes=new Set,this._rootElement.hasAttribute("aria-hidden")?this._savedAriaHidden=this._rootElement.getAttribute("aria-hidden"):this._savedAriaHidden=null,this._rootElement.setAttribute("aria-hidden","true"),this._makeSubtreeUnfocusable(this._rootElement),this._observer=new MutationObserver(this._onMutation.bind(this)),this._observer.observe(this._rootElement,{attributes:!0,childList:!0,subtree:!0})}function h(e,t){d(this,h),thi

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2024 14:23:48.472037077 CET	192.168.2.5	1.1.1.1	0x85ae	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.472497940 CET	192.168.2.5	1.1.1.1	0x9227	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:48.474894047 CET	192.168.2.5	1.1.1.1	0x4037	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.475397110 CET	192.168.2.5	1.1.1.1	0x6f3a	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:50.180629015 CET	192.168.2.5	1.1.1.1	0x9d82	Standard query (0)	mylovelybluesky.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:50.180862904 CET	192.168.2.5	1.1.1.1	0x413e	Standard query (0)	mylovelybluesky.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:51.494873047 CET	192.168.2.5	1.1.1.1	0x1c54	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.495482922 CET	192.168.2.5	1.1.1.1	0xa12e	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:51.499810934 CET	192.168.2.5	1.1.1.1	0x148	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.500324011 CET	192.168.2.5	1.1.1.1	0x212	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:52.172892094 CET	192.168.2.5	1.1.1.1	0x6a9c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.174185038 CET	192.168.2.5	1.1.1.1	0xd4b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:52.319025040 CET	192.168.2.5	1.1.1.1	0xecb5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.319772005 CET	192.168.2.5	1.1.1.1	0xacef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:53.229370117 CET	192.168.2.5	1.1.1.1	0xee48	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:53.229579926 CET	192.168.2.5	1.1.1.1	0x63ca	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:54.027652025 CET	192.168.2.5	1.1.1.1	0x7302	Standard query (0)	mylovelybluesky.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.028486013 CET	192.168.2.5	1.1.1.1	0x6ce7	Standard query (0)	mylovelybluesky.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:54.092297077 CET	192.168.2.5	1.1.1.1	0xb152	Standard query (0)	js.passport.qihucdn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.092780113 CET	192.168.2.5	1.1.1.1	0xdc73	Standard query (0)	js.passport.qihucdn.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:54.245732069 CET	192.168.2.5	1.1.1.1	0xd103	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.246454000 CET	192.168.2.5	1.1.1.1	0x8bd9	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:54.855211020 CET	192.168.2.5	1.1.1.1	0xff99	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.855578899 CET	192.168.2.5	1.1.1.1	0xa137	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.105812073 CET	192.168.2.5	1.1.1.1	0x9db9	Standard query (0)	js.passport.qihucdn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.221981049 CET	192.168.2.5	1.1.1.1	0xf13b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.223048925 CET	192.168.2.5	1.1.1.1	0xfd8f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.238527060 CET	192.168.2.5	1.1.1.1	0x67ad	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.244513988 CET	192.168.2.5	1.1.1.1	0xea2a	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.265110970 CET	192.168.2.5	1.1.1.1	0xe392	Standard query (0)	mylovelybluesky.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.266138077 CET	192.168.2.5	1.1.1.1	0xca63	Standard query (0)	mylovelybluesky.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.420645952 CET	192.168.2.5	1.1.1.1	0x209f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.421300888 CET	192.168.2.5	1.1.1.1	0x8fa5	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.576925039 CET	192.168.2.5	1.1.1.1	0x6f1	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.577779055 CET	192.168.2.5	1.1.1.1	0x31da	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.781609058 CET	192.168.2.5	1.1.1.1	0x97b3	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.782078981 CET	192.168.2.5	1.1.1.1	0x694a	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.935559034 CET	192.168.2.5	1.1.1.1	0x920f	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.823441982 CET	192.168.2.5	1.1.1.1	0x14ca	Standard query (0)	s6.qhres2.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.823925018 CET	192.168.2.5	1.1.1.1	0xf34a	Standard query (0)	s6.qhres2.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:57.391869068 CET	192.168.2.5	1.1.1.1	0xc77d	Standard query (0)	s.360.cn	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:57.392853975 CET	192.168.2.5	1.1.1.1	0x9997	Standard query (0)	s.360.cn	65	IN (0x0001)	false
Jan 15, 2024 14:23:58.236826897 CET	192.168.2.5	1.1.1.1	0x92	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.237008095 CET	192.168.2.5	1.1.1.1	0xe5e8	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:23:58.640111923 CET	192.168.2.5	1.1.1.1	0x1e16	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.640752077 CET	192.168.2.5	1.1.1.1	0x4b70	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:01.597301006 CET	192.168.2.5	1.1.1.1	0xf993	Standard query (0)	s.360.cn	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.597671986 CET	192.168.2.5	1.1.1.1	0x89a7	Standard query (0)	s.360.cn	65	IN (0x0001)	false
Jan 15, 2024 14:24:01.817154884 CET	192.168.2.5	1.1.1.1	0xd0ab	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.817631960 CET	192.168.2.5	1.1.1.1	0xe1c3	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:01.821619034 CET	192.168.2.5	1.1.1.1	0x711a	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.821852922 CET	192.168.2.5	1.1.1.1	0x4e15	Standard query (0)	www.googletagservices.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:02.197731018 CET	192.168.2.5	1.1.1.1	0xf836	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.197978020 CET	192.168.2.5	1.1.1.1	0xa58d	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:02.198446989 CET	192.168.2.5	1.1.1.1	0x5187	Standard query (0)	warp.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.198597908 CET	192.168.2.5	1.1.1.1	0x2ad1	Standard query (0)	warp.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:02.607897997 CET	192.168.2.5	1.1.1.1	0x3d	Standard query (0)	s.360.cn	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.919894934 CET	192.168.2.5	1.1.1.1	0x4d73	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.923223019 CET	192.168.2.5	1.1.1.1	0x84b5	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:03.648284912 CET	192.168.2.5	1.1.1.1	0x95ff	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.648488045 CET	192.168.2.5	1.1.1.1	0x206b	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:03.784596920 CET	192.168.2.5	1.1.1.1	0xada8	Standard query (0)	pxlclnmdecom-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.785065889 CET	192.168.2.5	1.1.1.1	0x987a	Standard query (0)	pxlclnmdecom-a.akamaihd.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:03.893934965 CET	192.168.2.5	1.1.1.1	0xd293	Standard query (0)	lg3.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.894145012 CET	192.168.2.5	1.1.1.1	0x124d	Standard query (0)	lg3.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:03.895381927 CET	192.168.2.5	1.1.1.1	0xc1c4	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.895761967 CET	192.168.2.5	1.1.1.1	0xb5d1	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:03.899437904 CET	192.168.2.5	1.1.1.1	0x1b2f	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.899770021 CET	192.168.2.5	1.1.1.1	0xb52c	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.011471033 CET	192.168.2.5	1.1.1.1	0x5ae0	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.011816978 CET	192.168.2.5	1.1.1.1	0x33c9	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.205765009 CET	192.168.2.5	1.1.1.1	0xca91	Standard query (0)	googleads4.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.206414938 CET	192.168.2.5	1.1.1.1	0xac51	Standard query (0)	googleads4.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.485588074 CET	192.168.2.5	1.1.1.1	0x60b4	Standard query (0)	aep.mxptint.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.485826969 CET	192.168.2.5	1.1.1.1	0xa99e	Standard query (0)	aep.mxptint.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.486330986 CET	192.168.2.5	1.1.1.1	0xc7fc	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.486562014 CET	192.168.2.5	1.1.1.1	0x3566	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.487327099 CET	192.168.2.5	1.1.1.1	0x35a8	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.487612963 CET	192.168.2.5	1.1.1.1	0x4b24	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.488459110 CET	192.168.2.5	1.1.1.1	0x8032	Standard query (0)	ums.acuityplatform.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.489075899 CET	192.168.2.5	1.1.1.1	0xed85	Standard query (0)	ums.acuityplatform.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.491637945 CET	192.168.2.5	1.1.1.1	0x1ffd	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.492163897 CET	192.168.2.5	1.1.1.1	0x5b67	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.492925882 CET	192.168.2.5	1.1.1.1	0xd0f5	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.493191004 CET	192.168.2.5	1.1.1.1	0x6e4f	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.494003057 CET	192.168.2.5	1.1.1.1	0xb926	Standard query (0)	gtrace.mediago.io	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.494357109 CET	192.168.2.5	1.1.1.1	0xf5b6	Standard query (0)	gtrace.mediago.io	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.494939089 CET	192.168.2.5	1.1.1.1	0xd875	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.495157003 CET	192.168.2.5	1.1.1.1	0xa546	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.884989023 CET	192.168.2.5	1.1.1.1	0xd55	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.885158062 CET	192.168.2.5	1.1.1.1	0x3403	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.885667086 CET	192.168.2.5	1.1.1.1	0xa995	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.885848045 CET	192.168.2.5	1.1.1.1	0x978	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.886152029 CET	192.168.2.5	1.1.1.1	0x3d22	Standard query (0)	a.c.appier.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.886559963 CET	192.168.2.5	1.1.1.1	0xb538	Standard query (0)	a.c.appier.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.887109041 CET	192.168.2.5	1.1.1.1	0x5fd2	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.887883902 CET	192.168.2.5	1.1.1.1	0x6931	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.887883902 CET	192.168.2.5	1.1.1.1	0x914a	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.888098955 CET	192.168.2.5	1.1.1.1	0x31c0	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.888560057 CET	192.168.2.5	1.1.1.1	0xfa28	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.888897896 CET	192.168.2.5	1.1.1.1	0x4c99	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.996675968 CET	192.168.2.5	1.1.1.1	0x6e31	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.997008085 CET	192.168.2.5	1.1.1.1	0xaa92	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.997976065 CET	192.168.2.5	1.1.1.1	0x438c	Standard query (0)	a.rfihub.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.998317957 CET	192.168.2.5	1.1.1.1	0x509c	Standard query (0)	a.rfihub.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.999048948 CET	192.168.2.5	1.1.1.1	0x1b60	Standard query (0)	sync-dmp.mobtrakk.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.999337912 CET	192.168.2.5	1.1.1.1	0xf599	Standard query (0)	sync-dmp.mobtrakk.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:04.999950886 CET	192.168.2.5	1.1.1.1	0x34e4	Standard query (0)	analytics.pangle-ads.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.000291109 CET	192.168.2.5	1.1.1.1	0xedee	Standard query (0)	analytics.pangle-ads.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:05.579667091 CET	192.168.2.5	1.1.1.1	0x8be9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.580631971 CET	192.168.2.5	1.1.1.1	0xfbde	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:05.586827040 CET	192.168.2.5	1.1.1.1	0xee1	Standard query (0)	qsearch-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.587227106 CET	192.168.2.5	1.1.1.1	0xba50	Standard query (0)	qsearch-a.akamaihd.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:05.626024008 CET	192.168.2.5	1.1.1.1	0x89b0	Standard query (0)	hblg.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.626382113 CET	192.168.2.5	1.1.1.1	0xf6e6	Standard query (0)	hblg.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:05.628437042 CET	192.168.2.5	1.1.1.1	0xfdb7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.628763914 CET	192.168.2.5	1.1.1.1	0x2c47	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:05.634841919 CET	192.168.2.5	1.1.1.1	0xd518	Standard query (0)	lg3.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.635333061 CET	192.168.2.5	1.1.1.1	0xd4a5	Standard query (0)	lg3.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.258676052 CET	192.168.2.5	1.1.1.1	0x9963	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.258874893 CET	192.168.2.5	1.1.1.1	0xf8cd	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.557358027 CET	192.168.2.5	1.1.1.1	0x25a	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.557566881 CET	192.168.2.5	1.1.1.1	0x9fdd	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.572318077 CET	192.168.2.5	1.1.1.1	0xfde4	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.572590113 CET	192.168.2.5	1.1.1.1	0xa509	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.628032923 CET	192.168.2.5	1.1.1.1	0xab09	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.628590107 CET	192.168.2.5	1.1.1.1	0xa9b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.631494999 CET	192.168.2.5	1.1.1.1	0xe3e1	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.632172108 CET	192.168.2.5	1.1.1.1	0x6b4c	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.638473034 CET	192.168.2.5	1.1.1.1	0xdc9b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.638473988 CET	192.168.2.5	1.1.1.1	0x5269	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:06.871069908 CET	192.168.2.5	1.1.1.1	0x822e	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.871069908 CET	192.168.2.5	1.1.1.1	0xaf3b	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
Jan 15, 2024 14:24:07.206485987 CET	192.168.2.5	1.1.1.1	0x77f4	Standard query (0)	2.gravatar.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:07.206485987 CET	192.168.2.5	1.1.1.1	0x7a2b	Standard query (0)	2.gravatar.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:07.297293901 CET	192.168.2.5	1.1.1.1	0x4a8d	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:07.299185991 CET	192.168.2.5	1.1.1.1	0xdb70	Standard query (0)	cs.media.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:07.519546986 CET	192.168.2.5	1.1.1.1	0x2d78	Standard query (0)	2.gravatar.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:07.520001888 CET	192.168.2.5	1.1.1.1	0xdcd4	Standard query (0)	2.gravatar.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:08.009892941 CET	192.168.2.5	1.1.1.1	0xf3b1	Standard query (0)	2.gravatar.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:08.010327101 CET	192.168.2.5	1.1.1.1	0x6c69	Standard query (0)	2.gravatar.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:08.621706963 CET	192.168.2.5	1.1.1.1	0xf616	Standard query (0)	mylovelybluesky.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:08.621993065 CET	192.168.2.5	1.1.1.1	0x8898	Standard query (0)	mylovelybluesky.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:12.558078051 CET	192.168.2.5	1.1.1.1	0x97fc	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:12.558425903 CET	192.168.2.5	1.1.1.1	0xd62b	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:12.683525085 CET	192.168.2.5	1.1.1.1	0xd786	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:13.880640030 CET	192.168.2.5	1.1.1.1	0xdfda	Standard query (0)	tps.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:13.881262064 CET	192.168.2.5	1.1.1.1	0x7da2	Standard query (0)	tps.doubleverify.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:14.985213995 CET	192.168.2.5	1.1.1.1	0x88af	Standard query (0)	cdn.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:14.987198114 CET	192.168.2.5	1.1.1.1	0x38	Standard query (0)	cdn.doubleverify.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.001471043 CET	192.168.2.5	1.1.1.1	0xe02c	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.002047062 CET	192.168.2.5	1.1.1.1	0x36d7	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.050323009 CET	192.168.2.5	1.1.1.1	0x3017	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.050631046 CET	192.168.2.5	1.1.1.1	0x10a0	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.059520960 CET	192.168.2.5	1.1.1.1	0x5a60	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.060429096 CET	192.168.2.5	1.1.1.1	0xe531	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.060429096 CET	192.168.2.5	1.1.1.1	0x54ef	Standard query (0)	beacon.lynx.cognitivlabs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.060894012 CET	192.168.2.5	1.1.1.1	0xc509	Standard query (0)	beacon.lynx.cognitivlabs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.941875935 CET	192.168.2.5	1.1.1.1	0x131a	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.942167997 CET	192.168.2.5	1.1.1.1	0x72c5	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:15.948007107 CET	192.168.2.5	1.1.1.1	0xcea	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.948340893 CET	192.168.2.5	1.1.1.1	0x69ee	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:16.114265919 CET	192.168.2.5	1.1.1.1	0x488d	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.116415977 CET	192.168.2.5	1.1.1.1	0x2baf	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.047935009 CET	192.168.2.5	1.1.1.1	0xc299	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.048243999 CET	192.168.2.5	1.1.1.1	0x783e	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.534866095 CET	192.168.2.5	1.1.1.1	0x41d9	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.535192966 CET	192.168.2.5	1.1.1.1	0xb15c	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.543632984 CET	192.168.2.5	1.1.1.1	0x48f8	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.544020891 CET	192.168.2.5	1.1.1.1	0xd978	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.544805050 CET	192.168.2.5	1.1.1.1	0x6a45	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.545141935 CET	192.168.2.5	1.1.1.1	0x7b3b	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.635647058 CET	192.168.2.5	1.1.1.1	0xf817	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.652455091 CET	192.168.2.5	1.1.1.1	0x3f74	Standard query (0)	tpsc-ue1.doubleverify.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.652674913 CET	192.168.2.5	1.1.1.1	0x79a2	Standard query (0)	tpsc-ue1.doubleverify.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:17.755572081 CET	192.168.2.5	1.1.1.1	0xe110	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.755749941 CET	192.168.2.5	1.1.1.1	0x93d0	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:18.408413887 CET	192.168.2.5	1.1.1.1	0xc4ef	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.408736944 CET	192.168.2.5	1.1.1.1	0x55c5	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:18.409679890 CET	192.168.2.5	1.1.1.1	0x68d5	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.409962893 CET	192.168.2.5	1.1.1.1	0xd08f	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:18.603526115 CET	192.168.2.5	1.1.1.1	0xf72e	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.604027033 CET	192.168.2.5	1.1.1.1	0xf856	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:19.293448925 CET	192.168.2.5	1.1.1.1	0x2a81	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.293626070 CET	192.168.2.5	1.1.1.1	0xd804	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:19.305346012 CET	192.168.2.5	1.1.1.1	0x58c9	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.305691957 CET	192.168.2.5	1.1.1.1	0xe238	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:19.954425097 CET	192.168.2.5	1.1.1.1	0x41b8	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.955044985 CET	192.168.2.5	1.1.1.1	0x3434	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:19.960887909 CET	192.168.2.5	1.1.1.1	0x7d43	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.961666107 CET	192.168.2.5	1.1.1.1	0xe96	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:19.966558933 CET	192.168.2.5	1.1.1.1	0x350a	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.967266083 CET	192.168.2.5	1.1.1.1	0xe04e	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:21.270695925 CET	192.168.2.5	1.1.1.1	0x1760	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.271153927 CET	192.168.2.5	1.1.1.1	0x7fb2	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:21.275584936 CET	192.168.2.5	1.1.1.1	0x3dd9	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.275949001 CET	192.168.2.5	1.1.1.1	0xd3d7	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:21.336865902 CET	192.168.2.5	1.1.1.1	0x407a	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.337472916 CET	192.168.2.5	1.1.1.1	0xfec9	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:24.467768908 CET	192.168.2.5	1.1.1.1	0xa13	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:24.468072891 CET	192.168.2.5	1.1.1.1	0x2e11	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 15, 2024 14:24:26.154110909 CET	192.168.2.5	1.1.1.1	0xaaf9	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:26.154484987 CET	192.168.2.5	1.1.1.1	0xa251	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:27.168200970 CET	192.168.2.5	1.1.1.1	0xa2af	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.168515921 CET	192.168.2.5	1.1.1.1	0x7184	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
Jan 15, 2024 14:24:27.548738956 CET	192.168.2.5	1.1.1.1	0x39f0	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.556740046 CET	192.168.2.5	1.1.1.1	0x3234	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:27.798304081 CET	192.168.2.5	1.1.1.1	0xbcdf	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.798784971 CET	192.168.2.5	1.1.1.1	0xbc23	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:27.903814077 CET	192.168.2.5	1.1.1.1	0xc5c3	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.499516010 CET	192.168.2.5	1.1.1.1	0x1676	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.500013113 CET	192.168.2.5	1.1.1.1	0x29e3	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:40.319034100 CET	192.168.2.5	1.1.1.1	0x9c7d	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.092269897 CET	192.168.2.5	1.1.1.1	0xd115	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.093090057 CET	192.168.2.5	1.1.1.1	0x2674	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:43.205655098 CET	192.168.2.5	1.1.1.1	0xdac8	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:43.206379890 CET	192.168.2.5	1.1.1.1	0x97c2	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:43.308170080 CET	192.168.2.5	1.1.1.1	0xccc4	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.758991003 CET	192.168.2.5	1.1.1.1	0x410f	Standard query (0)	dclk-match.dotomi.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.759624958 CET	192.168.2.5	1.1.1.1	0xf4b5	Standard query (0)	dclk-match.dotomi.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.760276079 CET	192.168.2.5	1.1.1.1	0xfac	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.760845900 CET	192.168.2.5	1.1.1.1	0x7a30	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.762186050 CET	192.168.2.5	1.1.1.1	0x9da2	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.762633085 CET	192.168.2.5	1.1.1.1	0x9c56	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.763178110 CET	192.168.2.5	1.1.1.1	0xe39d	Standard query (0)	tr.blismedia.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.763858080 CET	192.168.2.5	1.1.1.1	0x377f	Standard query (0)	tr.blismedia.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.825326920 CET	192.168.2.5	1.1.1.1	0x4977	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.825480938 CET	192.168.2.5	1.1.1.1	0x9489	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.845947027 CET	192.168.2.5	1.1.1.1	0x6023	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.847331047 CET	192.168.2.5	1.1.1.1	0x9980	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:45.852071047 CET	192.168.2.5	1.1.1.1	0x56ff	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.852385998 CET	192.168.2.5	1.1.1.1	0x3e91	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Jan 15, 2024 14:24:46.426635027 CET	192.168.2.5	1.1.1.1	0xe834	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:46.427464962 CET	192.168.2.5	1.1.1.1	0xcb0b	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:46.704052925 CET	192.168.2.5	1.1.1.1	0x64f	Standard query (0)	mweb.ck.inmobi.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:46.704706907 CET	192.168.2.5	1.1.1.1	0xd86e	Standard query (0)	mweb.ck.inmobi.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:47.090190887 CET	192.168.2.5	1.1.1.1	0xfa99	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.090548992 CET	192.168.2.5	1.1.1.1	0x5773	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:47.455111980 CET	192.168.2.5	1.1.1.1	0x2602	Standard query (0)	jelly.mdhv.io	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.455481052 CET	192.168.2.5	1.1.1.1	0x31af	Standard query (0)	jelly.mdhv.io	65	IN (0x0001)	false
Jan 15, 2024 14:24:47.620640993 CET	192.168.2.5	1.1.1.1	0x77	Standard query (0)	cdn.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.620640993 CET	192.168.2.5	1.1.1.1	0x679f	Standard query (0)	cdn.adnxs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:48.680670023 CET	192.168.2.5	1.1.1.1	0xa815	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:48.681257010 CET	192.168.2.5	1.1.1.1	0x59e9	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:49.351490974 CET	192.168.2.5	1.1.1.1	0x4760	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.352092028 CET	192.168.2.5	1.1.1.1	0xbee6	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:49.867232084 CET	192.168.2.5	1.1.1.1	0xe4fe	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.867697001 CET	192.168.2.5	1.1.1.1	0xe2e8	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:53.206113100 CET	192.168.2.5	1.1.1.1	0x4ee1	Standard query (0)	r.turn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:53.206413031 CET	192.168.2.5	1.1.1.1	0x5d42	Standard query (0)	r.turn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:53.598232985 CET	192.168.2.5	1.1.1.1	0x6e41	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:53.599576950 CET	192.168.2.5	1.1.1.1	0x963c	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:53.623644114 CET	192.168.2.5	1.1.1.1	0x36a1	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:53.623910904 CET	192.168.2.5	1.1.1.1	0xe0ae	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:54.325282097 CET	192.168.2.5	1.1.1.1	0x21d9	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:54.325706959 CET	192.168.2.5	1.1.1.1	0xd40d	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:55.141344070 CET	192.168.2.5	1.1.1.1	0xee8f	Standard query (0)	nym1-ib.adnxs.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.141757965 CET	192.168.2.5	1.1.1.1	0xea5e	Standard query (0)	nym1-ib.adnxs.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:56.533520937 CET	192.168.2.5	1.1.1.1	0xb419	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.533814907 CET	192.168.2.5	1.1.1.1	0x1ab8	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:56.632494926 CET	192.168.2.5	1.1.1.1	0x19c2	Standard query (0)	js.passport.qihucdn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.632742882 CET	192.168.2.5	1.1.1.1	0xab92	Standard query (0)	js.passport.qihucdn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:56.635920048 CET	192.168.2.5	1.1.1.1	0x3d9b	Standard query (0)	static.addtoany.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.635920048 CET	192.168.2.5	1.1.1.1	0x9d6a	Standard query (0)	static.addtoany.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:57.436709881 CET	192.168.2.5	1.1.1.1	0x8349	Standard query (0)	js.passport.qihucdn.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.437951088 CET	192.168.2.5	1.1.1.1	0x43d5	Standard query (0)	js.passport.qihucdn.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:57.448227882 CET	192.168.2.5	1.1.1.1	0xd17d	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.448688030 CET	192.168.2.5	1.1.1.1	0x4e55	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:57.526606083 CET	192.168.2.5	1.1.1.1	0x4330	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.527342081 CET	192.168.2.5	1.1.1.1	0xcf0d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:57.965358973 CET	192.168.2.5	1.1.1.1	0x522	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.965857983 CET	192.168.2.5	1.1.1.1	0x602b	Standard query (0)	www.facebook.net	65	IN (0x0001)	false
Jan 15, 2024 14:24:58.061971903 CET	192.168.2.5	1.1.1.1	0xa981	Standard query (0)	www.facebook.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.973448038 CET	192.168.2.5	1.1.1.1	0x831e	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.973773956 CET	192.168.2.5	1.1.1.1	0x82f6	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:24:59.560796976 CET	192.168.2.5	1.1.1.1	0xebd5	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.563736916 CET	192.168.2.5	1.1.1.1	0xc364	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Jan 15, 2024 14:25:00.483378887 CET	192.168.2.5	1.1.1.1	0xdb57	Standard query (0)	mts0.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.483608961 CET	192.168.2.5	1.1.1.1	0xdc86	Standard query (0)	mts0.google.com	65	IN (0x0001)	false
Jan 15, 2024 14:25:12.615329981 CET	192.168.2.5	1.1.1.1	0x5c9e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:12.615820885 CET	192.168.2.5	1.1.1.1	0x576d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:25:13.275808096 CET	192.168.2.5	1.1.1.1	0xcc33	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:13.276191950 CET	192.168.2.5	1.1.1.1	0xb65b	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:25:13.823491096 CET	192.168.2.5	1.1.1.1	0x7332	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:13.824053049 CET	192.168.2.5	1.1.1.1	0xe88a	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2024 14:25:18.492331028 CET	192.168.2.5	1.1.1.1	0xe2b8	Standard query (0)	clients1.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.492537022 CET	192.168.2.5	1.1.1.1	0x6f6e	Standard query (0)	clients1.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.567073107 CET	1.1.1.1	192.168.2.5	0x85ae	No error (0)	clients.l.google.com		142.251.16.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.570439100 CET	1.1.1.1	192.168.2.5	0x4037	No error (0)	accounts.google.com		172.253.63.84	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:48.570579052 CET	1.1.1.1	192.168.2.5	0x9227	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:50.761718035 CET	1.1.1.1	192.168.2.5	0x9d82	No error (0)	mylovelybluesky.com		103.130.153.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.590411901 CET	1.1.1.1	192.168.2.5	0x1c54	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.590411901 CET	1.1.1.1	192.168.2.5	0x1c54	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.590411901 CET	1.1.1.1	192.168.2.5	0x1c54	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.590856075 CET	1.1.1.1	192.168.2.5	0xa12e	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jan 15, 2024 14:23:51.594906092 CET	1.1.1.1	192.168.2.5	0x148	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:51.594906092 CET	1.1.1.1	192.168.2.5	0x148	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.594906092 CET	1.1.1.1	192.168.2.5	0x148	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.594906092 CET	1.1.1.1	192.168.2.5	0x148	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.594906092 CET	1.1.1.1	192.168.2.5	0x148	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:51.595762968 CET	1.1.1.1	192.168.2.5	0x212	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.267426014 CET	1.1.1.1	192.168.2.5	0x6a9c	No error (0)	www.google.com		172.253.63.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.269016027 CET	1.1.1.1	192.168.2.5	0xd4b9	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 14:23:52.414388895 CET	1.1.1.1	192.168.2.5	0xacef	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:52.417915106 CET	1.1.1.1	192.168.2.5	0xecb5	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:53.324433088 CET	1.1.1.1	192.168.2.5	0xee48	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:53.324433088 CET	1.1.1.1	192.168.2.5	0xee48	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:53.324433088 CET	1.1.1.1	192.168.2.5	0xee48	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:53.325644016 CET	1.1.1.1	192.168.2.5	0x63ca	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jan 15, 2024 14:23:54.340452909 CET	1.1.1.1	192.168.2.5	0xd103	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.340452909 CET	1.1.1.1	192.168.2.5	0xd103	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.340452909 CET	1.1.1.1	192.168.2.5	0xd103	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.341805935 CET	1.1.1.1	192.168.2.5	0x8bd9	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jan 15, 2024 14:23:54.596575975 CET	1.1.1.1	192.168.2.5	0x7302	No error (0)	mylovelybluesky.com		103.130.153.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:54.950913906 CET	1.1.1.1	192.168.2.5	0xa137	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:54.951071978 CET	1.1.1.1	192.168.2.5	0xff99	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:54.951071978 CET	1.1.1.1	192.168.2.5	0xff99	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.317065954 CET	1.1.1.1	192.168.2.5	0xf13b	No error (0)	googleads.g.doubleclick.net		142.251.179.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.317065954 CET	1.1.1.1	192.168.2.5	0xf13b	No error (0)	googleads.g.doubleclick.net		142.251.179.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.317065954 CET	1.1.1.1	192.168.2.5	0xf13b	No error (0)	googleads.g.doubleclick.net		142.251.179.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.317065954 CET	1.1.1.1	192.168.2.5	0xf13b	No error (0)	googleads.g.doubleclick.net		142.251.179.157	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.318105936 CET	1.1.1.1	192.168.2.5	0xfd8f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2024 14:23:55.333395958 CET	1.1.1.1	192.168.2.5	0x67ad	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:55.333395958 CET	1.1.1.1	192.168.2.5	0x67ad	No error (0)	scontent.xx.fbcdn.net		31.13.66.19	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.340059996 CET	1.1.1.1	192.168.2.5	0xea2a	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:55.515748024 CET	1.1.1.1	192.168.2.5	0x209f	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:55.515748024 CET	1.1.1.1	192.168.2.5	0x209f	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.515748024 CET	1.1.1.1	192.168.2.5	0x209f	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.515748024 CET	1.1.1.1	192.168.2.5	0x209f	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.515748024 CET	1.1.1.1	192.168.2.5	0x209f	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.532465935 CET	1.1.1.1	192.168.2.5	0x8fa5	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:55.672033072 CET	1.1.1.1	192.168.2.5	0x6f1	No error (0)	stats.g.doubleclick.net		172.253.63.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.672033072 CET	1.1.1.1	192.168.2.5	0x6f1	No error (0)	stats.g.doubleclick.net		172.253.63.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.876602888 CET	1.1.1.1	192.168.2.5	0x97b3	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:55.877532005 CET	1.1.1.1	192.168.2.5	0x694a	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
Jan 15, 2024 14:23:55.881227016 CET	1.1.1.1	192.168.2.5	0xe392	No error (0)	mylovelybluesky.com		103.130.153.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.028775930 CET	1.1.1.1	192.168.2.5	0x9db9	No error (0)	js.passport.qihucdn.com	js.passport.qihucdn.com.qh-cdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:56.028775930 CET	1.1.1.1	192.168.2.5	0x9db9	No error (0)	js.passport.qihucdn.com.qh-cdn.com	js.passport.qihucdn.com.webcdn.360qhcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:56.028775930 CET	1.1.1.1	192.168.2.5	0x9db9	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		101.198.192.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.028775930 CET	1.1.1.1	192.168.2.5	0x9db9	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		101.198.192.7	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.028775930 CET	1.1.1.1	192.168.2.5	0x9db9	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.110.245	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.031399012 CET	1.1.1.1	192.168.2.5	0x920f	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com	js.passport.qihucdn.com.qh-cdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com.qh-cdn.com	js.passport.qihucdn.com.webcdn.360qhcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.192	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.110.245	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.22	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.191337109 CET	1.1.1.1	192.168.2.5	0xb152	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.23	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.996263027 CET	1.1.1.1	192.168.2.5	0x14ca	No error (0)	s6.qhres2.com	d2qfvhmlvd2g6w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:56.996263027 CET	1.1.1.1	192.168.2.5	0x14ca	No error (0)	d2qfvhmlvd2g6w.cloudfront.net		18.67.76.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.996263027 CET	1.1.1.1	192.168.2.5	0x14ca	No error (0)	d2qfvhmlvd2g6w.cloudfront.net		18.67.76.123	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.996263027 CET	1.1.1.1	192.168.2.5	0x14ca	No error (0)	d2qfvhmlvd2g6w.cloudfront.net		18.67.76.125	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:56.996263027 CET	1.1.1.1	192.168.2.5	0x14ca	No error (0)	d2qfvhmlvd2g6w.cloudfront.net		18.67.76.127	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:57.716140032 CET	1.1.1.1	192.168.2.5	0xc77d	No error (0)	s.360.cn		171.8.167.89	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:57.716140032 CET	1.1.1.1	192.168.2.5	0xc77d	No error (0)	s.360.cn		101.198.2.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:57.716140032 CET	1.1.1.1	192.168.2.5	0xc77d	No error (0)	s.360.cn		180.163.251.231	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:57.716140032 CET	1.1.1.1	192.168.2.5	0xc77d	No error (0)	s.360.cn		180.163.251.230	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.331356049 CET	1.1.1.1	192.168.2.5	0x92	No error (0)	www3.l.google.com		172.253.63.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.333791971 CET	1.1.1.1	192.168.2.5	0xe5e8	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735399961 CET	1.1.1.1	192.168.2.5	0x1e16	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:23:58.735980988 CET	1.1.1.1	192.168.2.5	0x4b70	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:01.912115097 CET	1.1.1.1	192.168.2.5	0xd0ab	No error (0)	s0.2mdn.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.912115097 CET	1.1.1.1	192.168.2.5	0xd0ab	No error (0)	s0.2mdn.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.916804075 CET	1.1.1.1	192.168.2.5	0x711a	No error (0)	www.googletagservices.com		172.253.63.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:01.916804075 CET	1.1.1.1	192.168.2.5	0x711a	No error (0)	www.googletagservices.com		172.253.63.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.292517900 CET	1.1.1.1	192.168.2.5	0xf836	No error (0)	contextual.media.net		23.56.8.25	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.293823004 CET	1.1.1.1	192.168.2.5	0x5187	No error (0)	warp.media.net		23.39.32.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.772031069 CET	1.1.1.1	192.168.2.5	0x3d	No error (0)	s.360.cn		171.13.14.66	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.772031069 CET	1.1.1.1	192.168.2.5	0x3d	No error (0)	s.360.cn		171.8.167.89	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.772031069 CET	1.1.1.1	192.168.2.5	0x3d	No error (0)	s.360.cn		101.198.2.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:02.772031069 CET	1.1.1.1	192.168.2.5	0x3d	No error (0)	s.360.cn		180.163.251.231	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.014626980 CET	1.1.1.1	192.168.2.5	0x4d73	No error (0)	googleads4.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.014626980 CET	1.1.1.1	192.168.2.5	0x4d73	No error (0)	googleads4.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.743417978 CET	1.1.1.1	192.168.2.5	0x95ff	No error (0)	ad.doubleclick.net		172.253.63.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.743417978 CET	1.1.1.1	192.168.2.5	0x95ff	No error (0)	ad.doubleclick.net		172.253.63.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.743534088 CET	1.1.1.1	192.168.2.5	0x206b	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2024 14:24:03.880733013 CET	1.1.1.1	192.168.2.5	0xada8	No error (0)	pxlclnmdecom-a.akamaihd.net	pxlclnmdecom-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:03.881531954 CET	1.1.1.1	192.168.2.5	0x987a	No error (0)	pxlclnmdecom-a.akamaihd.net	pxlclnmdecom-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:03.947133064 CET	1.1.1.1	192.168.2.5	0xf993	No error (0)	s.360.cn		101.198.2.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.947133064 CET	1.1.1.1	192.168.2.5	0xf993	No error (0)	s.360.cn		180.163.251.231	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.947133064 CET	1.1.1.1	192.168.2.5	0xf993	No error (0)	s.360.cn		180.163.251.230	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.947133064 CET	1.1.1.1	192.168.2.5	0xf993	No error (0)	s.360.cn		171.8.167.90	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.989944935 CET	1.1.1.1	192.168.2.5	0xd293	No error (0)	lg3.media.net		23.39.32.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.991132021 CET	1.1.1.1	192.168.2.5	0xc1c4	No error (0)	hblg.media.net		23.39.32.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:03.995168924 CET	1.1.1.1	192.168.2.5	0x1b2f	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:03.995444059 CET	1.1.1.1	192.168.2.5	0xb52c	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.106128931 CET	1.1.1.1	192.168.2.5	0x5ae0	No error (0)	s0.2mdn.net		142.251.111.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.106128931 CET	1.1.1.1	192.168.2.5	0x5ae0	No error (0)	s0.2mdn.net		142.251.111.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.300668001 CET	1.1.1.1	192.168.2.5	0xca91	No error (0)	googleads4.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.300668001 CET	1.1.1.1	192.168.2.5	0xca91	No error (0)	googleads4.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.581857920 CET	1.1.1.1	192.168.2.5	0xc7fc	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.581908941 CET	1.1.1.1	192.168.2.5	0x60b4	No error (0)	aep.mxptint.net		204.2.226.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		34.237.132.177	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		3.213.62.40	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		34.196.213.92	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		54.166.215.153	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		52.6.251.62	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		50.16.139.245	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		18.215.116.242	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.582070112 CET	1.1.1.1	192.168.2.5	0x35a8	No error (0)	rtb.adentifi.com		44.205.43.74	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.583872080 CET	1.1.1.1	192.168.2.5	0x8032	No error (0)	ums.acuityplatform.com		69.90.254.78	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.586754084 CET	1.1.1.1	192.168.2.5	0x1ffd	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.586754084 CET	1.1.1.1	192.168.2.5	0x1ffd	No error (0)	user-data-us-east.bidswitch.net		35.211.178.172	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.587238073 CET	1.1.1.1	192.168.2.5	0x5b67	No error (0)	x.bidswitch.net	user-data-us-east.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.588308096 CET	1.1.1.1	192.168.2.5	0x6e4f	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.588335991 CET	1.1.1.1	192.168.2.5	0xd0f5	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.589303017 CET	1.1.1.1	192.168.2.5	0xb926	No error (0)	gtrace.mediago.io		35.208.249.213	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.590418100 CET	1.1.1.1	192.168.2.5	0xd875	No error (0)	cm.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.590418100 CET	1.1.1.1	192.168.2.5	0xd875	No error (0)	cm.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	global.px.quantserve.com		192.184.68.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.979818106 CET	1.1.1.1	192.168.2.5	0xd55	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.980547905 CET	1.1.1.1	192.168.2.5	0x3403	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.980547905 CET	1.1.1.1	192.168.2.5	0x3403	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.980670929 CET	1.1.1.1	192.168.2.5	0xa995	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.981483936 CET	1.1.1.1	192.168.2.5	0x3d22	No error (0)	a.c.appier.net	cm127.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.981483936 CET	1.1.1.1	192.168.2.5	0x3d22	No error (0)	cm127.appier.org		172.105.221.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.981985092 CET	1.1.1.1	192.168.2.5	0x978	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.981995106 CET	1.1.1.1	192.168.2.5	0x5fd2	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.982268095 CET	1.1.1.1	192.168.2.5	0xb538	No error (0)	a.c.appier.net	cm129.appier.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.982604027 CET	1.1.1.1	192.168.2.5	0x6931	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.982654095 CET	1.1.1.1	192.168.2.5	0x914a	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.982654095 CET	1.1.1.1	192.168.2.5	0x914a	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.983226061 CET	1.1.1.1	192.168.2.5	0x31c0	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		18.235.50.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		52.5.184.53	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		34.192.185.0	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		54.86.70.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		54.84.29.7	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		54.172.23.242	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		44.217.127.57	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984090090 CET	1.1.1.1	192.168.2.5	0xfa28	No error (0)	aragorn-prod-va-lb.inbake.com		44.212.232.48	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984843969 CET	1.1.1.1	192.168.2.5	0x4c99	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:04.984843969 CET	1.1.1.1	192.168.2.5	0x4c99	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.39.184	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.39.185	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.239.230	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.39.186	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.39.187	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.091694117 CET	1.1.1.1	192.168.2.5	0x6e31	No error (0)	onetag-sys.com		51.222.239.232	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.093101978 CET	1.1.1.1	192.168.2.5	0x509c	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.093947887 CET	1.1.1.1	192.168.2.5	0x438c	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.188.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.204.250	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.181.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.92.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.187.67	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.124.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.62.221	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.094024897 CET	1.1.1.1	192.168.2.5	0x1b60	No error (0)	sync-dmp.mobtrakk.com		5.161.195.128	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.095078945 CET	1.1.1.1	192.168.2.5	0xedee	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.096882105 CET	1.1.1.1	192.168.2.5	0x34e4	No error (0)	analytics.pangle-ads.com	analytics.pangle-ads.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.675120115 CET	1.1.1.1	192.168.2.5	0x8be9	No error (0)	googleads.g.doubleclick.net		142.251.167.157	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.675120115 CET	1.1.1.1	192.168.2.5	0x8be9	No error (0)	googleads.g.doubleclick.net		142.251.167.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.675120115 CET	1.1.1.1	192.168.2.5	0x8be9	No error (0)	googleads.g.doubleclick.net		142.251.167.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.675120115 CET	1.1.1.1	192.168.2.5	0x8be9	No error (0)	googleads.g.doubleclick.net		142.251.167.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.675383091 CET	1.1.1.1	192.168.2.5	0xfbde	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2024 14:24:05.682286978 CET	1.1.1.1	192.168.2.5	0xba50	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.682868004 CET	1.1.1.1	192.168.2.5	0xee1	No error (0)	qsearch-a.akamaihd.net	qsearch-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:05.721015930 CET	1.1.1.1	192.168.2.5	0x89b0	No error (0)	hblg.media.net		23.199.48.23	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723297119 CET	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:05.723721981 CET	1.1.1.1	192.168.2.5	0x2c47	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:05.730034113 CET	1.1.1.1	192.168.2.5	0xd518	No error (0)	lg3.media.net		23.199.48.23	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.353336096 CET	1.1.1.1	192.168.2.5	0x9963	No error (0)	cs.media.net		23.39.32.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.652082920 CET	1.1.1.1	192.168.2.5	0x25a	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.652082920 CET	1.1.1.1	192.168.2.5	0x25a	No error (0)	tagr-gcp-odr-use1.mookie1.com		35.190.90.30	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.652198076 CET	1.1.1.1	192.168.2.5	0x9fdd	No error (0)	odr.mookie1.com	tagr-gcp-odr-use1.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		54.236.169.36	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		34.204.146.220	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		54.243.21.232	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		3.215.231.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		44.193.141.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		44.195.54.24	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		44.209.67.7	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.667851925 CET	1.1.1.1	192.168.2.5	0xfde4	No error (0)	aragorn-prod-va-lb.inbake.com		35.174.214.130	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.668387890 CET	1.1.1.1	192.168.2.5	0xa509	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.668387890 CET	1.1.1.1	192.168.2.5	0xa509	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.723162889 CET	1.1.1.1	192.168.2.5	0xab09	No error (0)	cm.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.723162889 CET	1.1.1.1	192.168.2.5	0xab09	No error (0)	cm.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	global.px.quantserve.com		192.184.68.134	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	global.px.quantserve.com		192.184.68.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	global.px.quantserve.com		192.184.68.254	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	global.px.quantserve.com		192.184.68.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.726208925 CET	1.1.1.1	192.168.2.5	0xe3e1	No error (0)	global.px.quantserve.com		192.184.68.215	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.727719069 CET	1.1.1.1	192.168.2.5	0x6b4c	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.727719069 CET	1.1.1.1	192.168.2.5	0x6b4c	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.733321905 CET	1.1.1.1	192.168.2.5	0x5269	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2024 14:24:06.733999968 CET	1.1.1.1	192.168.2.5	0xdc9b	No error (0)	ad.doubleclick.net		142.251.16.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.733999968 CET	1.1.1.1	192.168.2.5	0xdc9b	No error (0)	ad.doubleclick.net		142.251.16.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.905229092 CET	1.1.1.1	192.168.2.5	0x67da	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.905229092 CET	1.1.1.1	192.168.2.5	0x67da	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:06.968112946 CET	1.1.1.1	192.168.2.5	0xaf3b	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:06.968131065 CET	1.1.1.1	192.168.2.5	0x822e	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:07.303342104 CET	1.1.1.1	192.168.2.5	0x7a2b	No error (0)	2.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:07.393049955 CET	1.1.1.1	192.168.2.5	0x4a8d	No error (0)	cs.media.net		23.39.32.29	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:07.616463900 CET	1.1.1.1	192.168.2.5	0x2d78	No error (0)	2.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:08.105882883 CET	1.1.1.1	192.168.2.5	0xf3b1	No error (0)	2.gravatar.com		192.0.73.2	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:09.203418970 CET	1.1.1.1	192.168.2.5	0xf616	No error (0)	mylovelybluesky.com		103.130.153.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:12.653508902 CET	1.1.1.1	192.168.2.5	0x97fc	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:12.662674904 CET	1.1.1.1	192.168.2.5	0xd62b	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
Jan 15, 2024 14:24:12.780653000 CET	1.1.1.1	192.168.2.5	0xd786	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:13.976041079 CET	1.1.1.1	192.168.2.5	0xdfda	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:13.976041079 CET	1.1.1.1	192.168.2.5	0xdfda	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:13.976041079 CET	1.1.1.1	192.168.2.5	0xdfda	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:13.976308107 CET	1.1.1.1	192.168.2.5	0x7da2	No error (0)	tps.doubleverify.com	tps-geo.dvgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:13.976308107 CET	1.1.1.1	192.168.2.5	0x7da2	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.080327034 CET	1.1.1.1	192.168.2.5	0x88af	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.082115889 CET	1.1.1.1	192.168.2.5	0x38	No error (0)	cdn.doubleverify.com	cdn.doubleverify.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097059011 CET	1.1.1.1	192.168.2.5	0xe02c	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097059011 CET	1.1.1.1	192.168.2.5	0xe02c	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097059011 CET	1.1.1.1	192.168.2.5	0xe02c	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097268105 CET	1.1.1.1	192.168.2.5	0x36d7	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097268105 CET	1.1.1.1	192.168.2.5	0x36d7	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.097268105 CET	1.1.1.1	192.168.2.5	0x36d7	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145030975 CET	1.1.1.1	192.168.2.5	0x3017	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145030975 CET	1.1.1.1	192.168.2.5	0x3017	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.0.126.85	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145030975 CET	1.1.1.1	192.168.2.5	0x3017	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.206.227.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145030975 CET	1.1.1.1	192.168.2.5	0x3017	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.197.27.157	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145030975 CET	1.1.1.1	192.168.2.5	0x3017	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		44.206.23.174	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.145306110 CET	1.1.1.1	192.168.2.5	0x10a0	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.160.145.206	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		52.6.81.107	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.175.110.69	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.144.126.201	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.145.242.45	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.205.114.77	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		54.146.129.87	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.154613018 CET	1.1.1.1	192.168.2.5	0x5a60	No error (0)	sync.srv.stackadapt.com		52.6.231.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.155400991 CET	1.1.1.1	192.168.2.5	0x54ef	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:15.155400991 CET	1.1.1.1	192.168.2.5	0x54ef	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.164.228.18	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.155400991 CET	1.1.1.1	192.168.2.5	0x54ef	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		54.211.17.237	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.155400991 CET	1.1.1.1	192.168.2.5	0x54ef	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.233.0.32	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.155400991 CET	1.1.1.1	192.168.2.5	0x54ef	No error (0)	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		34.231.250.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:15.156059027 CET	1.1.1.1	192.168.2.5	0xc509	No error (0)	beacon.lynx.cognitivlabs.com	lynx-prod-beacon-alb-498367235.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:16.037198067 CET	1.1.1.1	192.168.2.5	0x131a	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.037198067 CET	1.1.1.1	192.168.2.5	0x131a	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.037722111 CET	1.1.1.1	192.168.2.5	0x72c5	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.043114901 CET	1.1.1.1	192.168.2.5	0xcea	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.209350109 CET	1.1.1.1	192.168.2.5	0x488d	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:16.209350109 CET	1.1.1.1	192.168.2.5	0x488d	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.143182993 CET	1.1.1.1	192.168.2.5	0xc299	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.144145012 CET	1.1.1.1	192.168.2.5	0x783e	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.144145012 CET	1.1.1.1	192.168.2.5	0x783e	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638494968 CET	1.1.1.1	192.168.2.5	0x48f8	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638494968 CET	1.1.1.1	192.168.2.5	0x48f8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638494968 CET	1.1.1.1	192.168.2.5	0x48f8	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638494968 CET	1.1.1.1	192.168.2.5	0x48f8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638494968 CET	1.1.1.1	192.168.2.5	0x48f8	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638683081 CET	1.1.1.1	192.168.2.5	0xd978	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638683081 CET	1.1.1.1	192.168.2.5	0xd978	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.638683081 CET	1.1.1.1	192.168.2.5	0xd978	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.639569044 CET	1.1.1.1	192.168.2.5	0x6a45	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.640765905 CET	1.1.1.1	192.168.2.5	0x7b3b	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.747366905 CET	1.1.1.1	192.168.2.5	0x79a2	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.747438908 CET	1.1.1.1	192.168.2.5	0x3f74	No error (0)	tpsc-ue1.doubleverify.com	tps-ue1.doubleverify.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.747438908 CET	1.1.1.1	192.168.2.5	0x3f74	No error (0)	tps-ue1.doubleverify.com		34.117.228.201	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.850699902 CET	1.1.1.1	192.168.2.5	0xe110	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:17.852020025 CET	1.1.1.1	192.168.2.5	0x93d0	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.73.89.2	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		107.20.188.130	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.230.219.56	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.81.176.252	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.89.37.162	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.222.93.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.194.199.231	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.504910946 CET	1.1.1.1	192.168.2.5	0x68d5	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		52.87.8.97	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.505970001 CET	1.1.1.1	192.168.2.5	0xd08f	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:18.698465109 CET	1.1.1.1	192.168.2.5	0xf72e	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.698465109 CET	1.1.1.1	192.168.2.5	0xf72e	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:18.698920965 CET	1.1.1.1	192.168.2.5	0xf856	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.164.116.51	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.164.116.83	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.164.116.50	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388169050 CET	1.1.1.1	192.168.2.5	0x2a81	No error (0)	d2ctznuk6ro1vp.cloudfront.net		18.164.116.110	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388797045 CET	1.1.1.1	192.168.2.5	0xd804	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:19.388797045 CET	1.1.1.1	192.168.2.5	0xd804	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:19.401097059 CET	1.1.1.1	192.168.2.5	0x58c9	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:19.401097059 CET	1.1.1.1	192.168.2.5	0x58c9	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.050446987 CET	1.1.1.1	192.168.2.5	0x3434	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.050987959 CET	1.1.1.1	192.168.2.5	0x41b8	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.41	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.72	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.121	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.14.105	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.151	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.56	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.40	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.136	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.57	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.73	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.172	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		216.22.16.9	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.056189060 CET	1.1.1.1	192.168.2.5	0x7d43	No error (0)	rtb-csync-use1.smartadserver.com		23.105.12.120	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.057673931 CET	1.1.1.1	192.168.2.5	0xe96	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:20.061630011 CET	1.1.1.1	192.168.2.5	0x350a	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.365729094 CET	1.1.1.1	192.168.2.5	0x1760	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.365729094 CET	1.1.1.1	192.168.2.5	0x1760	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.365870953 CET	1.1.1.1	192.168.2.5	0x7fb2	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.81.176.252	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		44.218.58.54	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.88.136.18	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.222.93.106	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.231.187.220	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.89.37.162	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		107.20.188.130	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.370215893 CET	1.1.1.1	192.168.2.5	0x3dd9	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.230.219.56	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:21.371651888 CET	1.1.1.1	192.168.2.5	0xd3d7	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:21.432857990 CET	1.1.1.1	192.168.2.5	0xfec9	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:21.434089899 CET	1.1.1.1	192.168.2.5	0x407a	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:24.562655926 CET	1.1.1.1	192.168.2.5	0xa13	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:24.562655926 CET	1.1.1.1	192.168.2.5	0xa13	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:24.562655926 CET	1.1.1.1	192.168.2.5	0xa13	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:24.562655926 CET	1.1.1.1	192.168.2.5	0xa13	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:26.248928070 CET	1.1.1.1	192.168.2.5	0xa251	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:26.249316931 CET	1.1.1.1	192.168.2.5	0xaaf9	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:26.249316931 CET	1.1.1.1	192.168.2.5	0xaaf9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.206.227.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:26.249316931 CET	1.1.1.1	192.168.2.5	0xaaf9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.22.225.85	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:26.249316931 CET	1.1.1.1	192.168.2.5	0xaaf9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.228.147.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:26.249316931 CET	1.1.1.1	192.168.2.5	0xaaf9	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.45.81.223	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		52.7.65.124	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		52.73.63.104	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		54.157.227.4	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		52.7.71.149	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		52.44.195.200	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		54.165.113.212	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		54.156.214.92	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.264405966 CET	1.1.1.1	192.168.2.5	0xa2af	No error (0)	match.prod.bidr.io		52.87.96.192	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.643624067 CET	1.1.1.1	192.168.2.5	0x39f0	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:27.643624067 CET	1.1.1.1	192.168.2.5	0x39f0	No error (0)	securepubads46.g.doubleclick.net		172.253.122.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.643624067 CET	1.1.1.1	192.168.2.5	0x39f0	No error (0)	securepubads46.g.doubleclick.net		172.253.122.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.652107000 CET	1.1.1.1	192.168.2.5	0x3234	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:27.894865990 CET	1.1.1.1	192.168.2.5	0xbcdf	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:27.903196096 CET	1.1.1.1	192.168.2.5	0xbc23	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
Jan 15, 2024 14:24:28.001348019 CET	1.1.1.1	192.168.2.5	0xc5c3	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		54.175.232.95	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		52.54.211.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		52.20.91.219	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		54.209.243.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		54.208.16.196	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		52.2.60.235	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594518900 CET	1.1.1.1	192.168.2.5	0x1676	No error (0)	cdn.w55c.net		52.3.195.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:36.594608068 CET	1.1.1.1	192.168.2.5	0x29e3	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:40.414012909 CET	1.1.1.1	192.168.2.5	0x9c7d	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		54.157.70.26	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		52.2.41.65	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		54.161.249.158	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		52.71.68.246	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		52.2.229.240	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		52.207.103.73	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		54.152.50.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:41.188211918 CET	1.1.1.1	192.168.2.5	0xd115	No error (0)	sync.ipredictive.com		54.145.121.220	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:43.300442934 CET	1.1.1.1	192.168.2.5	0xdac8	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:43.302046061 CET	1.1.1.1	192.168.2.5	0x97c2	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
Jan 15, 2024 14:24:43.405783892 CET	1.1.1.1	192.168.2.5	0xccc4	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.853758097 CET	1.1.1.1	192.168.2.5	0x410f	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:45.854758978 CET	1.1.1.1	192.168.2.5	0xf4b5	No error (0)	dclk-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:45.855453968 CET	1.1.1.1	192.168.2.5	0xfac	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.855453968 CET	1.1.1.1	192.168.2.5	0xfac	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.856861115 CET	1.1.1.1	192.168.2.5	0x7a30	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:45.857541084 CET	1.1.1.1	192.168.2.5	0x9da2	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.857541084 CET	1.1.1.1	192.168.2.5	0x9da2	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.857541084 CET	1.1.1.1	192.168.2.5	0x9da2	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.857541084 CET	1.1.1.1	192.168.2.5	0x9da2	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.858377934 CET	1.1.1.1	192.168.2.5	0xe39d	No error (0)	tr.blismedia.com		34.96.105.8	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.940938950 CET	1.1.1.1	192.168.2.5	0x6023	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:45.943027020 CET	1.1.1.1	192.168.2.5	0x9980	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:45.947465897 CET	1.1.1.1	192.168.2.5	0x56ff	No error (0)	um.simpli.fi		35.236.220.17	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.947465897 CET	1.1.1.1	192.168.2.5	0x56ff	No error (0)	um.simpli.fi		34.150.170.96	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:45.947465897 CET	1.1.1.1	192.168.2.5	0x56ff	No error (0)	um.simpli.fi		35.194.66.159	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:46.522430897 CET	1.1.1.1	192.168.2.5	0xe834	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:46.522430897 CET	1.1.1.1	192.168.2.5	0xe834	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:46.523307085 CET	1.1.1.1	192.168.2.5	0xcb0b	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:46.800513983 CET	1.1.1.1	192.168.2.5	0xd86e	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:46.802159071 CET	1.1.1.1	192.168.2.5	0x64f	No error (0)	mweb.ck.inmobi.com	dsp-cookie.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:47.185086012 CET	1.1.1.1	192.168.2.5	0xfa99	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:47.186362982 CET	1.1.1.1	192.168.2.5	0x5773	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:47.549634933 CET	1.1.1.1	192.168.2.5	0x2602	No error (0)	jelly.mdhv.io		216.239.34.21	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.549634933 CET	1.1.1.1	192.168.2.5	0x2602	No error (0)	jelly.mdhv.io		216.239.36.21	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.549634933 CET	1.1.1.1	192.168.2.5	0x2602	No error (0)	jelly.mdhv.io		216.239.38.21	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.549634933 CET	1.1.1.1	192.168.2.5	0x2602	No error (0)	jelly.mdhv.io		216.239.32.21	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.704394102 CET	1.1.1.1	192.168.2.5	0x8f0b	No error (0)	shed.dual-low.part-0029.t-0009.t-msedge.net	part-0029.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:47.704394102 CET	1.1.1.1	192.168.2.5	0x8f0b	No error (0)	part-0029.t-0009.t-msedge.net		13.107.213.57	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.704394102 CET	1.1.1.1	192.168.2.5	0x8f0b	No error (0)	part-0029.t-0009.t-msedge.net		13.107.246.57	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.715687990 CET	1.1.1.1	192.168.2.5	0x77	No error (0)	cdn.adnxs.com	prod.appnexus.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:47.715687990 CET	1.1.1.1	192.168.2.5	0x77	No error (0)	prod.appnexus.map.fastly.net		151.101.193.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.715687990 CET	1.1.1.1	192.168.2.5	0x77	No error (0)	prod.appnexus.map.fastly.net		151.101.65.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.715687990 CET	1.1.1.1	192.168.2.5	0x77	No error (0)	prod.appnexus.map.fastly.net		151.101.1.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:47.715687990 CET	1.1.1.1	192.168.2.5	0x77	No error (0)	prod.appnexus.map.fastly.net		151.101.129.108	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:48.776839972 CET	1.1.1.1	192.168.2.5	0xa815	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:48.776839972 CET	1.1.1.1	192.168.2.5	0xa815	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:48.777770996 CET	1.1.1.1	192.168.2.5	0x59e9	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.179.153	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.446266890 CET	1.1.1.1	192.168.2.5	0x4760	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.963732004 CET	1.1.1.1	192.168.2.5	0xe4fe	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.963732004 CET	1.1.1.1	192.168.2.5	0xe4fe	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:49.963865042 CET	1.1.1.1	192.168.2.5	0xe2e8	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:53.301565886 CET	1.1.1.1	192.168.2.5	0x5d42	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:53.301700115 CET	1.1.1.1	192.168.2.5	0x4ee1	No error (0)	r.turn.com	r.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:53.694171906 CET	1.1.1.1	192.168.2.5	0x6e41	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:53.694171906 CET	1.1.1.1	192.168.2.5	0x6e41	No error (0)	widget.va1.vip.prod.criteo.com		74.119.119.150	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:53.695563078 CET	1.1.1.1	192.168.2.5	0x963c	No error (0)	dis.criteo.com	widget.va1.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:53.718641996 CET	1.1.1.1	192.168.2.5	0x36a1	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:53.718641996 CET	1.1.1.1	192.168.2.5	0x36a1	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:54.420232058 CET	1.1.1.1	192.168.2.5	0xd40d	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:54.420272112 CET	1.1.1.1	192.168.2.5	0x21d9	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:54.420272112 CET	1.1.1.1	192.168.2.5	0x21d9	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.181.211	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.24	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:55.235908031 CET	1.1.1.1	192.168.2.5	0xee8f	No error (0)	nym1-ib.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.628643990 CET	1.1.1.1	192.168.2.5	0xb419	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:56.628643990 CET	1.1.1.1	192.168.2.5	0xb419	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.628643990 CET	1.1.1.1	192.168.2.5	0xb419	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.628643990 CET	1.1.1.1	192.168.2.5	0xb419	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.628643990 CET	1.1.1.1	192.168.2.5	0xb419	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.629641056 CET	1.1.1.1	192.168.2.5	0x1ab8	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:56.731251001 CET	1.1.1.1	192.168.2.5	0x3d9b	No error (0)	static.addtoany.com		104.22.71.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.731251001 CET	1.1.1.1	192.168.2.5	0x3d9b	No error (0)	static.addtoany.com		104.22.70.197	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.731251001 CET	1.1.1.1	192.168.2.5	0x3d9b	No error (0)	static.addtoany.com		172.67.39.148	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:56.732398987 CET	1.1.1.1	192.168.2.5	0x9d6a	No error (0)	static.addtoany.com			65	IN (0x0001)	false
Jan 15, 2024 14:24:57.543407917 CET	1.1.1.1	192.168.2.5	0xd17d	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:57.543407917 CET	1.1.1.1	192.168.2.5	0xd17d	No error (0)	scontent.xx.fbcdn.net		157.240.229.1	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.544354916 CET	1.1.1.1	192.168.2.5	0x4e55	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com	js.passport.qihucdn.com.qh-cdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com.qh-cdn.com	js.passport.qihucdn.com.webcdn.360qhcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.23	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.192	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.110.245	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.550482035 CET	1.1.1.1	192.168.2.5	0x19c2	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.22	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.621295929 CET	1.1.1.1	192.168.2.5	0x4330	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:57.621295929 CET	1.1.1.1	192.168.2.5	0x4330	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.621295929 CET	1.1.1.1	192.168.2.5	0x4330	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.621295929 CET	1.1.1.1	192.168.2.5	0x4330	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:57.621295929 CET	1.1.1.1	192.168.2.5	0x4330	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.060549974 CET	1.1.1.1	192.168.2.5	0x522	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.061424971 CET	1.1.1.1	192.168.2.5	0x602b	Name error (3)	www.facebook.net	none	none	65	IN (0x0001)	false
Jan 15, 2024 14:24:58.157902002 CET	1.1.1.1	192.168.2.5	0xa981	Name error (3)	www.facebook.net	none	none	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com	js.passport.qihucdn.com.qh-cdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com.qh-cdn.com	js.passport.qihucdn.com.webcdn.360qhcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.22	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.110.245	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.23	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:58.945362091 CET	1.1.1.1	192.168.2.5	0x8349	No error (0)	js.passport.qihucdn.com.webcdn.360qhcdn.com		104.192.108.192	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.068238020 CET	1.1.1.1	192.168.2.5	0x831e	No error (0)	www3.l.google.com		172.253.62.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.069540977 CET	1.1.1.1	192.168.2.5	0x82f6	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		52.2.60.235	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		54.208.16.196	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		52.3.195.166	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		52.54.211.189	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		54.175.232.95	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		54.156.229.21	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.656269073 CET	1.1.1.1	192.168.2.5	0xebd5	No error (0)	cdn.w55c.net		54.209.243.229	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:24:59.658665895 CET	1.1.1.1	192.168.2.5	0xc364	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts0.google.com	mts.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.578306913 CET	1.1.1.1	192.168.2.5	0xdb57	No error (0)	mts.l.google.com		142.251.163.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:00.579073906 CET	1.1.1.1	192.168.2.5	0xdc86	No error (0)	mts0.google.com	mts.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:25:12.710242033 CET	1.1.1.1	192.168.2.5	0x5c9e	No error (0)	googleads.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:12.710242033 CET	1.1.1.1	192.168.2.5	0x5c9e	No error (0)	googleads.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:12.710577011 CET	1.1.1.1	192.168.2.5	0x576d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2024 14:25:13.370812893 CET	1.1.1.1	192.168.2.5	0xcc33	No error (0)	cm.g.doubleclick.net		172.253.115.156	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:13.370812893 CET	1.1.1.1	192.168.2.5	0xcc33	No error (0)	cm.g.doubleclick.net		172.253.115.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:13.918484926 CET	1.1.1.1	192.168.2.5	0x7332	No error (0)	cm.g.doubleclick.net		142.251.111.155	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:13.918484926 CET	1.1.1.1	192.168.2.5	0x7332	No error (0)	cm.g.doubleclick.net		142.251.111.154	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.100	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.102	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.139	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.101	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.113	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.587609053 CET	1.1.1.1	192.168.2.5	0xe2b8	No error (0)	clients.l.google.com		172.253.63.138	A (IP address)	IN (0x0001)	false
Jan 15, 2024 14:25:18.588888884 CET	1.1.1.1	192.168.2.5	0x6f6e	No error (0)	clients1.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.101708889 CET	434	OUT	GET / HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:51.432075977 CET	432	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: text/html; charset=UTF-8 link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" etag: "494570-1705317823;gz" x-litespeed-cache: hit content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 50020 date: Mon, 15 Jan 2024 13:23:51 GMT server: LiteSpeed
Jan 15, 2024 14:23:51.432169914 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 53 1b c7 f6 37 fe 77 5c 75 df 43 47 a9 6b d0 d7 da c5 ee e0 5c 6f d9 1c 3b 8e 97 9b dc c4 29 d7 20 b5 c4 80 34 a3 cc 8c c0 c4 d7 4f 09 cc 6e 56 c7 36 06 0b e3 05 30 5e 30 60 63 23 c4 56 f5 bc 94 c7 ea 91 f4 Data Ascii: yS7w\uCGk\o;) 4OnV60^0`c#VWNh4F8SVfz9>}OO\|DJ0p8_oy<9y+4rz_ZkLy!pA\ojqkH{z/n=JX/zg~3e *rH/xrW\|
Jan 15, 2024 14:23:51.432240009 CET	1286	IN	Data Raw: 6c 6b b5 89 92 ff 92 9d a2 a1 7c c9 ee 11 25 7c c9 4e 2b 5f b2 3b 2b 6c 0e 9b e3 92 bd da 75 a5 da 75 c9 6e b2 98 c0 78 a9 33 d9 42 82 df 64 31 c9 2d fe bd b5 27 b7 f8 69 6b 72 8b ff 24 6b 50 6e a1 0d 8a 61 c9 83 4d 75 57 4d 1e 51 f0 70 0a 25 23 Data Ascii: lk\|%\|N+_;+luunx3Bd1-'ikr$kPnaMuWMQp%#^W5^[$KvldoYy{\|$]-CkrjsaEj>q9oW[8g#O96_U6NCeEbYr.
Jan 15, 2024 14:23:51.432312965 CET	1286	IN	Data Raw: a2 54 4e d7 3e e2 05 84 cd d9 05 f7 8b f2 6b 3d fe 45 31 ae 41 a6 b2 e9 12 ac cf 16 34 3c 3d 78 30 fb 18 aa b2 e5 fc 69 7d bd 02 a2 9b 91 35 d9 50 23 bb 78 0b b7 98 7d 9f d7 b6 f9 f0 47 b7 f7 a9 a1 05 b0 22 2c 82 ed c4 f7 a7 01 8d db ea 3f 75 5a Data Ascii: TN>k=E1A4<=x0i}5P#x}G",?uZs@iN5sf`qaNr#CM5`i5uA6PN2klc0-e-L)9qWe\|okY mV
Jan 15, 2024 14:23:51.432395935 CET	1286	IN	Data Raw: 2d 4e 87 f6 f0 03 03 91 4b 0a eb 32 3b 1a 74 71 bd bf 7f 43 57 da 34 b8 1c d5 96 8a 2a 4b 45 d5 87 c6 01 fc c4 fa 54 70 6d d0 6d 46 1a b2 70 b2 73 ef e5 2e 77 8d 45 fb bf 3e 09 ce aa 5a 8b b3 a6 c2 e2 ac ad fc 50 f7 1e 51 0c 40 9f ad 9c 14 b4 ca Data Ascii: -NK2;tqCW4KETpmmFps.wE>ZPQ@!Qp]iq`ke3<sX**xTeAeGjgWE}xPp9,.wzx7--jL.\|gU<TTQQmqX\'}Yxr:n;v
Jan 15, 2024 14:23:51.432462931 CET	1286	IN	Data Raw: 16 d3 d3 87 29 2d 70 5e f8 57 92 57 a0 f9 02 34 ed e2 18 f1 a3 88 da 45 fb 05 a8 2a 78 ba f8 51 74 14 6c b1 40 cf db cf 05 3f aa db ed cd ed d8 67 e6 74 f0 2f e8 2f d3 54 81 be 74 2d 07 e7 81 1f d5 55 4e 4b 05 7a a2 20 4d 8f ff 3e aa 9b 6c 33 05 Data Ascii: )-p^WW4ExQtl@?gt//Tt-UNKz M>l3=~rWz4R}zgR;",;CbM\|]SHhO;lZ6d3[CV i1fsXlD5=e[0Nz@q.Nz1Vn(mOH
Jan 15, 2024 14:23:51.432514906 CET	1286	IN	Data Raw: 92 3d c7 32 33 59 4c 5c 88 ff 6b 9a 37 59 4c df 9c a0 6c 28 62 33 16 4c 75 26 9f d3 e5 f3 56 55 7a b9 5a 93 c5 04 d9 44 e9 5b 2f 6e 08 c3 27 ba b7 a2 98 01 f7 87 3f 02 3c f6 64 35 36 c9 76 30 1a 77 96 f0 f3 0d ff 6a 6c ac e4 8e b7 61 b9 fa d0 19 Data Ascii: =23YL\k7YLl(b3Lu&VUzZD[/n'?<d56v0wjla_gJI`~Ro5'lQsng/wqK8$[_BVVlgwiTv]T1cfh.!wG%-v~yBE[1dHa3a6*U&>
Jan 15, 2024 14:23:51.432548046 CET	1286	IN	Data Raw: 67 44 2f b6 f1 82 8c 25 e5 18 75 ff 94 37 59 7c e6 c3 07 ae 99 f3 13 27 59 ca d8 9e a6 cc 62 a0 cc 52 f6 d5 85 d3 d6 33 5f 56 fc b3 e2 82 ab cc 7c d8 e0 3e 81 9c cc 06 5d 94 3f 0d fa 16 29 eb bc d1 95 cf 7b 53 0c 53 0f 0e e7 b5 37 c9 76 ce 2b 37 Data Ascii: gD/%u7Y\|'YbR3_V\|>]?){SS7v+71Z}gUr;n411509<LYdO6=fFk@24!=$HaN)eF#ooEJ.(fvz=74,y;"(
Jan 15, 2024 14:23:51.432610989 CET	1286	IN	Data Raw: 43 f1 80 ce 78 a0 ff 96 1e a0 53 9e 8a 47 73 23 4f a5 89 e6 8c b1 a2 a1 dc c8 58 29 42 39 5b 47 45 db eb 39 6c 95 1e 8e 53 ae 8a 07 71 03 57 25 16 1b a3 52 8e 8a 87 70 03 47 a5 06 e1 e9 a9 a7 7b 8a 8d 69 16 25 5c 2a d1 8d 8c 87 e2 21 9c f1 40 ff Data Ascii: CxSGs#OX)B9[GE9lSqW%RpG{i%\!@-9g<FJ5p#c%:s*9g\Jg~Jm Rm<o8SIXnd\[GEx[%U2vo#;%v>M_?fyJCYU<
Jan 15, 2024 14:23:51.432677984 CET	1286	IN	Data Raw: f1 0d f5 d5 b8 ba f6 f4 5d a4 5d 7d fc 52 bd 3f 96 d8 9a 54 fb a7 c9 40 9c dc db 20 2f df 92 ae 17 e4 de fc bb 48 7b 6a 72 39 35 99 fd 4a 06 27 92 7d 4f d3 b3 dd 50 f1 ee 54 32 fe 84 cc 3c 22 83 43 64 fa 49 ba eb 26 89 8f bd 8b b4 a7 db ff 20 d1 Data Ascii: ]]}R?T@ /H{jr95J'}OPT2<"CdI& E:}> qm<@K"S.2Ij7~"QFHtHb$1=?I,tVDuj:'Ud&>jVo^ZP)xaSH^o$beXx#5W
Jan 15, 2024 14:23:51.762221098 CET	1286	IN	Data Raw: 4f 90 e9 67 a9 ad 28 a8 9e 1b 33 ea dd 05 b2 fa 1a 7e 79 3b da a7 ce cf 40 b0 c9 44 67 62 f5 81 7a 7d 01 d6 2e 13 a4 e8 1c 13 f0 c4 da 0c 2b c3 08 26 23 9d ac 17 b6 8e 93 9d 6f 19 38 93 81 ae d4 c6 ac da 7b 87 6a 91 4d f5 de 32 40 fd 48 b7 7a fd Data Ascii: Og(3~y;@Dgbz}.+&#o8{jM2@HzuF0!OuYNP8>W wES[?s\|,2YIm1YQ<#HJKA;jXOa8:qx0$g]O%vALONFRw ETE?;]
Jan 15, 2024 14:23:52.096844912 CET	357	OUT	GET /wp-content/themes/magazine-pro/js/entry-date.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.429008007 CET	711	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Thu, 20 Dec 2018 14:44:34 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 322 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 55 8f cd 6a c3 30 10 84 cf d6 53 ec c1 e0 1f 62 b9 f4 1a 0a 2d 85 16 4a 0b 29 e9 b1 97 ad b5 b6 37 91 25 23 c9 81 34 e4 dd 8b e5 b4 a1 17 c1 7c bb 9a 9d a9 cb 52 40 09 1f 3d 7b f0 8d e3 31 00 2a e5 21 f4 04 64 82 3b 82 c2 40 10 6c 24 6f d8 e1 37 1b 82 8d 8b 60 20 29 20 1a dc 8f d8 ec b1 bb ae 7c be 6c 23 c7 29 f4 d6 c1 36 4c 8a ed c6 91 f7 11 6b 6e c8 78 82 e7 cd 6b 75 2b 6f 2a eb 2a 8d 81 9c 80 b2 16 62 f7 3e 91 3b e6 ed 64 9a c0 d6 e4 90 42 71 12 22 a9 6b 78 50 0a 76 1e be ac 3a 42 a3 d1 7b 29 92 34 cf 66 9d 15 12 95 7a 9c 61 9e ed 7c 56 ac 97 2f 4f 6c 14 04 1e 08 5a eb 80 b0 e9 2f d5 d0 28 18 ec 81 80 03 b0 f1 ac 28 b6 e4 61 2e a2 d9 ec 17 6f d9 db 81 aa 81 95 d2 04 e8 02 37 9a 56 b0 d0 60 c7 5f 94 15 72 f6 be a6 2e 4e 22 49 0e e8 20 8d c7 ef 20 cd 43 cf be 90 2d 1b 95 67 32 86 a8 e6 d9 12 35 f9 3f 47 89 9a 3b a3 a9 0d 2b b8 08 63 0d fd 09 c7 5d 1f e6 d2 e3 48 46 e5 f1 4a 34 3a cf ef b9 58 ff 00 fd 7f bb 03 dd 01 00 00 Data Ascii: Uj0Sb-J)7%#4\|R@={1!d;@l$o7` ) \|l#)6Lknxku+o*b>;dBq"kxPv:B{)4fza\|V/OlZ/((a.o7V`_r.N"I C-g25?G;+c]HFJ4:X
Jan 15, 2024 14:23:52.434868097 CET	367	OUT	GET /wp-content/themes/magazine-pro/js/responsive-menus.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.766396999 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Thu, 20 Dec 2018 14:44:34 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 1425 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 57 5b 6f db 36 14 7e f7 af 70 38 c0 25 6b 4a 71 da 37 2b 44 80 15 c3 56 60 c3 3a b4 db 4b 92 15 14 79 64 b1 91 29 55 a4 7c 99 eb ff 3e 1c eb ea 4b ba 6e d8 4b 12 91 e7 c6 73 be f3 9d 93 eb 97 a3 f1 8f ef 7e 0e 5e 85 b3 20 2f 83 4c 7a 28 47 2f af 47 34 a9 ac f2 26 b7 b4 e0 31 df b2 5d fb 3d fe 4c d9 6e 25 cb b1 14 31 7d 11 57 de e7 f6 de e8 3f 1f 36 af 35 59 80 05 67 5c b0 cc 63 93 41 40 1e 5f b0 50 7a 5f 52 62 34 61 91 49 28 a9 ac 86 c4 58 d0 e4 4a 08 bf 2d 20 4f c6 92 ed 88 cd 2d 10 21 44 46 25 9b 4c 68 4c 49 b8 04 5b 05 3e 5f 2c 32 e0 e3 b0 b5 5d 82 2b 72 eb cc 0a 02 14 18 87 ae 8a 83 81 28 61 61 09 cb 7c 05 6f 32 e9 1c 25 52 79 b3 92 1e 34 69 63 91 a5 91 01 6c 0a 69 35 68 c2 af 6e 8e 2e 8a 12 9c 6b ce 39 86 f1 8c e3 6f 09 a9 73 e9 fc 36 03 c2 09 61 2c c2 e4 29 f1 15 cb e3 f0 93 0b 5c 55 40 99 18 97 12 c6 b5 20 1a 9c 2f f3 2d 89 48 5b 08 4c 56 93 3f 15 76 d2 93 09 3d 4d a5 16 3b 0d 99 dc ce 6f 66 33 2e ad 59 4a 54 9f ef f2 42 2a e3 b7 73 e2 d2 7c 4d 78 0a 66 91 fa e6 6b cf 47 ba cc 8b f7 a9 d4 f9 da cd af 6e b8 2b 00 f4 9c 24 d2 79 b2 67 7c e0 92 6a c6 a2 92 4a 16 79 2a d9 7e df 21 a5 1a 20 c5 a7 c6 31 ae 84 0c 2d 6c 3c 25 56 ae 08 8b 64 8f 0e 7e 06 9e 69 4c 55 9b 3f 85 b5 24 2c 5c 4a af 52 7a 6d e5 2a 78 58 bf 7c 88 af 19 eb fd a1 fb 9d 49 a8 ad b2 ec 4a 24 b5 73 25 92 fb d9 23 d7 22 a6 09 0b 13 93 79 28 7b 70 d7 0a b3 5b c9 4a f0 55 69 c7 72 cf a2 3a 81 57 75 02 ef 68 1c 82 54 29 d5 bc d7 e2 9a ed 62 aa d1 9e d5 0d 52 c7 0f 9b d7 30 ce 0c d6 5c eb 06 7c 88 43 1d 18 0f cb 80 4c 75 58 42 91 49 05 94 84 35 16 42 59 14 60 f5 87 9c aa 29 19 57 59 87 08 7c 60 0d a0 3d 82 f0 09 73 1c a6 46 03 65 6c 4e db 03 2c 15 65 fc d9 00 49 f8 cd fe f5 73 fe 8f 9b e9 c8 de e8 dc e0 9e 0d 01 b0 3a 05 40 b4 a4 92 1f b7 d9 f0 ac eb 49 44 46 dd cd e7 4d 1c 1d 41 28 74 99 d1 f0 e1 20 4b 6b 74 0e 10 b1 be 88 40 95 e5 0e 9c 6f 19 06 5f 83 86 4c 9c 19 bb 70 f4 ff 8d 72 c8 05 17 62 8d 54 8b a1 ff 46 63 1d 5b 91 44 66 0e 2e 19 6c 1d ff 5e 9c 27 08 db b6 69 13 4b 59 34 bb 1d 5f 1d ba 2e 03 bb f0 e9 97 2f 0d b4 54 0f 2d cd 47 aa 56 01 a1 4e eb 1f 69 d1 b5 31 99 c2 81 ea 52 71 de d9 10 b5 24 d5 71 d4 05 21 9e 1e 59 63 11 e0 c8 e9 30 ea 9e 4c 11 64 c6 3e 8d e5 7d 5a 42 72 98 40 df bd 98 ea e9 0b 1c 3c 51 4d 03 22 99 4c 14 fe ba 9f 3d 4e 26 70 5c b0 ce 44 90 1a ad c1 12 4c 01 34 af 9f 4c a8 12 d0 24 1b 1d 10 84 4f ff 66 cd 53 c6 8f ee b9 c2 0e e8 b3 8b 8f db 49 51 84 0b f0 3f 64 b0 04 eb bf df be d5 48 95 0d dd ac 8d d5 f9 1a ef df e4 cb a2 f2 a0 df e3 a4 a0 92 e1 d9 bb 32 2f a0 f4 db 3f 64 56 01 25 da b8 22 93 db 61 fd 10 95 31 db 35 3c 1a 0f 19 20 66 bb da 49 83 0c 21 44 3c 0c ee 09 83 6b c2 88 c3 a5 2c a8 bc a8 8e 94 18 7e ca 8d a5 84 Data Ascii: W[o6~p8%kJq7+DV`:Kyd)U\|>KnKs~^ /Lz(G/G4&1]=Ln%1}W?65Yg\cA@_Pz_Rb4aI(XJ- O-!DF%LhLI[>_,2]+r(aa\|o2%Ry4icli5hn.k9os6a,)\U@ /-H[LV?v=M;of3.YJTBs\|MxfkGn+$yg\|jJy~! 1-l<%Vd~iLU?$,\JRzm*xX\|IJ$s%#"y({p[JUir:WuhT)bR0\\|CLuXBI5BY`)WY\|`=sFelN,eIs:@IDFMA(t Kkt@o_LprbTFc[Df.l^'iKY4_./T-GVNi1Rq$q!Yc0Ld>}ZBr@<QM"L=N&p\DL4L$OfSIQ?dH2/?dV%"a15< fI!D<k,~
Jan 15, 2024 14:23:54.101862907 CET	424	OUT	GET /wp-content/uploads/2019/09/mylovelybluesky-header.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:54.433202028 CET	345	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:54 GMT content-type: image/png last-modified: Thu, 19 Sep 2019 15:39:20 GMT accept-ranges: bytes content-length: 12288 date: Mon, 15 Jan 2024 13:23:54 GMT server: LiteSpeed vary: User-Agent
Jan 15, 2024 14:23:54.856420040 CET	520	OUT	GET /wp-content/plugins/simple-social-icons/symbol-defs.svg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325033.60.0.0; _ga=GA1.1.449002724.1705325034
Jan 15, 2024 14:23:55.192295074 CET	389	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:55 GMT content-type: image/svg+xml last-modified: Thu, 16 Nov 2023 03:35:32 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 14147 date: Mon, 15 Jan 2024 13:23:55 GMT server: LiteSpeed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.500520945 CET	365	OUT	GET /wp-content/themes/magazine-pro/style.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:51.831969023 CET	383	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:51 GMT content-type: text/css last-modified: Thu, 19 Sep 2019 16:07:01 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 8297 date: Mon, 15 Jan 2024 13:23:51 GMT server: LiteSpeed
Jan 15, 2024 14:23:51.832078934 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 3d 6b 8f e3 36 92 9f ed 5f c1 4b 10 6c 32 2b a9 e5 67 bb dd b8 e0 b2 93 7d 1d 92 dc 6c 26 77 f9 90 0b 02 5a a2 6d 65 64 51 2b d1 fd 48 af ff fb 81 4f f1 29 cb 9e 0e 70 3b 8b 8e 45 15 8b c5 62 b1 58 55 2c 52 37 6f Data Ascii: =k6_Kl2+g}l&wZmedQ+HO)p;EbXU,R7ow[,_=!nP&>DkfMQWkH3>6-W6",LKOP7ejg:&8&{HPnJUzJd5x~
Jan 15, 2024 14:23:51.832200050 CET	1286	IN	Data Raw: de 19 0b f9 fa 58 e5 a8 a1 08 c2 6f 40 8e 09 41 f9 69 13 b5 a4 c1 d5 8e cb c8 23 e7 4a 51 ed 51 53 10 ff cb 0d 2e 73 d4 9c f2 6d c5 8b 5b f2 5c a2 75 41 60 59 64 a7 fd 44 14 16 bf a1 f5 14 1d ee a5 98 24 cb 5b 74 00 e9 e9 00 9b 0f 2e c7 3e dd 6e Data Ascii: Xo@Ai#JQQS.sm[\uA`YdD$[t.>n{3MS{eaZ&jVzI}-VuC7/qLp3},;kE6\|BGk[5Ss}Q{\R?L']tT?Q3~R\|Hy(?m
Jan 15, 2024 14:23:51.832237959 CET	1286	IN	Data Raw: d1 78 3f 8f c6 fb 45 34 de 2f 75 56 79 15 1f 2c d1 23 7c f6 6a 3e 39 d4 0b 9f 4e 9b 5a 3d e3 0a 92 b2 72 62 e9 e8 99 a3 3a 67 9d d6 de 4f 6d e8 d4 81 56 b0 33 0b 56 08 ac 5e 92 cc 15 f4 dc 86 76 30 4f 15 ec c2 5e 57 56 ae ba 5f 29 e8 a5 0d 1d 5c Data Ascii: x?E4/uVy,#\|j>9NZ=rb:gOmV3V^v0O^WV_)\6(.U4fq8jMqg<#If%;^bVZltsd%CVw'Dhx<d"]<N"Te2U@EJed,em<
Jan 15, 2024 14:23:51.832329035 CET	1286	IN	Data Raw: 55 0e bb 97 58 95 42 e1 06 ef 65 bf 57 e7 a7 56 1f 36 4b ca 8d 93 0c 17 eb ad 9b 37 ec 30 80 3a 8a 42 1e 0b 42 50 a3 25 6f 6f 30 26 2d 69 60 7d 43 9b 20 ed 0d cd e1 56 85 d4 41 10 07 11 58 6a 38 e3 c5 b6 78 40 71 5b 3c 91 7d cb 72 50 8e 4d f7 44 Data Ascii: UXBeWV6K70:BBP%oo0&-i`}C VAXj8x@q[<}rPMDj=,'hzV$#6_1,mh%OtWlO+uV5\|%.4D?D}&AfW4ygH2X$nZF}dL;dXe,ww+4q
Jan 15, 2024 14:23:51.832425117 CET	1286	IN	Data Raw: 98 3a 08 ac 1b ad bd 49 28 61 39 31 7c 7f 2b 42 b5 ea e4 24 14 e8 0b 74 4e f9 11 a1 f7 32 dd d0 c7 02 b3 b2 fd b2 2f 89 50 4d 20 c7 7a 76 94 00 3f 91 e8 dd 60 71 2d 07 a7 b6 63 7e 5a b6 2a db d0 15 17 9d bd ba 89 dd 05 46 ed 8b d3 ae 30 ed 98 07 Data Ascii: :I(a91\|+B$tN2/PM zv?`q-c~Z*F0#.:ckAytcp9z#!b'9fnB5{>\#!b.A4Bjd@&~Wl!3Y\v@SuqQ/t}BI=;>qNr];aS
Jan 15, 2024 14:23:51.832509995 CET	1286	IN	Data Raw: 78 c0 41 d7 74 ba 42 b3 8f 5b 7f bc e4 18 a7 a9 0d 49 9d a4 9e 9b 87 27 dd 45 13 66 ed 90 9f ef 99 33 f4 1e 12 eb db 66 57 10 6f ab 36 15 3c f1 6b 45 db c2 52 f6 02 f8 23 38 96 6a a8 22 07 32 69 b7 7f 13 5a 53 83 3b ab 37 59 7d 82 77 3b 9e 72 2e Data Ascii: xAtB[I'Ef3fWo6<kER#8j"2iZS;7Y}w;r.Om>h6\+!eijjeqwH}2OlJ}mCS5@awyEX !0dnf(N3-k4{ZfD5}
Jan 15, 2024 14:23:51.832571983 CET	581	IN	Data Raw: ec d4 a0 45 70 4e 38 99 48 fe 4b bc 58 dd 5f 5b 2d 57 85 9e 88 b3 e5 d6 18 5e 0a e0 39 c5 23 f7 fd 1d 8e fb 13 c6 0c a2 bb 63 23 89 fa 19 f3 6d 7e 3f 4a 5f 3a 80 6b 3b 31 01 56 ab 9b 71 c1 22 83 35 b2 10 46 be 34 04 cf 17 b6 c2 2e 87 15 32 73 23 Data Ascii: EpN8HKX_[-W^9#c#m~?J_:k;1Vq"5F4.2s#U\|eDxzcW)JtV06u20/:,9{F!Xx%}EA8c=ma0>3E_hd~ihI[C/Di`,\|?wd5
Jan 15, 2024 14:23:51.851618052 CET	377	OUT	GET /wp-content/plugins/simple-social-icons/css/style.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.183094025 CET	820	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/css last-modified: Thu, 16 Nov 2023 03:35:32 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 438 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 53 c1 6e db 30 0c 3d db 5f a1 e5 b4 0d 55 d0 ee b0 83 83 9e f6 19 c3 06 c8 12 ed 10 a1 45 41 62 12 a7 c5 fe 7d 90 ed 66 4e 67 07 05 74 21 df 23 f9 48 91 db 84 5d 20 d0 89 2d 1a d2 68 d9 27 95 4e ed 4f 4b 26 a5 df cf 9b 09 d8 fc 7a 28 b7 77 b9 5f 9f 37 ea 4a 56 af 65 e1 30 05 32 97 4a a1 27 f4 a0 6b 62 7b d8 95 c5 19 9d ec 2b f5 04 dd ae 2c f6 80 ed 5e de ac 24 91 0f a0 27 c6 e3 d5 53 29 7b 8c 11 bc fc 60 e2 b8 2b 8b 06 89 de 3b ff 94 cb 0a 5f cb 82 4f 10 1b e2 73 a5 f6 e8 1c f8 75 f2 91 32 bf 33 b1 45 3f 2a 08 c6 39 f4 ed 60 dc 89 22 cc 81 b5 b1 87 36 f2 d1 bb 4a 79 f6 a0 3e 61 17 38 8a f1 b2 2b 8b 9a a3 83 b8 84 34 c4 46 2a 45 d0 64 8b 30 89 4e 72 21 d0 72 09 b0 14 70 55 a8 be 87 5e 3d 7d 0b fd 2d fe 4f f5 8d ff 7e 03 66 68 61 55 a4 ee f8 45 d7 dc eb 84 2f 43 6e cb 5e c0 4b f6 65 f8 0c f5 01 e5 0e 63 1d 59 db 95 86 fd 34 89 2c 28 76 86 de cd 2d e3 27 13 d1 78 b9 c3 38 4f 5b b6 44 b8 dd c0 a1 fa ad 4b a0 17 6d 08 5b 5f 29 0b 5e 20 be 39 1d 58 8e 46 90 fd d2 b8 06 8a 44 e3 53 c3 b1 5b 62 cc 2f 61 fd 67 b6 43 ed b1 72 fe a0 25 3d 1f 8c 1e 97 74 75 d8 e3 12 66 9d eb 19 b7 c9 46 00 af 23 18 07 51 67 31 39 67 e0 84 e3 20 4c 9d 98 8e 02 b3 fe 42 3f 9f f3 60 cd af ea ba cc 7a c4 fe bf d6 c2 12 86 4a 45 b0 f2 f9 f1 41 4d ef cb ec a4 f2 71 fe 05 6a bc 46 38 cc 04 00 00 Data Ascii: Sn0=_UEAb}fNgt!#H] -h'NOK&z(w_7JVe02J'kb{+,^$'S){`+;_Osu23E?9`"6Jy>a8+4FEd0Nr!rpU^=}-O~fhaUE/Cn^KecY4,(v-'x8O[DKm[_)^ 9XFDS[b/agCr%=tufF#Qg19g LB?`zJEAMqjF8
Jan 15, 2024 14:23:52.215590000 CET	369	OUT	GET /wp-content/themes/genesis/lib/js/menu/superfish.args.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.546442032 CET	481	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Tue, 08 Nov 2022 14:57:18 GMT accept-ranges: bytes content-length: 132 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed vary: User-Agent Data Raw: 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 28 22 2e 6a 73 2d 73 75 70 65 72 66 69 73 68 22 29 2e 73 75 70 65 72 66 69 73 68 28 7b 64 65 6c 61 79 3a 31 30 30 2c 61 6e 69 6d 61 74 69 6f 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 2c 68 65 69 67 68 74 3a 22 73 68 6f 77 22 7d 2c 64 72 6f 70 53 68 61 64 6f 77 73 3a 21 31 7d 29 7d 29 3b Data Ascii: jQuery(function($){"use strict";$(".js-superfish").superfish({delay:100,animation:{opacity:"show",height:"show"},dropShadows:!1})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.505743027 CET	375	OUT	GET /wp-content/plugins/captcha/css/front_end_style.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:51.837568045 CET	1108	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:51 GMT content-type: text/css last-modified: Thu, 14 Dec 2017 02:59:34 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 726 date: Mon, 15 Jan 2024 13:23:51 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 55 cb 6e db 30 10 3c 5b 5f b1 45 51 a0 35 aa 58 76 52 34 90 2f 49 73 68 0f 3d 04 6d 80 1c 0d 8a 5a cb 8b 50 24 41 6e 62 3b 81 ff bd 20 25 d9 52 1c 03 e9 cd 5a ee 63 76 66 48 4f c6 e3 04 c6 f0 e3 fe 2f dc 5c df de dd fc ba 86 0a 35 3a a1 60 e9 8c e6 14 75 09 9e b7 0a 7d c8 bb b2 42 3e 88 0a e1 46 58 96 2b 01 b7 ce 40 b1 85 7a eb a9 b6 0a d7 36 66 79 d2 12 e1 e2 6c 76 76 9e c0 78 92 24 93 38 e5 67 db 79 df 6f 92 9c c9 d0 67 51 28 23 1f 40 89 02 15 bc 24 a3 b5 71 65 ba 76 c2 e6 50 38 14 0f 69 08 cc 93 5d 32 19 c3 92 36 a4 2b 90 2d 00 69 34 a3 66 28 c9 5b 25 b6 e1 88 34 dc 1b 73 b7 c2 1a fd d1 8c c2 85 01 6d 76 0e da 68 84 0f 54 5b e3 58 68 0e 33 da f4 08 26 5f 99 27 8c 15 f2 d1 79 e3 72 b0 86 34 a3 0b 89 4b e3 6a 20 6d 1f b9 2d 89 bf 43 b2 15 65 49 ba 4a 15 2e 39 87 4b bb 99 1f 62 8e aa 55 17 dc 0f 5b af 88 51 91 e7 45 8d de 07 82 5f 92 d1 32 f0 1f b9 ca 81 58 28 92 f3 64 24 8d 0a 30 3e 66 d9 65 96 65 f3 36 6b 8d 4d 57 6d 5c 2d d4 db 0b 35 fb f7 97 6f 22 fd e4 d1 9a 4a 5e e5 30 cd b2 4f f3 64 54 8b 4d 3a 8c 14 66 93 7a 7a 26 5d e5 50 18 57 a2 4b 0b 13 d6 8b 92 79 2b 64 3c 7a 03 c7 88 71 c3 a9 50 54 e9 1c 02 31 3d 68 4c ac f0 18 da fc a4 13 f6 6c 16 86 d9 d4 39 7c 8b 1c 4b 85 c2 05 60 bc ea 93 eb 84 1d 34 67 51 28 4c 9d 59 0f 01 5a e3 89 c9 e8 1c 1c 2a c1 f4 84 27 5b 46 73 7c ed be 1c 2a 23 ca 45 f1 c8 6c f4 a9 71 12 95 8a 94 ba 8a 74 04 0c d9 70 fe 13 3a 26 29 54 47 52 4d 65 a9 02 06 45 1a d3 55 2b f1 74 c0 5b 8d 0b 45 35 f1 42 1b 26 89 47 de 3e 38 c6 61 d9 b9 c5 d3 33 e6 30 9d 0d 2c e8 ad d0 83 72 d2 71 6e a7 c4 bb d1 bd c9 e3 ee c0 95 34 95 8e e7 f0 6a 72 43 4d 77 41 02 3a 08 75 8e 15 fc 6f 71 16 ed d0 c6 9a 5b 38 dc 96 ea 2a 3e 34 8d b9 2f ba fc bd dd 43 64 a8 4e b7 61 9b cb c6 e6 10 ee df 73 4a ba c4 cd 50 98 81 23 7a 83 66 0e eb 5e af f6 b3 27 4a 1b e9 5c 92 c1 b4 71 f6 6b f6 e3 65 6a cc 7f 6a 6c 5e e0 d2 b8 68 89 f7 56 1f b1 4b b5 a8 d0 1f 5b ba 33 45 cb 70 77 0b cf 1b 8e 93 49 f3 af f2 e7 ee f7 e0 ad ef 29 d9 7b 8c 1c ca d6 2d ac 5e 3d 13 51 cd d8 f1 aa c6 92 04 18 ad b6 e0 a5 43 d4 20 74 09 9f a1 a7 d9 f7 cb 99 dd c0 97 d0 f5 94 0c 7b c1 9b 37 f9 20 6a fb dd 53 a2 0d ed 92 dd 3f 79 6a a6 dc 24 07 00 00 Data Ascii: Un0<[_EQ5XvR4/Ish=mZP$Anb; %RZcvfHO/\5:`u}B>FX+@z6fylvvx$8gyogQ(#@$qevP8i]26+-i4f([%4smvhT[Xh3&_'yr4Kj m-CeIJ.9KbU[QE_2X(d$0>fee6kMWm\-5o"J^0OdTM:fzz&]PWKy+d<zqPT1=hLl9\|K`4gQ(LYZ'[Fs\|#Elqtp:&)TGRMeEU+t[E5B&G>8a30,rqn4jrCMwA:uoq[8*>4/CdNasJP#zf^'J\qkejjl^hVK[3EpwI){-^=QC t{7 jS?yj$
Jan 15, 2024 14:23:51.862250090 CET	371	OUT	GET /wp-content/plugins/add-to-any/addtoany.min.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.193351984 CET	915	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/css last-modified: Tue, 11 Jul 2023 18:07:28 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 533 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 55 ed 8e 9b 30 10 7c 15 7a bf ee a4 80 72 b9 aa 95 8c da 17 a9 5a b4 e0 05 56 31 5e 64 2f f9 28 ba 77 af 30 c9 25 81 84 eb 1f 24 ec f1 ce ee ec ac 9d 80 d6 c2 60 8f 59 c1 56 d0 4a 5f 18 04 a7 72 96 3a 6d c0 55 64 d5 eb b7 f6 10 41 27 fc 9e 7c a0 6b 04 8d ae 3f 21 d6 d1 3a 1a 50 57 00 43 5e 7a 4d be 35 70 54 64 0d 59 4c 87 4f 5c 23 55 b5 a8 13 7c 03 d9 96 24 02 85 4d 2b c7 d5 65 e1 57 61 c0 fb 3f 3f 9e 86 95 bc 13 61 9b 3d fd 56 35 f8 e7 00 f2 59 67 35 96 64 51 bf 7c f0 58 b6 38 c9 21 82 55 b2 27 5d a1 44 d3 8d 3e 67 a7 d1 a9 75 9a f3 21 f6 35 68 de 87 10 e9 6d de 71 6e b8 d8 a6 25 5b 89 3d fd c5 90 7b da 82 d6 64 2b b5 8e be b6 87 74 87 4e a8 00 13 83 a1 ca aa 86 b4 36 f3 54 22 6a aa 0b eb 5d 16 6e a1 20 39 aa d7 94 77 e8 4a c3 7b 55 93 d6 68 a7 14 39 78 1c ce cd 49 7c 0b b6 bf 5f 82 61 90 7b 2a 9d 75 cf 86 fa b2 b7 4d 04 fd a5 dc b7 cd ac b3 73 bc b2 2c cf 17 90 6f b1 20 30 99 47 b7 a3 02 5f 7e 86 a4 4e bd 1f 02 de 98 21 2c ec 49 4b 7d 8f ec 3f 83 8f ba c6 0e 34 75 5e 0d 4d 59 16 78 2e 5c a8 aa e0 ce 4a df b2 27 21 b6 ca a1 01 a1 1d 4e e5 17 6e df 13 4f 82 d1 59 8b 59 d2 25 17 9d 5f cd 96 eb a1 b1 0f 4d 39 6e f7 39 14 db ca 71 67 f5 e8 c8 47 56 9d 4b 15 ce 0f 46 7b c0 3c da e3 ac 42 f2 7d 16 e1 a1 ce 0b a1 3f 3b 73 c3 79 ad fc 04 7e df b6 9f 0d d7 24 c8 30 f2 0f f7 34 ed 96 77 93 32 cf a8 74 d0 60 36 b6 68 01 3e e2 16 00 a1 ee f3 25 f9 68 82 bf 50 d3 b2 13 b0 b2 50 d3 48 35 bd 51 1b 38 c4 e3 dc 04 33 5c f7 a1 06 87 97 5f cb 19 15 6c 43 42 c1 b0 d4 54 99 e0 41 6e ef ce 69 80 db 0b 6b 64 1a 5e 82 f4 34 b8 e1 55 f8 07 0f b8 f5 19 44 06 00 00 Data Ascii: U0\|zrZV1^d/(w0%$`YVJ_r:mUdA'\|k?!:PWC^zM5pTdYLO\#U\|$M+eWa??a=V5Yg5dQ\|X8!U']D>gu!5hmqn%[={d+tN6T"j]n 9wJ{Uh9xI\|_a{*uMs,o 0G_~N!,IK}?4u^MYx.\J'!NnOYY%_M9n9qgGVKF{<B}?;sy~$04w2t`6h>%hPPH5Q83\_lCBTAnikd^4UD
Jan 15, 2024 14:23:52.236526966 CET	360	OUT	GET /wp-content/themes/genesis/lib/js/skip-links.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.568099976 CET	638	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Tue, 08 Nov 2022 14:57:18 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 249 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 75 90 c1 6a c3 30 0c 40 7f 25 0d 23 d8 90 b9 e4 da 60 0a 65 3d 04 c6 3e 61 43 b1 95 c4 34 95 4b 2c b7 1d 4d ff 7d 78 6b 59 2f bd 49 8f f7 0e 52 17 c9 b0 f3 94 f5 f0 15 76 ee 30 3a da 05 21 2f 79 0c 98 05 9e 9c e1 bc 3e c2 94 75 13 f4 7b 24 6e de f4 e8 0d a4 46 0d 10 06 15 62 9b 3c ea 45 25 6b d7 89 7f 51 5e 52 88 23 a6 55 5b 6f 62 1a 54 8f bc fd 63 9b ef c6 3e fa f5 cd 2d 0a b1 a8 b4 d6 cb 4f b1 5e c1 1c 70 44 c3 b3 a3 43 e4 b9 8d cc 9e 66 c6 33 c3 84 20 5f 96 4e 31 06 16 b7 56 31 f4 1f b0 47 59 14 0f a8 6d c8 e2 59 bf 56 b2 bc c3 ce 9b 18 84 94 d7 eb c9 91 f5 27 05 d6 6e 8f 48 fc ee 02 23 e1 b4 7e c2 45 9e ee 36 03 50 8f 79 f9 f8 b7 72 51 c9 d5 bd 62 06 33 fc 86 22 f7 f4 2c 91 f5 0f ba e8 64 54 82 01 00 00 Data Ascii: uj0@%#`e=>aC4K,M}xkY/IRv0:!/y>u{$nFb<E%kQ^R#U[obTc>-O^pDCf3 _N1V1GYmYV'nH#~E6PyrQb3",dT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49715	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.831470013 CET	373	OUT	GET /wp-content/plugins/captcha/css/desktop_style.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.159782887 CET	793	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:51 GMT content-type: text/css last-modified: Thu, 14 Dec 2017 02:59:34 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 411 date: Mon, 15 Jan 2024 13:23:51 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 94 c1 4e 83 40 10 86 cf ec 53 cc c5 a4 35 52 31 8d 51 e1 e2 63 78 6b 46 18 da 51 d8 21 cb b4 6a 9b be bb 59 ac d5 6a 81 12 13 6f b0 fb fd 33 f9 ff dd 9d 49 5a 69 ba 98 e1 13 be ce 5e 1c 56 b0 31 41 2a 85 b8 18 1c 65 89 d9 9a c9 07 c1 e5 3c 5e c8 8a 5c 43 2c 5d ed 91 8c 72 5c 16 9a 98 a0 92 9a 95 c5 7a 59 81 ca 2b 4a 4c b0 0e d9 66 f4 1a c3 55 94 98 20 7c a1 c7 67 d6 50 1d da 4f 78 1a 45 65 0d 84 35 85 6c 43 59 fa 52 61 29 eb 7e 48 7a 91 9e fd bd b3 82 72 fd b2 76 79 0e a5 ac 08 54 40 17 04 8e e7 0b 05 b4 19 b0 4d 9d 2f d0 2c d7 bc 26 90 1c b8 c4 39 c1 f9 e5 0f 77 b9 b8 32 86 e6 b3 40 a5 87 d1 55 14 9d 8d a1 4e b1 a0 d1 f4 02 a6 e3 03 9f a7 e1 32 a8 76 3d 80 3e 99 dc 67 d6 c4 d2 1a 9a 4f f4 ef 99 85 03 43 6b e1 db 82 38 8e b7 85 7c 94 3e 1d dd 07 97 92 55 72 07 c9 0d 0f a9 3b 92 2e 47 9d e1 b4 9a 6b b9 03 54 08 66 b3 c7 a5 aa d8 5f b3 a1 12 f6 4e 13 13 48 85 29 eb 5b 0c d1 e4 a6 4d be 5b c3 d4 4f 0e 5f e5 50 14 a0 e5 12 3f 9e f2 4e 2d da fc c3 6d f3 b2 d9 e6 6c 59 09 0a b6 84 ee db b4 19 ac dc 9a fb 4f ed 33 bd e5 0e 4b aa 7f 4a 37 26 88 ce 60 73 e4 68 1a 84 46 51 46 f3 71 b2 35 81 bf 0b 5d e0 f4 fa 6e 87 fa be fe 24 ff bd a9 fc 7b cb be 7e bd 7d 3a eb bf 03 51 48 31 e7 d3 06 00 00 Data Ascii: N@S5R1QcxkFQ!jYjo3IZi^V1A*e<^\C,]r\zY+JLfU \|gPOxEe5lCYRa)~HzrvyT@M/,&9w2@UN2v=>gOCk8\|>Ur;.GkTf_NH)[M[O_P?N-mlYO3KJ7&`shFQFq5]n${~}:QH1
Jan 15, 2024 14:23:52.207710981 CET	368	OUT	GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.535387039 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Wed, 15 Nov 2023 18:57:00 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 3226 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cd 5a 8d 8e db 38 92 7e 15 5b 9b f3 91 69 5a 76 3a b9 1d c4 dd 8a 2f 77 93 05 02 ec cc 2c 76 6f b1 c0 b9 9d 39 b6 54 b2 99 48 a4 86 a4 6d 75 5b da 67 5f 90 fa 97 a5 9e 74 76 b0 b8 00 69 93 fc aa 8a c5 aa 62 91 22 39 0d 0f dc d7 4c 70 84 cf ce 41 c1 44 69 c9 7c ed dc 1c a9 9c 68 ef 1c ac 6a 02 20 1c 9f 43 21 91 81 d8 84 f1 09 c7 da 15 88 13 86 67 b3 a9 29 82 2d fe 74 ff 19 7c ed 06 10 32 0e 7f 92 22 01 a9 1f 0c 46 ce c0 0f 31 48 7a 1f c1 6a ba 24 3b d0 2b be 61 db 1c e7 44 34 1d 69 02 f8 2c 41 1f 24 9f 94 b2 12 29 b4 d0 0f 09 b8 7b aa 7e 3a f1 4a aa eb d3 28 b2 0c 39 91 2d 09 66 30 bc 50 20 70 a6 9e e1 14 e1 e4 2f 0f f1 bd 88 66 b3 e2 d7 d5 e2 2f 5a 32 be fb 1f ba 1b 53 5a 93 4b 5a 72 3e d2 e8 00 2b e7 07 11 1c 22 70 72 4c c6 98 9d 9f 7f 06 55 92 55 6c d3 65 8e f3 9c 80 77 ce 6f 2a 85 27 56 65 16 22 bd 67 ca 0d 85 8c bf a7 9a 7a e7 9c d8 06 2d c1 90 93 29 d2 13 c6 95 a6 dc 37 c3 f9 43 49 87 71 69 2c 43 7c d3 15 a1 6f 7c c1 95 9e 80 87 b0 f7 ee 5c 54 b4 c7 e1 34 f9 81 26 37 15 a3 1b 51 b9 03 a5 3f f2 00 52 6f 49 b4 ab 40 7b 5d d7 3b 8e e7 79 b0 06 af 4b 7d 75 b5 5a 7c da 2c e7 6f b7 57 2f 16 ae 06 a5 11 e0 d9 0c 81 97 50 a9 e0 23 37 75 d2 e5 b9 f5 60 36 43 bd 5e e1 ea 15 c6 e4 07 9a b4 bc ad 40 d7 2e 26 1c e7 44 e7 37 8d 49 00 e1 72 78 dc 5b 7c 42 eb 5b 4e 63 78 b7 a1 f3 c7 ed 66 4e e7 8f cb f9 db 9f 57 db 97 18 ad 6f a9 94 f4 e1 1d 5a af ee 36 68 bd ba 20 c9 ec 00 5e e2 bb 2d 7e 89 17 ec c6 84 b9 95 bc d1 84 6d 45 38 e9 58 15 97 76 54 9e 76 63 aa fd 3d e2 f8 86 85 48 61 16 22 6b 26 e5 ee a4 38 24 ca b5 fd e2 5a 65 33 20 54 83 46 5d c2 f0 0d 44 0a 6a d7 6c 5c d7 ed b2 17 7d bc 8f 22 b4 b8 db a0 27 74 5f ec 18 de ba 31 4d 10 42 1b 4d 60 8b bd 77 80 f1 8d 76 0f 5c ed 59 d8 eb ba 31 9e 76 13 91 20 43 28 21 38 f8 80 10 d2 84 9b 80 61 21 ea 7b 97 1b ef f2 c6 bb 1c 1b f7 ee c0 94 5a d1 f9 03 4d ea b8 2c d1 b2 3f 66 1d 57 63 c6 24 26 87 10 96 e3 26 de 71 dd 9e e7 b9 76 65 11 44 01 02 72 0e a8 86 55 2b 6f 95 92 c2 9c 04 f4 41 84 27 80 2f 03 f0 3e 27 10 53 16 0d 40 34 27 26 31 0d 20 87 9c 84 2c 1a ea 2d ce 49 4c d3 11 55 1e 2d 68 38 15 7b 1c 22 f8 68 09 98 86 58 0d a0 47 8b 46 c0 77 7a 3f 00 a7 16 e6 87 f8 1e e4 00 7c 9f 93 98 f1 11 cd de 5b f0 09 cd 5e 58 82 31 cd 76 16 1d d5 ec 64 e1 51 cd 1e 72 32 8a f9 39 91 f0 cb 81 49 08 06 50 d1 a0 23 fe 90 39 d1 30 e4 dc 28 27 9a c5 43 2c 41 4e 0e 72 88 25 c9 73 4c 78 2b 0d 01 d7 92 81 f2 2e 49 9b 99 5d d2 20 9c 77 58 77 ed 3c aa 07 f8 cc d4 d0 97 4c ef a3 a8 c3 c7 42 34 b5 4c 7b aa 90 ae 52 fe 66 5b e7 77 5d a7 77 ee 6d b6 26 1d 75 16 0b 33 1d 9b ac c6 88 b2 59 0d 73 37 39 a8 3d 72 5d 17 90 c2 45 2a 72 9c a9 e7 e9 d9 ac c4 74 3d 57 79 5e 95 a0 58 a9 0a dd 7b ca ef a9 7a 7a c4 c5 Data Ascii: Z8~[iZv:/w,vo9THmu[g_tvib"9LpADi\|hj C!g)-t\|2"F1Hzj$;+aD4i,A$){~:J(9-f0P p/f/Z2SZKZr>+"prLUUlewo'Ve"gz-)7CIqi,C\|o\|\T4&7Q?RoI@{];yK}uZ\|,oW/P#7u`6C^@.&D7Irx[\|B[NcxfNWoZ6h ^-~mE8XvTvc=Ha"k&8$Ze3 TF]Djl\}"'t_1MBM`wv\Y1v C(!8a!{ZM,?fWc$&&qveDrU+oA'/>'S@4'&1 ,-ILU-h8{"hXGFwz?\|[^X1vdQr29IP#90('C,ANr%sLx+.I] wXw<LB4L{Rf[w]wm&u3Ys79=r]Ert=Wy^X{zz
Jan 15, 2024 14:23:52.535432100 CET	1286	IN	Data Raw: 08 ba 4c 5f e0 e1 69 f3 1a 82 be 6d ed 82 fa 34 5b 41 82 70 6e 37 34 cc e3 cd 9a ab d0 59 1e 22 58 69 12 32 88 82 15 10 90 52 c8 15 27 ae eb b2 1c 9f ad 14 43 e2 e9 22 2f 59 3a 0f 8a 8a 25 f6 78 51 49 8a 35 df c4 08 cb 0b 2f 88 be fb 96 9e e7 e9 Data Ascii: L_im4[Apn74Y"Xi2R'C"/Y:%xQI5/b:a41+2e#t%d+\WVfBC^E&}ao=$btz[Y;w}tXkWDN;y
Jan 15, 2024 14:23:52.535485983 CET	1044	IN	Data Raw: fc df 3d ce 7d 11 27 12 94 82 a0 a1 84 14 2e 48 63 15 88 13 8f 04 6d d1 25 2a e8 d1 09 5f 83 9e 2b 2d 81 b6 32 4a ea f7 ad 39 4c 17 08 bf 47 17 ab 93 90 ed 1e 85 ce 92 44 65 49 a2 7b 94 47 1e b8 b1 9a 27 66 e9 4c 04 e3 2d 5f 9f 24 1b 26 3e 49 a6 Data Ascii: =}'.Hcm%_+-2J9LGDeI{G'fL-_$&>I[6hFK#iR63;v(>4\ txGj5a\|k).G dP31EMnb$mB?X0X+4P{GHQ Rh3NSRa]
Jan 15, 2024 14:23:52.540754080 CET	370	OUT	GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.877161980 CET	873	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Wed, 15 Nov 2023 18:57:00 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 484 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 7d 52 4d 6f dc 20 14 fc 2b 5e 0e 0e 28 04 e5 56 c9 2e 89 a2 b4 b7 56 3d f4 b8 5a ad 08 3c af ad d8 0f 17 3f 6f ba b2 f8 ef 15 de cf 6c 9b de e0 c1 0c c3 cc 38 6f c7 0e 90 94 71 ee eb 16 90 be 35 03 01 42 e0 ec cb 8f ef cf 1e 29 cd bc 71 e0 98 e4 a0 1f a6 ad 09 19 95 6f bd ad 3e ad 03 58 d3 93 ad 8d 9e 94 52 38 b6 ed 42 6b 4e fa ea 54 e4 f9 d6 37 2e bb 5f 68 4d 8f 54 4c 31 96 d6 e3 40 99 bd be aa 86 86 e0 15 76 72 aa 7d 07 bd d9 40 81 d2 7a 24 63 a9 f2 a1 2b 4c fc 0b 62 2c 35 1e 07 e9 75 d2 37 13 4f fb 59 41 b2 1a d1 16 28 7b 13 4c 37 24 34 94 9b 33 14 7e 83 1d 09 b8 95 27 44 14 8a 6a 40 ce 4f 64 99 d5 08 6f d9 f3 38 90 ef 66 93 38 9b 35 9c 89 0e 3c 8e c9 c9 01 99 a6 2d ce 0a c8 bf 02 16 10 a3 28 dd d1 6d d7 0c bd 21 5b ef d9 ac 88 e2 f8 2a 17 fa 61 62 49 75 82 33 ad 69 d7 83 af 32 cc 73 e4 4a 29 33 df b5 09 3c 4b 4c 0a 7d 0b 0a 42 f0 81 83 10 22 96 4d c5 2f fe 18 c0 b8 dd 81 d8 f3 a3 2e 8c 89 48 ba 8f f3 b7 b5 c1 0d 1c 52 3f 03 cd 1e c8 46 74 50 35 08 8e 2d 8e 1a 67 53 f2 fc 1f ea e7 13 35 8c 2f 5d 43 e2 e0 2a e8 cb 69 79 b9 d1 9c a4 d5 53 7c 2f d9 ec c3 84 63 98 4b 92 76 15 45 8c ff f9 c4 87 39 5d c4 4b fa 44 f0 6b 84 b0 fb 09 2d 58 f2 e1 a9 6d f9 4d 2a 9d 9a 59 ee d2 32 6b b0 1f 69 89 a6 03 cd d6 57 4d 5c 07 18 7a 8f 03 b0 d5 8d 28 2b 1f 78 0b a9 3d f7 a5 fd 4c aa 05 dc 50 5d da db 5b 41 4b bb 52 03 d0 13 51 68 5e 52 01 d9 d6 b4 23 30 09 6a df 1f 35 b7 26 39 1d 85 28 ff 00 66 4f 1b 95 a6 03 00 00 Data Ascii: }RMo +^(V.V=Z<?ol8oq5B)qo>XR8BkNT7._hMTL1@vr}@z$c+Lb,5u7OYA({L7$43~'Dj@Odo8f85<-(m![abIu3i2sJ)3<KL}B"M/.HR?FtP5-gS5/]CiyS\|/cKvE9]KDk-XmM*Y2kiWM\z(+x=LP][AKRQh^R#0j5&9(fO
Jan 15, 2024 14:23:53.239758968 CET	376	OUT	GET /wp-content/plugins/wpfront-scroll-top/js/wpfront-scroll-top.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:53.567244053 CET	1023	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:53 GMT content-type: text/javascript last-modified: Sat, 07 Oct 2023 20:10:24 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 634 date: Mon, 15 Jan 2024 13:23:53 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 85 54 4d 8f da 30 10 fd 2b e0 4a d1 4c e5 b5 40 bd 41 bd 7b e9 a5 97 95 2a 71 8f bc c9 44 b8 35 76 e4 4c a0 08 f2 df 2b 27 7c a4 c0 ee 5e a2 d8 f3 e6 cd 7b f6 8c a1 6a 7d c1 36 78 c0 c3 f9 77 c2 c0 78 d8 9a 38 f1 3a 80 f8 b2 ab ab 18 3c 3f 35 45 0c ce 3d 71 a8 9f 8a e0 d9 58 4f 51 a0 24 3d 9d 4b ab 67 d2 e8 11 59 e1 c8 c4 95 dd 50 68 19 2c 4a af 6c 03 62 b1 b5 8d 7d 73 24 30 cb bc 6a 38 d4 80 aa 32 25 ad 02 b0 7a 6b 99 83 cf d3 3a 2f db 68 12 95 9c c9 11 ab 57 6b 5b 12 0c 45 3b ec 64 31 ae c9 ca b4 1c f2 04 c9 32 b8 55 60 75 43 7c 5e 8f b2 0c 60 27 e7 f4 ed eb 28 3d 37 15 53 44 ec a4 4b ee e2 b8 8a 3b 1e c1 e9 e9 4c 06 d8 59 5f 86 1d aa e1 64 56 c9 cd 33 9f 56 79 a8 aa 86 f8 05 2e 3e 8b a6 01 11 6a 53 58 de 0b 49 2f f3 c5 c5 f2 69 17 55 b3 0e bb 64 ef 78 2c 00 71 61 00 7b 05 d8 2d af d5 82 07 31 d4 10 32 a2 0c 50 86 a2 dd 90 e7 bb 90 ef 37 36 a1 6d 88 3c 53 14 f2 83 1b a2 c1 13 af 6d 73 ab 75 8e 1d 5e a9 1c 99 2d fd 47 f5 38 eb ce dd d0 2a 05 9c d9 0a 67 8b 3f 23 22 8f 07 5b 81 68 a3 13 5a eb 4b ba e9 a3 18 89 db e8 a7 b3 65 c2 90 a3 e4 f8 11 ee e0 55 1d 69 4b 9e 7f 50 65 5a c7 80 cb d4 cc a4 47 3d 36 60 f3 13 4d 9e 4c 15 1c 22 aa ca c6 86 21 75 cb 3d fa d2 f5 57 bc 34 9a d4 70 d3 80 49 99 6f 9d d3 da 9c d5 ce fb d2 85 b6 ca 99 c4 fb 00 5b 5c b1 ef c9 1b 92 74 6d 62 43 3f 3d bf 6b 63 c0 a1 b4 cd ab 79 fd 0c 95 65 9f 20 f4 6c 38 38 a7 8d ea 87 be ff 7e 9c b3 1c bc 4c ac 32 de 6e 0c 13 1c 2e c3 b1 70 9d bc 4c c7 79 be 51 4e e7 dd 29 e9 fe e2 64 00 b1 e6 8d 93 93 b7 50 ee 05 3e 62 9d bd c7 8a 5d 52 1f f4 ef 5f 2d c5 fd cd 00 b9 60 ca ff 7a f8 f2 fa f5 7d e8 55 69 d8 f4 af 4d 6e ab 68 36 94 65 57 02 c3 1c 41 34 e4 2a 81 53 ad 6f 03 1c 6a 81 c7 23 04 10 df 1b de 3b 7a 16 a8 98 fe 32 f8 34 22 a8 4c 5d 93 2f 57 c9 1c 99 52 f4 36 cf 06 fb 10 78 95 6c a3 4c 29 49 09 62 e7 e1 f4 10 e7 27 b3 1c ea bc 57 d9 03 3a ec 10 70 f9 0f 4e af e3 bb d1 05 00 00 Data Ascii: TM0+JL@A{qD5vL+'\|^{j}6xwx8:<?5E=qXOQ$=KgYPh,Jlb}s$0j82%zk:/hWk[E;d12U`uC\|^`'(=7SDK;LY_dV3Vy.>jSXI/iUdx,qa{-12P76m<Smsu^-G8g?#"[hZKeUiKPeZG=6`ML"!u=W4pIo[\tmbC?=kcye l88~L2n.pLyQN)dP>b]R_-`z}UiMnh6eWA4*Soj#;z24"L]/WR6xlL)Ib'W:pN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.834104061 CET	382	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.161217928 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:51 GMT content-type: text/css last-modified: Wed, 15 Nov 2023 18:57:00 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 1016 date: Mon, 15 Jan 2024 13:23:51 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 56 51 6f db 36 10 7e b6 7f 05 97 22 68 52 84 ae ac c4 69 26 63 c3 30 0c e8 cb 80 01 7d 2b 82 3c 50 e2 d1 39 84 22 b9 23 15 c7 2d fa df 07 92 76 2c a5 52 90 21 70 20 89 c7 bb fb be bb ef c8 c5 d6 35 ea 13 5b f8 86 00 0c 27 10 12 88 13 78 67 8d 07 f6 7d 3e 73 d6 63 40 6b 2a 26 6a 6f 75 17 60 3d 9f d9 47 20 a5 ed b6 62 f7 28 25 98 f5 7c d6 68 74 15 23 68 c2 d9 d2 3d 5d b0 c1 bf f3 bd 01 77 22 dc 57 0c 8d 87 70 b6 2a 4e e3 f7 7b c0 cd 7d a8 a2 d9 7a 3e db a2 8c 16 f9 a5 15 b4 41 53 31 9e 5f 9d 90 12 cd a6 62 c5 7a 3e ab 2d 49 a0 fc bc b5 24 f9 96 84 ab 98 b1 d4 0a cd 7e c1 d6 59 0a c2 84 f5 fc c7 7c be c8 30 95 a5 96 e5 e7 67 8c dc 76 c1 75 21 42 3d 84 2b a1 65 c5 62 05 2d 5b 42 3b 88 bb 28 9f 3f 1e e2 97 ee 89 79 ab 51 b2 77 45 21 0a 59 ae d9 c7 0f ec 4f dd 01 fb f0 f1 45 ec 05 1a 0c 13 09 5c 0c 0c 09 3c 84 80 66 f3 26 6b df d5 2d be 66 1e d1 49 f4 4e 8b 5d a4 c8 c0 4b 56 16 1e cc 54 66 71 73 46 cb 1b ab 2d 55 ec dd d5 75 7d b5 2a 12 d2 cf b1 71 46 a0 2a 81 1a e4 9b d2 17 b5 a5 30 69 3b 12 5e 36 97 e5 65 26 fa 0b c8 91 e0 de 89 d7 0a fd c2 9d 5a 5d 43 79 93 dc fd 43 c2 6c c6 2b f7 28 62 91 df 82 a7 33 a2 69 c0 4d 43 1a 9a 3b b1 6b c1 04 4e f0 6f 87 f4 7f 78 50 aa fe b5 c8 65 f8 0a 5a db ed 20 71 1e bd f3 c6 9a 40 56 27 79 0c f5 4c a0 45 c0 c7 7e 2f 70 63 03 4f 40 79 c0 64 3e 4d f9 4c 59 13 b8 c7 6f 50 ed 25 91 3e 6c f7 72 ce 42 5c f7 fa ae d6 b6 79 c8 c1 3a 0f 5c 69 2b 62 cb e6 78 22 e6 94 82 4e 65 32 96 f8 2c 58 57 31 5e 42 1c 0f 1a 54 38 a4 f2 8d a3 91 f0 54 b1 65 d1 1f 16 cb a3 58 f7 80 e6 b3 5a 34 0f 1b b2 9d 91 89 51 d5 17 7c d2 fb e2 26 b9 dc 4f a6 f2 2a be 1d 19 d3 e8 03 c7 00 ed 40 63 68 34 1a e0 7b c8 cf 93 a5 48 7f cb 09 0f 5c 8b 1a 74 55 d5 a0 2c c1 c5 e4 ba 50 01 28 17 c7 04 30 a1 62 27 ec a4 ef d1 3b 34 26 9b 3c a2 c7 1a 35 86 5d 6f 56 4f a5 79 a4 e2 b9 c5 ca cb f2 a6 94 a9 ee 7f 09 7a 60 9f 49 ec d8 4d 51 a4 0e b0 4e 34 c9 73 b1 f8 b4 ea 53 94 c6 f5 61 b0 ef 5f 0f 35 c8 e3 e7 d0 ca 24 24 76 3e d5 e9 f4 e5 88 3f b2 b6 77 31 d1 bb 13 33 70 82 85 f4 ac 61 84 af 03 f3 03 6a df bf 5f 4f 1c 82 23 6c a9 5a d5 aa 49 6c fd 1d c1 67 ba 96 7b ba 52 b3 66 24 b9 57 af fa 47 de f5 80 b4 eb b7 73 16 48 18 9f b4 6e 09 13 61 37 ee 29 fe d6 f3 99 30 d8 66 69 19 d1 42 c5 22 d2 c1 67 d9 91 c8 c8 96 45 51 b4 7e b0 18 b0 8d 02 55 9d 69 b2 4d ec 16 41 03 1b 0c 90 3d f0 c6 76 91 30 34 2a 1e 73 99 e0 3f 5a 90 28 d8 99 23 50 40 9e 13 c8 ae 01 c9 5b 7b a8 63 7c 3f 8f 8c 4f d7 e2 27 14 b5 46 13 fb 75 14 47 79 c0 f1 23 25 f0 00 3b 45 a2 05 9f b0 47 77 8a 6c 12 eb 91 b8 8a 91 0d 22 c0 59 21 61 73 9e b6 c6 6a 4d 18 5d 5e 1f cd 86 11 52 5e 83 10 47 85 ec bd ae 8a d3 e1 c2 72 18 ee c5 86 e3 29 74 8b 06 28 dc 45 a3 9e ec 56 fd 83 1c 8d eb c2 6d d8 39 Data Ascii: VQo6~"hRi&c0}+<P9"#-v,R!p 5['xg}>sc@k&jou`=G b(%\|ht#h=]w"WpN{}z>AS1_bz>-I$~Y\|0gvu!B=+eb-[B;(?yQwE!YOE\<f&k-fIN]KVTfqsF-Uu}qF0i;^6e&Z]CyCl+(b3iMC;kNoxPeZ q@V'yLE~/pcO@yd>MLYoP%>lrB\y:\i+bx"Ne2,XW1^BT8TeXZ4Q\|&O@ch4{H\tU,P(0b';4&<5]oVOyz`IMQN4sSa_5$$v>?w13paj_O#lZIlg{Rf$WGsHna7)0fiB"gEQ~UiMA=v04s?Z(#P@[{c\|?O'FuGy#%;EGwl"Y!asjM]^R^Gr)t(EVm9
Jan 15, 2024 14:23:52.161251068 CET	113	IN	Data Raw: f8 ed 44 a1 86 93 64 dd 74 e4 63 73 3a 8b 26 00 bd be a1 92 e8 45 1d 0f ee de 4e 09 4a 74 7a 70 93 3a 14 2b 89 6e 74 53 9c df 22 9e 49 20 a7 42 76 a4 4f ee 2e c6 56 a0 15 38 b5 16 40 67 60 12 e3 6d 33 f7 65 e8 e3 e2 04 4a e7 25 f6 3b 1b b9 01 3d Data Ascii: Ddtcs:&ENJtzp:+ntS"I BvO.V8@g`m3eJ%;=ONO71?yN
Jan 15, 2024 14:23:52.208832979 CET	364	OUT	GET /wp-content/plugins/contact-form-7/includes/js/index.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.535907984 CET	390	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Wed, 15 Nov 2023 18:57:00 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 4170 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed
Jan 15, 2024 14:23:52.536204100 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 5b 8d 6f e3 36 96 ff 57 14 ee 40 43 76 68 39 d9 5d 60 51 79 94 a0 68 bb 7b 3d cc 74 8a 9d 41 ef 0e ae 9b d0 d2 73 ac 56 26 55 92 4a 26 eb e8 7f 3f 3c 92 92 65 5b 4e 66 b6 7b 38 dc 01 83 c6 e2 c7 23 f9 f8 3e 7f 8f Data Ascii: [o6W@Cvh9]`Qyh{=tAsV&UJ&?<e[Nf{8#>=[52mIc 2V%\Ic# \|+:KCk\|'-~qn`X7umov,`EYe3k[e )dH~xViqHkd-5I)KKsr'
Jan 15, 2024 14:23:52.536292076 CET	1286	IN	Data Raw: 25 8a 03 24 68 61 d8 36 17 06 c8 b2 b1 56 49 92 ba 8f 72 23 6e 21 fc 76 1e 3e fc f6 81 00 49 97 1a c4 af 33 d7 94 af 21 ff 75 a9 3e 76 a3 45 51 2a 92 42 e2 da a1 88 e3 3a 11 75 0d b2 08 8b 73 f0 de 9b cd 06 44 fc d6 27 9b a6 b2 65 5d 01 49 77 5c Data Ascii: %$ha6VIr#n!v>I3!u>vEQ*B:usD'e]Iw\U8w5aTU9JGtSX}c$ucv64=E~\3QT,2M,{W2/nW%TE-.]uxLdshzAL&ec.`1wI'5
Jan 15, 2024 14:23:52.536365986 CET	1286	IN	Data Raw: c8 10 e3 f4 dc 71 6b 39 e8 81 ee e2 73 f7 fd 4e be 15 65 f5 1e f5 fc ec 1c 4d 64 87 02 ba 8c d7 c4 f1 61 cb 7e 3c ed 12 c8 c4 f5 70 9b 04 cc 30 b8 c4 27 62 87 97 a7 62 87 b9 56 15 64 01 d2 76 47 7d 26 d2 dd 2d fa 94 13 ee e8 4f 4e 99 f5 52 4a d0 Data Ascii: qk9sNeMda~<p0'bbVdvG}&-ONRJH<z#a}]@cw\|;1AuImNtJf\`~vp=8&==@e~k/BEwI)x?gvo~ :j0[W4UNso
Jan 15, 2024 14:23:52.536401033 CET	312	IN	Data Raw: b1 67 b9 bb c0 e5 c9 b7 68 e8 61 3c ed fe 6d 8c e5 dd 2b ba 8e 42 fb 8c 70 ec 3f a2 1d 60 28 e8 34 03 ab fc a0 d9 a8 41 11 b9 c5 80 59 c9 89 90 0f 9f 50 e8 c3 a4 c1 9e a8 ee 1d d0 3a 51 62 bf 49 1c 0d 1c e6 8b ad 4f a7 d7 7e 41 3e ba b0 b3 b5 c7 Data Ascii: gha<m+Bp?`(4AYP:QbIO~A>to%m>Xr$}!?4)^>cCWZYFwoocwU4-IZqi;Km',W6- )P)(,{=iob'\ u
Jan 15, 2024 14:23:52.549451113 CET	366	OUT	GET /wp-content/plugins/jcwp-copy-paste-blocker/jcorgcpbjs.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.878607035 CET	887	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Mon, 06 Jul 2015 02:10:46 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 498 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 94 41 6f 9b 30 14 c7 ef 95 fa 1d 5e 73 28 46 22 56 ab 69 dd 92 2a db 21 bd 4d 93 b6 b2 9d a6 1d 8c 79 04 82 b1 2b db 34 61 29 df 7d 72 80 94 90 a6 cd 75 f3 09 bf f7 7f 4f fe ff 9e cd f2 7b 89 ba a2 89 a4 4b ce d5 43 15 09 c5 73 98 41 52 4a 6e 33 25 09 f3 61 73 7e 06 00 c0 60 06 cb 46 8e 6b 8b 32 26 6d c2 ad 6d dd 7d b6 48 ed 5c 64 3c 9f 42 c2 84 c1 60 20 b8 53 fc 07 ae 6d 88 02 b7 dd 0f 65 a5 c1 79 18 1e 29 ff c6 16 18 b2 47 3c 4c 33 81 da fe 34 a8 8f a4 be a2 31 6c 81 53 18 85 4a eb ea 02 e6 4a 5a 94 16 9c 67 c8 0c 48 65 81 09 a1 56 18 7f 1e f5 aa 39 13 22 62 5b 43 1d 11 1f 36 75 23 a8 03 60 fe 6d f3 9d 25 40 18 1d 60 d8 b1 73 ab 61 47 62 c5 cb 02 a5 f5 29 77 67 58 db 02 65 49 76 dd a3 bd 9a e7 ce 3b 87 70 79 09 ed b6 75 45 05 ca 85 4d e1 13 5c 1d 14 ef 08 90 fd 1a 7f 5f 56 ef 6f 23 fa a0 f1 11 a5 bd c3 84 95 c2 92 ce 65 b7 34 da 52 cb 86 f5 73 a6 6e bb d6 07 48 86 83 77 26 2e 18 6d a6 fd 2a a5 5f 57 bf a9 92 66 5b 68 2c d3 b6 7f 39 ff 69 58 2d 2b 40 61 f0 2d 56 af a1 1a a5 b6 10 41 a4 e2 6a e4 53 6e 0c 19 b8 f2 c6 85 fa 33 2e 0d ea 71 83 d1 9b 36 21 a9 24 7a c1 db e2 97 75 ea 24 55 ee 0e 77 92 72 85 51 9e d9 93 a4 85 39 45 f6 82 a4 7f 55 69 94 c9 98 78 bd 9b e5 05 bd 47 be d9 1b db 2d d4 dd 54 db b9 b5 f0 3d c7 3d 70 26 3d 9f e6 58 c5 6a 25 8f 3d e6 de 8c bb 3f 99 9b 6d 44 b9 d5 e2 0b 56 6e 43 22 ba 4a 33 9e c2 6c 06 1f df c1 d3 13 f4 02 d7 d7 ef 07 91 c9 87 41 e0 66 a8 b8 19 2a 26 13 ff 3f 78 35 fe f9 59 fd 17 c3 33 8b 9f bc 06 00 00 Data Ascii: Ao0^s(F"Vi!My+4a)}ruO{KCsARJn3%as~`Fk2&mm}H\d<B` Smey)G<L341lSJJZgHeV9"b[C6u#`m%@`saGb)wgXeIv;pyuEM\_Vo#e4RsnHw&.m_Wf[h,9iX-+@a-VAjSn3.q6!$zu$UwrQ9EUixG-T==p&=Xj%=?mDVnC"J3lAf*&?x5Y3
Jan 15, 2024 14:23:53.230427027 CET	355	OUT	GET /wp-content/plugins/add-to-any/addtoany.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:53.557938099 CET	478	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:53 GMT content-type: text/javascript last-modified: Wed, 12 Sep 2018 12:06:04 GMT accept-ranges: bytes content-length: 129 date: Mon, 15 Jan 2024 13:23:53 GMT server: LiteSpeed vary: User-Agent Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 22 62 6f 64 79 22 29 2e 6f 6e 28 22 70 6f 73 74 2d 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 32 61 26 26 61 32 61 2e 69 6e 69 74 5f 61 6c 6c 28 29 7d 29 7d 29 3b Data Ascii: "function"==typeof jQuery&&jQuery(document).ready(function(a){a("body").on("post-load",function(){window.a2a&&a2a.init_all()})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49716	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:51.838839054 CET	383	OUT	GET /wp-content/themes/magazine-pro/lib/gutenberg/front-end.css HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.170320988 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/css last-modified: Thu, 20 Dec 2018 14:44:34 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 1667 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bd 58 eb 6f db 36 10 ff 1c ff 15 44 8a a2 71 16 3a 92 f3 84 8c 01 5b 3b 0c 18 b0 61 5b 07 ec cb 36 14 b4 74 b6 89 52 24 4b 52 71 dc 22 ff fb 40 52 b2 de b6 ec a4 6d 81 d6 e2 e3 ee 77 ef e3 5d 9e a3 9f 05 37 e8 2f fa 19 f4 08 1f f2 07 9d 5f 8e 46 13 e0 46 6d 70 2c b8 01 6e 90 9c ac 88 c6 3a 25 8c e1 85 e0 06 6b fa 19 d0 97 d1 c9 f6 23 42 e1 54 3e ce 46 4f 3d 77 15 2c 33 46 54 ff ed db 5d b7 19 51 4b e8 bd 3b 0d f6 de ed 67 3c bd ce 2f 5f 9e a3 9f 94 90 e8 1d 91 07 6a ec 68 85 26 4a 48 1c 13 19 71 61 ce a2 85 88 33 3d 8e a2 05 55 da 60 06 c6 80 6a 80 bd 9b dc 41 3a 1b 9d a4 44 2d 29 8f 50 30 09 21 45 c1 24 b8 b7 ff 21 ec 7f 0d d7 c5 40 14 17 83 fc e1 00 91 3c 7e ac e8 72 65 ac 14 c1 55 8e da 5a e1 2d 89 3f 2e 95 c8 78 82 de 09 26 d4 4b b9 ef bc a4 fb 65 74 22 49 92 50 be 8c d0 f4 46 3e a2 ab 9d 2e 54 de 9c cc c5 23 d6 2b 92 88 b5 25 52 7e 45 28 40 81 f3 44 a4 96 73 72 16 5c b8 bf 93 70 3c 88 2c b3 9a c0 06 1e 0d 22 96 70 6c 05 8f d0 ab c5 62 31 1b 9d d8 75 9c 40 2c 14 31 54 f0 08 65 3c 01 c5 28 87 83 89 7b 93 f4 18 b4 ef ce 4a 3c 78 bb b5 80 70 31 0c 03 22 3d 2c 1d 45 27 6d 4d 70 ca 57 a0 a8 19 46 7a a0 4c 85 20 03 90 ec a4 58 3b b8 55 4d 13 f8 3e a3 5d 9e a3 1f 19 5d f2 14 b8 39 c6 c3 d7 12 cf 99 88 3f e2 79 66 8c e0 13 62 89 31 58 98 8b ca 5e 6c d1 75 6f d1 94 2c 01 95 7b ed b0 9c 16 99 a4 93 95 3b d4 c3 ab b5 57 65 e6 36 2b dc 2c f3 2e 66 90 ce 21 f1 57 16 19 63 17 dd 5b 6b 9a 40 8b 53 f7 ad ca 96 bd 55 81 30 17 c6 88 34 aa 64 01 7b 17 af 69 62 56 5b e3 37 7c a1 e4 d1 92 25 26 2c 3e 43 38 0c 82 87 35 ba 44 53 f4 1d 0a 83 e0 b5 fb 39 9e 35 d5 bc ff f4 a3 47 12 21 77 c6 03 cc 61 60 4d 13 98 13 d5 8f ee 62 34 c9 cf 1c 22 49 9e ce 5c b1 29 99 bf f6 bc 25 59 02 36 90 4a 46 0c 60 fb f5 81 11 6e b3 e9 11 7a db 0a 77 1f 38 ed 77 aa d2 ed 0d 56 65 df e9 a7 d1 e8 87 14 12 4a 90 e0 6c 83 74 ac 00 38 22 3c 41 67 55 1c d7 a1 7c 1c 5b 70 2f 29 68 c3 8c af 67 6e a9 a9 ea a7 9d 18 29 ff 3a 18 8b 68 a8 ab 1e db c2 58 c2 2c 74 5c 2e 97 70 ee 7c e0 0c 86 1f 5e 5d 07 05 fe 67 82 0c 73 af 69 a2 2c d7 9b 6c 0b 9c 97 e7 b6 bd c8 52 fe 02 fd 71 35 0b 3a 92 16 69 42 b5 64 64 13 21 b7 33 db 91 6d f6 10 ab 7b d2 b6 71 09 4a 0a 4e 16 5b 88 7e b1 39 ee 18 79 06 98 a1 2b d3 17 a0 da 09 6a e7 e5 e6 b7 6f 34 ea bd ee f5 7d 29 dc 5b 57 78 8e 32 54 1b 81 af 62 ad 85 0f 1f 18 e5 1f 5d 57 b7 6d 19 70 d1 87 4d a7 d3 99 6d f7 54 02 aa e8 7a f2 4f ac 48 42 33 1d 21 1f 17 f5 ce 2d ce 94 b6 9f 52 50 6e 40 cd 72 09 17 24 a5 6c 13 a1 37 ef 09 83 35 d9 bc b9 40 9a 70 8d 35 28 6a af 6d 6d 6c 9f 45 f9 13 c5 37 14 46 11 ae 17 42 a5 11 ca a4 04 15 13 6d a1 ac 57 d4 00 d6 92 c4 60 e1 a9 94 b0 32 73 93 cc 88 ba 26 d1 df 44 51 d7 96 68 ab a5 5e 25 4d a8 c6 da 6c 18 60 fd 29 23 0a Data Ascii: Xo6Dq:[;a[6tR$KRq"@Rmw]7/_FFmp,n:%k#BT>FO=w,3FT]QK;g</_jh&JHqa3=U`jA:D-)P0!E$!@<~reUZ-?.x&Ket"IPF>.T#+%R~E(@Dsr\p<,"plb1u@,1Te<({J<xp1"=,E'mMpWFzL X;UM>]]9?yfb1X^luo,{;We6+,.f!Wc[k@SU04d{ibV[7\|%&,>C85DS95G!wa`Mb4"I\)%Y6JF`nzw8wVeJlt8"<AgU\|[p/)hgn):hX,t\.p\|^]gsi,lRq5:iBdd!3m{qJN[~9y+jo4})[Wx2Tb]WmpMmTzOHB3!-RPn@r$l75@p5(jmmlE7FBmW`2s&DQh^%Ml`)#
Jan 15, 2024 14:23:52.170397997 CET	764	IN	Data Raw: 92 5d 5a ab 6b 23 a8 d5 a9 1d 94 45 66 6c 53 74 90 3d 9c 16 24 51 c0 4d c5 2c 53 f9 88 b4 60 34 41 71 a6 ec 9e 7b 3e b4 0d 15 d4 34 7c 65 35 5c f8 da b3 f1 36 3a c4 6d 23 f9 d2 74 9b 7d 67 cd 43 eb 6e 5b 3c ab 2c cd 4f 99 30 a0 5d 42 8e 89 74 0e Data Ascii: ]Zk#EflSt=$QM,S`4Aq{>4\|e5\6:m#t}gCn[<,O0]Bt@2c!)9,V]^\|"] \|w:HZ%\_Y/$wUe)4F}"R]~=ntUi_wNUr/]nN4$!Oe^0*i<\c7+-x3
Jan 15, 2024 14:23:52.211436033 CET	364	OUT	GET /wp-content/themes/genesis/lib/js/menu/superfish.min.js HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:52.542500019 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:52 GMT content-type: text/javascript last-modified: Tue, 08 Nov 2022 14:57:18 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 1891 date: Mon, 15 Jan 2024 13:23:52 GMT server: LiteSpeed Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 57 5b 8f db 36 16 7e de f9 15 32 b1 30 c8 0c 87 b6 f7 65 0b 19 aa 91 36 c5 26 45 83 cc 22 29 fa 30 9d 02 14 79 24 31 91 49 95 a4 c6 31 66 f4 df 17 14 25 5b 1a 67 da 7d b1 c5 73 48 9e db 77 2e 5c bd ba 4a 5e 25 9f ff db 82 3d 26 1f db 06 6c a1 5c 95 bc 07 dd 26 b7 75 5b 2a 9d dc 24 0f 1b f6 6f b6 59 87 9d 3f 9a e6 68 55 59 f9 04 0b 92 fc 6b bd f9 2e f9 d9 40 9d fc a0 ac a8 ae 92 fe b6 37 2d af 93 5a 09 d0 0e 64 d2 6a 09 36 f1 15 24 ef df 7d 4a b8 96 c9 7f 6e 7f 19 d9 2e bd 4a 5e fd a3 f2 be 49 57 ab c3 e1 c0 4c 03 da 99 d6 0a 60 c6 96 ab 71 db 6a af fc cd b0 60 4d d5 3c 3b 55 ea 76 be bd 6c 6a 56 f9 7d 7d 95 bc 5a 5d 5d 6d 17 45 ab 85 57 46 63 4e 73 f2 88 5a 07 89 f3 56 09 8f b6 0f dc 26 22 3b 6d 20 8f 91 f0 98 8b 1f 6b ee 5c 8a 5c 71 93 5b e0 52 d8 76 9f 23 ba 07 dd 9e 39 9f dd 0d 68 9e d7 20 11 e5 5a 54 c6 9e 79 07 e5 ab 9b b6 8e 47 5e 5b 6b 0e 67 1e 0f 4b 87 3a 2a 9f 8b ce b3 d5 1f 78 b7 b8 fb fd f0 fb 6f f7 af 7e 53 5a 9a 83 4b 6e 2b a3 81 0c 44 ac fa e5 93 ba e5 f2 49 dd 1a 49 56 8a 79 70 1e 6b fe a0 4a ee 8d 65 ad 03 fb ba 04 ed c9 d6 82 6f ad 4e f2 e5 92 63 14 bc 82 08 13 ce 61 24 5a eb 8c 45 14 35 46 69 0f 16 11 66 34 46 a2 56 e2 0b a2 9c 69 63 1a 42 f3 0e 13 0a cf d5 e4 99 34 a2 dd 83 f6 6c fc f8 a9 86 7e ed fc b1 86 41 2a ca a1 e2 0f ca 58 a4 74 c2 97 4b 54 a8 ba 1e be 57 0a f6 26 57 35 fc 95 f6 41 78 31 15 1e ef 5d 2c 72 76 1b b5 fe e9 01 b4 0f db ca 6c 1a 66 2a a3 a2 40 8b 4c b0 53 d4 b6 79 b0 bd 8f 86 5b 2e 71 71 9d a1 04 5d c7 0d e7 18 05 83 e5 0e 71 29 fb 25 4a 91 85 bd 79 80 b8 a2 fc 0e ee 71 41 3a 5a 9d 45 f6 02 47 57 b3 42 69 89 51 ad 18 ba 96 ac e1 be 8a d7 32 17 20 8a d7 34 12 7f 81 07 a8 1d 61 a3 1c 2c 59 65 1e 20 62 e8 3a 2a 36 e0 90 b0 42 d5 1e 2c be 70 45 c2 b1 af 94 23 4c 54 aa 96 16 34 96 ac 31 cd af cd 47 a8 41 78 63 09 ab 94 04 4c 98 ab cc 01 13 56 83 2e 7d d5 11 36 b1 09 4f b5 ec a8 ca e6 19 13 1c 29 b3 fc 45 8f 6c f9 59 3a e2 88 dc c9 7b 2c d8 24 21 48 47 3f 4f ee 1c a1 ce 23 10 f7 ee c6 9b 56 54 37 bc e7 23 42 c5 c8 9a d3 b7 22 13 4f 4f 39 15 19 6a b8 be 39 a2 2c cb c4 0e f1 d6 1b 94 0e 24 1a 4f 3e 5e dc 9a 0a 8a 9e 11 3a d2 d1 2f 33 bd 46 9f 32 51 1b 17 40 89 d8 08 8f d1 90 fa 5b 07 be 60 4e 98 e4 9e 63 e4 8a 0f 4d e0 3a 44 3a ba bf cc ef 21 5e 54 64 35 ce c9 56 d4 c0 ed 27 b5 07 d3 7a 2c 98 2b c2 b7 25 34 67 4e e5 b5 d2 a5 0b a1 1b 4b 33 46 21 98 88 30 d0 72 4e 0f d1 0d 12 f5 04 93 e4 31 67 16 3c 57 fa 96 fb 2a e3 4c e9 d7 d6 f2 63 af c1 dd fa 9e e6 ec 9f 21 ee e4 fb 9b 0d 0d b4 4b 41 91 dc 70 0b da bb de 1b f9 04 a4 23 9a 9e 9e 70 ce 8c 7e 27 6b 60 82 d7 35 fe 12 8d 24 a3 84 61 df 72 c9 59 63 cd d7 23 de 9f 64 63 42 3a 6a fe d6 4f 72 37 1e d5 34 a7 82 60 92 e2 97 7c 77 fa cc Data Ascii: W[6~20e6&E")0y$1I1f%[g}sHw.\J^%=&l\&u[$oY?hUYk.@7-Zdj6$}Jn.J^IWL`qj`M<;UvljV}}Z]]mEWFcNsZV&";m k\\q[Rv#9h ZTyG^[kgK:xo~SZKn+DIIVypkJeoNca$ZE5Fif4FVicB4l~AXtKTW&W5Ax1],rvlf@LSy[.qq]q)%JyqA:ZEGWBiQ2 4a,Ye b:6B,pE#LT41GAxcLV.}6O)ElY:{,$!HG?O#VT7#B"OO9j9,$O>^:/3F2Q@[`NcM:D:!^Td5V'z,+%4gNK3F!0rN1g<WLc!KAp#p~'k`5$arYc#dcB:jOr74`\|w
Jan 15, 2024 14:23:52.542552948 CET	995	IN	Data Raw: 1c f8 91 3f 3f 4e 05 93 50 f3 63 10 de cc 5c 16 1b c0 28 5d 66 35 16 a1 1e 88 73 3c f2 3e d2 cf b2 6c ac b3 92 19 fd 96 6b 59 c3 a7 00 b6 e8 0e 20 59 96 2d 36 bb 70 67 fa 60 94 c4 30 78 e4 fb f5 72 09 4c 39 8c d2 4a 49 09 1a 91 e5 12 0b 66 34 0c Data Ascii: ??NPc\(]f5s<>lkY Y-6pg`0xrL9JIf4DBC{c:@}',bT:DsP sZDtIZw8$kDB(tD;Ar!T.tvypuA%3s!}C&rlPZn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49745	31.13.66.19	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:55.048747063 CET	323	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:55.144182920 CET	216	IN	HTTP/1.1 301 Moved Permanently Location: https://connect.facebook.net/zh_CN/all.js Content-Type: text/plain Server: proxygen-bolt Date: Mon, 15 Jan 2024 13:23:55 GMT Connection: keep-alive Content-Length: 0
Jan 15, 2024 14:24:40.241297960 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49753	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:56.264806986 CET	420	OUT	GET /wp-content/uploads/2019/09/mylovelybluesky-header.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325033.60.0.0; _ga=GA1.1.449002724.1705325034
Jan 15, 2024 14:23:56.595252037 CET	345	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:56 GMT content-type: image/png last-modified: Thu, 19 Sep 2019 15:39:20 GMT accept-ranges: bytes content-length: 12288 date: Mon, 15 Jan 2024 13:23:56 GMT server: LiteSpeed vary: User-Agent
Jan 15, 2024 14:23:56.595834970 CET	1286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 f8 00 00 00 c1 08 03 00 00 00 8d 16 34 9d 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb Data Ascii: PNGIHDR4&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:r
Jan 15, 2024 14:23:56.595899105 CET	1286	IN	Data Raw: d1 17 c0 7c c0 1d e5 7d e8 a6 a7 86 27 3c 0a e2 27 bf 10 11 7b 9f f4 3f 0f 6a 07 70 43 de 97 6e 28 a7 7b 94 55 f0 ca 84 c7 11 72 e3 9a 14 72 59 80 3b f2 de da ee b6 25 51 bc 4b 1e 15 d8 65 3e c4 76 00 37 e3 3d 9a c4 69 50 ba 5b af 47 4e 96 b7 a5 Data Ascii: \|}'<'{?jpCn({UrrY;%QKe>v7=iP[GNP2(9IZcMab9Oj'&Hd++bpx;BqhPcT6ZAL2\|MMGl8L>6=>8La?:dO
Jan 15, 2024 14:23:56.596025944 CET	1286	IN	Data Raw: 25 05 73 7c 00 90 f9 7f 1c 31 61 d8 e9 94 e3 3c 73 9b a4 95 d7 3f 11 5d 3b 6d fb ec 2c c2 af 69 69 4f 0a 9a 91 fc 6d ef b5 a1 f3 4e c7 93 67 ed 3d 42 3a 83 5c 43 ae 4b 8b 8b 78 e3 e6 d0 a1 1e 10 3b 7f 18 29 c3 78 a2 6f 70 3b db 7f 47 c5 f0 6f d0 Data Ascii: %s\|1a<s?];m,iiOmNg=B:\CKx;)xop;Go N}V?q65nAt% tv]07cm1._9xoVt-MmJg,Lji+ii'Qc0,G=o,O\|Qw\eQLuYH?{!kAx
Jan 15, 2024 14:23:56.596426964 CET	1286	IN	Data Raw: 1e 79 2d 25 e7 f6 e7 af b0 5e bf fb 40 3d f2 c0 38 b7 cd f8 8e 33 21 91 43 d9 82 57 c1 0a e9 24 11 e6 97 31 52 b5 70 d8 ef 49 a6 dc ee f8 1d 4c 95 8e 5a 6c 7d 8d d2 12 be 4d fc 48 f5 b8 ba a0 c5 c7 9d 60 8d 9f 4b ba 71 82 e5 7a 49 8f b8 42 6b a2 Data Ascii: y-%^@=83!CW$1RpILZl}MH`KqzIBklv3>p;[=cbcn#N46.RCt8[=5Aa^;U^$w:-e(4)7_IbIN\|Wnm'P)~d2)aT[w]ybiQ:
Jan 15, 2024 14:23:56.596635103 CET	1286	IN	Data Raw: de cb f8 14 e3 36 cc b7 1a 06 60 d5 f1 b0 5c 6d cd 05 fc 92 f4 26 e2 f1 b2 2f ba 2c 20 d3 cc c6 53 ae b2 d4 d2 d9 ad 1f 55 14 e0 0f 1b 89 8a dc 66 6b e0 d7 ab 4d ed 72 97 76 0c 0d da 17 91 2f 5b 07 3e 98 30 65 f1 ea a4 70 87 12 d4 70 01 f1 cd da Data Ascii: 6`\m&/, SUfkMrv/[>0eppb7\r}kRp?c}W3&)0p3=rmdW\(-4~`Xew3LObO/]bFLM*wHQ=8]m)@u,c{+"e\|v
Jan 15, 2024 14:23:56.596765041 CET	1286	IN	Data Raw: 3c 11 47 e3 d5 9f 1e 31 fc 1d be 9e fe 88 e2 a0 d4 b5 91 ab 0b 1f 3a d4 c7 f2 27 a4 b8 f5 3b cb bd 5f 30 3e ce e9 dd ed a7 0a 59 9b 64 fb 76 d4 96 45 01 76 bd 3f 53 8c fc 1c 36 5b 61 36 e4 2b b0 85 77 7a 8d f1 0b 35 e8 93 45 55 9a 22 b7 0d 9f 98 Data Ascii: <G1:';_0>YdvEv?S6[a6+wz5EU"_tS]Lw.~7#L^S}%Ybk,=s`~tS^M,63xu?>vtZEUNz/CTxG1o)am
Jan 15, 2024 14:23:56.596920013 CET	1286	IN	Data Raw: d3 d7 23 f0 73 99 2e 02 0b 47 94 2f 93 2c 92 45 b7 64 dc bc 7a 7e 8f 57 a7 1b c1 d8 d5 47 d7 d7 6d 84 ce 54 6a 03 4a 9f e9 f8 67 ca 00 88 ea df 30 fe 6d 1a 5f 85 65 6d 4e 68 4f bd b2 76 03 7e d4 93 38 5f b5 54 22 28 50 e5 69 67 50 1c ae 9e 74 d8 Data Ascii: #s.G/,Edz~WGmTjJg0m_emNhOv~8_T"(PigPt3l&j>FdsY%e{DnE-xaa0'UU,"B"lUvB/n4nu:}8jmoHPoI!(OL4Gc\|O>9,k
Jan 15, 2024 14:23:56.597099066 CET	1286	IN	Data Raw: e1 69 d0 74 3e 2c 1f 76 60 ee ba 85 3a 4f a6 5e 09 fb b7 f9 62 fc f6 99 fe 26 f8 b7 bc ca f2 1d 9a 4e 93 1d 1d fa 90 a6 2e 0a 7f 8b f6 17 9e a6 f9 85 a9 1d 14 32 40 cb 1b f7 b7 5c 40 c1 1d a2 ce d1 70 b7 ad 75 dc 18 38 b3 d7 d3 e4 d9 3c c1 6b a9 Data Ascii: it>,v`:O^b&N.2@\@pu8<kqGLo&gZFQ:l=~-HNq[/D7?qrhw1o-<!T0hSM[w-"`'SIDAT!ii'..
Jan 15, 2024 14:23:56.597222090 CET	1286	IN	Data Raw: d7 27 62 cc d0 a8 12 88 39 05 38 d5 d8 18 47 73 97 73 7c bd d4 ce 98 df 98 a0 07 02 82 62 e5 c4 5e 45 d7 b8 a0 7a 6a 96 19 f0 7b 73 5b bc 72 fb 41 6d 1d 52 7d b0 dd e0 13 69 7c b1 e4 c0 d7 a5 df 08 b0 5a 3b e6 75 31 71 30 d0 22 e0 eb fa 4f a6 90 Data Ascii: 'b98Gss\|b^Ezj{s[rAmR}i\|Z;u1q0"O`0CbL+(:k,S`^,<PL;Ulu~l[dX\|}X4YU7z_keN(Z6!.Z}3iTA"3Ih=y{IOG~aV9>'$LS=Ls
Jan 15, 2024 14:23:56.921914101 CET	714	IN	Data Raw: d6 1a 0d 7f 12 3e 3e 81 5e 95 e7 79 54 25 34 eb 3d 15 d3 50 fe b5 ff 18 1d 7b 92 aa 36 2b 43 1c 98 9f 26 0b ad a0 8f 3f 3d 75 75 82 33 0d 12 02 b1 61 e9 e0 5e 34 36 82 2c 0b 14 43 21 3b 71 e3 58 d2 ce bd cb d5 c9 6a a9 0c ef a7 b1 15 5e ef f6 e3 Data Ascii: >>^yT%4=P{6+C&?=uu3a^46,C!;qXj^or'Edd-fUZhq2Wt-wwp>L1<qu366XdC _'LJlaE\Sqx4D=Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49752	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:56.267914057 CET	421	OUT	GET /wp-content/plugins/simple-social-icons/symbol-defs.svg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325033.60.0.0; _ga=GA1.1.449002724.1705325034
Jan 15, 2024 14:23:56.600043058 CET	389	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:23:56 GMT content-type: image/svg+xml last-modified: Thu, 16 Nov 2023 03:35:32 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 14147 date: Mon, 15 Jan 2024 13:23:56 GMT server: LiteSpeed
Jan 15, 2024 14:23:56.600100040 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 7d 4b 73 1c 37 b2 f5 7e 7e 45 85 d6 2a 18 ef c7 5c 7b 16 1f 37 5e d0 8b 1b 9e d0 62 76 72 8b 63 32 86 b2 4c 77 9b 9e e1 af ff e2 9c cc 04 8a 92 c6 e4 e2 2e c8 ae 46 a3 f0 48 24 12 40 e6 c9 c4 b7 e7 c7 9f b7 f3 e5 Data Ascii: }Ks7~~E*\{7^bvrc2Lw.FH$@?7rn:r?w.l7w?^7_{\x/^.oGr~f~217owoNw
Jan 15, 2024 14:23:56.600172997 CET	1286	IN	Data Raw: dd 11 79 17 92 b4 c1 bb 99 4d b8 9d ef 9a 68 1e 6e e8 b4 c0 ca 2b 22 7d 28 6d f0 a3 f2 84 09 24 ce 7c 65 8f 30 9c 97 9d 4a 18 ba 1f c2 02 a1 6b dd b0 d9 0b 52 1b 5b 60 78 06 85 2d 5a 23 74 c5 ea 30 9b a0 6b f4 12 3d 47 5a 73 61 26 69 26 5d 43 9e Data Ascii: yMhn+"}(m$\|e0JkR[`x-Z#t0k=GZsa&i&]C[`Cf4nZ3VY8{=N{]LmkL~eZw~-+U;._3dB;mz2gg317+!gu^XiA&ti2`N&\J9'79C7-h-Gv\87k
Jan 15, 2024 14:23:56.600208998 CET	1286	IN	Data Raw: e0 41 f5 da 5d 1c e5 02 76 f1 19 63 b9 e3 10 03 a5 4a ae 28 23 a5 b1 45 e7 33 19 8a cf 35 a7 fb dd c5 da 77 17 46 7d 48 28 0c c9 8d 4a d9 9a f5 39 ba 54 1a 07 a1 b4 b0 bb 11 07 04 8e 4b 3e ed 50 57 e6 87 5d c6 1f 55 ba 91 eb 0e 56 8c 3b 17 87 2d Data Ascii: A]vcJ(#E35wF}H(J9TK>PW]UV;-ZNgqB[re3)hd<v{iR[LwEG7=j!(?% KG/m=F41HW>)ut2b.BK\
Jan 15, 2024 14:23:56.600286961 CET	1286	IN	Data Raw: 61 71 04 99 df c5 78 8f 5d 17 26 45 48 20 51 13 fa 9d 82 ab 1e a4 f3 6f 8b 94 28 bf 3f ff 26 6d d8 dd 68 1d ca 97 88 15 8a dd 73 cd 8b 48 ef a3 b6 fc 3d a8 ea 53 bf a6 02 3a bf 85 d4 89 a1 e5 d3 ee 7a 8e 09 8d 1d 1e c7 44 68 83 4b 04 05 7c ea 3b Data Ascii: aqx]&EH Qo(?&mhsH=S:zDhK\|;l2>dA'.7xc)?bm5o#mS&oq^hlIw?)C~,soC6sz0sioAMN`gBiqA2.O7?}?Xw2bKA
Jan 15, 2024 14:23:56.600342989 CET	1286	IN	Data Raw: c9 0e cc a1 82 48 87 f1 84 e0 ac 15 22 a3 68 69 ee 2e 14 b0 63 08 2e 1e 19 39 c2 fd 80 bd 0f 86 90 81 e6 54 d8 c9 4f ec 73 9b e0 35 3f bd 49 da 9a 27 13 b7 09 c3 a3 80 19 c7 c4 3a cf c9 ab 60 75 82 bc c8 9c d7 db cc be 12 c9 cf 2a 98 aa 4b 32 29 Data Ascii: H"hi.c.9TOs5?I':`u*K2)'-xvpJ6eZ 9`"&08;hU5'RGKs+`VUNGM~a)TlQjkW@O)&+z
Jan 15, 2024 14:23:56.600435019 CET	1286	IN	Data Raw: 68 7b 49 9b a5 cf 81 c0 60 2f cd 66 07 f0 ab a0 70 32 21 94 cd 43 b3 ea 43 3f e1 80 06 34 68 a0 b4 01 a5 06 67 15 9e 93 0b a5 00 06 cd 66 46 22 dc 66 ba e4 fc 2c 05 cf cc c9 77 98 3a cb 4d 84 12 cf 77 36 fe 8a 7c 44 c0 e5 ed 90 ba 1d 5a b1 1d 4a Data Ascii: h{I`/fp2!CC?4hgfF"f,w:Mw6\|DZJlvc!D-T9J\|0%m_iB[?3s W$^<3q%3X;Bd#7^[]f=>$@@.lmk.6O~ l H!!
Jan 15, 2024 14:23:56.600522041 CET	1286	IN	Data Raw: 0e c5 42 62 c1 f2 36 03 82 58 e4 87 38 e3 5a ad 10 19 33 5e 19 bb bd e0 1e d3 e4 29 24 1d 1a 8f e1 10 56 49 23 a2 b1 56 6d b3 c6 20 c0 76 bf a8 6a ba 25 af e1 23 b4 b7 61 6a c8 d9 5b 8b 12 e5 67 8b a6 1d 15 bb 03 89 5b 15 8c fd b8 57 2e 1a c7 c3 Data Ascii: Bb6X8Z3^)$VI#Vm vj%#aj[g[W.[1QF-:iElp<k^3f5QOKU7%PN4Gd346/6{IitbLH(~3,"1 @kqby70g0EqH3&#6(;
Jan 15, 2024 14:23:56.600611925 CET	1286	IN	Data Raw: 10 2e f6 8c a9 c4 9f b1 5f 10 e1 51 11 f5 80 71 1c 72 78 10 af 2a 24 63 6a 60 7a 07 ea f6 85 d6 68 25 aa ab 4d 94 a7 49 1b 34 7a 24 c9 18 26 e4 c1 d3 c7 8a 39 0a ad 64 21 5d 10 66 80 9e fb 94 90 89 64 86 f6 79 48 84 0b e4 88 8c 7f 41 db 01 84 42 Data Ascii: ._Qqrx$cj`zh%MI4z$&9d!]fdyHABQH3r4Av#!xHZ)$%&/0A&t.]Btko7>0)%+< Whj#GcF<,kOEL]4>EyTEXLPU.M44jRn
Jan 15, 2024 14:23:56.600676060 CET	1286	IN	Data Raw: 8a 59 42 70 0e 7f f3 8c 72 5c 70 47 51 91 87 9e 18 aa 0e 3a 3c de db c0 ba 01 6e ce 49 00 ae 41 91 df c4 b9 b4 41 64 55 4c 67 ec 05 8a d8 6b 80 e3 60 b0 c5 56 eb 49 28 93 e0 25 83 68 45 78 29 53 53 86 74 54 d1 07 23 7c e1 b3 0a b5 3b cf fa 91 e1 Data Ascii: YBpr\pGQ:<nIAAdULgk`VI(%hEx)SStT#\|;MRWXw03&e7DP'H(hx{JPxr5EI%XSCF$uE2\-X+""%#"BQq-b)[Q*.oP
Jan 15, 2024 14:23:56.929924011 CET	1286	IN	Data Raw: ac 1a a1 1f c0 02 f9 9f 87 78 9d a1 b0 1a 48 e0 84 77 a5 69 3e 4b 68 56 52 22 c8 8d 01 00 7f 45 5e 76 a0 17 4f a0 80 c1 d8 cf d8 81 54 14 c3 0b 00 ba 7a 94 15 97 7c 20 00 05 2b 5f 18 e4 a6 d1 64 5c 79 c5 05 ab e5 0a 3e 64 60 19 32 5c fd c5 38 0c Data Ascii: xHwi>KhVR"E^vOTz\| +_d\y>d`2\8X^N'{:&Q{Dsx(!6\|GRO{Q Qb!NI\b1;rNh)Dn(p(b1: >)owxwBCmV_$&`q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49756	101.198.192.8	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:56.361551046 CET	444	OUT	GET /11.0.1.js?637b2e9fc4469011b21d1b91abc7fa3a HTTP/1.1 Host: js.passport.qihucdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:56.717067003 CET	481	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:23:56 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: keep-alive Last-Modified: Wed, 28 Nov 2018 07:43:20 GMT Cache-Control: s-maxage=600, max-age=600 Expires: Mon, 15 Jan 2024 13:33:56 GMT KCS-Via: HIT from w-fc02.hkht;MISS from w-sc01.hkht Content-Encoding: gzip Data Raw: 37 35 0d 0a 1f 8b 08 00 00 00 00 00 00 03 25 cc 41 0e 82 30 10 05 d0 ab 90 6e d0 05 9d 44 13 8a a6 70 97 76 9c a6 35 41 60 e6 13 af ef c2 77 80 f7 da f8 5c e5 03 ff d5 06 b9 f4 d1 58 db 8e 8e 6b 52 13 cc ee 44 19 26 d7 99 f2 ec 2a b0 3f 89 6c f4 47 55 b1 9b e7 6d 25 43 42 63 4a 39 84 3c 4a 0a e5 5e 72 09 0f ff 36 b7 44 fa 77 4b 7f fd 01 4b b4 92 03 69 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 75%A0nDpv5A`w\XkRD&*?lGUm%CBcJ9<J^r6DwKKi0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49763	18.67.76.106	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:57.138730049 CET	418	OUT	GET /static/ab77b6ea7f3fbf79.js HTTP/1.1 Host: s6.qhres2.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" Accept: / Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:57.233628988 CET	692	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 478 Connection: keep-alive Date: Mon, 25 Dec 2023 08:00:12 GMT X-QSTATIC-HIT: 1 Last-Modified: Mon, 01 Jan 2018 00:00:00 GMT ETag: W/"5706bc27d76f6f72" Timing-Allow-Origin: * Access-Control-Allow-Origin: * Cache-Control: s-maxage=315360000, max-age=315360000, immutable Expires: Thu, 22 Dec 2033 08:00:12 GMT KCS-Via: HIT from w-fc01.lato;MISS from w-sc01.lyct Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 e7e267d22aaab825174c9e30c630f528.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P2 X-Amz-Cf-Id: XUvOH548Hm_svZ1ZV76Ph1Ff8XuWXoXPsOZOwZLNoVrJL3tBFUFk6A== Age: 1833825
Jan 15, 2024 14:23:57.233762980 CET	478	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 6e 3d 74 2e 73 70 6c 69 74 28 22 22 29 2e 72 65 76 65 72 73 65 28 29 2c 72 3d 65 2e 73 70 6c 69 74 28 22 Data Ascii: (function(e){function t(e){var t=location.href,n=t.split("").reverse(),r=e.split(""),i=[];for(var s=0,o=16;s<o;s++)i.push(r[s]+(n[s]\|\|""));return i.join("")}var n=/([http\|https]:\/\/[a-zA-Z0-9\_\.]+\.so\.com)/gi,r=e.location.href;if(r&&!n.test
Jan 15, 2024 14:24:42.235747099 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49773	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:23:58.232875109 CET	485	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6/3m7obc2.ey9kfsce4u4l6b9y0l1e1v HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:23:58.564198017 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:23:58 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Tue, 23 Jul 2019 07:36:18 GMT Connection: keep-alive ETag: "5d36b8f2-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49963	192.0.73.2	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:07.401005030 CET	420	OUT	GET /avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g HTTP/1.1 Host: 2.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:07.495440006 CET	407	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 15 Jan 2024 13:24:07 GMT Content-Type: text/html Content-Length: 162 Connection: keep-alive Location: https://2.gravatar.com/avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Jan 15, 2024 14:24:52.537281990 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49955	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:07.477093935 CET	901	OUT	GET /wp-content/plugins/wpfront-scroll-top/images/icons/17.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
Jan 15, 2024 14:24:07.804864883 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:07 GMT content-type: image/png last-modified: Sat, 07 Oct 2023 20:10:24 GMT accept-ranges: bytes content-length: 3172 date: Mon, 15 Jan 2024 13:24:07 GMT server: LiteSpeed vary: User-Agent Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 02 f7 50 4c 54 45 00 00 00 99 cc ff 99 cc ff 99 cc fe 9d cd fa a0 d1 fd 95 c5 f4 ab e5 ff 8b c0 f4 98 ca fc 87 b3 e1 9d cc fc 82 ac d8 9d d0 fd 3f 50 66 a7 cc f7 9b c6 f6 9f b6 e0 b7 d0 f3 cb df f8 70 92 ce 66 84 a9 77 9c c5 4d 6c b7 33 56 a9 aa c8 f2 85 b0 db 2c 51 ac 26 46 98 5c 79 bc 9a b1 dd 72 8a c5 67 81 bf 43 68 b7 5e 7a a2 49 5f 7e a0 bf ec a6 c3 ef af cf f7 87 a4 d6 57 72 b4 28 4d a9 59 73 98 45 58 74 75 97 d1 64 82 ab 51 6a 8d 59 7e c4 21 46 a2 0f 33 8b 3d 57 8b 24 42 87 bf d7 f6 4d 65 85 81 a2 d1 c9 dc f7 af ca f1 57 70 93 bc d3 f3 62 7e a6 b3 cd f2 b3 ce f3 70 90 bb af cd f4 b1 cf f6 80 a6 d7 68 87 b3 38 55 9a 50 6d 99 6e 8d b7 4f 6d af 36 5b ad 45 67 aa b4 ce f2 d2 e3 fa 76 97 c4 3c 4e 65 41 54 6f 6f 8d ba 9f be ec 46 5b 79 52 69 8b 8d ae de 6d 8b b8 b9 d2 f4 52 6b 8d 92 b5 e5 5a 75 99 7e a3 d6 81 a6 d9 65 84 ab 87 ae e1 95 ad dc 47 5b 77 4f 6d a1 83 9d d0 79 9a c8 c1 d8 f7 1d 3e 93 0d 33 92 39 4f 7d 5e 79 9f 93 b3 e1 70 8f bd 48 5e 7d 89 ab db 57 71 94 46 5c 7b 63 80 a6 b6 d0 f4 9e c0 ee 6b 8a b4 56 70 92 93 b8 e9 ff ff ff fa fb fe b4 c8 eb 38 84 ed 90 af e1 23 3f 9e 2e 7d ee 85 a7 de 25 77 ef bf d1 ee 79 9f db d1 dd f2 34 81 ee a7 c0 e8 9c b7 e4 28 4a a3 cb da f1 4f 92 ec 55 86 d2 06 31 9e 1f 73 f0 56 96 ea 6c 96 d8 3c 86 ec e2 ea f6 17 6e f0 29 7a ef 3f 88 ec 43 8a eb 3f 57 a4 15 36 9a dd e5 f4 47 8d ec 90 b1 de 44 77 cc 02 33 a6 31 50 a5 4c 8f eb 61 8e d5 98 a9 d4 53 74 bb 29 44 9e e7 ed f7 0f 68 ef c8 d5 ed 66 a0 e8 2e 77 e4 8e b8 e3 23 6d e0 07 4c c8 0d 38 a3 ab c2 e7 4a 7d d0 3f 75 ce 38 6f cb 3c 66 bf 3f 63 b3 f4 f7 fb ee f2 f9 09 62 ed 5e 9b e9 3f 82 e6 96 b6 e5 65 97 df 89 aa da 7d 9e d3 05 51 d3 4e 79 c6 72 93 c5 07 3b ac 1a 3f a0 79 aa e3 17 66 e3 85 b2 e2 38 7d e2 41 80 df 7d a8 db 5e 8a d1 66 8b cc 19 40 a4 32 4c 9e d4 e5 fb d7 e0 f1 bc ce eb 2f 7a e9 a0 bc e7 6f a5 e7 06 5c e6 5b 95 e4 39 79 da 58 8b d7 69 92 d1 19 5e d0 2b 64 c6 02 3f b8 49 62 ac 10 3f ab 22 73 eb c2 ce e7 9a c1 e3 8a ab e1 6e a1 e1 4d 87 da 32 70 d3 27 68 d3 4f 83 d1 1d 5a c4 44 6c c0 2f 5f bd 18 6c ec 54 8f e1 02 55 de 0b 5b dc 74 9a d9 43 7e d8 67 94 d7 60 85 c5 04 42 ba 1b 50 b8 2b 57 b7 35 60 b5 1e 4a b0 02 39 b0 3f 5d ad b1 c3 e4 47 88 e4 bb c7 e3 94 bd e3 87 9b cd 5b 87 cc 40 71 c4 72 9d d5 13 58 cf 73 92 bd 16 39 9e 73 a1 da 60 91 d7 33 6c c7 30 73 da aa 24 db 11 00 00 00 72 74 52 4e 53 00 04 07 09 16 13 13 0f 0f 0b 17 18 13 0d fd 35 24 fe fc fd fd 4c 34 fe fe fe 23 fe fe fd fe fe fe fd fb fb f7 f6 47 fe fd fd fd fd fc fb fb fe fe fb f9 f9 f8 f7 e2 de d4 d4 c7 c5 bb 9c 6e 64 4f 45 fe fc f7 fc fa fa f9 f3 ef e7 e7 dc db c8 c7 c3 b8 a7 73 73 72 62 5d 4e 3f 39 fb f9 f8 f7 f3 fd fd fd f9 ef df bf b2 9c 9c 9c 9b 80 80 80 80 47 d4 ee 5f 2e 00 00 08 aa 49 44 41 54 58 c3 cd 97 Data Ascii: PNGIHDR@@PLTE?PfpfwMl3V,Q&F\yrgCh^zI_~Wr(MYsEXtudQjY~!F3=W$BMeWpb~ph8UPmnOm6[Egv<NeATooF[yRimRkZu~eG[wOmy>39O}^ypH^}WqF\{ckVp8#?.}%wy4(JOU1sVl<n)z?C?W6GDw31PLaSt)Dhf.w#mL8J}?u8o<f?cb^?e}QNyr;?yf8}A}^f@2L/zo\[9yXi^+d?Ib?"snM2p'hOZDl/_lTU[tC~g`BP+W5`J9?]G[@qrXs9s`3l0s$rtRNS5$L4#GndOEssrb]N?9G_.IDATX
Jan 15, 2024 14:24:07.804910898 CET	1286	IN	Data Raw: 75 5c 13 61 18 c7 8d bb 0d 36 10 36 69 a4 25 54 b0 bb bb bb bb bb 25 c4 42 9d 30 50 10 70 6c 0c dd 00 a7 80 6c 03 a4 04 e9 92 92 10 09 49 41 94 12 01 bb f5 0f 9f bb 6d 1c 06 e6 3f fe 3e 1f b8 dd bb fd be ef ef 79 de f7 6e b7 2e ff b3 ba 76 d0 df Data Ascii: u\a66i%T%B0PpllIAm?>yn.vu?rR3R0MTUWP]Zo 'nGTY8o=p2U-G~l~=:jej U;p]~2![tj$DEFFFla4
Jan 15, 2024 14:24:07.804948092 CET	944	IN	Data Raw: b0 17 13 1b 09 b6 32 42 dd 15 a6 92 fa b8 52 80 f9 3d ec bd 6a f3 ea bc 03 92 f3 92 bd 8f 27 3b 9c 0e 3a ca 49 f7 75 68 60 d9 95 7b 61 04 1b 41 e5 e3 54 15 f6 2e 2a 02 5b 59 76 31 21 e4 e5 ec 08 ed 22 00 80 df cb de de e9 59 95 33 8d 53 15 11 5c Data Ascii: 2BR=j';:Iuh`{aAT.[Yv1!"Y3S\W~+p=',>^NF:\$a?J9STFXAz'{/"@7ETyqy7;T3\|m_:i%%<Vp%kN@pKxjXU[ kiy0qQA3/_'y
Jan 15, 2024 14:24:10.824507952 CET	946	OUT	GET / HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0 If-None-Match: "494570-1705317823;gz"
Jan 15, 2024 14:24:11.151326895 CET	432	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: text/html; charset=UTF-8 link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" etag: "494871-1705325041;gz" x-litespeed-cache: hit content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 49910 date: Mon, 15 Jan 2024 13:24:10 GMT server: LiteSpeed
Jan 15, 2024 14:24:11.151369095 CET	1286	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 79 53 1b c7 f6 37 fe 77 5c 75 df 43 47 a9 6b d0 d7 da c5 ee e0 5c 6f d9 1c 3b 8e 97 9b dc c4 29 d7 20 b5 c4 80 34 a3 cc 8c c0 c4 d7 4f 09 cc 6e 56 c7 36 06 0b e3 05 30 5e 30 60 63 23 c4 56 f5 bc 94 c7 ea 91 f4 Data Ascii: yS7w\uCGk\o;) 4OnV60^0`c#VWNh4F8SVfz9>}OO\|DJ0p8_oy<9y+4rz_ZkLy!pA\ojqkH{z/n=JX/zg~3e *rH/xrW\|
Jan 15, 2024 14:24:11.151472092 CET	1286	IN	Data Raw: 6c 6b b5 89 92 ff 92 9d a2 a1 7c c9 ee 11 25 7c c9 4e 2b 5f b2 3b 2b 6c 0e 9b e3 92 bd da 75 a5 da 75 c9 6e b2 98 c0 78 a9 33 d9 42 82 df 64 31 c9 2d fe bd b5 27 b7 f8 69 6b 72 8b ff 24 6b 50 6e a1 0d 8a 61 c9 83 4d 75 57 4d 1e 51 f0 70 0a 25 23 Data Ascii: lk\|%\|N+_;+luunx3Bd1-'ikr$kPnaMuWMQp%#^W5^[$KvldoYy{\|$]-CkrjsaEj>q9oW[8g#O96_U6NCeEbYr.
Jan 15, 2024 14:24:11.151552916 CET	1286	IN	Data Raw: a2 54 4e d7 3e e2 05 84 cd d9 05 f7 8b f2 6b 3d fe 45 31 ae 41 a6 b2 e9 12 ac cf 16 34 3c 3d 78 30 fb 18 aa b2 e5 fc 69 7d bd 02 a2 9b 91 35 d9 50 23 bb 78 0b b7 98 7d 9f d7 b6 f9 f0 47 b7 f7 a9 a1 05 b0 22 2c 82 ed c4 f7 a7 01 8d db ea 3f 75 5a Data Ascii: TN>k=E1A4<=x0i}5P#x}G",?uZs@iN5sf`qaNr#CM5`i5uA6PN2klc0-e-L)9qWe\|okY mV
Jan 15, 2024 14:24:11.151595116 CET	1286	IN	Data Raw: 2d 4e 87 f6 f0 03 03 91 4b 0a eb 32 3b 1a 74 71 bd bf 7f 43 57 da 34 b8 1c d5 96 8a 2a 4b 45 d5 87 c6 01 fc c4 fa 54 70 6d d0 6d 46 1a b2 70 b2 73 ef e5 2e 77 8d 45 fb bf 3e 09 ce aa 5a 8b b3 a6 c2 e2 ac ad fc 50 f7 1e 51 0c 40 9f ad 9c 14 b4 ca Data Ascii: -NK2;tqCW4KETpmmFps.wE>ZPQ@!Qp]iq`ke3<sX**xTeAeGjgWE}xPp9,.wzx7--jL.\|gU<TTQQmqX\'}Yxr:n;v
Jan 15, 2024 14:24:11.151678085 CET	1286	IN	Data Raw: 16 d3 d3 87 29 2d 70 5e f8 57 92 57 a0 f9 02 34 ed e2 18 f1 a3 88 da 45 fb 05 a8 2a 78 ba f8 51 74 14 6c b1 40 cf db cf 05 3f aa db ed cd ed d8 67 e6 74 f0 2f e8 2f d3 54 81 be 74 2d 07 e7 81 1f d5 55 4e 4b 05 7a a2 20 4d 8f ff 3e aa 9b 6c 33 05 Data Ascii: )-p^WW4ExQtl@?gt//Tt-UNKz M>l3=~rWz4R}zgR;",;CbM\|]SHhO;lZ6d3[CV i1fsXlD5=e[0Nz@q.Nz1Vn(mOH
Jan 15, 2024 14:24:11.151772976 CET	1286	IN	Data Raw: 92 3d c7 32 33 59 4c 5c 88 ff 6b 9a 37 59 4c df 9c a0 6c 28 62 33 16 4c 75 a6 da 0a 67 15 e7 f4 72 b8 ca 64 31 41 36 51 fa d6 8b 1b c2 f0 89 ee ad 28 66 c0 fd e1 8f 00 8f 3d 59 8d 4d b2 1d 8c c6 9d 25 fc 7c c3 bf 1a 1b 2b b9 e3 6d 58 ae 3e 74 46 Data Ascii: =23YL\k7YLl(b3Lugrd1A6Q(f=YM%\|+mX>tFY \|}R9t(x!~T[?[~t<[s\lD8We$G"/#]}ULk\|}=QIKj'A^dPj,&ty^4YL F&
Jan 15, 2024 14:24:11.151884079 CET	1286	IN	Data Raw: 7a b1 8d 17 64 2c 29 c7 a8 fb a7 bc c9 e2 33 1f 3e 70 cd 9c 9f 38 c9 52 c6 f6 34 65 16 03 65 96 b2 af 2e 9c b6 9e f9 b2 e2 9f 15 17 5c 65 e6 c3 06 f7 09 e4 64 36 e8 a2 fc 69 d0 b7 48 59 e7 8d ae 7c de 9b 62 98 7a 70 38 af bd 49 b6 73 5e b9 a1 8d Data Ascii: zd,)3>p8R4ee.\ed6iHY\|bzp8Is^'=5nV9ZYvN1Ia ;~4S1U]{u(,w,W!oFhpsJa~-3!o? +R?wWFI6+_spy,CVa9A(
Jan 15, 2024 14:24:11.151952982 CET	1286	IN	Data Raw: 07 74 c6 03 fd b7 f4 00 9d f2 54 3c 9a 1b 79 2a 4d 34 67 8c 15 0d e5 46 c6 4a 11 ca d9 3a 2a da 5e cf 61 ab f4 70 9c 72 55 3c 88 1b b8 2a b1 d8 18 95 72 54 3c 84 1b 38 2a 35 08 4f 4f 3d dd 53 6c 4c b3 28 e1 52 89 6e 64 3c 14 0f e1 8c 07 fa 6f c9 Data Ascii: tT<yM4gFJ:^aprU<rT<85OO=SlL(Rnd<oA8x7T1V4+AQVA8x7pURf8x7SjnNo9'Jl#xg<KFJ5p#c%:s9g\FJ\S<~)Pui21S*NS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49978	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:08.142067909 CET	802	OUT	GET /wp-content/plugins/wpfront-scroll-top/images/icons/17.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
Jan 15, 2024 14:24:08.470942020 CET	1286	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:08 GMT content-type: image/png last-modified: Sat, 07 Oct 2023 20:10:24 GMT accept-ranges: bytes content-length: 3172 date: Mon, 15 Jan 2024 13:24:08 GMT server: LiteSpeed vary: User-Agent Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 02 f7 50 4c 54 45 00 00 00 99 cc ff 99 cc ff 99 cc fe 9d cd fa a0 d1 fd 95 c5 f4 ab e5 ff 8b c0 f4 98 ca fc 87 b3 e1 9d cc fc 82 ac d8 9d d0 fd 3f 50 66 a7 cc f7 9b c6 f6 9f b6 e0 b7 d0 f3 cb df f8 70 92 ce 66 84 a9 77 9c c5 4d 6c b7 33 56 a9 aa c8 f2 85 b0 db 2c 51 ac 26 46 98 5c 79 bc 9a b1 dd 72 8a c5 67 81 bf 43 68 b7 5e 7a a2 49 5f 7e a0 bf ec a6 c3 ef af cf f7 87 a4 d6 57 72 b4 28 4d a9 59 73 98 45 58 74 75 97 d1 64 82 ab 51 6a 8d 59 7e c4 21 46 a2 0f 33 8b 3d 57 8b 24 42 87 bf d7 f6 4d 65 85 81 a2 d1 c9 dc f7 af ca f1 57 70 93 bc d3 f3 62 7e a6 b3 cd f2 b3 ce f3 70 90 bb af cd f4 b1 cf f6 80 a6 d7 68 87 b3 38 55 9a 50 6d 99 6e 8d b7 4f 6d af 36 5b ad 45 67 aa b4 ce f2 d2 e3 fa 76 97 c4 3c 4e 65 41 54 6f 6f 8d ba 9f be ec 46 5b 79 52 69 8b 8d ae de 6d 8b b8 b9 d2 f4 52 6b 8d 92 b5 e5 5a 75 99 7e a3 d6 81 a6 d9 65 84 ab 87 ae e1 95 ad dc 47 5b 77 4f 6d a1 83 9d d0 79 9a c8 c1 d8 f7 1d 3e 93 0d 33 92 39 4f 7d 5e 79 9f 93 b3 e1 70 8f bd 48 5e 7d 89 ab db 57 71 94 46 5c 7b 63 80 a6 b6 d0 f4 9e c0 ee 6b 8a b4 56 70 92 93 b8 e9 ff ff ff fa fb fe b4 c8 eb 38 84 ed 90 af e1 23 3f 9e 2e 7d ee 85 a7 de 25 77 ef bf d1 ee 79 9f db d1 dd f2 34 81 ee a7 c0 e8 9c b7 e4 28 4a a3 cb da f1 4f 92 ec 55 86 d2 06 31 9e 1f 73 f0 56 96 ea 6c 96 d8 3c 86 ec e2 ea f6 17 6e f0 29 7a ef 3f 88 ec 43 8a eb 3f 57 a4 15 36 9a dd e5 f4 47 8d ec 90 b1 de 44 77 cc 02 33 a6 31 50 a5 4c 8f eb 61 8e d5 98 a9 d4 53 74 bb 29 44 9e e7 ed f7 0f 68 ef c8 d5 ed 66 a0 e8 2e 77 e4 8e b8 e3 23 6d e0 07 4c c8 0d 38 a3 ab c2 e7 4a 7d d0 3f 75 ce 38 6f cb 3c 66 bf 3f 63 b3 f4 f7 fb ee f2 f9 09 62 ed 5e 9b e9 3f 82 e6 96 b6 e5 65 97 df 89 aa da 7d 9e d3 05 51 d3 4e 79 c6 72 93 c5 07 3b ac 1a 3f a0 79 aa e3 17 66 e3 85 b2 e2 38 7d e2 41 80 df 7d a8 db 5e 8a d1 66 8b cc 19 40 a4 32 4c 9e d4 e5 fb d7 e0 f1 bc ce eb 2f 7a e9 a0 bc e7 6f a5 e7 06 5c e6 5b 95 e4 39 79 da 58 8b d7 69 92 d1 19 5e d0 2b 64 c6 02 3f b8 49 62 ac 10 3f ab 22 73 eb c2 ce e7 9a c1 e3 8a ab e1 6e a1 e1 4d 87 da 32 70 d3 27 68 d3 4f 83 d1 1d 5a c4 44 6c c0 2f 5f bd 18 6c ec 54 8f e1 02 55 de 0b 5b dc 74 9a d9 43 7e d8 67 94 d7 60 85 c5 04 42 ba 1b 50 b8 2b 57 b7 35 60 b5 1e 4a b0 02 39 b0 3f 5d ad b1 c3 e4 47 88 e4 bb c7 e3 94 bd e3 87 9b cd 5b 87 cc 40 71 c4 72 9d d5 13 58 cf 73 92 bd 16 39 9e 73 a1 da 60 91 d7 33 6c c7 30 73 da aa 24 db 11 00 00 00 72 74 52 4e 53 00 04 07 09 16 13 13 0f 0f 0b 17 18 13 0d fd 35 24 fe fc fd fd 4c 34 fe fe fe 23 fe fe fd fe fe fe fd fb fb f7 f6 47 fe fd fd fd fd fc fb fb fe fe fb f9 f9 f8 f7 e2 de d4 d4 c7 c5 bb 9c 6e 64 4f 45 fe fc f7 fc fa fa f9 f3 ef e7 e7 dc db c8 c7 c3 b8 a7 73 73 72 62 5d 4e 3f 39 fb f9 f8 f7 f3 fd fd fd f9 ef df bf b2 9c 9c 9c 9b 80 80 80 80 47 d4 ee 5f 2e 00 00 08 aa 49 44 41 54 58 c3 cd 97 Data Ascii: PNGIHDR@@PLTE?PfpfwMl3V,Q&F\yrgCh^zI_~Wr(MYsEXtudQjY~!F3=W$BMeWpb~ph8UPmnOm6[Egv<NeATooF[yRimRkZu~eG[wOmy>39O}^ypH^}WqF\{ckVp8#?.}%wy4(JOU1sVl<n)z?C?W6GDw31PLaSt)Dhf.w#mL8J}?u8o<f?cb^?e}QNyr;?yf8}A}^f@2L/zo\[9yXi^+d?Ib?"snM2p'hOZDl/_lTU[tC~g`BP+W5`J9?]G[@qrXs9s`3l0s$rtRNS5$L4#GndOEssrb]N?9G_.IDATX
Jan 15, 2024 14:24:08.470999956 CET	1286	IN	Data Raw: 75 5c 13 61 18 c7 8d bb 0d 36 10 36 69 a4 25 54 b0 bb bb bb bb bb 25 c4 42 9d 30 50 10 70 6c 0c dd 00 a7 80 6c 03 a4 04 e9 92 92 10 09 49 41 94 12 01 bb f5 0f 9f bb 6d 1c 06 e6 3f fe 3e 1f b8 dd bb fd be ef ef 79 de f7 6e b7 2e ff b3 ba 76 d0 df Data Ascii: u\a66i%T%B0PpllIAm?>yn.vu?rR3R0MTUWP]Zo 'nGTY8o=p2U-G~l~=:jej U;p]~2![tj$DEFFFla4
Jan 15, 2024 14:24:08.471040964 CET	944	IN	Data Raw: b0 17 13 1b 09 b6 32 42 dd 15 a6 92 fa b8 52 80 f9 3d ec bd 6a f3 ea bc 03 92 f3 92 bd 8f 27 3b 9c 0e 3a ca 49 f7 75 68 60 d9 95 7b 61 04 1b 41 e5 e3 54 15 f6 2e 2a 02 5b 59 76 31 21 e4 e5 ec 08 ed 22 00 80 df cb de de e9 59 95 33 8d 53 15 11 5c Data Ascii: 2BR=j';:Iuh`{aAT.[Yv1!"Y3S\W~+p=',>^NF:\$a?J9STFXAz'{/"@7ETyqy7;T3\|m_:i%%<Vp%kN@pKxjXU[ kiy0qQA3/_'y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49998	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:12.452574015 CET	502	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6t3n7ebt2neo9cf-cs4i4s6e9n0e1g1 HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:12.788229942 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Tue, 23 Jul 2019 07:36:18 GMT Connection: keep-alive ETag: "5d36b8f2-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50399	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:24.573761940 CET	386	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6/3m7obc2.ey9kfsce4u4l6b9y0l1e1v HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:24.900907040 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:24 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:07:08 GMT Connection: keep-alive ETag: "5bd6a38c-0" Accept-Ranges: bytes
Jan 15, 2024 14:24:24.902029037 CET	403	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6t3n7ebt2neo9cf-cs4i4s6e9n0e1g1 HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:25.229372025 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:25 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:07:08 GMT Connection: keep-alive ETag: "5bd6a38c-0" Accept-Ranges: bytes
Jan 15, 2024 14:24:28.151566029 CET	410	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6y3r7abd2neo9cfecs4-4v6a9n0-1s1i HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:28.478699923 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:28 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:07:08 GMT Connection: keep-alive ETag: "5bd6a38c-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50420	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:26.447379112 CET	946	OUT	GET / HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325055.38.0.0; FCNEC=%5B%5B%22AKsRol_wrahsvHY4dGfMzxoJRGWNHS_NkmycOxFhASitXjG8f5CCjAydz0HYcyKh_3SfOIXzrk5VGTYy_iX6ZcNA7Clepo6XAgMsR8aF1nhT2J2qrPj_3B1rUrd9jgN31HTq2Gb_QAgcMWuUEiuP0I-d2RAkSs27Jw%3D%3D%22%5D%5D If-None-Match: "494871-1705325041;gz"
Jan 15, 2024 14:24:26.773667097 CET	379	IN	HTTP/1.1 304 Not Modified Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: text/html; charset=UTF-8 link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" etag: "494871-1705325041;gz" x-litespeed-cache: hit date: Mon, 15 Jan 2024 13:24:26 GMT server: LiteSpeed vary: User-Agent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50215	101.198.2.147	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:27.504646063 CET	509	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6y3r7abd2neo9cfecs4-4v6a9n0-1s1i HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:27.823067904 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:27 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Tue, 31 May 2022 08:31:45 GMT Connection: keep-alive ETag: "6295d271-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50685	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:38.755655050 CET	946	OUT	GET / HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325071.22.0.0; FCNEC=%5B%5B%22AKsRol9z8MonpKyuIblua22EusnP3OdYCwzreWGlaKb-n6z1B-NCwcu5YpWUk2QigPX26qkdRPdj2424FmhI5xUbSpalI8MpwjcaI6EE1WKBWz19pPLOTvuzOZjZO0EscZA6gkTEmV8WnqsW3lph6LvZMA1hb-18rg%3D%3D%22%5D%5D If-None-Match: "494871-1705325041;gz"
Jan 15, 2024 14:24:39.081692934 CET	379	IN	HTTP/1.1 304 Not Modified Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: text/html; charset=UTF-8 link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" etag: "494871-1705325041;gz" x-litespeed-cache: hit date: Mon, 15 Jan 2024 13:24:38 GMT server: LiteSpeed vary: User-Agent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49758	101.198.192.8	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:41.635552883 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50707	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:42.093342066 CET	511	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6y3r7abm2ier9pf-cr4a4b6e9d0i1s1- HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:42.424540997 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:42 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:07:13 GMT Connection: keep-alive ETag: "5bd6a391-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50595	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:47.465575933 CET	412	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6y3r7abm2ier9pf-cr4a4b6e9d0i1s1- HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:47.798563004 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:10:42 GMT Connection: keep-alive ETag: "5bd6a462-0" Accept-Ranges: bytes
Jan 15, 2024 14:24:50.536082029 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:10:42 GMT Connection: keep-alive ETag: "5bd6a462-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50684	103.130.153.151	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:56.545825958 CET	945	OUT	GET / HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325090.3.0.0; FCNEC=%5B%5B%22AKsRol_22VygbHZEXwI5JmjRZlx71WbdOm3jX_MlVDzz7sodf9eIdSp6D2sN962DWhZD4FrbMWrDOuVPoYELAwqagLNZqDgzix9EnsSuL91R7zOI8Qz3K9RifYQNC5MJzPREKe9ebhoZhuw0qzYilsKt1s2PMaT9Rw%3D%3D%22%5D%5D If-None-Match: "494871-1705325041;gz"
Jan 15, 2024 14:24:56.876126051 CET	379	IN	HTTP/1.1 304 Not Modified Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: text/html; charset=UTF-8 link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" etag: "494871-1705325041;gz" x-litespeed-cache: hit date: Mon, 15 Jan 2024 13:24:56 GMT server: LiteSpeed vary: User-Agent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	51035	171.8.167.89	80	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2024 14:24:58.056740999 CET	510	OUT	GET /so/zz.gif?url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&sid=637b2e9fc4469011b21d1b91abc7fa3a&token=6s3t7ebg2dei9wf-cr4e4t6o9o0f1-1s HTTP/1.1 Host: s.360.cn Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 15, 2024 14:24:58.384880066 CET	240	IN	HTTP/1.1 200 OK Server: openresty/1.15.8.2 Date: Mon, 15 Jan 2024 13:24:58 GMT Content-Type: image/gif Content-Length: 0 Last-Modified: Mon, 29 Oct 2018 06:10:44 GMT Connection: keep-alive ETag: "5bd6a464-0" Accept-Ranges: bytes

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49707	172.253.63.84	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:48 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:23:48 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-01-15 13:23:49 UTC	1627	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:23:48 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-mPdhEi2n_clDMd-W_CbyFg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:49 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-01-15 13:23:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49706	142.251.16.101	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:48 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:49 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-3rv9TkxZ0YqWm8v1GSIrTg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:23:48 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6223 X-Daystart: 19428 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:49 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 32 33 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 31 39 34 32 38 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6223" elapsed_seconds="19428"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-01-15 13:23:49 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-01-15 13:23:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	642	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/css/dist/block-library/style.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 104484 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"19824-3vpEvtHzXsiZz9NYypETkLylPmc" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 916364 X-Served-By: cache-fra-etou8220058-FRA, cache-iad-kcgs7200071-IAD X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d Data Ascii: ackground-dim-80 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-80:not(.has-background-gradient):before,.wp-block-
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 66 69 67 63 61 70 74 69 6f 6e 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 20 66 69 67 63 61 70 74 69 6f 6e 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 69 73 2d 63 72 6f 70 70 65 64 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 20 61 2c 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 67 72 69 64 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 Data Ascii: {display:inline}.blocks-gallery-grid:not(.has-nested-images) figcaption,.wp-block-gallery:not(.has-nested-images) figcaption{flex-grow:1}.blocks-gallery-grid:not(.has-nested-images).is-cropped .blocks-gallery-image a,.blocks-gallery-grid:not(.has-nested-i
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 6d 61 74 69 6f 6e 65 6e 61 62 6c 65 64 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 69 6d 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 69 67 68 74 62 6f 78 2d 7a 6f 6f 6d 2d 6f 75 74 20 2e 34 73 20 66 6f 72 77 61 72 64 73 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 29 7b 2e 77 70 2d 6c 69 67 68 74 62 6f 78 2d 6f 76 65 72 6c 61 79 2e 7a 6f 6f 6d 2e 68 69 64 65 61 6e 69 6d 61 74 69 6f 6e 65 6e 61 62 6c 65 64 3a 6e 6f 74 28 2e 61 63 74 69 76 65 29 20 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 20 69 6d 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 74 75 72 6e 2d 6f 66 66 2d 76 69 73 69 62 69 6c 69 74 79 20 2e 34 73 20 62 6f 74 68 7d 7d 2e 77 70 2d 6c 69 67 68 74 62 6f 78 2d 6f 76 Data Ascii: mationenabled:not(.active) .wp-block-image img{animation:lightbox-zoom-out .4s forwards}@media (prefers-reduced-motion){.wp-lightbox-overlay.zoom.hideanimationenabled:not(.active) .wp-block-image img{animation:turn-off-visibility .4s both}}.wp-lightbox-ov
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e Data Ascii: ation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-open){background-color:inherit!important;color:inherit!important}.wp-block-navigation__responsive-contain
2024-01-15 13:23:52 UTC	16384	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 32 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 72 65 61 64 2d 6d 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 2d 6d 6f 7a 2d 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 72 65 61 64 2d 6d 6f 72 65 3a 6e 6f 74 28 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 72 65 61 64 2d 6d 6f 72 65 3a 6e 6f 74 28 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 29 3a 61 63 74 69 76 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 72 65 61 64 2d 6d 6f 72 65 3a 6e 6f 74 28 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 Data Ascii: ont-size:1.125em;text-align:right}.wp-block-read-more{display:block;width:-moz-fit-content;width:fit-content}.wp-block-read-more:not([style=text-decoration]),.wp-block-read-more:not([style=text-decoration]):active,.wp-block-read-more:not([style*=text-de
2024-01-15 13:23:52 UTC	6180	IN	Data Raw: 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 61 62 6c 65 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 61 62 6c 65 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 61 62 6c 65 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 20 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 74 68 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 62 6c 65 20 74 61 62 6c 65 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 5d 3e 2a 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 74 61 Data Ascii: t}.wp-block-table table[style=border-top-color] tr:first-child,.wp-block-table table[style=border-top-color] tr:first-child td,.wp-block-table table[style=border-top-color] tr:first-child th,.wp-block-table table[style=border-top-color]>*,.wp-block-ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	627	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/css/dashicons.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 59016 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"e688-J7qcZ9DndfxObdYgEdr0w5AmmPw" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 389548 X-Served-By: cache-fra-eddf8230066-FRA, cache-iad-kcgs7200070-IAD X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 66 34 62 74 38 6d 32 38 78 68 62 32 59 79 6a 51 57 63 69 44 48 78 6b 37 52 47 67 32 57 38 44 46 57 78 62 79 59 45 32 30 63 78 2f 47 63 77 49 6d 63 78 4b 6d 78 57 59 79 49 47 58 72 33 6c 37 4d 50 70 2f 4d 41 6e 2b 50 7a 66 49 46 48 2b 43 6f 2f 34 32 39 36 51 32 76 2b 77 64 76 52 48 50 31 69 51 49 79 4b 4d 54 45 32 5a 73 5a 65 73 57 38 51 53 7a 6d 48 69 37 6d 46 4b 37 69 57 73 7a 69 54 73 37 6d 49 47 2f 67 41 6c 33 49 72 6c 33 41 7a 31 33 41 31 31 37 47 65 43 37 69 53 64 56 7a 49 6a 64 7a 47 4d 58 79 63 50 2f 49 54 66 73 6b 76 2b 42 35 50 52 6b 2f 4d 6a 54 31 69 43 50 75 79 4c 41 62 46 34 4a 67 64 73 32 4a 6a 37 75 4f 6a 37 4d 6d 58 2b 44 49 37 38 68 66 65 6a 42 61 36 2b 4b 78 6d 65 6b 70 30 73 35 54 42 58 4d 2f 6b 69 4e 67 32 39 75 61 4e 6d 4d 35 70 30 63 Data Ascii: f4bt8m28xhb2YyjQWciDHxk7RGg2W8DFWxbyYE20cx/GcwImcxKmxWYyIGXr3l7MPp/MAn+PzfIFH+Co/4296Q2v+wdvRHP1iQIyKMTE2ZsZesW8QSzmHi7mFK7iWsziTs7mIG/gAl3Irl3Az13A117GeC7iSdVzIjdzGMXycP/ITfskv+B5PRk/MjT1iCPuyLAbF4Jgds2Jj7uOj7MmX+DI78hfejBa6+Kxmekp0s5TBXM/kiNg29uaNmM5p0c
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 32 39 72 76 4d 55 69 33 31 32 33 57 75 51 37 34 6a 61 4c 66 45 65 74 74 38 6a 31 2b 33 61 4c 58 49 4d 33 57 4f 51 61 66 49 64 46 72 6b 39 33 57 75 51 39 63 35 64 46 50 6d 64 33 57 37 35 47 30 7a 32 6d 62 69 38 2f 61 68 2f 31 66 52 52 68 36 67 44 56 38 35 74 36 51 59 70 6d 55 31 64 49 30 63 2f 55 48 31 4b 30 6d 44 70 46 69 76 36 6d 6e 70 46 69 67 4b 6c 37 70 47 67 31 39 5a 45 55 62 61 61 4f 6b 6d 4b 51 71 62 65 6b 47 47 7a 71 4d 69 6d 47 6d 50 70 4e 69 71 47 6d 7a 70 4e 69 6d 4b 6b 48 70 52 68 75 36 6b 59 70 52 70 6a 36 55 6f 71 52 70 67 36 56 6f 74 33 55 71 31 4a 30 6d 4c 70 57 69 74 47 6d 2f 70 56 69 6a 4b 6d 54 70 52 68 72 36 6d 6b 70 78 70 6d 36 57 34 72 78 70 6a 36 58 59 6f 4b 70 34 36 57 59 61 4f 70 39 4b 53 61 5a 75 6d 43 4b 54 6c 4d 2f 54 4e 46 6c Data Ascii: 29rvMUi3123WuQ74jaLfEett8j1+3aLXIM3WOQafIdFrk93WuQ9c5dFPmd3W75G0z2mbi8/ah/1fRRh6gDV85t6QYpmU1dI0c/UH1K0mDpFiv6mnpFigKl7pGg19ZEUbaaOkmKQqbekGGzqMimGmPpNiqGmzpNimKkHpRhu6kYpRpj6UoqRpg6Vot3Uq1J0mLpWitGm/pVijKmTpRhr6mkpxpm6W4rxpj6XYoKp46WYaOp9KSaZumCKTlM/TNFl
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6d 6e 57 45 61 59 62 66 6a 2b 63 6c 2f 46 34 64 59 63 45 72 49 63 37 42 67 49 41 48 44 76 39 66 74 64 44 74 6e 45 41 53 62 6b 4c 37 5a 52 53 39 38 71 69 6d 66 38 44 58 4c 38 34 70 4f 73 62 72 2f 71 54 57 4d 63 36 49 6f 35 39 4f 57 56 46 43 30 57 69 56 66 6b 44 54 46 55 62 45 72 35 6b 51 58 2f 38 6d 6e 6d 67 70 6e 69 4c 71 74 6d 54 7a 47 51 37 67 62 30 72 47 48 34 51 35 4e 4b 75 54 4c 64 55 30 70 53 4a 5a 5a 55 44 48 4f 59 30 79 4b 46 70 66 76 56 39 43 76 4d 43 70 6a 51 47 79 7a 69 42 77 64 56 64 64 51 61 78 76 5a 62 59 79 59 37 75 56 4f 35 2f 4a 7a 6c 7a 76 64 79 38 39 38 45 50 30 4b 6a 58 59 75 76 2f 6d 78 7a 76 69 33 50 76 74 36 38 69 68 39 66 6f 68 47 54 4a 70 68 37 47 6a 54 4b 79 42 48 57 45 61 34 58 61 73 32 54 36 4e 57 5a 33 44 6f 46 59 74 65 4e 49 Data Ascii: mnWEaYbfj+cl/F4dYcErIc7BgIAHDv9ftdDtnEASbkL7ZRS98qimf8DXL84pOsbr/qTWMc6Io59OWVFC0WiVfkDTFUbEr5kQX/8mnmgpniLqtmTzGQ7gb0rGH4Q5NKuTLdU0pSJZZUDHOY0yKFpfvV9CvMCpjQGyziBwdVddQaxvZbYyY7uVO5/Jzlzvdy898EP0KjXYuv/mxzvi3Pvt68ih9fohGTJph7GjTKyBHWEa4Xas2T6NWZ3DoFYteNI
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 44 67 68 79 4b 78 4a 68 7a 57 5a 53 4a 54 49 4e 47 4f 69 48 48 59 39 4f 73 36 52 73 76 36 44 36 2b 36 47 35 56 69 38 74 72 5a 39 42 33 61 79 61 55 2f 57 35 4c 53 42 37 39 68 65 64 7a 62 53 64 70 70 48 42 32 73 2f 73 4b 35 78 45 4e 31 77 79 53 31 47 57 74 59 6b 50 35 31 78 38 65 33 62 53 66 70 30 7a 6f 33 51 46 52 67 58 79 38 7a 74 4d 47 71 74 56 72 4e 57 71 51 71 75 46 59 2f 59 52 6b 53 47 37 44 4b 69 34 2f 4d 30 71 70 46 42 75 67 58 56 37 32 78 36 72 6a 39 2f 56 6b 44 7a 64 37 62 52 79 46 44 47 42 33 51 4d 39 78 54 6a 4f 70 4e 56 44 45 50 4a 69 72 49 34 6a 51 77 43 63 6a 58 41 43 67 35 49 45 6f 6e 30 55 59 75 6b 6a 61 39 43 2b 46 32 47 61 7a 51 46 44 46 57 48 79 4d 73 6b 38 73 68 4e 4b 5a 4e 35 4e 32 49 52 72 42 30 52 38 77 42 7a 47 56 61 41 71 6f 36 63 Data Ascii: DghyKxJhzWZSJTINGOiHHY9Os6Rsv6D6+6G5Vi8trZ9B3ayaU/W5LSB79hedzbSdppHB2s/sK5xEN1wyS1GWtYkP51x8e3bSfp0zo3QFRgXy8ztMGqtVrNWqQquFY/YRkSG7DKi4/M0qpFBugXV72x6rj9/VkDzd7bRyFDGB3QM9xTjOpNVDEPJirI4jQwCcjXACg5IEon0UYukja9C+F2GazQFDFWHyMsk8shNKZN5N2IRrB0R8wBzGVaAqo6c
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 32 44 4d 4d 44 42 4a 54 56 39 59 2f 5a 7a 62 62 39 4c 38 72 6e 4e 33 58 6c 72 6a 76 76 4b 75 31 38 47 68 73 45 2f 55 7a 7a 2b 52 6c 59 39 78 78 59 36 78 6c 55 4a 51 32 79 44 6a 4f 35 73 2b 6c 37 43 64 6a 48 58 55 44 62 42 54 71 44 71 2b 52 69 47 7a 42 33 68 42 6a 48 30 43 53 42 53 77 6d 57 30 37 4d 74 50 67 55 54 51 6a 57 63 43 34 56 4f 4f 56 65 72 48 72 76 2f 57 4c 57 61 4b 37 5a 4c 79 4e 59 56 57 37 65 30 5a 72 35 63 7a 6a 63 31 53 37 63 56 2f 64 78 36 74 5a 50 66 77 52 49 76 69 72 79 45 64 77 72 74 79 67 53 66 66 77 48 71 75 77 58 48 4a 6d 45 30 43 4b 49 4c 6d 38 59 55 32 51 48 4a 49 46 67 57 6c 78 43 42 72 39 74 6f 48 55 30 75 7a 49 34 41 76 6a 2b 6a 2b 32 6e 6a 6b 57 32 54 34 31 4b 61 76 36 5a 78 6f 73 77 35 6d 6c 6c 57 58 6a 6c 35 53 62 74 76 4c 53 Data Ascii: 2DMMDBJTV9Y/Zzbb9L8rnN3XlrjvvKu18GhsE/Uzz+RlY9xxY6xlUJQ2yDjO5s+l7CdjHXUDbBTqDq+RiGzB3hBjH0CSBSwmW07MtPgUTQjWcC4VOOVerHrv/WLWaK7ZLyNYVW7e0Zr5czjc1S7cV/dx6tZPfwRIviryEdwrtygSffwHquwXHJmE0CKILm8YU2QHJIFgWlxCBr9toHU0uzI4Avj+j+2njkW2T41Kav6Zxosw5mllWXjl5SbtvLS
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 58 4a 42 63 5a 37 54 65 33 70 51 48 70 5a 4b 6e 31 41 50 68 76 50 65 31 78 2f 4e 70 39 75 75 68 4c 52 53 45 59 72 69 62 43 61 56 4f 35 6f 48 34 59 46 38 50 4b 52 5a 4a 44 6c 4d 72 74 50 33 41 38 43 47 79 59 72 36 30 2f 63 6e 62 64 61 6f 57 62 51 61 34 62 54 30 30 34 78 75 61 72 4d 47 35 58 36 54 43 67 78 76 61 72 4d 65 79 65 63 4d 38 67 2f 32 2b 67 66 44 34 51 33 70 43 45 63 6f 32 42 74 42 48 61 65 30 37 39 4d 77 72 6f 44 54 74 72 32 59 6c 66 4f 39 57 49 42 45 56 67 6d 53 6f 42 4f 57 68 45 4a 74 33 36 4f 41 75 30 6b 51 39 65 39 68 46 6f 6b 71 6d 30 71 72 76 6c 34 49 5a 4e 38 76 46 6e 67 2b 57 31 6a 66 66 4d 74 6c 31 31 61 6b 55 34 33 6d 44 6d 34 73 53 6f 72 49 31 78 63 55 42 66 31 45 43 6e 4e 4b 57 6a 59 56 30 5a 53 43 6a 4b 44 79 77 74 6e 4f 79 65 68 6b Data Ascii: XJBcZ7Te3pQHpZKn1APhvPe1x/Np9uuhLRSEYribCaVO5oH4YF8PKRZJDlMrtP3A8CGyYr60/cnbdaoWbQa4bT004xuarMG5X6TCgxvarMeyecM8g/2+gfD4Q3pCEco2BtBHae079MwroDTtr2YlfO9WIBEVgmSoBOWhEJt36OAu0kQ9e9hFokqm0qrvl4IZN8vFng+W1jffMtl11akU43mDm4sSorI1xcUBf1ECnNKWjYV0ZSCjKDywtnOyehk
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 4f 45 32 6f 4f 6b 38 47 4c 4e 72 75 64 49 78 78 6b 71 68 70 4c 64 6f 43 39 69 64 55 4c 33 64 6d 39 32 33 41 56 47 4b 46 4f 64 39 50 42 47 30 51 67 43 38 51 59 4c 70 4b 35 31 4e 31 30 4d 63 46 44 52 43 35 43 32 43 63 42 77 36 76 70 43 31 38 6f 6d 54 6b 4f 34 63 63 45 33 54 56 79 48 42 59 73 33 54 4f 30 31 65 37 6a 33 65 37 6a 7a 35 47 67 75 33 42 37 6c 72 4f 34 55 75 76 68 70 78 39 75 74 52 35 65 46 58 54 48 44 44 69 5a 73 77 79 6e 2b 47 6a 7a 66 4d 62 79 4d 52 38 55 7a 61 4b 74 38 53 7a 70 36 6e 77 47 38 31 6b 76 71 42 52 45 34 58 67 74 59 78 70 63 66 6d 56 31 63 2f 32 65 39 66 56 37 30 4a 4e 4c 33 55 62 74 37 5a 34 67 43 78 2f 4a 6c 56 31 72 4a 65 32 6b 54 62 53 63 35 41 50 42 2b 49 56 43 6a 6e 66 35 4e 73 30 49 67 72 66 54 75 32 79 50 72 53 4f 70 6e 47 Data Ascii: OE2oOk8GLNrudIxxkqhpLdoC9idUL3dm923AVGKFOd9PBG0QgC8QYLpK51N10McFDRC5C2CcBw6vpC18omTkO4ccE3TVyHBYs3TO01e7j3e7jz5Ggu3B7lrO4Uuvhpx9utR5eFXTHDDiZswyn+GjzfMbyMR8UzaKt8Szp6nwG81kvqBRE4XgtYxpcfmV1c/2e9fV70JNL3Ubt7Z4gCx/JlV1rJe2kTbSc5APB+IVCjnf5Ns0IgrfTu2yPrSOpnG
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 4a 45 49 76 64 73 54 2b 4e 55 6c 67 78 4e 61 43 4e 71 44 44 74 46 6f 6f 68 31 4a 6a 76 46 41 6a 6d 38 67 34 39 37 7a 77 38 6e 53 32 5a 33 51 54 61 4c 46 4a 41 4d 44 68 68 47 4d 45 7a 38 65 4c 58 45 53 7a 4a 50 4f 35 4e 79 66 69 36 4e 66 38 46 62 50 2b 4b 49 71 70 53 56 62 49 70 79 41 70 49 72 2b 6d 56 58 50 64 4e 49 31 6c 71 38 45 65 6c 50 69 79 4a 6f 4d 61 30 30 4c 76 69 54 4b 53 61 45 57 56 44 6d 32 6d 67 75 75 53 53 59 5a 39 41 2f 46 53 2f 4e 35 48 74 59 6d 2b 4b 61 34 67 48 75 4e 78 4f 33 43 4a 42 64 32 42 66 7a 49 4c 74 47 35 6b 4b 42 45 63 51 67 4a 2f 73 62 66 57 66 57 31 5a 74 34 31 52 59 55 58 56 4e 46 30 63 77 33 4e 58 39 33 78 5a 55 31 65 50 36 6e 71 31 5a 4d 75 4c 44 75 77 78 47 76 6b 57 53 30 4f 34 5a 51 31 42 50 64 6b 56 56 64 50 72 70 76 57 Data Ascii: JEIvdsT+NUlgxNaCNqDDtFooh1JjvFAjm8g497zw8nS2Z3QTaLFJAMDhhGMEz8eLXESzJPO5Nyfi6Nf8FbP+KIqpSVbIpyApIr+mVXPdNI1lq8EelPiyJoMa00LviTKSaEWVDm2mguuSSYZ9A/FS/N5HtYm+Ka4gHuNxO3CJBd2BfzILtG5kKBEcQgJ/sbfWfW1Zt41RYUXVNF0cw3NX93xZU1eP6nq1ZMuLDuwxGvkWS0O4ZQ1BPdkVVdPrpvW
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 78 6b 37 47 7a 2f 76 64 6f 61 55 65 35 52 49 4c 6a 53 66 70 44 70 45 6d 30 5a 43 33 2b 45 74 43 4e 30 68 46 36 63 52 73 64 63 2f 63 79 39 38 64 38 71 58 56 30 44 58 52 72 46 42 57 52 76 71 6b 4b 2f 6c 7a 63 4a 69 73 35 6b 49 73 74 52 4d 54 68 6b 59 74 76 69 45 38 6f 43 33 44 63 34 33 37 50 4c 2f 6c 39 2b 42 37 47 4b 38 4e 42 66 4b 42 6b 42 70 6a 77 50 53 41 70 79 57 46 49 43 51 73 61 6a 67 64 6f 6b 43 56 77 4c 6b 76 44 48 62 4b 45 37 5a 44 31 61 42 6f 62 66 77 75 52 6d 31 2b 6a 4a 43 64 4c 69 55 31 41 77 32 69 43 42 57 36 75 36 7a 2b 73 66 75 32 4b 32 34 31 56 43 76 51 62 31 77 4d 77 61 42 2f 41 35 79 33 71 4d 57 77 4e 53 62 6e 33 30 64 37 66 55 65 35 58 44 67 2b 7a 56 2b 67 66 4d 7a 63 66 52 6f 6c 4e 44 57 42 6e 47 4a 39 30 45 73 54 79 67 57 36 55 6d 68 Data Ascii: xk7Gz/vdoaUe5RILjSfpDpEm0ZC3+EtCN0hF6cRsdc/cy98d8qXV0DXRrFBWRvqkK/lzcJis5kIstRMThkYtviE8oC3Dc437PL/l9+B7GK8NBfKBkBpjwPSApyWFICQsajgdokCVwLkvDHbKE7ZD1aBobfwuRm1+jJCdLiU1Aw2iCBW6u6z+sfu2K241VCvQb1wMwaB/A5y3qMWwNSbn30d7fUe5XDg+zV+gfMzcfRolNDWBnGJ90EsTygW6Umh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	629	OUT	GET /wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/css/wpp.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	674	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1672 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * cache-control: public, max-age=31536000 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload content-type: text/css; charset=utf-8 ETag: W/"688-Bc45/Lw1pNh0j8i2RXnSno5HG4o" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 0 X-Served-By: cache-fra-eddf8230024-FRA, cache-iad-kcgs7200131-IAD X-Cache: MISS, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2f 2a 0d 0a 57 6f 72 64 70 72 65 73 73 20 50 6f 70 75 6c 61 72 20 50 6f 73 74 73 20 70 6c 75 67 69 6e 20 73 74 79 6c 65 73 68 65 65 74 0d 0a 44 65 76 65 6c 6f 70 65 64 20 62 79 20 48 65 63 74 6f 72 20 43 61 62 72 65 72 61 0d 0a 63 61 62 72 65 72 61 68 65 63 74 6f 72 2e 63 6f 6d 20 7c 20 40 63 61 62 72 65 72 61 68 65 63 74 6f 72 0d 0a 0d 0a 55 73 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6c 61 73 73 65 73 20 74 6f 20 73 74 79 6c 65 20 79 6f 75 72 20 70 6f 70 75 6c 61 72 20 70 6f 73 74 73 20 6c 69 73 74 20 61 73 20 79 6f 75 20 6c 69 6b 65 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 20 53 74 79 6c 65 73 20 74 68 65 20 22 53 6f 72 72 79 2c 20 6e 6f 20 64 61 74 61 20 73 6f 20 66 61 72 22 20 6d 65 73 73 61 67 65 20 2a 2f 0d 0a 2e 77 70 70 2d 6e 6f 2d 64 61 74 61 Data Ascii: /Wordpress Popular Posts plugin stylesheetDeveloped by Hector Cabreracabrerahector.com \| @cabrerahectorUse the following classes to style your popular posts list as you like.//* Styles the "Sorry, no data so far" message */.wpp-no-data
2024-01-15 13:23:52 UTC	294	IN	Data Raw: 75 74 68 6f 72 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 70 70 2d 61 75 74 68 6f 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 50 6f 73 74 20 64 61 74 65 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 70 70 2d 64 61 74 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 50 6f 73 74 20 63 61 74 65 67 6f 72 79 20 73 74 79 6c 65 73 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 70 70 2d 63 61 74 65 67 6f 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 2f 2a 20 57 50 2d 50 6f 73 74 52 61 74 69 6e 67 73 20 73 74 79 6c Data Ascii: uthor styles / .wpp-author { } / Post date styles / .wpp-date { } / Post category styles / .wpp-category { } / WP-PostRatings styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	619	OUT	GET /wp/plugins/cookie-notice/tags/2.4.13/css/front.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	680	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5064 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * cache-control: public, max-age=31536000 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload content-type: text/css; charset=utf-8 ETag: W/"13c8-KL3m2Y0caJpxLv4DepWS6foQOwk" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 3297918 X-Served-By: cache-fra-etou8220045-FRA, cache-iad-kcgs7200024-IAD X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2c 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 63 6e 2d 62 75 74 74 6f 6e 2d 63 75 73 74 6f 6d 29 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 41 72 69 61 6c 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f Data Ascii: #cookie-notice,#cookie-notice .cn-button:not(.cn-button-custom){font-family:-apple-system,BlinkMacSystemFont,Arial,Roboto,"Helvetica Neue",sans-serif;font-weight:400;font-size:13px;text-align:center}#cookie-notice{position:fixed;min-width:100%;height:auto
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 35 70 78 3b 77 69 64 74 68 3a 32 70 78 3b 74 6f 70 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 67 72 65 79 7d 2e 63 6e 2d 63 6c 6f 73 65 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 7d 2e 63 6e 2d 63 6c 6f 73 65 2d 69 63 6f 6e 3a 61 66 74 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 72 65 76 6f 6b 65 2d 63 6f 6f 6b 69 65 7b 6d 61 72 67 69 6e 3a 30 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 20 2e 63 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 Data Ascii: 5px;width:2px;top:3px;background-color:grey}.cn-close-icon:before{transform:rotate(45deg)}.cn-close-icon:after{transform:rotate(-45deg)}#cookie-notice .cn-revoke-cookie{margin:0}#cookie-notice .cn-button{margin:0 0 0 10px;display:inline-block}#cookie-noti
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 65 2d 76 69 73 69 62 6c 65 2e 63 6e 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2e 63 6e 2d 65 66 66 65 63 74 2d 73 6c 69 64 65 2c 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2e 63 6f 6f 6b 69 65 2d 72 65 76 6f 6b 65 2d 76 69 73 69 62 6c 65 2e 63 6e 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2e 63 6e 2d 65 66 66 65 63 74 2d 73 6c 69 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 44 6f 77 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 49 6e 44 6f 77 6e 7d 23 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2e 63 6e 2d 70 6f 73 69 74 69 6f 6e 2d 74 6f 70 2e 63 6e 2d 65 66 66 65 63 74 2d 73 6c 69 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 6c 69 64 65 4f 75 74 55 70 3b 61 Data Ascii: e-visible.cn-position-top.cn-effect-slide,#cookie-notice.cookie-revoke-visible.cn-position-top.cn-effect-slide{-webkit-animation-name:slideInDown;animation-name:slideInDown}#cookie-notice.cn-position-top.cn-effect-slide{-webkit-animation-name:slideOutUp;a
2024-01-15 13:23:52 UTC	930	IN	Data Raw: 69 62 6c 65 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 49 6e 44 6f 77 6e 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 31 30 30 25 2c 30 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 Data Ascii: ible}to{-webkit-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}}@keyframes slideInDown{from{-webkit-transform:translate3d(0,-100%,0);transform:translate3d(0,-100%,0);visibility:visible}to{-webkit-transform:translate3d(0,0,0);transform:translate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49718	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	586	OUT	GET /npm/jquery@3.7.0/dist/jquery.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 87462 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 3.7.0 X-JSD-Version-Type: version ETag: W/"155a6-Wp7qw02G6S5WYOD0+HIE8e0Mj/Y" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 1064240 X-Served-By: cache-fra-eddf8230028-FRA, cache-iad-kjyo7100045-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 63 65 2e 66 6e 3d 63 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 74 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 63 65 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 61 65 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 63 65 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e Data Ascii: ==t.toLowerCase()}ce.fn=ce.prototype={jquery:t,constructor:ce,length:0,toArray:function(){return ae.call(this)},get:function(e){return null==e?ae.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=ce.merge(this.constructor(),e);return
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 22 2b 28 74 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 69 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 75 65 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: "+(t+Math.random()).replace(/\D/g,""),isReady:!0,error:function(e){throw new Error(e)},noop:function(){},isPlainObject:function(e){var t,n;return!(!e\|\|"[object Object]"!==i.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=ue.call(t,"constructor")&&t.constructor
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 20 67 28 61 29 7d 2c 67 75 69 64 3a 31 2c 73 75 70 70 6f 72 74 3a 6c 65 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 63 65 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 6f 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 63 65 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 76 61 72 20 70 65 3d 6f 65 2e 70 6f 70 2c Data Ascii: g(a)},guid:1,support:le}),"function"==typeof Symbol&&(ce.fn[Symbol.iterator]=oe[Symbol.iterator]),ce.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){n["[object "+t+"]"]=t.toLowerCase()});var pe=oe.pop,
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 28 22 5e 22 2b 67 65 2b 22 2a 2c 22 2b 67 65 2b 22 2a 22 29 2c 6d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 67 65 2b 22 29 22 2b 67 65 2b 22 2a 22 29 2c 78 3d 6e 65 77 20 52 65 67 45 78 70 28 67 65 2b 22 7c 3e 22 29 2c 6a 3d 6e 65 77 20 52 65 67 45 78 70 28 67 29 2c 41 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 74 2b 22 24 22 29 2c 44 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 74 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 74 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 74 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 70 29 2c 50 53 45 55 44 4f 3a 6e 65 77 Data Ascii: ("^"+ge+","+ge+""),m=new RegExp("^"+ge+"([>+~]\|"+ge+")"+ge+""),x=new RegExp(ge+"\|>"),j=new RegExp(g),A=new RegExp("^"+t+"$"),D={ID:new RegExp("^#("+t+")"),CLASS:new RegExp("^\\.("+t+")"),TAG:new RegExp("^("+t+"\|[*])"),ATTR:new RegExp("^"+p),PSEUDO:new
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 4c 2e 65 78 65 63 28 74 29 29 29 69 66 28 69 3d 75 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 70 29 7b 69 66 28 21 28 61 3d 65 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6b 2e 63 61 6c 6c 28 6e 2c 61 29 2c 6e 7d 65 6c 73 65 20 69 66 28 66 26 26 28 61 3d 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 29 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 61 29 26 26 61 2e 69 64 3d 3d 3d 69 29 72 65 74 75 72 6e 20 6b 2e 63 61 6c 6c 28 6e 2c 61 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 29 2c 6e 3b 69 66 28 28 69 3d 75 5b 33 5d 29 Data Ascii: L.exec(t)))if(i=u[1]){if(9===p){if(!(a=e.getElementById(i)))return n;if(a.id===i)return k.call(n,a),n}else if(f&&(a=f.getElementById(i))&&I.contains(e,a)&&a.id===i)return k.call(n,a),n}else{if(u[2])return k.apply(n,e.getElementsByTagName(t)),n;if((i=u[3])
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 72 65 74 75 72 6e 20 46 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 46 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 Data Ascii: =t:e.disabled===t:"label"in e&&e.disabled===t}}function U(a){return F(function(o){return o=+o,F(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function z(e){return e&&"undefined"!=typeof e.getElementsByTagNa
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 72 3d 30 3b 77 68 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 Data Ascii: d"))&&n.value===e)return[o];i=t.getElementsByName(e),r=0;while(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):t.querySelectorA
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6c 65 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 3d 54 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 79 65 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 79 65 2c 74 29 3f 31 3a 6f 3f 73 65 2e 63 61 6c 6c 28 6f 2c 65 29 2d 73 65 2e 63 61 6c 6c 28 6f 2c 74 29 3a 30 3a 34 26 6e 3f 2d 31 3a 31 29 7d 29 2c 54 7d 66 6f 72 28 65 20 69 6e 20 49 2e 6d 61 Data Ascii: .ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!le.sortDetached&&t.compareDocumentPosition(e)===n?e===T\|\|e.ownerDocument==ye&&I.contains(ye,e)?-1:t===T\|\|t.ownerDocument==ye&&I.contains(ye,t)?1:o?se.call(o,e)-se.call(o,t):0:4&n?-1:1)}),T}for(e in I.ma
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 4f 2c 50 29 2c 22 7e 3d 22 3d 3d 3d 65 5b 32 5d 26 26 28 65 5b 33 5d 3d 22 20 22 2b 65 5b 33 5d 2b 22 20 22 29 2c 65 2e 73 6c 69 63 65 28 30 2c 34 29 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c 7c 49 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 5b 34 5d 3d 2b 28 65 5b 34 5d 3f 65 5b 35 5d 2b 28 65 5b 36 5d 7c 7c 31 29 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 65 5b 33 5d 7c 7c 22 6f 64 Data Ascii: n e[1]=e[1].replace(O,P),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(O,P),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]\|\|I.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]\|\|1):2*("even"===e[3]\|\|"od

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:51 UTC	623	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13577 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"3509-OtDBDlAawqm/oY+c1+cAIZs3hzg" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 5293380 X-Served-By: cache-fra-etou8220030-FRA, cache-iad-kcgs7200127-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 51 4d 49 47 52 41 54 45 3a 20 22 2b 74 29 2c 73 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 6e 2c 6f 29 2c 72 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 75 28 6e 2c 6f 29 2c 72 3d 65 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 26 26 75 28 6e Data Ascii: QMIGRATE: "+t),s.migrateTrace&&r.trace&&r.trace()))}function r(e,t,r,n,o){Object.defineProperty(e,t,{configurable:!0,enumerable:!0,get:function(){return u(n,o),r},set:function(e){u(n,o),r=e}})}function a(e,t,r,n,o){var a=e[t];e[t]=function(){return o&&u(n
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 22 5b 22 2b 74 2b 72 2b 27 22 27 2b 6e 2b 27 22 5d 27 7d 29 3b 74 72 79 7b 6e 2e 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 74 29 2c 75 28 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 6d 75 73 74 20 62 65 20 71 75 6f 74 65 64 3a 20 22 2b 72 5b 30 5d 29 2c 72 5b 30 5d 3d 74 7d 63 61 74 63 68 28 65 29 7b 75 28 22 73 65 6c 65 63 74 6f 72 2d 68 61 73 68 22 2c 22 41 74 74 72 69 62 75 74 65 20 73 65 6c 65 63 74 6f 72 20 77 69 74 68 20 27 23 27 20 77 61 73 20 6e 6f 74 20 66 69 78 65 64 3a 20 22 2b 72 5b 30 5d 29 7d 7d 72 65 74 75 72 6e 20 79 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 7d 2c 22 73 Data Ascii: on(e,t,r,n){return"["+t+r+'"'+n+'"]'});try{n.document.querySelector(t),u("selector-hash","Attribute selector with '#' must be quoted: "+r[0]),r[0]=t}catch(e){u("selector-hash","Attribute selector with '#' was not fixed: "+r[0])}}return y.apply(this,r)},"s
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 79 70 65 6f 66 20 65 3b 72 65 74 75 72 6e 28 22 6e 75 6d 62 65 72 22 3d 3d 74 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 29 26 26 21 69 73 4e 61 4e 28 65 2d 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 2c 22 69 73 4e 75 6d 65 72 69 63 22 2c 22 6a 51 75 65 72 79 2e 69 73 4e 75 6d 65 72 69 63 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 73 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 Data Ascii: function(e){var t=typeof e;return("number"==t\|\|"string"==t)&&!isNaN(e-parseFloat(e))},"isNumeric","jQuery.isNumeric() is deprecated"),s.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(e,t){f["[object "+t+"]"
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 5b 61 2d 7a 5d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 29 7d 69 28 73 2e 66 6e 2c 22 72 65 6d 6f 76 65 41 74 74 72 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 73 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 77 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 26 26 72 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 31 21 3d 3d 73 28 74 68 69 73 29 2e 70 72 6f 70 28 74 29 29 72 65 74 75 72 6e 21 28 6e 3d 21 30 29 7d 29 2c 6e 26 26 28 75 28 22 72 65 6d 6f 76 65 41 74 74 72 2d 62 6f 6f 6c 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e Data Ascii: [a-z])/g,function(e,t){return t.toUpperCase()})}i(s.fn,"removeAttr",function(e){var r=this,n=!1;return s.each(e.match(w),function(e,t){s.expr.match.bool.test(t)&&r.each(function(){if(!1!==s(this).prop(t))return!(n=!0)}),n&&(u("removeAttr-bool","jQuery.fn.
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 28 73 2e 63 73 73 50 72 6f 70 73 7c 7c 7b 7d 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 50 72 6f 70 73 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 50 72 6f 70 73 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 29 2c 65 28 22 34 2e 30 2e 30 22 29 3f 28 41 3d 7b 61 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 43 6f 75 6e 74 3a 21 30 2c 63 6f 6c 75 6d 6e 43 6f 75 6e 74 3a 21 30 2c 66 69 6c 6c 4f 70 61 63 69 74 79 3a 21 30 2c 66 6c 65 78 47 72 6f 77 3a 21 30 2c 66 6c 65 78 53 68 72 69 6e 6b 3a 21 30 2c 66 6f 6e 74 57 65 69 67 68 74 3a 21 30 2c 67 72 69 64 41 72 65 61 3a 21 30 2c 67 72 69 64 43 6f 6c 75 Data Ascii: (s.cssProps\|\|{},{set:function(){return u("cssProps","jQuery.cssProps is deprecated"),Reflect.set.apply(this,arguments)}})),e("4.0.0")?(A={animationIterationCount:!0,columnCount:!0,fillOpacity:!0,flexGrow:!0,flexShrink:!0,fontWeight:!0,gridArea:!0,gridColu
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 21 3d 3d 78 28 74 29 26 26 28 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 45 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 26 26 74 20 69 6e 20 6e 3f 28 75 28 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 2c 22 6a 51 75 65 72 79 2e 64 61 74 61 28 29 20 61 6c 77 61 79 73 20 73 65 74 73 2f 67 65 74 73 20 63 61 6d 65 6c 43 61 73 65 64 20 6e 61 6d 65 73 3a 20 22 2b 74 29 2c 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 28 6e 5b 74 5d 3d 72 29 2c 6e 5b 74 5d 29 3a 45 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 22 64 61 74 61 2d 63 61 6d 65 6c 43 61 73 65 22 29 2c 73 2e 66 78 26 26 28 6b 3d 73 2e 54 77 65 65 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 2c 48 3d 66 75 6e Data Ascii: ng"==typeof t&&t!==x(t)&&(n=s.hasData(e)&&E.call(this,e))&&t in n?(u("data-camelCase","jQuery.data() always sets/gets camelCased names: "+t),2<arguments.length&&(n[t]=r),n[t]):E.apply(this,arguments)},"data-camelCase"),s.fx&&(k=s.Tween.prototype.run,H=fun
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 73 2e 65 76 65 6e 74 2e 61 64 64 50 72 6f 70 28 6f 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 74 3d 4f 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6e 26 26 6e 2e 66 69 6c 74 65 72 3f 6e 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 74 7d 2c 22 65 76 65 6e 74 2d 6f 6c 64 2d 70 61 74 63 68 22 29 2c 69 28 73 2e 65 76 65 6e 74 2c 22 61 64 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 26 26 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6c 6f 61 64 2d 61 66 74 65 72 2d 65 76 65 6e 74 22 2c 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f Data Ascii: s.event.addProp(o.pop());return t=O.call(this,e),n&&n.filter?n.filter(t,e):t},"event-old-patch"),i(s.event,"add",function(e,t){return e===n&&"load"===t&&"complete"===n.document.readyState&&u("load-after-event","jQuery(window).on('load'...) called after lo
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 74 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 75 6e 62 69 6e 64 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7d 2c 22 70 72 65 2d 6f 6e 2d 6d 65 74 68 6f 64 73 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 64 65 6c 65 67 61 74 65 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2e 66 6e 2c 22 75 6e 64 65 6c 65 67 61 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 66 66 28 65 2c 22 2a 2a 22 29 3a 74 Data Ascii: t)},"pre-on-methods","jQuery.fn.unbind() is deprecated"),c(s.fn,"delegate",function(e,t,r,n){return this.on(t,e,r,n)},"pre-on-methods","jQuery.fn.delegate() is deprecated"),c(s.fn,"undelegate",function(e,t,r){return 1===arguments.length?this.off(e,"**"):t
2024-01-15 13:23:52 UTC	1175	IN	Data Raw: 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 72 26 26 28 75 28 22 70 61 72 61 6d 2d 61 6a 61 78 2d 74 72 61 64 69 74 69 6f 6e 61 6c 22 2c 22 6a 51 75 65 72 79 2e 70 61 72 61 6d 28 29 20 6e 6f 20 6c 6f 6e 67 65 72 20 75 73 65 73 20 6a 51 75 65 72 79 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 2c 74 3d 72 29 2c 44 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 29 7d 2c 22 70 61 72 61 6d 2d 61 6a 61 78 2d 74 72 61 64 69 74 69 6f 6e 61 6c 22 29 29 2c 63 28 73 2e 66 6e 2c 22 61 6e 64 53 65 6c 66 22 2c 73 2e 66 6e 2e 61 64 64 42 61 63 6b 2c 22 61 6e 64 53 65 6c 66 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 61 6e 64 53 65 6c 66 28 29 20 69 73 20 64 65 Data Ascii: jaxSettings.traditional;return void 0===t&&r&&(u("param-ajax-traditional","jQuery.param() no longer uses jQuery.ajaxSettings.traditional"),t=r),D.call(this,e,t)},"param-ajax-traditional")),c(s.fn,"andSelf",s.fn.addBack,"andSelf","jQuery.fn.andSelf() is de

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	617	OUT	GET /wp/plugins/wordpress-popular-posts/tags/6.3.4/assets/js/wpp.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4500 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * cache-control: public, max-age=31536000 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 ETag: W/"1194-RKZKscaD+n4T3N929U5rA1grit4" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 1004357 X-Served-By: cache-fra-etou8220052-FRA, cache-iad-kiad7000088-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 76 61 72 20 77 70 70 5f 70 61 72 61 6d 73 3d 6e 75 6c 6c 3b 0d 0a 76 61 72 20 57 6f 72 64 50 72 65 73 73 50 6f 70 75 6c 61 72 50 6f 73 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 73 75 70 70 6f 72 74 73 53 68 61 64 6f 77 44 4f 4d 56 31 3d 21 21 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 74 74 61 63 68 53 68 61 64 6f 77 3b 76 61 72 20 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 70 61 72 61 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 61 64 64 69 74 69 6f 6e 61 6c 5f 68 65 61 64 65 72 73 29 7b 63 61 6c 6c 62 61 63 6b 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 63 61 6c 6c 62 61 63 6b 3f 63 61 6c 6c 62 61 63 6b 3a 6e 6f 6f 70 3b 61 6a 61 78 Data Ascii: var wpp_params=null;var WordPressPopularPosts=function(){var noop=function(){};var supportsShadowDOMV1=!!HTMLElement.prototype.attachShadow;var get=function(url,params,callback,additional_headers){callback="function"===typeof callback?callback:noop;ajax
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 69 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 75 6c 22 29 3b 64 75 6d 6d 79 5f 6c 69 73 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 27 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 23 22 3e 3c 2f 61 3e 3c 2f 6c 69 3e 27 3b 77 70 70 5f 6c 69 73 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 75 6d 6d 79 5f 6c 69 73 74 29 3b 76 61 72 20 64 75 6d 6d 79 5f 6c 69 73 74 5f 69 74 65 6d 5f 73 74 79 6c 65 73 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 64 75 6d 6d 79 5f 6c 69 73 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6c 69 22 29 29 2c 0d 0a 64 75 6d 6d 79 5f 6c 69 6e 6b 5f 69 74 65 6d 5f 73 74 79 6c 65 73 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 64 75 6d 6d 79 5f 6c 69 73 74 2e Data Ascii: ist=document.createElement("ul");dummy_list.innerHTML='<li><a href="#"></a></li>';wpp_list.parentNode.appendChild(dummy_list);var dummy_list_item_styles=getComputedStyle(dummy_list.querySelector("li")),dummy_link_item_styles=getComputedStyle(dummy_list.
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 69 64 67 65 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 73 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 77 70 70 2d 77 69 64 67 65 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 70 70 2d 77 69 64 67 65 74 2d 62 6c 6f 63 6b 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 70 70 2d 73 68 6f 72 74 63 6f 64 65 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 29 2c 77 3d 30 3b 77 68 69 6c 65 28 77 3c 77 69 64 67 65 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 73 2e 6c 65 6e 67 74 68 29 7b 66 65 74 63 68 57 69 64 67 65 74 28 77 69 64 67 65 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 73 5b 77 5d 29 3b 77 2b 2b 7d 76 61 72 20 73 Data Ascii: ner("DOMContentLoaded",function(){var widget_placeholders=document.querySelectorAll(".wpp-widget-placeholder, .wpp-widget-block-placeholder, .wpp-shortcode-placeholder"),w=0;while(w<widget_placeholders.length){fetchWidget(widget_placeholders[w]);w++}var s
2024-01-15 13:23:52 UTC	366	IN	Data Raw: 65 2c 73 72 3d 70 61 72 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 2d 73 72 22 29 2c 6a 73 6f 6e 5f 74 61 67 3d 70 61 72 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 5d 27 29 3b 69 66 28 6a 73 6f 6e 5f 74 61 67 29 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6a 73 6f 6e 5f 74 61 67 29 3b 0d 0a 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 77 69 64 67 65 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 29 3b 70 61 72 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 70 70 2d 61 6a 61 78 22 29 3b 69 66 28 73 72 29 57 6f 72 64 50 72 65 73 73 50 6f 70 75 6c 61 72 50 6f 73 74 73 2e Data Ascii: e,sr=parent.querySelector(".popular-posts-sr"),json_tag=parent.querySelector('script[type="application/json"]');if(json_tag)parent.removeChild(json_tag);parent.removeChild(widget_placeholder);parent.classList.add("wpp-ajax");if(sr)WordPressPopularPosts.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	613	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/hoverIntent.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	773	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1499 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"5db-dgmWicyu5GbUYI2mIcQDs2jcrgM" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 3946176 X-Served-By: cache-fra-etou8220048-FRA, cache-iad-kiad7000095-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 6a 51 75 65 72 79 26 26 21 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 26 26 65 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 22 75 73 65 Data Ascii: /! This file is auto-generated /!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof module&&module.exports?module.exports=e(require("jquery")):jQuery&&!jQuery.fn.hoverIntent&&e(jQuery)}(function(f){"use
2024-01-15 13:23:52 UTC	121	IN	Data Raw: 78 74 65 6e 64 28 64 2c 7b 6f 76 65 72 3a 65 2c 6f 75 74 3a 65 2c 73 65 6c 65 63 74 6f 72 3a 74 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 7b 22 6d 6f 75 73 65 65 6e 74 65 72 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 6f 2c 22 6d 6f 75 73 65 6c 65 61 76 65 2e 68 6f 76 65 72 49 6e 74 65 6e 74 22 3a 6f 7d 2c 64 2e 73 65 6c 65 63 74 6f 72 29 7d 7d 29 3b Data Ascii: xtend(d,{over:e,out:e,selector:t});return this.on({"mouseenter.hoverIntent":o,"mouseleave.hoverIntent":o},d.selector)}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	631	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	774	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8171 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"1feb-YMhRTFel2ymAxLBGsN1Hm9QnNXs" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 1042372 X-Served-By: cache-fra-eddf8230128-FRA, cache-iad-kcgs7200165-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 7c 7c 21 64 65 66 69 6e 65 2e 61 6d 64 3f 65 28 29 3a 64 65 66 69 6e 65 28 22 69 6e 65 72 74 22 2c 65 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 69 2c 6f 2c 72 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 26 26 61 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 6e 26 26 61 28 65 2c 6e 29 2c 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 Data Ascii: !function(e){"object"==typeof exports&&"undefined"!=typeof module\|\|"function"!=typeof define\|\|!define.amd?e():define("inert",e)}((function(){"use strict";var e,t,n,i,o,r,s=function(e,t,n){return t&&a(e.prototype,t),n&&a(e,n),e};function a(e,t){for(var n=0
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 69 6e 64 28 74 68 69 73 29 29 2c 5f 28 65 2e 68 65 61 64 7c 7c 65 2e 62 6f 64 79 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2c 22 6c 6f 61 64 69 6e 67 22 3d 3d 3d 65 2e 72 65 61 64 79 53 74 61 74 65 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 68 69 73 2e 5f 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 2e 62 69 6e 64 28 74 68 69 73 29 29 3a 74 68 69 73 2e 5f 6f 6e 44 6f 63 75 6d 65 6e 74 4c 6f 61 64 65 64 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 2c 6e 29 7b 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 7b 76 61 72 20 69 3d 65 3b 69 66 28 73 3d 28 74 26 26 74 28 69 29 2c 69 2e 73 68 61 64 6f 77 52 6f Data Ascii: ind(this)),_(e.head\|\|e.body\|\|e.documentElement),"loading"===e.readyState?e.addEventListener("DOMContentLoaded",this._onDocumentLoaded.bind(this)):this._onDocumentLoaded()}function c(e,t,n){if(e.nodeType==Node.ELEMENT_NODE){var i=e;if(s=(t&&t(i),i.shadowRo
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 3f 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 2c 74 68 69 73 2e 5f 73 61 76 65 64 41 72 69 61 48 69 64 64 65 6e 29 3a 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 69 64 64 65 6e 22 29 29 2c 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 75 6e 6d 61 6e 61 67 65 4e 6f 64 65 28 65 2e 6e 6f 64 65 29 7d 29 2c 74 68 69 73 29 2c 74 68 69 73 2e 5f 6f 62 73 65 72 76 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 72 6f 6f 74 45 6c 65 6d Data Ascii: ull!==this._savedAriaHidden?this._rootElement.setAttribute("aria-hidden",this._savedAriaHidden):this._rootElement.removeAttribute("aria-hidden")),this._managedNodes.forEach((function(e){this._unmanageNode(e.node)}),this),this._observer=null,this._rootElem
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6d 61 6e 61 67 65 4e 6f 64 65 28 65 2e 6e 6f 64 65 29 7d 29 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 6f 6e 4d 75 74 61 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 69 3d 74 2e 74 61 72 67 65 74 3b 22 63 68 69 6c 64 4c 69 73 74 22 3d 3d 3d 74 2e 74 79 70 65 3f 28 65 2e 63 61 6c 6c 28 74 2e 61 64 64 65 64 4e 6f 64 65 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 6d 61 6b 65 53 75 62 74 72 65 65 55 6e 66 6f 63 75 73 61 62 6c 65 28 65 29 7d 29 2c 74 68 69 73 29 2c 65 2e 63 61 6c 6c 28 74 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 29 2e 66 6f 72 Data Ascii: unction(e){this._manageNode(e.node)}),this)}},{key:"_onMutation",value:function(t,n){t.forEach((function(t){var n,i=t.target;"childList"===t.type?(e.call(t.addedNodes).forEach((function(e){this._makeSubtreeUnfocusable(e)}),this),e.call(t.removedNodes).for
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 69 6f 6e 28 29 7b 76 61 72 20 65 3b 74 68 69 73 2e 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 28 65 3d 74 68 69 73 2e 6e 6f 64 65 2c 74 2e 63 61 6c 6c 28 65 2c 6e 29 3f 2d 31 3d 3d 3d 65 2e 74 61 62 49 6e 64 65 78 26 26 74 68 69 73 2e 68 61 73 53 61 76 65 64 54 61 62 49 6e 64 65 78 7c 7c 28 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 26 26 28 74 68 69 73 2e 5f 73 61 76 65 64 54 61 62 49 6e 64 65 78 3d 65 2e 74 61 62 49 6e 64 65 78 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 22 2d 31 22 29 2c 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 26 26 28 65 2e 66 6f 63 75 73 3d 66 75 6e Data Ascii: ion(){var e;this.node.nodeType===Node.ELEMENT_NODE&&(e=this.node,t.call(e,n)?-1===e.tabIndex&&this.hasSavedTabIndex\|\|(e.hasAttribute("tabindex")&&(this._savedTabIndex=e.tabIndex),e.setAttribute("tabindex","-1"),e.nodeType===Node.ELEMENT_NODE&&(e.focus=fun
2024-01-15 13:23:52 UTC	1281	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 65 72 74 52 6f 6f 74 73 2e 67 65 74 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 67 69 73 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 67 65 74 28 65 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 2e 61 64 64 49 6e 65 72 74 52 6f 6f 74 28 74 29 3a 6e 3d 6e 65 77 20 6f 28 65 2c 74 29 2c 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 7d 2c 7b 6b 65 79 3a 22 64 65 72 65 67 69 73 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6d 61 6e 61 67 65 64 4e 6f 64 65 73 Data Ascii: unction(e){return this._inertRoots.get(e)}},{key:"register",value:function(e,t){var n=this._managedNodes.get(e);return void 0!==n?n.addInertRoot(t):n=new o(e,t),this._managedNodes.set(e,n),n}},{key:"deregister",value:function(e,t){var n=this._managedNodes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49730	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	633	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/regenerator-runtime.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6607 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"19cf-9wkmOEFwjZ5AJo8koAcv9P6BGzU" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 5297872 X-Served-By: cache-fra-etou8220094-FRA, cache-iad-kcgs7200177-IAD X-Cache: MISS, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 76 61 72 20 72 75 6e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 65 29 7b 74 5b 72 5d 3d 65 2e 76 61 6c 75 65 7d 2c 69 3d 28 77 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 29 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 69 74 65 72 61 74 6f 72 22 2c 61 3d 77 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 7c 7c 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 63 3d 77 2e 74 6f 53 74 72 69 6e 67 54 61 67 7c 7c Data Ascii: var runtime=function(t){"use strict";var r,e=Object.prototype,n=e.hasOwnProperty,o=Object.defineProperty\|\|function(t,r,e){t[r]=e.value},i=(w="function"==typeof Symbol?Symbol:{}).iterator\|\|"@@iterator",a=w.asyncIterator\|\|"@@asyncIterator",c=w.toStringTag\|\|
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6e 65 78 74 22 3d 3d 3d 75 2e 6d 65 74 68 6f 64 29 75 2e 73 65 6e 74 3d 75 2e 5f 73 65 6e 74 3d 75 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 75 2e 6d 65 74 68 6f 64 29 7b 69 66 28 68 3d 3d 3d 66 29 74 68 72 6f 77 20 68 3d 79 2c 75 2e 61 72 67 3b 75 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 6f 6e 28 75 2e 61 72 67 29 7d 65 6c 73 65 22 72 65 74 75 72 6e 22 3d 3d 3d 75 2e 6d 65 74 68 6f 64 26 26 75 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 75 2e 61 72 67 29 3b 69 66 28 68 3d 70 2c 22 6e 6f 72 6d 61 6c 22 3d 3d 3d 28 6e 3d 6c 28 61 2c 63 2c 75 29 29 2e 74 79 70 65 29 7b 69 66 28 68 3d 75 2e 64 6f 6e 65 3f 79 3a 73 2c 6e 2e 61 72 67 21 3d 3d 67 29 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 6e 2e 61 72 67 2c 64 6f 6e 65 3a Data Ascii: next"===u.method)u.sent=u._sent=u.arg;else if("throw"===u.method){if(h===f)throw h=y,u.arg;u.dispatchException(u.arg)}else"return"===u.method&&u.abrupt("return",u.arg);if(h=p,"normal"===(n=l(a,c,u)).type){if(h=u.done?y:s,n.arg!==g)return{value:n.arg,done:
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 3d 74 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 72 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 72 2e 61 72 67 2c 74 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 72 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 74 29 7b 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 3d 5b 7b 74 72 79 4c 6f 63 3a 22 72 6f 6f 74 22 7d 5d 2c 74 2e 66 6f 72 45 61 63 68 28 6a 2c 74 68 69 73 29 2c 74 68 69 73 2e 72 65 73 65 74 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 29 7b 69 66 28 74 29 7b 76 61 72 20 65 2c 6f 3d 74 5b 69 5d 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 74 29 3b 69 66 28 22 66 75 6e Data Ascii: =t[3]),this.tryEntries.push(r)}function _(t){var r=t.completion\|\|{};r.type="normal",delete r.arg,t.completion=r}function O(t){this.tryEntries=[{tryLoc:"root"}],t.forEach(j,this),this.reset(!0)}function k(t){if(t){var e,o=t[i];if(o)return o.call(t);if("fun
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 72 20 69 6e 20 65 29 6e 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 20 6e 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 3b 6e 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 72 3d 6e 2e 70 6f 70 28 29 3b 69 66 28 72 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 2e 76 61 6c 75 65 3d 72 2c 74 2e 64 6f 6e 65 3d 21 31 2c 74 7d 72 65 74 75 72 6e 20 74 2e 64 6f 6e 65 3d 21 30 2c 74 7d 7d 2c 74 2e 76 61 6c 75 65 73 3d 6b 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 4f 2c 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 70 72 65 76 3d 30 2c 74 68 69 73 2e 6e 65 78 74 3d 30 2c 74 68 69 73 2e 73 65 6e 74 3d 74 68 69 73 2e 5f 73 65 6e 74 3d 72 2c 74 68 69 73 2e 64 6f 6e 65 3d Data Ascii: r in e)n.push(r);return n.reverse(),function t(){for(;n.length;){var r=n.pop();if(r in e)return t.value=r,t.done=!1,t}return t.done=!0,t}},t.values=k,O.prototype={constructor:O,reset:function(t){if(this.prev=0,this.next=0,this.sent=this._sent=r,this.done=
2024-01-15 13:23:52 UTC	1095	IN	Data Raw: 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 72 26 26 72 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3f 6e 75 6c 6c 3a 69 29 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 74 2c 61 2e 61 72 67 3d 72 2c 69 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 67 29 3a 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 28 61 29 7d 2c 63 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 74 2e 74 79 70 65 29 74 68 72 6f 77 20 74 2e 61 72 67 3b 72 65 74 75 72 6e 22 62 72 65 61 6b 22 3d 3d 3d 74 2e 74 79 70 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 74 2e 74 Data Ascii: "continue"===t)&&i.tryLoc<=r&&r<=i.finallyLoc?null:i)?i.completion:{};return a.type=t,a.arg=r,i?(this.method="next",this.next=i.finallyLoc,g):this.complete(a)},complete:function(t,r){if("throw"===t.type)throw t.arg;return"break"===t.type\|\|"continue"===t.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49729	172.253.63.99	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	874	OUT	GET /recaptcha/api.js?render=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&ver=3.0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:23:52 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 15 Jan 2024 13:23:52 GMT Date: Mon, 15 Jan 2024 13:23:52 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:52 UTC	724	IN	Data Raw: 34 65 38 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4e8/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-01-15 13:23:52 UTC	539	IN	Data Raw: 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 Data Ascii: hcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js';po.crossOrigin='anonymous';p
2024-01-15 13:23:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49732	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:52 UTC	625	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/dist/vendor/wp-polyfill.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:52 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16146 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"3f12-XgUHfZnnNq9Cstpw5Cjn999VbdQ" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:52 GMT Age: 1027454 X-Served-By: cache-fra-eddf8230068-FRA, cache-iad-kjyo7100050-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 6e 2c 65 3b 6e 3d 7b 7d 2c 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 5b 74 5d 29 72 65 74 75 72 6e 20 6e 5b 74 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 74 5d 3d 7b 69 3a 74 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 74 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 65 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 29 2e 6d 3d 72 3d 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 6e 28 31 29 2c 6e 28 36 37 29 2c 6e 28 36 38 29 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 28 37 32 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d Data Ascii: !function(t){"use strict";var r,n,e;n={},(e=function(t){if(n[t])return n[t].exports;var o=n[t]={i:t,l:!1,exports:{}};return r[t].call(o.exports,o,o.exports,e),o.l=!0,o.exports}).m=r=[function(t,r,n){n(1),n(67),n(68),t.exports=n(72)},function(r,n,e){var o=
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 74 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 76 61 72 20 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 61 70 70 6c 79 28 6e 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 6f Data Ascii: n(){return 7}})[1]}))},function(t,r){t.exports=function(t){try{return!!t()}catch(t){return!0}}},function(t,r){var n=Function.prototype.call;t.exports=n.bind?n.bind(n):function(){return n.apply(n,arguments)}},function(t,r,n){var e={}.propertyIsEnumerable,o
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 72 3b 76 61 72 20 65 3d 66 28 72 2c 73 29 3b 69 66 28 65 29 7b 69 66 28 65 3d 69 28 65 2c 72 2c 6e 3d 6e 3d 3d 3d 74 3f 22 64 65 66 61 75 6c 74 22 3a 6e 29 2c 21 75 28 65 29 7c 7c 63 28 65 29 29 72 65 74 75 72 6e 20 65 3b 74 68 72 6f 77 20 70 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 61 28 72 2c 6e 3d 6e 3d 3d 3d 74 3f 22 6e 75 6d 62 65 72 22 3a 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 31 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 3a 65 28 74 29 Data Ascii: ))return r;var e=f(r,s);if(e){if(e=i(e,r,n=n===t?"default":n),!u(e)\|\|c(e))return e;throw p("Can't convert object to primitive value")}return a(r,n=n===t?"number":n)}},function(t,r,n){var e=n(18);t.exports=function(t){return"object"==typeof t?null!==t:e(t)
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 65 3d 6e 28 33 29 2c 6f 3d 6e 28 31 38 29 2c 69 3d 6e 28 32 38 29 2c 75 3d 65 2e 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6f 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 75 28 69 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 33 29 2e 53 74 72 69 6e 67 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 33 29 2c 6f 3d 6e 28 37 29 2c 69 3d 6e 28 31 38 29 2c 75 Data Ascii: e=n(3),o=n(18),i=n(28),u=e.TypeError;t.exports=function(t){if(o(t))return t;throw u(i(t)+" is not a function")}},function(t,r,n){var e=n(3).String;t.exports=function(t){try{return e(t)}catch(t){return"Object"}}},function(t,r,n){var e=n(3),o=n(7),i=n(18),u
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 29 7b 76 61 72 20 65 3d 6e 28 33 29 2c 6f 3d 6e 28 31 34 29 2c 69 3d 65 2e 4f 62 6a 65 63 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 69 28 6f 28 74 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 65 29 7b 65 3d 65 28 31 32 29 3b 76 61 72 20 6f 3d 30 2c 69 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 75 3d 65 28 31 2e 2e 74 6f 53 74 72 69 6e 67 29 3b 72 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 53 79 6d 62 6f 6c 28 22 2b 28 72 3d 3d 3d 74 3f 22 22 3a 72 29 2b 22 29 5f 22 2b 75 28 2b 2b 6f 2b 69 2c 33 36 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 29 2c 6f 3d 6e 28 36 29 2c 69 3d 6e 28 33 39 29 3b 74 2e 65 78 70 6f 72 Data Ascii: ){var e=n(3),o=n(14),i=e.Object;t.exports=function(t){return i(o(t))}},function(r,n,e){e=e(12);var o=0,i=Math.random(),u=e(1..toString);r.exports=function(r){return"Symbol("+(r===t?"":r)+")_"+u(++o+i,36)}},function(t,r,n){var e=n(5),o=n(6),i=n(39);t.expor
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 24 31 22 29 2b 22 5d 22 29 2c 28 21 75 28 65 2c 22 6e 61 6d 65 22 29 7c 7c 73 26 26 65 2e 6e 61 6d 65 21 3d 3d 67 29 26 26 63 28 65 2c 22 6e 61 6d 65 22 2c 67 29 2c 28 61 3d 6c 28 65 29 29 2e 73 6f 75 72 63 65 7c 7c 28 61 2e 73 6f 75 72 63 65 3d 76 2e 6a 6f 69 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 67 3f 67 3a 22 22 29 29 29 2c 72 21 3d 3d 6f 3f 28 70 3f 21 62 26 26 72 5b 6e 5d 26 26 28 79 3d 21 30 29 3a 64 65 6c 65 74 65 20 72 5b 6e 5d 2c 79 3f 72 5b 6e 5d 3d 65 3a 63 28 72 2c 6e 2c 65 29 29 3a 79 3f 72 5b 6e 5d 3d 65 3a 66 28 6e 2c 65 29 7d 29 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 26 26 79 28 74 68 69 73 Data Ascii: $1")+"]"),(!u(e,"name")\|\|s&&e.name!==g)&&c(e,"name",g),(a=l(e)).source\|\|(a.source=v.join("string"==typeof g?g:""))),r!==o?(p?!b&&r[n]&&(y=!0):delete r[n],y?r[n]=e:c(r,n,e)):y?r[n]=e:f(n,e)})(Function.prototype,"toString",(function(){return i(this)&&y(this
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 28 74 2c 72 29 7b 74 2e 65 78 70 6f 72 74 73 3d 7b 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 29 2c 6f 3d 6e 28 33 35 29 2c 69 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 75 3d 65 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 6f 3d 28 6e 3d 6f 28 69 2c 22 6e 61 6d 65 22 29 29 26 26 22 73 6f 6d 65 74 68 69 6e 67 22 3d 3d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 6e 61 6d 65 2c 69 3d 6e 26 26 28 21 65 7c 7c 65 26 26 75 28 69 2c 22 6e 61 6d 65 22 29 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 45 58 49 53 54 53 3a 6e 2c 50 52 4f 50 45 52 3a 6f 2c 43 4f 4e 46 49 47 55 52 41 42 4c 45 3a 69 7d 7d 2c 66 75 6e 63 74 69 Data Ascii: (t,r){t.exports={}},function(t,r,n){var e=n(5),o=n(35),i=Function.prototype,u=e&&Object.getOwnPropertyDescriptor;o=(n=o(i,"name"))&&"something"===function(){}.name,i=n&&(!e\|\|e&&u(i,"name").configurable);t.exports={EXISTS:n,PROPER:o,CONFIGURABLE:i}},functi
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 74 29 21 3d 74 7c 7c 30 3d 3d 74 3f 30 3a 28 30 3c 74 3f 65 3a 6e 29 28 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 38 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 28 74 2e 6c 65 6e 67 74 68 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 36 29 2c 6f 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3c 74 3f 6f 28 65 28 74 29 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 74 2e 65 78 70 6f 72 74 73 3d 5b 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: t)!=t\|\|0==t?0:(0<t?e:n)(t)}},function(t,r,n){var e=n(58);t.exports=function(t){return e(t.length)}},function(t,r,n){var e=n(56),o=Math.min;t.exports=function(t){return 0<t?o(e(t),9007199254740991):0}},function(t,r){t.exports=["constructor","hasOwnProperty
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 5b 6c 5d 5b 61 5b 72 5d 5d 3b 72 65 74 75 72 6e 20 67 28 29 7d 3b 70 5b 62 5d 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 72 3f 28 6f 5b 6c 5d 3d 63 28 72 29 2c 65 3d 6e 65 77 20 6f 2c 6f 5b 6c 5d 3d 6e 75 6c 6c 2c 65 5b 62 5d 3d 72 29 3a 65 3d 67 28 29 2c 6e 3d 3d 3d 74 3f 65 3a 66 28 65 2c 6e 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 65 3d 6e 28 35 29 2c 6f 3d 6e 28 34 31 29 2c 69 3d 6e 28 34 32 29 2c 75 3d 6e 28 31 30 29 2c 63 3d 6e 28 36 35 29 3b 74 2e 65 78 70 6f 72 74 73 3d 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: [l][a[r]];return g()};p[b]=!0,r.exports=Object.create\|\|function(r,n){var e;return null!==r?(o[l]=c(r),e=new o,o[l]=null,e[b]=r):e=g(),n===t?e:f(e,n)}},function(t,r,n){var e=n(5),o=n(41),i=n(42),u=n(10),c=n(65);t.exports=e?Object.defineProperties:function(
2024-01-15 13:23:52 UTC	1378	IN	Data Raw: 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 65 28 37 33 29 2c 69 3d 65 28 35 37 29 2c 75 3d 65 28 35 36 29 2c 63 3d 6f 2e 61 54 79 70 65 64 41 72 72 61 79 3b 28 30 2c 6f 2e 65 78 70 6f 72 74 54 79 70 65 64 41 72 72 61 79 4d 65 74 68 6f 64 29 28 22 61 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 63 28 74 68 69 73 29 2c 65 3d 69 28 6e 29 3b 72 65 74 75 72 6e 28 72 3d 30 3c 3d 28 72 3d 75 28 72 29 29 3f 72 3a 65 2b 72 29 3c 30 7c 7c 65 3c 3d 72 3f 74 3a 6e 5b 72 5d 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 21 21 79 28 74 29 26 26 28 74 3d 76 28 74 29 2c 6c Data Ascii: ="[object z]"===String(e)},function(r,n,e){var o=e(73),i=e(57),u=e(56),c=o.aTypedArray;(0,o.exportTypedArrayMethod)("at",(function(r){var n=c(this),e=i(n);return(r=0<=(r=u(r))?r:e+r)<0\|\|e<=r?t:n[r]}))},function(r,n,e){function o(t){return!!y(t)&&(t=v(t),l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:53 UTC	603	OUT	GET /wp/plugins/cookie-notice/tags/2.4.13/js/front.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:53 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 8700 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * cache-control: public, max-age=31536000 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload content-type: application/javascript; charset=utf-8 ETag: W/"21fc-LKb293SBw828qs/GGlbCTzyTOt4" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:53 GMT Age: 1271725 X-Served-By: cache-fra-eddf8230073-FRA, cache-iad-kcgs7200147-IAD X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 43 75 73 74 6f 6d 45 76 65 6e 74 29 72 65 74 75 72 6e 21 31 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 3d 74 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6e 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 65 2c 74 2e 62 75 62 62 6c 65 73 2c 74 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 74 2e 64 65 74 61 69 6c 29 2c 6e 7d 65 2e 70 72 6f 74 6f 74 79 70 65 3d 77 69 6e 64 6f 77 2e 45 76 65 6e 74 2e 70 72 Data Ascii: !function(){if("function"==typeof window.CustomEvent)return!1;function e(e,t){t=t\|\|{bubbles:!1,cancelable:!1,detail:void 0};var n=document.createEvent("CustomEvent");return n.initCustomEvent(e,t.bubbles,t.cancelable,t.detail),n}e.prototype=window.Event.pr
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 2c 61 2e 73 65 74 54 69 6d 65 28 70 61 72 73 65 49 6e 74 28 63 2e 67 65 74 54 69 6d 65 28 29 29 2b 31 65 33 2a 70 61 72 73 65 49 6e 74 28 63 6e 41 72 67 73 2e 63 6f 6f 6b 69 65 54 69 6d 65 29 29 29 3a 28 6e 3d 22 66 61 6c 73 65 22 2c 61 2e 73 65 74 54 69 6d 65 28 70 61 72 73 65 49 6e 74 28 63 2e 67 65 74 54 69 6d 65 28 29 29 2b 31 65 33 2a 70 61 72 73 65 49 6e 74 28 63 6e 41 72 67 73 2e 63 6f 6f 6b 69 65 54 69 6d 65 52 65 6a 65 63 74 65 64 29 29 29 2c 63 6e 41 72 67 73 2e 67 6c 6f 62 61 6c 43 6f 6f 6b 69 65 26 26 28 6f 3d 74 68 69 73 2e 67 65 74 44 6f 6d 61 69 6e 28 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 29 2c 22 6c 6f 63 61 6c 68 6f 73 74 22 3d 3d 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 26 26 28 73 3d 74 2e 6c 6f Data Ascii: ,a.setTime(parseInt(c.getTime())+1e3parseInt(cnArgs.cookieTime))):(n="false",a.setTime(parseInt(c.getTime())+1e3parseInt(cnArgs.cookieTimeRejected))),cnArgs.globalCookie&&(o=this.getDomain(t.location.hostname)),"localhost"===t.location.hostname&&(s=t.lo
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 65 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 2b 65 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 65 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 21 30 29 29 3b 72 65 74 75 72 6e 7d 7d 2c 74 68 69 73 2e 67 65 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 52 65 67 45 78 70 28 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 2f 29 2e 74 65 73 74 28 65 29 7c 7c 28 65 3d 22 68 74 74 70 3a 2f 2f 22 2b 65 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 65 29 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 72 65 74 75 72 6e 20 74 2e 73 6c 69 63 65 28 30 29 2e 73 6c 69 63 65 28 2d 28 34 3d 3d 3d 74 2e 6c 65 6e 67 74 68 3f 33 3a 32 29 29 2e 6a 6f 69 6e 28 22 2e 22 29 7d 2c 74 68 69 73 2e 67 65 74 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f Data Ascii: e.location.search+e.location.hash,e.location.reload(!0));return}},this.getDomain=function(e){RegExp(/https?:\/\//).test(e)\|\|(e="http://"+e);var t=new URL(e).hostname.split(".");return t.slice(0).slice(-(4===t.length?3:2)).join(".")},this.getStatus=functio
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 74 29 2c 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6e 2d 61 6e 69 6d 61 74 65 64 22 29 2c 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 2d 68 69 64 64 65 6e 22 29 7d 29 2c 74 68 69 73 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: .removeEventListener("animationend",t),e.noticeContainer.classList.remove("cn-animated"),e.noticeContainer.classList.add("cookie-notice-hidden")}),this.noticeContainer.addEventListener("webkitAnimationEnd",function t(){e.noticeContainer.removeEventListene
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 74 29 2c 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6e 2d 61 6e 69 6d 61 74 65 64 22 29 2c 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6f 6f 6b 69 65 2d 72 65 76 6f 6b 65 2d 68 69 64 64 65 6e 22 29 7d 29 2c 74 68 69 73 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 65 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 41 6e Data Ascii: tListener("animationend",t),e.noticeContainer.classList.remove("cn-animated"),e.noticeContainer.classList.add("cookie-revoke-hidden")}),this.noticeContainer.addEventListener("webkitAnimationEnd",function t(){e.noticeContainer.removeEventListener("webkitAn
2024-01-15 13:23:53 UTC	1378	IN	Data Raw: 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 21 30 21 3d 3d 74 68 69 73 2e 69 6e 49 66 72 61 6d 65 28 29 26 26 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 41 63 63 65 70 74 65 64 3d 74 68 69 73 2e 67 65 74 53 74 61 74 75 73 28 21 30 29 2c 74 68 69 73 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 6f 6f 6b 69 65 2d 6e 6f 74 69 63 65 22 29 2c 74 68 69 73 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 29 29 7b 76 61 72 20 69 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 63 6e 2d 73 65 74 2d 63 6f 6f 6b 69 65 22 29 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 63 6e 2d 72 65 76 Data Ascii: s.init=function(){var n=this;if(!0!==this.inIframe()&&(this.cookiesAccepted=this.getStatus(!0),this.noticeContainer=t.getElementById("cookie-notice"),this.noticeContainer)){var i=t.getElementsByClassName("cn-set-cookie"),o=t.getElementsByClassName("cn-rev
2024-01-15 13:23:53 UTC	432	IN	Data Raw: 74 4c 69 73 74 65 6e 65 72 28 22 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 22 2c 65 29 2c 6e 2e 73 68 6f 77 43 6f 6f 6b 69 65 4e 6f 74 69 63 65 28 29 7d 29 2c 6e 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 6e 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 77 65 62 6b 69 74 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 2c 65 29 2c 6e 2e 73 68 6f 77 43 6f 6f 6b 69 65 4e 6f 74 69 63 65 28 29 7d 29 29 3a 6e 2e 6e 6f 74 69 63 65 43 6f 6e 74 61 69 6e 65 72 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 63 6f 6f 6b 69 65 2d 6e 6f 74 69 Data Ascii: tListener("animationend",e),n.showCookieNotice()}),n.noticeContainer.addEventListener("webkitAnimationEnd",function e(){n.noticeContainer.removeEventListener("webkitAnimationEnd",e),n.showCookieNotice()})):n.noticeContainer.classList.contains("cookie-noti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49735	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:53 UTC	533	OUT	GET /menu/page.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:53 UTC	922	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:23:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400, stale-while-revalidate=30, public ETag: W/"69e533c66291569cf7f6966cda830b78" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dl3Vy8dDbOjrxG%2BLOydh9Y0Dr9qh923C6W%2BZKXMrAZExP%2Fcp9BXbBcsEeZ6TICqZmO3PGv8CBfGbLIjAbXGBoD7Woepi2Is%2Bx2XxHc%2BHJE75gED5Rty6uSR3horLkpydOGBVTdn9W53JMtMNSqDavnNb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 19757 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e6f94bba32d0e-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:23:53 UTC	447	IN	Data Raw: 62 62 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 76 61 72 20 6e 2c 64 2c 73 2c 6c 2c 63 2c 75 2c 66 2c 6d 2c 65 2c 61 2c 74 2c 70 2c 79 2c 76 2c 68 3d 22 2e 4b 4a 51 41 70 4f 32 6e 22 2c 5f 3d 6f 2e 68 65 61 64 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 5b 5d 2e 69 6e 64 65 78 4f 66 26 26 5f 26 26 28 69 2e 61 32 61 3d 69 2e 61 32 61 7c 7c 7b 7d 2c 6e 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 69 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 2c 65 3d 28 64 3d 6f 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 26 26 64 2e 73 72 63 3f 64 2e 73 72 63 3a 22 22 2c 4e 6f 64 65 4c 69 73 74 26 26 4e 6f 64 65 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 26 26 28 69 2e 61 32 61 2e 69 Data Ascii: bbb!function(o,i){function r(){}var n,d,s,l,c,u,f,m,e,a,t,p,y,v,h=".KJQApO2n",_=o.head;"function"==typeof[].indexOf&&_&&(i.a2a=i.a2a\|\|{},n=i.a2a_config=i.a2a_config\|\|{},e=(d=o.currentScript)&&d.src?d.src:"",NodeList&&NodeList.prototype.forEach&&(i.a2a.i
2024-01-15 13:23:53 UTC	1369	IN	Data Raw: 75 6c 6c 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 32 61 2d 75 72 6c 22 29 7c 7c 65 2e 6d 61 74 63 68 65 73 28 22 2e 61 32 61 5f 6b 69 74 20 2e 61 32 61 5f 64 64 22 29 7c 7c 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 55 72 6c 3d 61 2e 6c 69 6e 6b 75 72 6c 7c 7c 22 22 2c 61 2e 6c 69 6e 6b 6e 61 6d 65 26 26 28 65 2e 64 61 74 61 73 65 74 2e 61 32 61 54 69 74 6c 65 3d 61 2e 6c 69 6e 6b 6e 61 6d 65 29 29 7d 29 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 75 72 6c 2c 64 65 6c 65 74 65 20 6e 2e 6c 69 6e 6b 6e 61 6d 65 7d 2c 69 2e 61 32 61 5f 69 6e 69 74 3d 69 2e 61 32 61 2e 69 6e 69 74 2c 21 64 7c 7c 64 2e 61 73 79 6e 63 7c 7c 64 2e 64 65 66 65 72 7c 7c 69 2e 61 32 61 2e 69 6e 69 74 28 22 70 61 67 65 22 2c 7b 6c 69 6e 6b 75 72 6c 3a Data Ascii: ull!==e.getAttribute("data-a2a-url")\|\|e.matches(".a2a_kit .a2a_dd")\|\|(e.dataset.a2aUrl=a.linkurl\|\|"",a.linkname&&(e.dataset.a2aTitle=a.linkname))}),delete n.linkurl,delete n.linkname},i.a2a_init=i.a2a.init,!d\|\|d.async\|\|d.defer\|\|i.a2a.init("page",{linkurl:
2024-01-15 13:23:53 UTC	1194	IN	Data Raw: 6d 65 6e 74 42 79 49 64 28 66 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 29 7d 29 2c 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 61 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 65 2e 73 74 79 6c 65 2c 6e 3d 61 2e 73 74 79 6c 65 2c 65 2e 69 64 3d 66 2c 74 2e 77 69 64 74 68 3d 74 2e 68 65 69 67 68 74 3d 6e 2e 77 69 64 74 68 3d 6e 2e 68 65 69 67 68 74 3d 22 31 70 78 22 2c 74 2e 74 6f 70 3d 74 2e 6c 65 66 74 3d 74 2e 62 6f 72 64 65 72 3d 22 30 22 2c 74 2e 70 6f 73 69 74 69 6f 6e 3d 6e 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 74 2e 7a 49 6e 64 65 78 3d 6e 2e 7a 49 6e 64 65 78 3d 22 31 30 30 30 30 30 22 2c 65 2e 74 69 74 6c 65 3d 22 41 64 64 54 Data Ascii: mentById(f).style.display="none")}),e=o.createElement("iframe"),a=o.createElement("div"),t=e.style,n=a.style,e.id=f,t.width=t.height=n.width=n.height="1px",t.top=t.left=t.border="0",t.position=n.position="absolute",t.zIndex=n.zIndex="100000",e.title="AddT
2024-01-15 13:23:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49733	23.199.50.2	443

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-15 13:23:54 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (dce/26AC) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=194225 Date: Mon, 15 Jan 2024 13:23:54 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49740	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:54 UTC	583	OUT	GET /menu/modules/core.KJQApO2n.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:54 UTC	863	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:23:54 GMT Content-Type: application/javascript Content-Length: 71385 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable ETag: "72d3f16463b3853530ea28b8dc5fc529" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oU%2BTXBoKbUStQvycvOmg5uiJC8z%2FDyJeC9NwX2L9E3EvgEMcELLPy6Cfw6MNbY4B0ScmSuDoZihyNLHUt9A1Rj5Qt%2B6AtElMT01OaG4Majh6lNaTknoaFw5gUKrufG06ZpDKKT2Q"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e6f9a8b483985-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:23:54 UTC	506	IN	Data Raw: 63 6f 6e 73 74 20 74 3d 22 2e 4b 4a 51 41 70 4f 32 6e 22 2c 4a 3d 77 69 6e 64 6f 77 2c 4b 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 58 3d 76 6f 69 64 20 30 3b 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 76 61 72 20 65 3d 7b 6c 6f 63 61 6c 69 7a 65 3a 4a 2e 61 32 61 5f 6c 6f 63 61 6c 69 7a 65 7c 7c 7b 7d 2c 73 74 61 74 69 63 5f 73 65 72 76 65 72 3a 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 2e 73 74 61 74 69 63 5f 73 65 72 76 65 72 7c 7c 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 61 64 64 74 6f 61 6e 79 2e 63 6f 6d 2f 6d 65 6e 75 22 2c 74 65 6d 70 6c 61 74 65 73 3a 7b 7d 2c 6e 61 74 69 76 65 3a 58 2c 6f 6e 63 6c 69 63 6b 3a 32 2c 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 58 2c 74 72 61 Data Ascii: const t=".KJQApO2n",J=window,K=document,p=function(){},X=void 0;J.a2a_config=J.a2a_config\|\|{};var e={localize:J.a2a_localize\|\|{},static_server:J.a2a_config.static_server\|\|"https://static.addtoany.com/menu",templates:{},native:X,onclick:2,orientation:X,tra
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 69 74 69 7a 65 3a 58 2c 65 78 63 6c 75 64 65 5f 73 65 72 76 69 63 65 73 3a 58 2c 63 75 73 74 6f 6d 5f 73 65 72 76 69 63 65 73 3a 58 2c 64 65 6c 61 79 3a 30 2c 73 68 6f 77 5f 6d 65 6e 75 3a 58 2c 62 6f 6f 6b 6d 61 72 6b 6c 65 74 3a 58 7d 2c 6d 3d 7b 6c 69 6e 6b 6d 65 64 69 61 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 3a 58 2c 6c 69 6e 6b 75 72 6c 3a 58 2c 6c 69 6e 6b 6e 61 6d 65 5f 65 73 63 61 70 65 3a 58 2c 6d 65 6e 75 5f 74 79 70 65 3a 58 2c 74 61 72 67 65 74 3a 58 7d 2c 5a 3d 7b 2e 2e 2e 65 2c 2e 2e 2e 4c 2c 2e 2e 2e 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 29 5a 5b 65 5d 3d 4a 2e 61 32 61 5f 63 6f 6e 66 69 67 5b 65 5d 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 Data Ascii: itize:X,exclude_services:X,custom_services:X,delay:0,show_menu:X,bookmarklet:X},m={linkmedia:X,linkname:X,linkurl:X,linkname_escape:X,menu_type:X,target:X},Z={...e,...L,...m},y=function(){for(const e in J.a2a_config)Z[e]=J.a2a_config[e]},z=function(e){for
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 3a 31 2c 6e 61 3a 31 7d 5d 2c 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 75 72 6c 3a 22 6d 61 69 6c 74 6f 3a 3f 73 75 62 6a 65 63 74 3d 24 7b 74 69 74 6c 65 7d 26 62 6f 64 79 3d 24 7b 6c 69 6e 6b 7d 22 7d 5d 2c 5b 22 50 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 70 69 6e 74 65 72 65 73 74 22 2c 22 65 36 30 30 32 33 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 70 69 6e 74 65 72 65 73 74 2e 63 6f 6d 2f 6a 73 2f 70 69 6e 6d 61 72 6b 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 2c 5b 22 54 65 6c 65 67 72 61 6d 22 2c 22 74 65 6c 65 67 72 61 6d 22 2c 22 74 65 6c 65 67 72 61 6d 22 2c 22 32 43 41 35 45 Data Ascii: :1,na:1}],["Email","email","email","888990",{url:"mailto:?subject=${title}&body=${link}"}],["Pinterest","pinterest","pinterest","e60023",{type:"js",src:"https://assets.pinterest.com/js/pinmarklet.js",media:1,pu:1}],["Telegram","telegram","telegram","2CA5E
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 44 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 64 69 61 73 70 6f 72 61 22 2c 22 32 45 33 34 33 36 22 5d 2c 5b 22 44 69 67 67 22 2c 22 64 69 67 67 22 2c 22 64 69 67 67 22 2c 22 31 41 31 41 31 41 22 5d 2c 5b 22 44 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 64 69 69 67 6f 22 2c 22 34 41 38 42 43 41 22 5d 2c 5b 22 44 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 64 6f 75 62 61 6e 22 2c 22 30 37 31 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 44 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 64 72 61 75 67 69 65 6d 22 2c 22 46 36 30 22 2c 7b 70 75 3a 31 7d 5d 2c 5b 22 45 76 65 72 6e 6f 74 65 22 2c 22 65 76 65 72 6e 6f 74 65 22 2c 22 65 76 65 72 6e 6f 74 65 22 2c 22 30 30 41 38 32 44 22 5d 2c 5b 22 46 61 72 6b 22 2c 22 66 61 72 Data Ascii: Diaspora","diaspora","diaspora","2E3436"],["Digg","digg","digg","1A1A1A"],["Diigo","diigo","diigo","4A8BCA"],["Douban","douban","douban","071",{pu:1}],["Draugiem","draugiem","draugiem","F60",{pu:1}],["Evernote","evernote","evernote","00A82D"],["Fark","far
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 22 2c 22 43 46 36 38 32 46 22 5d 2c 5b 22 50 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 70 72 69 6e 74 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 6a 61 76 61 73 63 72 69 70 74 3a 70 72 69 6e 74 28 29 22 7d 5d 2c 5b 22 50 72 69 6e 74 46 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 70 72 69 6e 74 66 72 69 65 6e 64 6c 79 22 2c 22 36 44 39 46 30 30 22 5d 2c 5b 22 50 75 73 68 61 22 2c 22 70 75 73 68 61 22 2c 22 70 75 73 68 61 22 2c 22 30 30 37 32 42 38 22 5d 2c 5b 22 51 7a 6f 6e 65 22 2c 22 71 7a 6f 6e 65 22 2c 22 71 7a 6f 6e 65 22 2c 22 32 42 38 32 44 39 22 5d 2c 5b 22 52 61 69 6e 64 72 6f 70 2e 69 6f 22 2c 22 72 61 69 6e 64 72 6f 70 5f 69 6f 22 2c 22 72 61 69 6e 64 72 6f 70 5f 69 6f 22 Data Ascii: ","CF682F"],["Print","print","print","888990",{type:"js",src:"javascript:print()"}],["PrintFriendly","printfriendly","printfriendly","6D9F00"],["Pusha","pusha","pusha","0072B8"],["Qzone","qzone","qzone","2B82D9"],["Raindrop.io","raindrop_io","raindrop_io"
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 6c 22 2c 22 79 61 68 6f 6f 22 2c 22 34 30 30 30 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 59 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 79 75 6d 6d 6c 79 22 2c 22 45 31 36 31 32 30 22 2c 7b 74 79 70 65 3a 22 6a 73 22 2c 73 72 63 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 75 6d 6d 6c 79 2e 63 6f 6d 2f 6a 73 2f 79 75 6d 6c 65 74 2e 6a 73 22 2c 6d 65 64 69 61 3a 31 2c 70 75 3a 31 7d 5d 5d 2c 65 6d 61 69 6c 3a 5b 5b 22 45 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 65 6d 61 69 6c 22 2c 22 38 38 38 39 39 30 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 7d 5d 2c 5b 22 47 6d 61 69 6c 22 2c 22 67 6f 6f 67 6c 65 5f 67 6d 61 69 6c 22 2c 22 67 6d 61 69 6c 22 2c 22 45 41 34 33 33 35 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 2c 70 Data Ascii: l","yahoo","400090",{type:"email"}],["Yummly","yummly","yummly","E16120",{type:"js",src:"https://www.yummly.com/js/yumlet.js",media:1,pu:1}]],email:[["Email","email","email","888990",{type:"email"}],["Gmail","google_gmail","gmail","EA4335",{type:"email",p
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 7b 6e 61 6d 65 3a 22 41 70 70 6c 65 20 4d 75 73 69 63 22 2c 69 63 6f 6e 3a 22 61 70 70 6c 65 5f 6d 75 73 69 63 22 2c 63 6f 6c 6f 72 3a 22 66 61 32 33 33 62 22 7d 2c 62 65 68 61 6e 63 65 3a 7b 6e 61 6d 65 3a 22 42 65 68 61 6e 63 65 22 2c 69 63 6f 6e 3a 22 62 65 68 61 6e 63 65 22 2c 63 6f 6c 6f 72 3a 22 30 30 37 45 46 46 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 65 68 61 6e 63 65 2e 6e 65 74 2f 24 7b 69 64 7d 22 7d 2c 62 6c 75 65 73 6b 79 3a 7b 6e 61 6d 65 3a 22 42 6c 75 65 73 6b 79 22 2c 69 63 6f 6e 3a 22 62 6c 75 65 73 6b 79 22 2c 63 6f 6c 6f 72 3a 22 31 32 38 35 66 65 22 7d 2c 64 69 73 63 6f 72 64 3a 7b 6e 61 6d 65 3a 22 44 69 73 63 6f 72 64 22 2c 69 63 6f 6e 3a 22 64 69 73 63 6f 72 64 22 2c 63 6f 6c 6f 72 3a 22 35 38 36 35 46 32 22 2c Data Ascii: {name:"Apple Music",icon:"apple_music",color:"fa233b"},behance:{name:"Behance",icon:"behance",color:"007EFF",url:"https://www.behance.net/${id}"},bluesky:{name:"Bluesky",icon:"bluesky",color:"1285fe"},discord:{name:"Discord",icon:"discord",color:"5865F2",
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 69 64 7d 22 7d 2c 73 6f 75 6e 64 63 6c 6f 75 64 3a 7b 6e 61 6d 65 3a 22 53 6f 75 6e 64 43 6c 6f 75 64 22 2c 69 63 6f 6e 3a 22 73 6f 75 6e 64 63 6c 6f 75 64 22 2c 63 6f 6c 6f 72 3a 22 66 66 35 35 30 30 22 7d 2c 73 70 6f 74 69 66 79 3a 7b 6e 61 6d 65 3a 22 53 70 6f 74 69 66 79 22 2c 69 63 6f 6e 3a 22 73 70 6f 74 69 66 79 22 2c 63 6f 6c 6f 72 3a 22 31 65 64 37 36 30 22 7d 2c 74 68 72 65 61 64 73 3a 7b 6e 61 6d 65 3a 22 54 68 72 65 61 64 73 22 2c 69 63 6f 6e 3a 22 74 68 72 65 61 64 73 22 2c 63 6f 6c 6f 72 3a 22 32 61 32 61 32 61 22 2c 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 68 72 65 61 64 73 2e 6e 65 74 2f 40 24 7b 69 64 7d 22 7d 2c 74 69 6b 74 6f 6b 3a 7b 6e 61 6d 65 3a 22 54 69 6b 54 6f 6b 22 2c 69 63 6f 6e 3a 22 74 69 6b 74 6f 6b 22 2c 63 6f Data Ascii: id}"},soundcloud:{name:"SoundCloud",icon:"soundcloud",color:"ff5500"},spotify:{name:"Spotify",icon:"spotify",color:"1ed760"},threads:{name:"Threads",icon:"threads",color:"2a2a2a",url:"https://www.threads.net/@${id}"},tiktok:{name:"TikTok",icon:"tiktok",co
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 20 61 65 28 65 2c 61 3d 7b 7d 29 7b 79 28 29 3b 76 61 72 20 74 2c 6e 2c 6f 2c 69 2c 72 2c 6c 2c 73 3d 5a 2c 63 3d 7b 7d 2c 64 3d 6e 75 6c 6c 2c 70 3d 7b 7d 2c 75 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 66 6f 72 28 74 20 69 6e 20 72 61 28 65 29 2c 61 29 73 5b 74 5d 3d 61 5b 74 5d 3b 66 6f 72 28 74 20 69 6e 20 73 29 63 5b 74 5d 3d 73 5b 74 5d 3b 69 66 28 6e 3d 73 2e 74 61 72 67 65 74 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 6f 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 31 29 2c 6e 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 22 2e 22 3d 3d 6f 29 72 65 74 75 72 6e 20 50 28 66 65 28 54 28 6e 2c 4b 29 29 2c 65 2c 61 29 2c 76 6f 69 64 28 73 2e 74 61 72 67 65 74 3d 58 29 3b 30 3c 3d 28 6f 3d 28 64 3d 46 28 6e 29 Data Ascii: ae(e,a={}){y();var t,n,o,i,r,l,s=Z,c={},d=null,p={},u=location.href;for(t in ra(e),a)s[t]=a[t];for(t in s)c[t]=s[t];if(n=s.target)if("string"==typeof n){if(o=n.substring(0,1),n=n.substring(1),"."==o)return P(fe(T(n,K)),e,a),void(s.target=X);0<=(o=(d=F(n)
2024-01-15 13:23:54 UTC	1369	IN	Data Raw: 65 2c 28 69 3d 70 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 30 5d 29 26 26 28 6e 2e 6c 69 6e 6b 6e 61 6d 65 3d 69 2e 6e 6f 64 65 56 61 6c 75 65 29 2c 64 2e 61 32 61 5f 6b 69 74 3f 57 28 6e 2c 6f 29 3a 55 28 6e 29 29 3a 75 2e 73 68 6f 77 5f 6d 65 6e 75 7c 7c 6a 2d 2d 2c 71 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 30 3c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 64 65 78 4f 66 28 22 61 32 61 5f 66 6f 6c 6c 6f 77 22 29 3f 61 65 28 22 66 65 65 64 22 2c 7b 74 61 72 67 65 74 3a 65 7d 29 3a 61 65 28 61 7c 7c 22 70 61 67 65 22 2c 7b 74 61 72 67 65 74 3a 65 7d 29 7d 2c 21 30 29 7c 7c 21 46 28 22 61 32 61 5f 6d 65 6e 75 5f 63 6f 6e 74 61 69 6e 65 72 22 29 7c 7c 71 2e 61 32 61 5f 64 6f 6e 65 7c 7c 61 65 28 61 29 7d 66 Data Ascii: e,(i=p.childNodes[0])&&(n.linkname=i.nodeValue),d.a2a_kit?W(n,o):U(n)):u.show_menu\|\|j--,q()}function r(a){$(function(e){0<=e.className.indexOf("a2a_follow")?ae("feed",{target:e}):ae(a\|\|"page",{target:e})},!0)\|\|!F("a2a_menu_container")\|\|q.a2a_done\|\|ae(a)}f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49741	172.67.39.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:54 UTC	699	OUT	GET /menu/sm.25.html HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:54 UTC	860	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:23:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=315360000, immutable referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3LWrw3%2BN66XCBPuB%2FsKI8cuZUX0zkS4jJuEIIYzXp%2F8fL22P47Rux0%2FNlwVmUfAzm5q1fCCtgSWlYpkasLj1%2FKlm9BMewhpI0BBStxp8CCni6juYZVUE2thOZsxMBYqoHLXU80PSpcFEiOAu8MGOdbfP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 19757 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e6f9b7f8b8206-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:23:54 UTC	509	IN	Data Raw: 32 63 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 32 41 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 74 3d 30 3c 6f 2e 6c 65 6e 67 74 68 3b 76 61 72 20 6e 2c 61 3d 7b 66 65 65 64 3a 5b 5d 2c 70 61 67 65 3a 5b 5d 7d 3b 74 26 26 5b 22 66 65 65 64 22 2c 22 70 61 67 65 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2b 22 5f 73 65 72 76 69 63 65 73 22 2c 6e 3d 6f 2e 69 6e 64 65 78 4f 66 28 74 2b 22 3d 22 29 3b 2d 31 21 3d 6e 26 Data Ascii: 2cc<!doctype html><html><head><title>A2A</title><meta name="robots" content="noindex"><script>!function(e){var o=document.cookie,t=0<o.length;var n,a={feed:[],page:[]};t&&["feed","page"].forEach(function(e){var t=e+"_services",n=o.indexOf(t+"=");-1!=n&
2024-01-15 13:23:54 UTC	214	IN	Data Raw: 6e 2e 6e 65 78 74 48 6f 70 50 72 6f 74 6f 63 6f 6c 3a 22 22 2c 74 3d 2f 5e 68 74 74 70 5c 2f 31 2f 2e 74 65 73 74 28 6e 29 29 2c 74 29 2c 75 73 65 72 5f 73 65 72 76 69 63 65 73 3a 7b 66 65 65 64 3a 61 2e 66 65 65 64 2c 70 61 67 65 3a 61 2e 70 61 67 65 7d 7d 2c 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 26 26 65 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 2c 22 2a 22 29 7d 28 77 69 6e 64 6f 77 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: n.nextHopProtocol:"",t=/^http\/1/.test(n)),t),user_services:{feed:a.feed,page:a.page}},e.postMessage&&e.parent.postMessage(n,"*")}(window);</script></head><body style="background-color:transparent"></body></html>
2024-01-15 13:23:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49742	23.199.50.2	443

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:54 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-01-15 13:23:55 UTC	660	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 974286BFDC254CDCB50C2B73CC4B4276 Ref B: MNZ221060605025 Ref C: 2023-03-13T15:26:50Z X-MSEdge-Ref: Ref A: 87B54C6474A14C81B6E546C3B6B2F842 Ref B: BLUEDGE1720 Ref C: 2023-03-13T15:26:50Z Cache-Control: public, max-age=194276 Date: Mon, 15 Jan 2024 13:23:54 GMT Content-Length: 55 Connection: close X-CID: 2
2024-01-15 13:23:55 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49748	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:55 UTC	843	OUT	GET /pagead/html/r20240109/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:55 UTC	643	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9152 X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 17:23:11 GMT Expires: Sun, 28 Jan 2024 17:23:11 GMT Cache-Control: public, max-age=1209600 Age: 72044 ETag: 9219409622527106327 Content-Type: text/html; charset=ISO-8859-1 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:23:55 UTC	609	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 2c 76 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 7a 3d 6b 2c 41 3d 30 3b 41 3c 63 61 2e 6c 65 6e Data Ascii: <!DOCTYPE html><html><head></head><body><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.len
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 3f 21 21 42 26 26 30 3c 42 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 72 65 74 75 72 6e 20 46 28 29 3f 43 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 45 28 22 43 68 72 6f 6d 65 22 29 7c 7c 45 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 45 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 2c 62 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 48 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 48 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 69 61 3d 2d 31 21 3d 65 61 28 29 2e 74 6f 4c 6f Data Ascii: ?!!B&&0<B.brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLo
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 29 7b 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 72 61 28 6b 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c Data Ascii: nst c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function ra(a=document){return a.createElement("img")};function sa(a){k.google_image_requests\|\|(k.google_image_requests=[]);const b=ra(k.document);b.src=a;k.google_image_requests.push(b)};l
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 65 26 26 50 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 48 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 4e 29 7b 4e 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6b 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 4e 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 4e 3b 61 Data Ascii: e&&P.clearMarks),Q=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Ha){var b;if(null===N){N="";try{a="";try{a=k.top.location.hash}catch(c){a=k.location.hash}a&&(N=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=N;a
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 68 3d 30 3b 68 3c 61 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 65 2e 70 75 73 68 28 4c 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 66 3d 66 7c 7c 30 2c 32 3e 66 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4b 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 Data Ascii: ,d<c.length){const e=[];for(let h=0;h<a.length;h++)e.push(La(a[h],b,c,d+1,f));return e.join(c[d])}}else if("object"==typeof a)return f=f\|\|0,2>f?encodeURIComponent(Ka(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ma(a){let b=1;for(const
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 72 79 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 53 3b 76 61 72 20 68 3d 72 3b 68 2e 67 2e 70 75 73 68 28 31 29 3b 68 2e 68 5b 31 5d 3d 52 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 41 61 28 62 2c 7b 6d 65 73 73 61 67 65 3a 54 28 62 29 7d 29 29 3b 69 66 28 62 2e 6d 73 67 29 7b 68 3d 72 3b 76 61 72 20 70 3d 62 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 68 2e 67 2e 70 75 73 68 28 32 29 3b 68 2e 68 5b 32 5d 3d 52 28 22 6d 73 67 22 2c 70 29 7d 76 61 72 20 6c 3d 62 2e 6d 65 74 61 7c 7c 7b 7d 3b 62 3d 6c 3b 69 66 28 74 68 69 73 2e 67 29 74 72 79 7b 74 68 69 73 2e 67 28 62 29 7d 63 61 74 63 68 28 77 29 7b 7d 69 66 28 64 29 74 72 79 7b 64 28 62 29 7d 63 61 Data Ascii: ry{const r=new S;var h=r;h.g.push(1);h.h[1]=R("context",a);b.error&&b.meta&&b.id\|\|(b=new Aa(b,{message:T(b)}));if(b.msg){h=r;var p=b.msg.substring(0,512);h.g.push(2);h.h[2]=R("msg",p)}var l=b.meta\|\|{};b=l;if(this.g)try{this.g(b)}catch(w){}if(d)try{d(b)}ca
2024-01-15 13:23:55 UTC	1252	IN	Data Raw: 2c 66 2c 7b 63 6f 6e 74 65 78 74 3a 22 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 54 28 72 29 2c 75 72 6c 3a 65 26 26 65 2e 67 2e 75 72 6c 7d 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 4f 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 66 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 65 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 3f 65 3d 63 3a 28 65 3d 6e 65 77 20 53 2c 71 61 28 63 2c 28 70 2c 6c 29 3d 3e 7b 76 61 72 20 67 3d 65 3b 63 6f 6e 73 74 20 71 3d 67 2e 6a 2b 2b 3b 70 3d 52 28 6c 2c 70 29 3b 67 2e 67 2e 70 75 73 68 28 71 29 3b 67 2e 68 5b 71 5d 3d 70 7d 29 29 3b 63 6f 6e Data Ascii: ,f,{context:"ecmserr",rctx:a,msg:T(r),url:e&&e.g.url},this.i,c)}catch(O){}}return!0}};function Oa(a,b,c,d=!1,f){if((d?a.g:Math.random())<(f\|\|.01))try{let e;c instanceof S?e=c:(e=new S,qa(c,(p,l)=>{var g=e;const q=g.j++;p=R(l,p);g.g.push(q);g.h[q]=p}));con
2024-01-15 13:23:55 UTC	1031	IN	Data Raw: 28 58 3d 58 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 56 61 3d 22 73 72 63 64 6f 63 22 69 6e 20 58 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 58 29 7d 76 61 72 20 59 61 3d 56 61 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 61 2e 6f 70 65 6e 28 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 72 65 70 6c 61 63 65 22 29 3b 62 3d 55 61 28 53 74 72 69 6e 67 28 62 29 29 3b 61 2e 77 72 69 74 65 28 6e 61 28 62 29 29 3b 61 2e 63 6c 6f 73 65 28 29 7d 3b 76 61 72 20 24 61 3d 61 3d 3e 7b 76 61 72 20 62 3d 70 61 28 21 30 29 2e 66 69 6e 64 28 63 3d 3e 21 21 63 2e 67 6f 6f 67 6c 65 5f 72 65 61 63 74 69 76 65 5f 73 72 61 5f 6c 6f 6f 6b 75 70 29 3f 2e 67 6f 6f 67 6c 65 5f 72 65 61 63 74 69 76 65 5f 73 72 61 5f 6c 6f 6f 6b 75 70 3b 72 65 74 75 72 6e 20 62 3f 62 Data Ascii: (X=X.toLowerCase());Va="srcdoc"in Xa.createElement(X)}var Ya=Va;function Za(a,b){a.open("text/html","replace");b=Ua(String(b));a.write(na(b));a.close()};var $a=a=>{var b=pa(!0).find(c=>!!c.google_reactive_sra_lookup)?.google_reactive_sra_lookup;return b?b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49749	31.13.66.19	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:55 UTC	404	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:55 UTC	1760	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fzh_CN%2Fall.js reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: wWTOdwXJEabJg4amvRL4dsOj8Z4OfaGEI9RxEGk2iQA9AekcpllzRaCywVFenP6QSqe46tpmC/1/K67Xt9eeCg== Date: Mon, 15 Jan 2024 13:23:55 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49750	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:55 UTC	1609	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325032318&_gaz=1&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=0&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=4234 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:23:55 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:23:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49751	172.253.63.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:55 UTC	783	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&cid=449002724.1705325034&gtm=45Pe41a0v9133405015&aip=1&dma=0&gcd=11l1l1l1l1 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:56 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:23:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49759	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:57 UTC	1898	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325035&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=1&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325034192&bpp=3&bdt=3599&idt=1676&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&nras=1&correlator=4342792276688&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1739 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:57 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:23:57 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 15-Jan-2024 13:38:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 15 Jan 2024 13:23:57 GMT Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:57 UTC	464	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 6c 69 6e 6b 20 68 72 65 66 5c 78 33 64 5c 78 32 37 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 5c 78 33 64 52 6f 62 6f 74 6f 3a 77 67 68 74 40 34 30 30 3b 37 30 30 5c 78 32 36 64 69 73 70 6c 61 79 5c 78 33 64 73 77 61 70 5c 78 32 37 20 72 65 6c 5c 78 33 64 Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3clink href\x3d\x27//fonts.googleapis.com/css2?family\x3dRoboto:wght@400;700\x26display\x3dswap\x27 rel\x3d
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 75 70 70 6f 72 74 2a 2f 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 31 35 70 78 29 3b 20 2f 2a 66 6f 72 20 73 61 66 61 72 69 2a 2f 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 6c 65 66 74 3a 20 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 20 61 75 74 6f 3b 7d 2e 63 72 65 61 74 69 76 65 20 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: upport/-webkit-backdrop-filter: blur(15px); /for safari*/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position:
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 6c 6f 61 74 3a 20 6c 65 66 74 3b 7d 2e 72 65 70 6f 72 74 20 73 76 67 20 7b 68 65 69 67 68 74 3a 20 31 2e 35 65 6d 3b 77 69 64 74 68 3a 20 31 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 30 2e 33 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 30 2e 33 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 3b 7d 2e 61 74 74 72 69 62 75 74 69 6f 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6d 61 72 67 69 6e 3a 20 31 32 70 78 20 34 70 78 20 30 3b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 7d 23 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 20 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 Data Ascii: loat: left;}.report svg {height: 1.5em;width: 1.5em;margin-left: -0.3em;margin-right: -0.3em;vertical-align: middle;padding-bottom: 1px;}.attribution {position: relative;padding: 0;margin: 12px 4px 0;float: right;}#ad_position_box {display: flex;align-ite
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 65 5c 78 32 32 20 69 64 5c 78 33 64 5c 78 32 32 63 72 65 61 74 69 76 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 69 66 72 61 6d 65 20 74 69 74 6c 65 5c 78 33 64 5c 78 32 32 41 64 76 65 72 74 69 73 65 6d 65 6e 74 5c 78 32 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 34 38 36 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 31 39 34 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 Data Ascii: e\x22 id\x3d\x22creative\x22\x3e\x3ciframe title\x3d\x22Advertisement\x22 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x22486px\x22 height\x3d\x22194px\x22style\x3d\x
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 5c 5c 78 32 32 5d 2c 5b 32 2c 5c 5c 78 32 32 73 65 72 76 65 72 5c 5c 78 32 32 5d 2c 5b 34 2c 5c 5c 78 32 32 6d 79 73 69 64 69 61 5f 72 65 6c 65 61 73 65 5f 63 61 6e 61 72 79 5c 5c 78 32 32 5d 5d 2c 33 2c 20 5b 5d 29 3b 5c 5c 78 33 63 2f 73 63 72 69 70 74 5c 5c 78 33 65 5c 5c 78 33 63 73 74 79 6c 65 5c 5c 78 33 65 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a Data Ascii: \\x22],[2,\\x22server\\x22],[4,\\x22mysidia_release_canary\\x22]],3, []);\\x3c/script\\x3e\\x3cstyle\\x3eHTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100%;overflow:hidden;position:absolute;top:0;left:
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 75 73 74 6f 6d 45 76 65 6e 74 28 5c 5c 78 32 32 63 5c 5c 78 32 32 2c 21 30 2c 21 30 2c 7b 7d 29 3b 64 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 21 30 21 5c 5c 78 33 64 5c 5c 78 33 64 64 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 66 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 63 2c 61 29 7b 61 5c 5c 78 33 64 61 7c 7c 7b 62 75 62 62 6c 65 73 3a 21 31 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 31 2c 64 65 74 61 69 6c 3a 76 6f 69 64 20 30 7d 3b 76 61 72 20 62 5c 5c 78 33 64 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 5c 5c 78 32 32 43 75 73 74 6f 6d 45 76 65 6e 74 5c 5c 78 32 32 29 3b 62 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e Data Ascii: ustomEvent(\\x22c\\x22,!0,!0,{});d.preventDefault();if(!0!\\x3d\\x3dd.defaultPrevented)throw Error();}catch(e){var f\\x3dfunction(c,a){a\\x3da\|\|{bubbles:!1,cancelable:!1,detail:void 0};var b\\x3ddocument.createEvent(\\x22CustomEvent\\x22);b.initCustomEven
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 65 78 2d 67 72 6f 77 3a 31 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 33 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 34 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e Data Ascii: ex-grow:1;height:100%;}.ns-4fcgv-e-2{line-height:1.3;box-sizing:border-box;display:flex;flex-direction:column;flex-grow:1;}.ns-4fcgv-e-3{line-height:1.3;box-sizing:border-box;display:flex;align-items:center;flex-direction:row;}.ns-4fcgv-e-4{line-height:1.
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 30 2c 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 34 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 31 2c 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 35 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 32 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 30 70 78 3b 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 Data Ascii: ustify-content:center;}.ns-4fcgv-e-20,.ns-4fcgv-e-24{line-height:1.3;}.ns-4fcgv-e-21,.ns-4fcgv-e-25{display:inline;}.ns-4fcgv-e-22{line-height:1.3;box-sizing:border-box;min-width:20px;}.ns-4fcgv-e-23{font-weight:400;text-align:center;width:50%;display:fle
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 64 6f 77 6e 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 Data Ascii: frames slide-down{from{transform:translateY(-100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframes bounce{from{transform:translateY(-100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframe
2024-01-15 13:23:57 UTC	1252	IN	Data Raw: 64 65 69 6e 7b 66 72 6f 6d 7b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 20 62 6c 75 72 28 31 30 70 78 29 3b 7d 74 6f 7b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 20 62 6c 75 72 28 30 70 78 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 61 73 68 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 5c 5c 78 32 32 35 30 25 20 35 30 25 5c 5c 78 32 32 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 32 2c 2e 6e 73 2d 34 66 63 67 76 2d 65 2d 31 33 7b 62 61 63 6b 67 72 6f Data Ascii: dein{from{filter:opacity(0%) blur(10px);}to{filter:opacity(100%) blur(0px);}} @keyframes flash{from{transform-origin:\\x2250% 50%\\x22;transform:scale(2);filter:opacity(0%);}to{transform:scale(1);filter:opacity(100%);}}.ns-4fcgv-e-2,.ns-4fcgv-e-13{backgro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49767	151.101.1.229	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:57 UTC	585	OUT	GET /gh/wordpress/wordpress@6.3.2/wp-includes/js/wp-emoji-release.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:58 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18692 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 6.3.2 X-JSD-Version-Type: version ETag: W/"4904-0A3cW5UmGT+pm8OZWm0F+ZVFLqE" Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:23:58 GMT Age: 1017360 X-Served-By: cache-fra-etou8220028-FRA, cache-iad-kiad7000128-IAD X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6d 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var m={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 29 2c 69 26 26 73 29 7b 66 6f 72 28 63 20 69 6e 28 6e 3d 6e 65 77 20 49 6d 61 67 65 29 2e 6f 6e 65 72 72 6f 72 3d 75 2e 6f 6e 65 72 72 6f 72 2c 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 72 61 67 67 61 62 6c 65 22 2c 22 66 61 6c 73 65 22 29 2c 66 3d 75 2e 61 74 74 72 69 62 75 74 65 73 28 6f 2c 69 29 29 66 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 30 21 3d 3d 63 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 21 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 63 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 63 2c 66 5b 63 5d 29 3b 6e 2e 63 6c 61 73 73 4e 61 6d 65 3d 75 2e 63 6c 61 73 73 4e 61 6d 65 2c 6e 2e 61 6c 74 3d 6f 2c 6e 2e 73 72 63 3d 73 2c 65 3d 21 30 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 6e 7c 7c 62 Data Ascii: ),i&&s){for(c in(n=new Image).onerror=u.onerror,n.setAttribute("draggable","false"),f=u.attributes(o,i))f.hasOwnProperty(c)&&0!==c.indexOf("on")&&!n.hasAttribute(c)&&n.setAttribute(c,f[c]);n.className=u.className,n.alt=o,n.src=s,e=!0,b.appendChild(n)}n\|\|b
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 Data Ascii: 83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 62 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 63 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 Data Ascii: \u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83e\uddd1\ud83c[\udffb-\udffe]\|\ud83d\udc68\ud83c\udffb\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffb\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffc-\udfff]\|\ud83d\udc68\ud
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 Data Ascii: ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb\udffd-\udfff]\|\ud83d\udc69\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83d\udc69\ud83c[\udffb\udffd-\udfff]\|\ud83d\udc69\ud83c\udffd\u200d\u2764\ufe0f\u20
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 64 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 63 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 64 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 Data Ascii: dffb-\udfff]\|\ud83e\uddd1\ud83c\udffc\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udffb\udffd-\udfff]\|\ud83e\uddd1\ud83c\udffc\u200d\ud83e\udd1d\u200d\ud83e\uddd1\ud83c[\udffb-\udfff]\|\ud83e\uddd1\ud83c\udffd\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udff
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 64 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 38 66 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 39 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 63 36 62 2d 5c 75 64 63 36 64 5c 75 64 63 38 66 5c 75 64 63 39 31 5d 7c 5c 75 64 38 33 65 5c 75 64 64 31 64 29 7c 28 3f 3a 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 29 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 Data Ascii: \ud83c[\udffb-\udfff]\|\ud83d\udc6d\ud83c[\udffb-\udfff]\|\ud83d\udc8f\ud83c[\udffb-\udfff]\|\ud83d\udc91\ud83c[\udffb-\udfff]\|\ud83e\udd1d\ud83c[\udffb-\udfff]\|\ud83d[\udc6b-\udc6d\udc8f\udc91]\|\ud83e\udd1d)\|(?:\ud83d[\udc68\udc69]\|\ud83e\uddd1)(?:\ud83c[\u
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 36 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c Data Ascii: d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|\ud83d\udc68\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc66\u200d\ud83d\udc66\|\ud83d\udc69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 5c 75 64 64 64 63 2d 5c 75 64 64 64 65 5c 75 64 64 65 31 5c 75 64 64 65 33 5c 75 64 64 65 38 5c 75 64 64 65 66 5c 75 64 64 66 33 5c 75 64 64 66 61 5c 75 64 65 63 62 5c 75 64 65 63 64 2d 5c 75 64 65 63 66 5c 75 64 65 65 30 2d 5c 75 64 65 65 35 5c 75 64 65 65 39 5c 75 64 65 66 30 5c 75 64 65 66 33 5d 7c 5b 5c 75 32 30 33 63 5c 75 32 30 34 39 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 61 39 5c 75 32 31 61 61 5c 75 32 33 31 61 5c 75 32 33 31 62 5c 75 32 33 32 38 5c 75 32 33 63 66 5c 75 32 33 65 64 2d 5c 75 32 33 65 66 5c 75 32 33 66 31 5c 75 32 33 66 32 5c 75 32 33 66 38 2d 5c 75 32 33 66 61 5c 75 32 34 63 32 5c 75 32 35 61 61 5c 75 32 35 61 62 5c 75 32 35 62 36 5c 75 32 35 63 30 5c 75 32 35 66 62 2d 5c 75 32 35 66 65 5c 75 32 36 30 Data Ascii: \udddc-\uddde\udde1\udde3\udde8\uddef\uddf3\uddfa\udecb\udecd-\udecf\udee0-\udee5\udee9\udef0\udef3]\|[\u203c\u2049\u2139\u2194-\u2199\u21a9\u21aa\u231a\u231b\u2328\u23cf\u23ed-\u23ef\u23f1\u23f2\u23f8-\u23fa\u24c2\u25aa\u25ab\u25b6\u25c0\u25fb-\u25fe\u260
2024-01-15 13:23:58 UTC	1378	IN	Data Raw: 34 30 5c 75 64 63 36 65 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 37 33 5c 75 64 62 34 30 5c 75 64 63 36 33 5c 75 64 62 34 30 5c 75 64 63 37 34 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 66 66 34 5c 75 64 62 34 30 5c 75 64 63 36 37 5c 75 64 62 34 30 5c 75 64 63 36 32 5c 75 64 62 34 30 5c 75 64 63 37 37 5c 75 64 62 34 30 5c 75 64 63 36 63 5c 75 64 62 34 30 5c 75 64 63 37 33 5c 75 64 62 34 30 5c 75 64 63 37 66 7c 5c 75 64 38 33 63 5c 75 64 64 65 36 5c 75 64 38 33 63 5b 5c 75 64 64 65 38 2d 5c 75 64 64 65 63 5c 75 64 64 65 65 5c 75 64 64 66 31 5c 75 64 64 66 32 5c 75 Data Ascii: 40\udc6e\udb40\udc67\udb40\udc7f\|\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc73\udb40\udc63\udb40\udc74\udb40\udc7f\|\ud83c\udff4\udb40\udc67\udb40\udc62\udb40\udc77\udb40\udc6c\udb40\udc73\udb40\udc7f\|\ud83c\udde6\ud83c[\udde8-\uddec\uddee\uddf1\uddf2\u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49766	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:57 UTC	545	OUT	GET /menu/svg/icons.37.svg.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:57 UTC	922	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:23:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=86400, stale-while-revalidate=30, public Cf-Bgj: minify ETag: W/"a4e15eafcbf1d18349782401d8cfb347" NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z%2BKLo%2Fz1NSz0aeu6YA93vItGvUnk7KmutH1ugfedksv0fL%2BXanANnr%2F91Kujsx0p%2BEaory7CpHX9Hvdr2qWm3J1AFYm9anoea5IKk4QUtUX2453Jhfa8VBTZD7qJDwcMT6PZkHPp"}],"group":"cf-nel","max_age":604800} Vary: Accept-Encoding referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff CF-Cache-Status: HIT Age: 19758 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e6faefa9c58ae-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:23:57 UTC	447	IN	Data Raw: 33 38 38 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 73 65 74 26 26 63 2e 73 76 67 2e 73 65 74 28 7b 5f 64 65 66 61 75 6c 74 3a 27 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 37 68 34 76 31 38 68 2d 34 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 20 31 34 68 31 38 76 34 48 37 7a 22 2f 3e 3c 2f 67 3e 27 2c 61 32 61 3a 27 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 37 68 34 76 31 38 68 2d 34 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 37 20 31 34 68 31 38 76 34 48 37 7a 22 Data Ascii: 3885!function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.set&&c.svg.set({_default:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"/></g>',a2a:'<g fill="#FFF"><path d="M14 7h4v18h-4z"/><path d="M7 14h18v4H7z"
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 34 2d 33 2e 38 32 33 61 2e 38 30 33 2e 38 30 33 20 30 20 30 20 30 2d 2e 33 36 2d 2e 30 39 33 2e 36 34 36 2e 36 34 36 20 30 20 30 20 30 2d 2e 34 33 2e 31 36 34 2e 35 39 31 2e 35 39 31 20 30 20 30 20 30 2d 2e 31 38 32 2e 34 32 37 63 30 20 2e 32 30 37 2e 31 31 32 2e 33 39 35 2e 32 36 37 2e 35 32 20 33 2e 32 31 20 32 2e 37 38 36 20 36 2e 37 33 20 35 2e 33 37 36 20 31 31 2e 34 36 20 35 2e 33 37 38 2e 30 39 34 20 30 20 2e 31 38 38 2d 2e 30 30 32 2e 32 38 2d 2e 30 30 34 20 33 2e 30 31 2d 2e 30 37 20 36 2e 34 31 35 2d 31 2e 30 38 34 20 39 2e 30 35 38 2d 32 2e 37 34 34 6c 2e 30 31 37 2d 2e 30 31 61 39 2e 30 37 20 39 2e 30 37 20 30 20 30 20 30 20 31 2e 30 31 38 2d 2e 37 30 33 63 2e 32 30 35 2d 2e 31 35 2e 33 34 36 2d 2e 33 38 35 2e 33 34 34 2d 2e 36 33 2d 2e 30 31 Data Ascii: 4-3.823a.803.803 0 0 0-.36-.093.646.646 0 0 0-.43.164.591.591 0 0 0-.182.427c0 .207.112.395.267.52 3.21 2.786 6.73 5.376 11.46 5.378.094 0 .188-.002.28-.004 3.01-.07 6.415-1.084 9.058-2.744l.017-.01a9.07 9.07 0 0 0 1.018-.703c.205-.15.346-.385.344-.63-.01
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 36 2d 2e 30 35 35 2e 35 30 32 2d 2e 33 33 36 2e 35 36 2d 2e 36 31 33 2e 32 37 38 2d 31 2e 32 33 20 31 2e 32 38 34 2d 31 2e 38 34 34 20 32 2e 34 2d 31 2e 39 36 68 2e 32 32 37 63 2e 36 37 20 30 20 31 2e 33 39 37 2e 32 38 20 31 2e 37 39 2e 38 34 2e 34 34 37 2e 36 37 2e 33 39 20 31 2e 35 37 2e 33 39 20 32 2e 33 35 76 2e 34 34 37 7a 6d 2d 2e 36 31 32 20 36 2e 36 35 63 2d 2e 33 39 33 2e 37 38 32 2d 31 2e 30 36 33 20 31 2e 32 38 36 2d 31 2e 37 39 20 31 2e 34 35 36 2d 2e 31 31 32 20 30 2d 2e 32 38 2e 30 35 35 2d 2e 34 34 38 2e 30 35 35 2d 31 2e 32 32 38 20 30 2d 31 2e 39 35 36 2d 2e 39 35 2d 31 2e 39 35 36 2d 32 2e 33 35 20 30 2d 31 2e 37 38 38 20 31 2e 30 36 2d 32 2e 36 32 37 20 32 2e 34 30 32 2d 33 2e 30 31 38 2e 37 32 37 2d 2e 31 36 37 20 31 2e 35 36 37 2d 2e Data Ascii: 6-.055.502-.336.56-.613.278-1.23 1.284-1.844 2.4-1.96h.227c.67 0 1.397.28 1.79.84.447.67.39 1.57.39 2.35v.447zm-.612 6.65c-.393.782-1.063 1.286-1.79 1.456-.112 0-.28.055-.448.055-1.228 0-1.956-.95-1.956-2.35 0-1.788 1.06-2.627 2.402-3.018.727-.167 1.567-.
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 37 39 2e 31 36 2d 31 2e 33 2e 32 37 2d 31 2e 37 36 2e 34 35 2d 2e 34 34 2e 31 37 2d 2e 37 37 2e 33 39 2d 31 2e 30 34 2e 36 37 61 32 2e 34 39 20 32 2e 34 39 20 30 20 30 20 30 2d 2e 36 36 20 31 2e 39 39 63 2e 30 36 2e 35 39 2e 33 33 20 31 2e 31 36 2e 37 39 20 31 2e 35 38 2e 33 31 2e 32 38 2e 37 2e 35 20 31 2e 31 35 2e 35 39 2e 34 37 2e 31 2e 39 38 2e 30 36 20 31 2e 37 32 2d 2e 30 39 2e 33 39 2d 2e 30 38 2e 37 36 2d 2e 32 20 31 2e 31 31 2d 2e 34 31 2e 33 35 2d 2e 32 2e 36 34 2d 2e 34 38 2e 38 38 2d 2e 38 31 2e 32 33 2d 2e 33 33 2e 33 38 2d 2e 37 2e 34 37 2d 31 2e 31 2e 30 39 2d 2e 34 31 2e 31 31 2d 2e 37 37 2e 31 31 2d 31 2e 31 38 56 31 32 2e 36 39 63 30 2d 2e 35 35 2e 31 36 2d 2e 37 2e 36 2d 2e 38 31 20 30 20 30 20 37 2e 39 31 2d 31 2e 35 39 20 38 2e 32 37 Data Ascii: 79.16-1.3.27-1.76.45-.44.17-.77.39-1.04.67a2.49 2.49 0 0 0-.66 1.99c.06.59.33 1.16.79 1.58.31.28.7.5 1.15.59.47.1.98.06 1.72-.09.39-.08.76-.2 1.11-.41.35-.2.64-.48.88-.81.23-.33.38-.7.47-1.1.09-.41.11-.77.11-1.18V12.69c0-.55.16-.7.6-.81 0 0 7.91-1.59 8.27
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 35 2e 33 31 2d 32 2e 34 39 2d 35 2e 34 32 32 2d 35 2e 39 34 34 20 30 2d 33 2e 33 38 36 20 32 2e 32 33 2d 35 2e 38 37 38 20 35 2e 33 31 2d 35 2e 38 37 38 20 34 20 30 20 35 2e 32 32 35 20 33 2e 37 34 20 35 2e 31 31 36 20 36 2e 34 37 68 2d 38 2e 34 35 35 63 2d 2e 30 36 37 20 31 2e 39 36 36 20 31 2e 30 35 20 33 2e 37 31 36 20 33 2e 35 32 20 33 2e 37 31 36 20 31 2e 35 33 20 30 20 32 2e 36 2d 2e 37 34 32 20 32 2e 39 32 38 2d 32 2e 32 30 36 68 31 2e 38 33 38 7a 6d 2d 31 2e 37 39 33 2d 33 2e 31 35 63 2d 2e 30 38 38 2d 31 2e 37 37 2d 31 2e 34 32 2d 33 2e 31 39 2d 33 2e 32 35 36 2d 33 2e 31 39 2d 31 2e 39 34 36 20 30 2d 33 2e 31 30 36 20 31 2e 34 36 36 2d 33 2e 32 33 36 20 33 2e 31 39 68 36 2e 34 39 32 7a 4d 32 30 2e 36 31 34 20 38 68 34 2e 39 33 35 76 31 2e 36 38 Data Ascii: 5.31-2.49-5.422-5.944 0-3.386 2.23-5.878 5.31-5.878 4 0 5.225 3.74 5.116 6.47h-8.455c-.067 1.966 1.05 3.716 3.52 3.716 1.53 0 2.6-.742 2.928-2.206h1.838zm-1.793-3.15c-.088-1.77-1.42-3.19-3.256-3.19-1.946 0-3.106 1.466-3.236 3.19h6.492zM20.614 8h4.935v1.68
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 2e 32 2e 30 32 2d 32 2e 36 39 35 2d 2e 34 33 2d 2e 33 35 32 2d 2e 33 32 34 2d 2e 34 30 34 2d 2e 39 30 35 2d 2e 35 31 2d 31 2e 36 39 2d 2e 31 39 37 2d 31 2e 35 32 37 2d 2e 33 32 32 2d 31 2e 36 30 36 2d 2e 35 36 2d 32 2e 31 32 32 2d 2e 38 36 36 2d 31 2e 38 33 36 2d 33 2e 32 31 34 2d 33 2e 32 31 37 2d 34 2e 38 32 35 2d 33 2e 34 30 38 68 2d 34 2e 33 36 37 63 2d 33 2e 34 33 36 20 30 2d 36 2e 32 34 34 20 32 2e 38 31 34 2d 36 2e 32 34 32 20 36 2e 32 34 38 76 37 2e 32 39 63 30 20 33 2e 34 32 38 20 32 2e 38 31 20 36 2e 32 33 38 20 36 2e 32 34 38 20 36 2e 32 33 38 68 37 2e 31 37 34 63 33 2e 34 33 36 20 30 20 36 2e 32 32 35 2d 32 2e 38 31 20 36 2e 32 34 34 2d 36 2e 32 33 37 6c 2e 30 34 2d 35 2e 30 34 38 2d 2e 30 36 2d 2e 32 37 37 7a 4d 31 32 2e 34 37 20 31 31 2e 32 Data Ascii: .2.02-2.695-.43-.352-.324-.404-.905-.51-1.69-.197-1.527-.322-1.606-.56-2.122-.866-1.836-3.214-3.217-4.825-3.408h-4.367c-3.436 0-6.244 2.814-6.242 6.248v7.29c0 3.428 2.81 6.238 6.248 6.238h7.174c3.436 0 6.225-2.81 6.244-6.237l.04-5.048-.06-.277zM12.47 11.2
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 32 33 2d 31 2e 38 37 33 20 35 2e 38 32 34 2d 35 2e 36 38 2d 2e 37 2d 31 2e 32 31 32 2e 35 31 35 2e 38 39 34 20 30 20 30 7a 4d 31 35 2e 39 39 38 20 33 63 2d 34 2e 33 36 38 20 30 2d 33 2e 36 36 34 20 35 2e 32 33 2d 32 2e 30 31 33 20 37 2e 38 38 36 61 35 2e 35 33 20 35 2e 35 33 20 30 20 30 20 31 20 34 2e 30 32 33 20 30 43 31 39 2e 36 36 20 38 2e 32 33 20 32 30 2e 33 36 36 20 33 20 31 35 2e 39 39 38 20 33 7a 4d 39 2e 32 35 35 20 38 2e 32 39 34 63 2d 31 2e 31 30 38 2d 2e 36 34 2d 32 2e 34 32 2d 2e 39 31 38 2d 33 2e 34 39 2d 2e 30 35 33 2d 2e 39 36 2e 37 38 2d 31 2e 37 39 20 32 2e 32 37 2d 31 2e 36 31 37 20 33 2e 35 34 2e 33 35 32 20 32 2e 35 36 33 20 34 2e 33 32 20 33 2e 34 36 37 20 36 2e 34 31 36 20 33 2e 34 30 34 61 35 2e 35 32 37 20 35 2e 35 32 37 20 30 20 Data Ascii: 23-1.873 5.824-5.68-.7-1.212.515.894 0 0zM15.998 3c-4.368 0-3.664 5.23-2.013 7.886a5.53 5.53 0 0 1 4.023 0C19.66 8.23 20.366 3 15.998 3zM9.255 8.294c-1.108-.64-2.42-.918-3.49-.053-.96.78-1.79 2.27-1.617 3.54.352 2.563 4.32 3.467 6.416 3.404a5.527 5.527 0
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 30 35 20 31 34 2e 34 33 6c 2d 32 2e 30 36 34 2e 38 37 35 63 2d 2e 36 32 38 2e 32 36 37 2d 2e 36 32 38 2e 38 36 35 20 30 20 31 2e 31 35 37 6c 39 2e 33 37 38 20 34 2e 31 34 32 63 2e 33 36 34 2e 31 32 32 2e 37 35 33 2e 31 34 33 20 31 2e 31 35 37 20 30 6c 39 2e 35 34 35 2d 34 2e 31 34 32 63 2e 35 36 36 2d 2e 33 31 32 2e 35 36 36 2d 2e 38 31 38 20 30 2d 31 2e 31 35 37 7a 6d 30 20 35 2e 37 39 36 2d 32 2e 31 2d 2e 38 37 36 2d 37 2e 34 34 20 33 2e 32 33 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 20 31 2d 31 2e 31 35 34 20 30 6c 2d 37 2e 33 31 33 2d 33 2e 32 33 2d 32 2e 30 36 34 2e 38 37 36 63 2d 2e 36 33 2e 32 36 36 2d 2e 36 33 2e 38 36 35 20 30 20 31 2e 31 35 36 6c 39 2e 33 37 37 20 34 2e 31 34 32 63 2e 33 36 34 2e 31 32 32 2e 37 35 33 2e 31 34 33 20 31 2e 31 35 Data Ascii: 05 14.43l-2.064.875c-.628.267-.628.865 0 1.157l9.378 4.142c.364.122.753.143 1.157 0l9.545-4.142c.566-.312.566-.818 0-1.157zm0 5.796-2.1-.876-7.44 3.23a1.55 1.55 0 0 1-1.154 0l-7.313-3.23-2.064.876c-.63.266-.63.865 0 1.156l9.377 4.142c.364.122.753.143 1.15
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 32 30 35 2d 32 2e 30 38 2d 2e 32 30 35 48 36 2e 35 33 37 7a 22 2f 3e 27 2c 64 69 61 72 79 5f 72 75 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 31 36 20 33 43 38 2e 38 32 20 33 20 33 20 38 2e 38 32 20 33 20 31 36 73 35 2e 38 32 20 31 33 20 31 33 20 31 33 20 31 33 2d 35 2e 38 32 20 31 33 2d 31 33 53 32 33 2e 31 38 20 33 20 31 36 20 33 7a 6d 30 20 32 34 2e 38 30 37 43 39 2e 34 38 20 32 37 2e 38 30 37 20 34 2e 31 39 32 20 32 32 2e 35 32 32 20 34 2e 31 39 32 20 31 36 20 34 2e 31 39 32 20 39 2e 34 38 20 39 2e 34 38 20 34 2e 31 39 33 20 31 36 20 34 2e 31 39 33 63 33 2e 39 32 20 30 20 37 2e 33 39 32 20 31 2e 39 31 20 39 2e 35 34 20 34 2e 38 35 68 2d 38 2e 33 30 38 73 2d 32 2e 38 36 33 2e 33 39 37 2d 33 2e 31 38 20 32 2e 35 34 34 63 2d Data Ascii: 205-2.08-.205H6.537z"/>',diary_ru:'<path fill="#FFF" d="M16 3C8.82 3 3 8.82 3 16s5.82 13 13 13 13-5.82 13-13S23.18 3 16 3zm0 24.807C9.48 27.807 4.192 22.522 4.192 16 4.192 9.48 9.48 4.193 16 4.193c3.92 0 7.392 1.91 9.54 4.85h-8.308s-2.863.397-3.18 2.544c-
2024-01-15 13:23:57 UTC	1369	IN	Data Raw: 31 39 2e 39 37 63 32 2e 36 30 38 2e 30 36 38 20 34 2e 38 32 2d 32 2e 30 32 35 20 34 2e 39 35 34 2d 34 2e 35 35 32 2e 31 33 38 2d 32 2e 36 32 36 2d 31 2e 38 39 2d 35 2e 30 37 34 2d 34 2e 37 32 37 2d 35 2e 31 34 35 2d 32 2e 37 2d 2e 30 36 37 2d 34 2e 38 36 37 20 32 2d 34 2e 39 37 33 20 34 2e 37 31 2d 2e 31 30 37 20 32 2e 37 32 20 32 2e 31 33 20 35 2e 30 30 38 20 34 2e 37 34 36 20 34 2e 39 38 38 7a 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 27 2c 64 69 73 63 6f 72 64 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 33 2e 36 20 39 63 2d 31 2e 34 2d 2e 36 2d 32 2e 39 2d 31 2e 31 2d 34 2e 35 2d 31 2e 34 48 31 39 63 2d 2e 32 2e 33 2d 2e 34 2e 38 2d 2e 36 20 31 2e 31 2d 31 2e 37 2d 2e 33 2d 33 2e 34 2d 2e 33 2d Data Ascii: 19.97c2.608.068 4.82-2.025 4.954-4.552.138-2.626-1.89-5.074-4.727-5.145-2.7-.067-4.867 2-4.973 4.71-.107 2.72 2.13 5.008 4.746 4.988z" clip-rule="evenodd"/>',discord:'<path fill="#fff" d="M23.6 9c-1.4-.6-2.9-1.1-4.5-1.4H19c-.2.3-.4.8-.6 1.1-1.7-.3-3.4-.3-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49765	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:58 UTC	591	OUT	OPTIONS /wp-json/wordpress-popular-posts/v2/widget?is_single=0 HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with,x-wp-nonce Origin: http://mylovelybluesky.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:23:59 UTC	1035	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: application/json; charset=UTF-8 x-robots-tag: noindex link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type allow: POST x-litespeed-tag: 8bb_HTTP.200 access-control-allow-origin: http://mylovelybluesky.com access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE access-control-allow-credentials: true vary: Origin,User-Agent x-litespeed-cache-control: no-cache content-length: 333 date: Mon, 15 Jan 2024 13:23:59 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:23:59 UTC	333	IN	Data Raw: 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 77 6f 72 64 70 72 65 73 73 2d 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 5c 2f 76 32 22 2c 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 61 72 67 73 22 3a 7b 22 69 73 5f 73 69 6e 67 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 67 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 5d 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 Data Ascii: {"namespace":"wordpress-popular-posts\/v2","methods":["POST"],"endpoints":[{"methods":["POST"],"args":{"is_single":{"type":"integer","default":null,"required":false},"lang":{"type":"string","default":null,"required":false}}}],"_links":{"self":[{"href":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49775	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:58 UTC	852	OUT	GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:23:58 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:23:58 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0Vcv1lvD-_0rycf_5DQb9Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 37 63 36 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7c65if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4d 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.M),reject:g(this.o)}};e.prototype.M=function(g){if(g===this)this.o(new TypeErr
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 6c 28 77 28 7a 29 29 7d 63 61 74 63 68 28 47 29 7b 6e 28 47 29 7d 7d 3a 79 7d 76 61 72 20 6c 2c 6e 2c 72 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 29 7b 6c 3d 77 3b 6e 3d 79 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 Data Ascii: l(w(z))}catch(G){n(G)}}:y}var l,n,r=new e(function(w,y){l=w;n=y});this.kb(k(g,l),k(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.kb=function(g,h){function k(){switch(l.g){case 1:g(l.i);break;case 2:h(l.i);break;defa
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 66 28 21 71 61 28 6b 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 62 3b 63 61 28 6b 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 69 66 Data Ascii: ion c(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===l}function d(k){if(!qa(k,f)){var l=new b;ca(k,f,{value:l})}}function e(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return l(n)})}if
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 55 3f 6c 2e 55 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 55 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6d 61 3a 74 68 69 73 5b 31 5d 2e 6d 61 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 55 29 2c 74 68 69 73 5b 31 5d 2e 6d 61 2e 6e 65 78 74 3d 6c 2e 55 2c 74 68 69 73 5b 31 5d 2e 6d 61 3d 6c 2e 55 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: 0],k[1])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.U?l.U.value=k:(l.U={next:this[1],ma:this[1].ma,head:this[1],key:h,value:k},l.list.push(l.U),this[1].ma.next=l.U,this[1].ma=l.U,this.size++);return thi
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 70 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 Data Ascii: \|-Infinity===b\|\|0===b)return b;var c=Math.floor(Math.abs(b));return 0>b?-c:c}});p("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push(b[d]);return c}});p("Object.is",function(a){return a?a:function(b,c){return b===c?0
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 Data Ascii: pe[Symbol.iterator]=b.prototype.values;b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 6c 3d 3d 64 7c 7c 64 3e 65 29 64 3d 65 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: l==d\|\|d>e)d=e;d=Number(d);0>d&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fi
2024-01-15 13:23:58 UTC	1656	IN	Data Raw: 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 44 61 2c 48 61 2c 4d 61 2c 51 61 2c 54 61 2c 56 61 2c 57 61 2c 58 61 2c 24 61 2c 6d 62 2c 73 62 2c 72 62 2c 77 62 2c 79 62 2c 78 62 2c 7a 62 2c 41 62 2c 45 62 2c 57 62 2c 5a 62 2c 24 62 2c 62 63 2c 65 63 2c 63 63 2c 64 63 2c 66 63 2c 67 63 2c 6a 63 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 Data Ascii: 9*Math.random()>>>0);}catch(e){_._DumpException(e)}try{var Da,Ha,Ma,Qa,Ta,Va,Wa,Xa,$a,mb,sb,rb,wb,yb,xb,zb,Ab,Eb,Wb,Zb,$b,bc,ec,cc,dc,fc,gc,jc;_.ya=function(a){_.t.setTimeout(function(){throw a;},0)};_.za=function(){var a=_.t.navigator;return a&&(a=a.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49777	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:23:59 UTC	1142	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:23:59 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:23:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-58HaPs5Kjp37MJtIm8NrqQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:23:59 UTC	361	IN	Data Raw: 32 61 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a4e<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 73 35 4b 6a 70 33 37 4d 4a 74 49 6d 38 4e 72 71 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 35 38 48 61 50 Data Ascii: s5Kjp37MJtIm8NrqQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="58HaP
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 45 41 52 7a 41 76 6b 56 62 51 53 31 4d 4d 47 61 6f 4d 59 4d 64 48 48 4c 37 65 49 6c 55 30 49 6e 52 55 39 57 61 59 52 6b 31 76 68 4b 70 36 59 4e 38 30 38 5f 53 56 72 4f 77 36 48 65 6e 62 63 4c 79 76 4b 2d 6c 59 68 77 6f 44 2d 56 41 34 5f 71 49 4e 44 57 79 32 54 5f 31 35 57 4c 6a 5f 46 51 79 4e 38 70 6b 66 58 74 59 66 74 69 4f 79 42 55 6a 47 6e 75 5f 63 30 4a 68 54 5f 6a 5f 72 6c 67 44 2d 50 39 4b 6c 71 6a 39 42 48 4b 47 36 71 78 71 73 44 71 6d 4d 45 74 6c 31 39 57 58 58 59 4d 5a 52 6a 48 37 77 5f 37 45 52 6c 67 46 69 61 77 74 64 64 6d 58 2d 70 6d 4b 65 5a 49 46 66 70 52 53 55 49 48 59 73 57 64 5f 5f 30 53 2d 57 57 68 51 43 6d 76 77 6c 50 33 6f 38 64 67 78 66 65 55 75 30 71 35 62 69 50 49 58 69 72 47 70 68 49 78 64 77 72 4c 5f 6c 4c 33 4b 6b 54 49 32 75 77 Data Ascii: EARzAvkVbQS1MMGaoMYMdHHL7eIlU0InRU9WaYRk1vhKp6YN808_SVrOw6HenbcLyvK-lYhwoD-VA4_qINDWy2T_15WLj_FQyN8pkfXtYftiOyBUjGnu_c0JhT_j_rlgD-P9Klqj9BHKG6qxqsDqmMEtl19WXXYMZRjH7w_7ERlgFiawtddmX-pmKeZIFfpRSUIHYsWd__0S-WWhQCmvwlP3o8dgxfeUu0q5biPIXirGphIxdwrL_lL3KkTI2uw
2024-01-15 13:23:59 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 77 51 33 46 74 64 7a 59 30 64 6c 5a 45 5a 46 68 71 52 31 70 46 62 31 4e 4f 4d 6b 35 71 52 6d 4d 32 63 79 31 42 51 55 52 6c 59 55 6f 78 5a 6a 4e 35 62 31 68 56 62 44 4a 42 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 59 31 6c 43 52 30 4e 57 64 33 67 78 4d 6d 38 35 54 45 31 31 4e 45 4a 6b 62 47 51 7a 4d 47 64 51 62 6e 64 51 4d 56 4a 6f 54 44 41 31 52 53 74 43 51 30 78 59 5a 33 45 35 62 6d 68 78 51 6b 74 4e 59 6c 42 52 56 30 49 32 57 6c 52 75 55 32 4e 4b 53 6d 64 36 56 58 42 71 55 45 64 50 52 6d 39 36 54 58 64 46 55 6a 56 34 61 6e 64 78 56 7a 51 72 52 46 59 34 63 31 70 4f 54 6a 6b 30 61 46 5a 79 64 6b 39 6f 57 46 56 73 54 56 4a 34 63 33 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy8wQ3FtdzY0dlZEZFhqR1pFb1NOMk5qRmM2cy1BQURlYUoxZjN5b1hVbDJBLmpz\x22,\x22\x22,\x22Y1lCR0NWd3gxMm85TE11NEJkbGQzMGdQbndQMVJoTDA1RStCQ0xYZ3E5bmhxQktNYlBRV0I2WlRuU2NKSmd6VXBqUEdPRm96TXdFUjV4andxVzQrRFY4c1pOTjk0aFZydk9oWFVsTVJ4c3
2024-01-15 13:23:59 UTC	461	IN	Data Raw: 74 61 6c 56 6a 64 47 4a 52 5a 44 52 77 4f 54 4e 79 65 56 5a 76 4d 33 51 30 51 56 70 4a 56 55 67 32 62 43 74 73 54 6d 64 36 55 54 42 52 61 30 6c 34 5a 44 41 34 61 58 52 6a 62 46 6b 31 63 45 6f 34 4e 46 4e 55 56 55 68 46 62 6d 68 78 5a 6c 45 32 5a 53 39 6e 64 6e 4e 76 55 47 70 46 52 6b 38 78 51 55 39 34 56 7a 42 54 5a 32 68 75 4d 6c 4a 73 5a 54 68 31 65 6b 6f 77 64 46 42 36 64 44 68 79 4b 7a 56 56 62 57 31 55 64 6d 35 72 65 57 4e 71 52 32 4a 57 4f 56 41 76 59 6b 38 78 65 57 31 77 56 45 74 56 4e 6c 70 33 4d 46 70 6a 5a 54 68 4f 4f 53 74 51 63 6b 74 4a 51 54 41 72 4e 48 4a 68 54 30 68 78 4f 55 56 32 4d 58 52 6e 4d 69 73 33 52 44 68 75 51 6d 4e 75 65 6e 64 70 5a 30 6c 42 64 57 52 74 51 57 4a 56 54 6a 56 58 63 6d 6c 69 56 57 78 47 59 6b 46 48 5a 47 4a 35 4b 31 Data Ascii: talVjdGJRZDRwOTNyeVZvM3Q0QVpJVUg2bCtsTmd6UTBRa0l4ZDA4aXRjbFk1cEo4NFNUVUhFbmhxZlE2ZS9ndnNvUGpFRk8xQU94VzBTZ2huMlJsZTh1ekowdFB6dDhyKzVVbW1Udm5reWNqR2JWOVAvYk8xeW1wVEtVNlp3MFpjZThOOStQcktJQTArNHJhT0hxOUV2MXRnMis3RDhuQmNuendpZ0lBdWRtQWJVTjVXcmliVWxGYkFHZGJ5K1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49778	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:01 UTC	1835	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-01-15 13:24:01 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:01 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkOhjj8Yzjq2kppio6O2cEGEULN1LSzgNrtMVOPKqgFDlh8WkTtHAH_syDdb1Y; expires=Wed, 14-Jan-2026 13:24:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 15 Jan 2024 13:24:01 GMT Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:01 UTC	292	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 3d 22 39 39 39 39 33 31 30 38 2d 38 33 33 64 2d 34 30 61 31 2d 61 63 30 37 2d 30 66 61 35 39 66 34 30 32 65 30 66 22 3e 3c 73 63 72 69 70 74 3e 3c 2f 73 63 72 69 70 74 3e 3c 69 66 72 61 6d 65 20 74 69 74 6c 65 3d 22 42 6c 61 6e 6b 22 69 64 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 6e 61 6d 65 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 77 69 64 74 68 3d 22 33 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 30 70 78 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 64 6f 63 20 3d 20 64 6f Data Ascii: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = do
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 65 61 6b 20 61 7d 63 5c 78 33 64 64 7d 61 5c 78 33 64 63 5c 78 32 36 5c 78 32 36 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 78 33 64 61 3f 61 3a 62 7d 3b 76 61 72 20 63 61 5c 78 33 64 61 61 28 36 31 30 34 30 31 33 30 31 2c 21 31 29 2c 64 61 5c 78 33 64 61 61 28 35 37 32 34 31 37 33 39 32 2c 21 30 29 3b 76 61 72 20 75 3b 63 6f 6e 73 74 20 65 61 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 75 5c 78 33 64 65 61 3f 65 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 72 65 74 75 72 6e 20 63 61 3f 75 3f 75 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 5c 78 33 64 5c 78 33 65 62 5c 78 32 36 5c 78 32 36 2d 31 21 5c 78 33 64 62 2e 69 6e 64 65 78 4f Data Ascii: eak a}c\x3dd}a\x3dc\x26\x26c[a];return null!\x3da?a:b};var ca\x3daa(610401301,!1),da\x3daa(572417392,!0);var u;const ea\x3dq.navigator;u\x3dea?ea.userAgentData\|\|null:null;function fa(a){return ca?u?u.brands.some(({brand:b})\x3d\x3eb\x26\x26-1!\x3db.indexO
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 7c 7c 61 2e 43 21 5c 78 33 64 5c 78 33 64 71 61 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 6c 65 74 20 73 61 2c 74 61 5c 78 33 64 21 64 61 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e Data Ascii: \x3d\x3dtypeof a\|\|a.C!\x3d\x3dqa)}function B(a){return null!\x3d\x3da\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}let sa,ta\x3d!da;function ua(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;con
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 29 61 5c 78 33 64 65 5c 78 32 36 5c 78 32 36 30 5c 78 33 64 5c 78 33 64 61 2e 6c 65 6e 67 74 68 5c 78 32 36 5c 78 32 36 28 61 5b 41 5d 7c 30 29 5c 78 32 36 31 3f 76 6f 69 64 20 30 3a 66 5c 78 32 36 5c 78 32 36 28 61 5b 41 5d 7c 30 29 5c 78 32 36 32 3f 61 3a 46 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 78 33 64 5c 78 33 64 64 2c 65 2c 66 29 3b 65 6c 73 65 20 69 66 28 42 28 61 29 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 6b 20 69 6e 20 61 29 67 5b 6b 5d 5c 78 33 64 45 61 28 61 5b 6b 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 61 5c 78 33 64 67 7d 65 6c 73 65 20 61 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 63 6f 6e 73 74 20 67 5c 78 Data Ascii: )a\x3de\x26\x260\x3d\x3da.length\x26\x26(a[A]\|0)\x261?void 0:f\x26\x26(a[A]\|0)\x262?a:Fa(a,b,c,void 0!\x3d\x3dd,e,f);else if(B(a)){const g\x3d{};for(let k in a)g[k]\x3dEa(a[k],b,c,d,e,f);a\x3dg}else a\x3db(a,d);return a}}function Fa(a,b,c,d,e,f){const g\x
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 78 33 64 61 5b 41 5d 7c 30 3b 69 66 28 62 5c 78 32 36 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 5c 78 33 64 61 3b 62 7c 5c 78 33 64 36 34 3b 76 61 72 20 64 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 28 2d 2d 64 2c 42 28 63 5b 64 5d 29 29 29 7b 62 7c 5c 78 33 64 32 35 36 3b 63 5c 78 33 64 64 2d 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 5c 78 33 63 5c 78 33 64 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 78 33 64 62 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 63 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 61 5b 41 5d 5c 78 33 64 62 7d 74 68 69 73 2e 6a 5c 78 33 64 61 7d 74 6f Data Ascii: .isArray(a))throw Error();b\x3da[A]\|0;if(b\x2664)break a;var c\x3da;b\|\x3d64;var d\x3dc.length;if(d\x26\x26(--d,B(c[d]))){b\|\x3d256;c\x3dd-(+!!(b\x26512)-1);if(1024\x3c\x3dc)throw Error();b\x3db\x26-16760833\|(c\x261023)\x3c\x3c14}}a[A]\x3db}this.j\x3da}to
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 6b 5c 78 33 64 61 3b 69 66 28 21 6c 61 5c 78 32 36 5c 78 32 36 75 61 28 61 2c 64 2c 2b 76 29 7c 7c 21 6b 61 5c 78 32 36 5c 78 32 36 72 61 28 61 29 5c 78 32 36 5c 78 32 36 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 73 69 7a 65 29 61 5c 78 33 64 6e 75 6c 6c 3b 61 21 5c 78 33 64 6b 5c 78 32 36 5c 78 32 36 28 63 5c 78 33 64 21 30 29 7d 6e 75 6c 6c 21 5c 78 33 64 61 3f 66 5b 76 5d 5c 78 33 64 61 3a 63 5c 78 33 64 21 30 7d 69 66 28 63 29 7b 66 6f 72 28 6c 65 74 20 79 20 69 6e 20 66 29 7b 74 5c 78 33 64 66 3b 62 72 65 61 6b 20 61 7d 74 5c 78 33 64 6e 75 6c 6c 7d 7d 74 21 5c 78 33 64 6d 5c 78 32 36 5c 78 32 36 28 70 5c 78 33 64 21 30 29 3b 68 2d 2d 7d 66 6f 72 28 65 5c 78 33 64 2b 21 21 28 65 5c 78 32 36 35 31 Data Ascii: rray.isArray(a)){k\x3da;if(!la\x26\x26ua(a,d,+v)\|\|!ka\x26\x26ra(a)\x26\x260\x3d\x3d\x3da.size)a\x3dnull;a!\x3dk\x26\x26(c\x3d!0)}null!\x3da?f[v]\x3da:c\x3d!0}if(c){for(let y in f){t\x3df;break a}t\x3dnull}}t!\x3dm\x26\x26(p\x3d!0);h--}for(e\x3d+!!(e\x2651
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 5c 78 33 64 5c 78 33 65 7b 76 61 72 20 62 5c 78 33 64 5c 78 32 32 73 5c 78 32 32 3b 69 66 28 61 2e 73 5c 78 32 36 5c 78 32 36 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 62 29 29 72 65 74 75 72 6e 20 61 2e 73 3b 62 5c 78 33 64 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 5c 78 33 64 62 7d 3b 76 61 72 20 53 61 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 5c 78 33 64 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 Data Ascii: \x3d\x3e{var b\x3d\x22s\x22;if(a.s\x26\x26a.hasOwnProperty(b))return a.s;b\x3dnew a;return a.s\x3db};var Sa\x3dRegExp(\x22^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?\x3d[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]*))?(?:#(
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 5a 61 29 3a 77 69 6e 64 6f 77 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 28 5a 61 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 5a 61 2c 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 5c 78 32 32 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 5c 78 32 32 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 62 28 61 2c 62 5c 78 33 64 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 5c 78 33 64 6e 75 6c 6c 2c 64 5c 78 33 64 21 31 2c 65 5c 78 33 64 21 31 29 7b 62 62 28 61 2c 62 2c 63 2c 21 31 2c 64 2c Data Ascii: solve().then(Za):window.setImmediate?setImmediate(Za):setTimeout(Za,0))):a.addEventListener(\x22DOMContentLoaded\x22,b)};function ab(a,b\x3ddocument){return b.createElement(String(a).toLowerCase())};function Q(a,b,c\x3dnull,d\x3d!1,e\x3d!1){bb(a,b,c,!1,d,
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 66 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 62 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 76 61 72 20 68 62 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 67 5c 78 33 64 7b 7d 7d 7d 3b 76 61 72 20 67 62 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 5c 78 33 64 65 62 28 64 62 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 32 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 5c 78 32 32 29 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 Data Ascii: f a.defaultValue?b:a.defaultValue}var hb\x3dclass{constructor(){this.g\x3d{}}};var gb\x3dclass extends hb{constructor(){super();var a\x3deb(db,document.currentScript);a\x3da\x26\x26a.getAttribute(\x22data-jc-flags\x22)\|\|\x22\x22;try{const b\x3dJSON.parse(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49782	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:01 UTC	1846	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-01-15 13:24:02 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:01 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; expires=Wed, 14-Jan-2026 13:24:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 15 Jan 2024 13:24:01 GMT Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:02 UTC	292	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 3d 22 39 39 39 39 33 31 30 38 2d 38 33 33 64 2d 34 30 61 31 2d 61 63 30 37 2d 30 66 61 35 39 66 34 30 32 65 30 66 22 3e 3c 73 63 72 69 70 74 3e 3c 2f 73 63 72 69 70 74 3e 3c 69 66 72 61 6d 65 20 74 69 74 6c 65 3d 22 42 6c 61 6e 6b 22 69 64 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 6e 61 6d 65 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 77 69 64 74 68 3d 22 33 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 30 70 78 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 64 6f 63 20 3d 20 64 6f Data Ascii: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = do
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 60 64 6f 70 62 7e 5c 78 32 36 71 75 6f 74 3b 5d 5c 78 32 32 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5c 78 32 37 75 73 65 20 73 74 72 69 63 74 5c 78 32 37 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 71 5c 78 33 64 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 5c 78 33 64 5b 5c 78 32 32 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 5c 78 32 32 5d 3b 66 6f 72 28 76 61 72 20 64 5c 78 33 64 71 2c 65 5c 78 33 64 30 3b 65 5c 78 33 63 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 5c Data Ascii: `dopb~\x26quot;]\x22\x3e(function(){\x27use strict\x27;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q\x3dthis\|\|self;function aa(a,b){a:{var c\x3d[\x22CLOSURE_FLAGS\x22];for(var d\x3dq,e\x3d0;e\x3cc.length;e++)if(d\
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 41 5d 7c 30 3b 31 21 5c 78 33 64 5c 78 33 64 28 62 5c 78 32 36 31 29 5c 78 32 36 5c 78 32 36 28 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 5c 78 32 36 5c 78 32 36 28 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 29 2c 61 5b 41 5d 5c 78 33 64 62 7c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 29 7b 76 61 72 20 61 5c 78 33 64 5b 5d 3b 61 5b 41 5d 7c 5c 78 33 64 31 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 61 5c 78 33 64 61 5c 78 33 65 5c 78 33 65 31 34 5c 78 32 36 31 30 32 33 3b 72 65 74 75 72 6e 20 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 76 61 72 20 70 61 5c 78 33 64 7b 7d 2c 71 61 5c 78 33 64 7b 7d 3b 66 75 6e 63 Data Ascii: A]\|0;1!\x3d\x3d(b\x261)\x26\x26(Object.isFrozen(a)\x26\x26(a\x3dArray.prototype.slice.call(a)),a[A]\x3db\|1)}function na(){var a\x3d[];a[A]\|\x3d1;return a}function oa(a){a\x3da\x3e\x3e14\x261023;return 0\x3d\x3d\x3da?536870912:a};var pa\x3d{},qa\x3d{};func
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 5c 78 33 64 5c 78 32 32 5c 78 32 32 2c 63 5c 78 33 64 30 3b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 66 6f 72 28 3b 63 5c 78 33 63 64 3b 29 62 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 5c 78 33 64 31 30 32 34 30 29 29 3b 62 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 2c 62 2c 63 2c 64 2c 65 Data Ascii: instanceof Uint8Array){let b\x3d\x22\x22,c\x3d0;const d\x3da.length-10240;for(;c\x3cd;)b+\x3dString.fromCharCode.apply(null,a.subarray(c,c+\x3d10240));b+\x3dString.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)}}}return a};function Ea(a,b,c,d,e
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 78 32 36 5c 78 32 32 73 74 72 69 6e 67 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 47 28 61 2c 62 2c 63 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 73 61 5c 78 33 64 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 2e 74 6f 4a 53 4f 4e 28 29 2c 43 61 29 7d 66 69 6e 61 6c 6c 79 7b 73 61 5c 78 33 64 21 31 7d 7d 76 61 72 20 49 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 5c 78 33 64 76 6f 69 64 20 30 3b 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 28 61 5c 78 33 64 42 61 29 3b 42 61 5c 78 33 64 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 Data Ascii: x26\x22string\x22!\x3d\x3dtypeof c)throw Error();return G(a,b,c)};function Ia(a){sa\x3d!0;try{return JSON.stringify(a.toJSON(),Ca)}finally{sa\x3d!1}}var I\x3dclass{constructor(){a:{var a\x3dvoid 0;null\x3d\x3da\x26\x26(a\x3dBa);Ba\x3dvoid 0;if(null\x3d\x3
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 36 6d 61 28 6e 29 7d 65 6c 73 65 7b 69 66 28 21 68 29 7b 76 61 72 20 6d 5c 78 33 64 76 6f 69 64 20 30 3b 66 2e 6c 65 6e 67 74 68 5c 78 32 36 5c 78 32 36 42 28 6d 5c 78 33 64 66 5b 66 2e 6c 65 6e 67 74 68 2d 31 5d 29 3f 68 5c 78 33 64 6d 3a 66 2e 70 75 73 68 28 68 5c 78 33 64 7b 7d 29 7d 6e 5c 78 33 64 68 5b 6c 5d 3b 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 68 5b 6c 5d 3f 68 5b 6c 5d 5c 78 33 64 63 3f 45 3a 6e 61 28 29 3a 63 5c 78 32 36 5c 78 32 36 6e 21 5c 78 33 64 5c 78 33 64 45 5c 78 32 36 5c 78 32 36 20 6d 61 28 6e 29 7d 7d 7d 68 5c 78 33 64 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 68 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 70 2c 72 3b 69 66 28 42 28 6d 5c 78 33 64 62 5b 68 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 74 5c 78 33 64 6d 3b 66 5c 78 33 64 7b 7d 3b Data Ascii: 6ma(n)}else{if(!h){var m\x3dvoid 0;f.length\x26\x26B(m\x3df[f.length-1])?h\x3dm:f.push(h\x3d{})}n\x3dh[l];null\x3d\x3dh[l]?h[l]\x3dc?E:na():c\x26\x26n!\x3d\x3dE\x26\x26 ma(n)}}}h\x3db.length;if(!h)return b;let p,r;if(B(m\x3db[h-1])){a:{var t\x3dm;f\x3d{};
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 20 4c 28 61 5c 78 33 64 77 69 6e 64 6f 77 29 7b 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 4d 5c 78 33 64 71 2e 64 69 63 6e 66 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 6c 65 74 20 62 5c 78 33 64 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 5c 78 33 64 61 28 29 2c 62 5c 78 33 64 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 78 32 36 5c 78 32 36 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 78 32 36 5c 78 32 36 61 2e 72 Data Ascii: nction L(a\x3dwindow){return a};let M\x3dq.dicnf\|\|{};function Qa(a){let b\x3d!1,c;return function(){b\|\|(c\x3da(),b\x3d!0);return c}};function N(a,b,c){a.addEventListener\x26\x26a.addEventListener(b,c,!1)}function Ra(a,b,c){a.removeEventListener\x26\x26a.r
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 2e 63 61 6c 6c 28 61 2c 63 29 5c 78 32 36 5c 78 32 36 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 6c 65 74 20 50 5c 78 33 64 5b 5d 3b 63 6f 6e 73 74 20 5a 61 5c 78 33 64 28 29 5c 78 33 64 5c 78 33 65 7b 63 6f 6e 73 74 20 61 5c 78 33 64 50 3b 50 5c 78 33 64 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 62 20 6f 66 20 61 29 74 72 79 7b 62 28 29 7d 63 61 74 63 68 7b 7d 7d 3b 20 76 61 72 20 24 61 5c 78 33 64 28 61 2c 62 29 5c 78 33 64 5c 78 33 65 7b 5c 78 32 32 63 6f 6d 70 6c 65 74 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 5c 78 32 32 69 6e 74 65 72 61 63 74 69 76 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 72 65 61 64 79 53 74 61 74 65 3f 28 50 2e 70 75 73 68 28 62 29 2c 31 5c 78 33 64 5c 78 33 64 50 2e 6c 65 Data Ascii: .call(a,c)\x26\x26b(a[c],c,a)}let P\x3d[];const Za\x3d()\x3d\x3e{const a\x3dP;P\x3d[];for(const b of a)try{b()}catch{}}; var $a\x3d(a,b)\x3d\x3e{\x22complete\x22\x3d\x3d\x3da.readyState\|\|\x22interactive\x22\x3d\x3d\x3da.readyState?(P.push(b),1\x3d\x3dP.le
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 72 69 6e 67 28 61 29 3f 62 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 5b 24 7b 5c 78 32 32 64 61 74 61 2d 6a 63 5c 78 32 32 7d 5c 78 33 64 5c 78 32 32 24 7b 61 7d 5c 78 32 32 5d 60 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 66 62 7c 7c 28 66 62 5c 78 33 64 6e 65 77 20 67 62 29 3b 63 6f 6e 73 74 20 62 5c 78 33 64 66 62 2e 67 5b 61 2e 6b 65 79 5d 3b 69 66 28 5c 78 32 32 70 72 6f 74 6f 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 76 61 6c 75 65 54 79 70 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 63 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 62 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 Data Ascii: ring(a)?b:document.querySelector(`[${\x22data-jc\x22}\x3d\x22${a}\x22]`)};function R(a){fb\|\|(fb\x3dnew gb);const b\x3dfb.g[a.key];if(\x22proto\x22\x3d\x3d\x3da.valueType){try{const c\x3dJSON.parse(b);if(Array.isArray(c))return c}catch(c){}return a.default

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49780	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:01 UTC	1854	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-01-15 13:24:02 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:01 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkNj-jR39g3Vgnf8RNEHM29ZG7IhJ_I7CQPcxORktIlMqXtbQuluDfKyM5kPFE; expires=Wed, 14-Jan-2026 13:24:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 15 Jan 2024 13:24:01 GMT Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:02 UTC	292	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 30 70 78 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 3d 22 39 39 39 39 33 31 30 38 2d 38 33 33 64 2d 34 30 61 31 2d 61 63 30 37 2d 30 66 61 35 39 66 34 30 32 65 30 66 22 3e 3c 73 63 72 69 70 74 3e 3c 2f 73 63 72 69 70 74 3e 3c 69 66 72 61 6d 65 20 74 69 74 6c 65 3d 22 42 6c 61 6e 6b 22 69 64 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 6e 61 6d 65 3d 22 61 64 5f 69 66 72 61 6d 65 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 20 73 72 63 3d 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 77 69 64 74 68 3d 22 33 33 36 70 78 22 20 68 65 69 67 68 74 3d 22 32 38 30 70 78 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 64 6f 63 20 3d 20 64 6f Data Ascii: 0px;}</style></head><body data-magicword="99993108-833d-40a1-ac07-0fa59f402e0f"><script></script><iframe title="Blank"id="ad_iframe" name="ad_iframe" scrolling="no" src="about:blank"frameborder="0"width="336px" height="280px"></iframe><script>var doc = do
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 60 64 6f 70 62 7e 5c 78 32 36 71 75 6f 74 3b 5d 5c 78 32 32 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5c 78 32 37 75 73 65 20 73 74 72 69 63 74 5c 78 32 37 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 71 5c 78 33 64 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 5c 78 33 64 5b 5c 78 32 32 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 5c 78 32 32 5d 3b 66 6f 72 28 76 61 72 20 64 5c 78 33 64 71 2c 65 5c 78 33 64 30 3b 65 5c 78 33 63 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 5c Data Ascii: `dopb~\x26quot;]\x22\x3e(function(){\x27use strict\x27;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q\x3dthis\|\|self;function aa(a,b){a:{var c\x3d[\x22CLOSURE_FLAGS\x22];for(var d\x3dq,e\x3d0;e\x3cc.length;e++)if(d\
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 41 5d 7c 30 3b 31 21 5c 78 33 64 5c 78 33 64 28 62 5c 78 32 36 31 29 5c 78 32 36 5c 78 32 36 28 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 5c 78 32 36 5c 78 32 36 28 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 29 2c 61 5b 41 5d 5c 78 33 64 62 7c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 29 7b 76 61 72 20 61 5c 78 33 64 5b 5d 3b 61 5b 41 5d 7c 5c 78 33 64 31 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 61 5c 78 33 64 61 5c 78 33 65 5c 78 33 65 31 34 5c 78 32 36 31 30 32 33 3b 72 65 74 75 72 6e 20 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 76 61 72 20 70 61 5c 78 33 64 7b 7d 2c 71 61 5c 78 33 64 7b 7d 3b 66 75 6e 63 Data Ascii: A]\|0;1!\x3d\x3d(b\x261)\x26\x26(Object.isFrozen(a)\x26\x26(a\x3dArray.prototype.slice.call(a)),a[A]\x3db\|1)}function na(){var a\x3d[];a[A]\|\x3d1;return a}function oa(a){a\x3da\x3e\x3e14\x261023;return 0\x3d\x3d\x3da?536870912:a};var pa\x3d{},qa\x3d{};func
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 5c 78 33 64 5c 78 32 32 5c 78 32 32 2c 63 5c 78 33 64 30 3b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 66 6f 72 28 3b 63 5c 78 33 63 64 3b 29 62 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 5c 78 33 64 31 30 32 34 30 29 29 3b 62 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 2c 62 2c 63 2c 64 2c 65 Data Ascii: instanceof Uint8Array){let b\x3d\x22\x22,c\x3d0;const d\x3da.length-10240;for(;c\x3cd;)b+\x3dString.fromCharCode.apply(null,a.subarray(c,c+\x3d10240));b+\x3dString.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)}}}return a};function Ea(a,b,c,d,e
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 78 32 36 5c 78 32 32 73 74 72 69 6e 67 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 47 28 61 2c 62 2c 63 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 73 61 5c 78 33 64 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 61 2e 74 6f 4a 53 4f 4e 28 29 2c 43 61 29 7d 66 69 6e 61 6c 6c 79 7b 73 61 5c 78 33 64 21 31 7d 7d 76 61 72 20 49 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 5c 78 33 64 76 6f 69 64 20 30 3b 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 28 61 5c 78 33 64 42 61 29 3b 42 61 5c 78 33 64 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 Data Ascii: x26\x22string\x22!\x3d\x3dtypeof c)throw Error();return G(a,b,c)};function Ia(a){sa\x3d!0;try{return JSON.stringify(a.toJSON(),Ca)}finally{sa\x3d!1}}var I\x3dclass{constructor(){a:{var a\x3dvoid 0;null\x3d\x3da\x26\x26(a\x3dBa);Ba\x3dvoid 0;if(null\x3d\x3
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 36 6d 61 28 6e 29 7d 65 6c 73 65 7b 69 66 28 21 68 29 7b 76 61 72 20 6d 5c 78 33 64 76 6f 69 64 20 30 3b 66 2e 6c 65 6e 67 74 68 5c 78 32 36 5c 78 32 36 42 28 6d 5c 78 33 64 66 5b 66 2e 6c 65 6e 67 74 68 2d 31 5d 29 3f 68 5c 78 33 64 6d 3a 66 2e 70 75 73 68 28 68 5c 78 33 64 7b 7d 29 7d 6e 5c 78 33 64 68 5b 6c 5d 3b 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 68 5b 6c 5d 3f 68 5b 6c 5d 5c 78 33 64 63 3f 45 3a 6e 61 28 29 3a 63 5c 78 32 36 5c 78 32 36 6e 21 5c 78 33 64 5c 78 33 64 45 5c 78 32 36 5c 78 32 36 20 6d 61 28 6e 29 7d 7d 7d 68 5c 78 33 64 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 68 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 70 2c 72 3b 69 66 28 42 28 6d 5c 78 33 64 62 5b 68 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 74 5c 78 33 64 6d 3b 66 5c 78 33 64 7b 7d 3b Data Ascii: 6ma(n)}else{if(!h){var m\x3dvoid 0;f.length\x26\x26B(m\x3df[f.length-1])?h\x3dm:f.push(h\x3d{})}n\x3dh[l];null\x3d\x3dh[l]?h[l]\x3dc?E:na():c\x26\x26n!\x3d\x3dE\x26\x26 ma(n)}}}h\x3db.length;if(!h)return b;let p,r;if(B(m\x3db[h-1])){a:{var t\x3dm;f\x3d{};
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 20 4c 28 61 5c 78 33 64 77 69 6e 64 6f 77 29 7b 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 4d 5c 78 33 64 71 2e 64 69 63 6e 66 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 6c 65 74 20 62 5c 78 33 64 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 5c 78 33 64 61 28 29 2c 62 5c 78 33 64 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 78 32 36 5c 78 32 36 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 78 32 36 5c 78 32 36 61 2e 72 Data Ascii: nction L(a\x3dwindow){return a};let M\x3dq.dicnf\|\|{};function Qa(a){let b\x3d!1,c;return function(){b\|\|(c\x3da(),b\x3d!0);return c}};function N(a,b,c){a.addEventListener\x26\x26a.addEventListener(b,c,!1)}function Ra(a,b,c){a.removeEventListener\x26\x26a.r
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 2e 63 61 6c 6c 28 61 2c 63 29 5c 78 32 36 5c 78 32 36 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 6c 65 74 20 50 5c 78 33 64 5b 5d 3b 63 6f 6e 73 74 20 5a 61 5c 78 33 64 28 29 5c 78 33 64 5c 78 33 65 7b 63 6f 6e 73 74 20 61 5c 78 33 64 50 3b 50 5c 78 33 64 5b 5d 3b 66 6f 72 28 63 6f 6e 73 74 20 62 20 6f 66 20 61 29 74 72 79 7b 62 28 29 7d 63 61 74 63 68 7b 7d 7d 3b 20 76 61 72 20 24 61 5c 78 33 64 28 61 2c 62 29 5c 78 33 64 5c 78 33 65 7b 5c 78 32 32 63 6f 6d 70 6c 65 74 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 5c 78 32 32 69 6e 74 65 72 61 63 74 69 76 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 72 65 61 64 79 53 74 61 74 65 3f 28 50 2e 70 75 73 68 28 62 29 2c 31 5c 78 33 64 5c 78 33 64 50 2e 6c 65 Data Ascii: .call(a,c)\x26\x26b(a[c],c,a)}let P\x3d[];const Za\x3d()\x3d\x3e{const a\x3dP;P\x3d[];for(const b of a)try{b()}catch{}}; var $a\x3d(a,b)\x3d\x3e{\x22complete\x22\x3d\x3d\x3da.readyState\|\|\x22interactive\x22\x3d\x3d\x3da.readyState?(P.push(b),1\x3d\x3dP.le
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 72 69 6e 67 28 61 29 3f 62 3a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 5b 24 7b 5c 78 32 32 64 61 74 61 2d 6a 63 5c 78 32 32 7d 5c 78 33 64 5c 78 32 32 24 7b 61 7d 5c 78 32 32 5d 60 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 66 62 7c 7c 28 66 62 5c 78 33 64 6e 65 77 20 67 62 29 3b 63 6f 6e 73 74 20 62 5c 78 33 64 66 62 2e 67 5b 61 2e 6b 65 79 5d 3b 69 66 28 5c 78 32 32 70 72 6f 74 6f 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 76 61 6c 75 65 54 79 70 65 29 7b 74 72 79 7b 63 6f 6e 73 74 20 63 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 62 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 Data Ascii: ring(a)?b:document.querySelector(`[${\x22data-jc\x22}\x3d\x22${a}\x22]`)};function R(a){fb\|\|(fb\x3dnew gb);const b\x3dfb.g[a.key];if(\x22proto\x22\x3d\x3d\x3da.valueType){try{const c\x3dJSON.parse(b);if(Array.isArray(c))return c}catch(c){}return a.default

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49779	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:01 UTC	889	OUT	GET /pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-01-15 13:24:01 UTC	634	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9152 X-XSS-Protection: 0 Date: Mon, 15 Jan 2024 13:24:01 GMT Expires: Mon, 29 Jan 2024 13:24:01 GMT Cache-Control: public, max-age=1209600 ETag: 9219409622527106327 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:01 UTC	618	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 2c 76 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 7a 3d 6b 2c 41 3d 30 3b 41 3c 63 61 2e 6c 65 6e Data Ascii: <!DOCTYPE html><html><head></head><body><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.len
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 72 65 74 75 72 6e 20 46 28 29 3f 43 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 45 28 22 43 68 72 6f 6d 65 22 29 7c 7c 45 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 45 28 22 53 69 6c 6b 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 2c 62 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 48 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 48 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 69 61 3d 2d 31 21 3d 65 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 Data Ascii: .brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase()
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 29 7b 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 72 61 28 6b 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6b 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4c 3d 6e 75 6c 6c Data Ascii: a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function ra(a=document){return a.createElement("img")};function sa(a){k.google_image_requests\|\|(k.google_image_requests=[]);const b=ra(k.document);b.src=a;k.google_image_requests.push(b)};let L=null
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 72 4d 61 72 6b 73 29 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 48 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 4e 29 7b 4e 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6b 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 4e 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 4e 3b 61 3d 21 21 62 2e 69 6e 64 65 Data Ascii: rMarks),Q=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Ha){var b;if(null===N){N="";try{a="";try{a=k.top.location.hash}catch(c){a=k.location.hash}a&&(N=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=N;a=!!b.inde
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 74 68 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 68 3d 30 3b 68 3c 61 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 65 2e 70 75 73 68 28 4c 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2b 31 2c 66 29 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 66 3d 66 7c 7c 30 2c 32 3e 66 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4b 61 28 61 2c 62 2c 63 2c 64 2c 66 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 Data Ascii: th){const e=[];for(let h=0;h<a.length;h++)e.push(La(a[h],b,c,d+1,f));return e.join(c[d])}}else if("object"==typeof a)return f=f\|\|0,2>f?encodeURIComponent(Ka(a,b,c,d,f+1)):"...";return encodeURIComponent(String(a))}function Ma(a){let b=1;for(const c in a.h
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 72 3d 6e 65 77 20 53 3b 76 61 72 20 68 3d 72 3b 68 2e 67 2e 70 75 73 68 28 31 29 3b 68 2e 68 5b 31 5d 3d 52 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 41 61 28 62 2c 7b 6d 65 73 73 61 67 65 3a 54 28 62 29 7d 29 29 3b 69 66 28 62 2e 6d 73 67 29 7b 68 3d 72 3b 76 61 72 20 70 3d 62 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 68 2e 67 2e 70 75 73 68 28 32 29 3b 68 2e 68 5b 32 5d 3d 52 28 22 6d 73 67 22 2c 70 29 7d 76 61 72 20 6c 3d 62 2e 6d 65 74 61 7c 7c 7b 7d 3b 62 3d 6c 3b 69 66 28 74 68 69 73 2e 67 29 74 72 79 7b 74 68 69 73 2e 67 28 62 29 7d 63 61 74 63 68 28 77 29 7b 7d 69 66 28 64 29 74 72 79 7b 64 28 62 29 7d 63 61 74 63 68 28 77 29 7b 7d 64 Data Ascii: r=new S;var h=r;h.g.push(1);h.h[1]=R("context",a);b.error&&b.meta&&b.id\|\|(b=new Aa(b,{message:T(b)}));if(b.msg){h=r;var p=b.msg.substring(0,512);h.g.push(2);h.h[2]=R("msg",p)}var l=b.meta\|\|{};b=l;if(this.g)try{this.g(b)}catch(w){}if(d)try{d(b)}catch(w){}d
2024-01-15 13:24:01 UTC	1252	IN	Data Raw: 78 74 3a 22 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 54 28 72 29 2c 75 72 6c 3a 65 26 26 65 2e 67 2e 75 72 6c 7d 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 4f 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 66 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 65 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 3f 65 3d 63 3a 28 65 3d 6e 65 77 20 53 2c 71 61 28 63 2c 28 70 2c 6c 29 3d 3e 7b 76 61 72 20 67 3d 65 3b 63 6f 6e 73 74 20 71 3d 67 2e 6a 2b 2b 3b 70 3d 52 28 6c 2c 70 29 3b 67 2e 67 2e 70 75 73 68 28 71 29 3b 67 2e 68 5b 71 5d 3d 70 7d 29 29 3b 63 6f 6e 73 74 20 68 3d 4e 61 28 65 Data Ascii: xt:"ecmserr",rctx:a,msg:T(r),url:e&&e.g.url},this.i,c)}catch(O){}}return!0}};function Oa(a,b,c,d=!1,f){if((d?a.g:Math.random())<(f\|\|.01))try{let e;c instanceof S?e=c:(e=new S,qa(c,(p,l)=>{var g=e;const q=g.j++;p=R(l,p);g.g.push(q);g.h[q]=p}));const h=Na(e
2024-01-15 13:24:01 UTC	1022	IN	Data Raw: 77 65 72 43 61 73 65 28 29 29 3b 56 61 3d 22 73 72 63 64 6f 63 22 69 6e 20 58 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 58 29 7d 76 61 72 20 59 61 3d 56 61 3b 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 61 2e 6f 70 65 6e 28 22 74 65 78 74 2f 68 74 6d 6c 22 2c 22 72 65 70 6c 61 63 65 22 29 3b 62 3d 55 61 28 53 74 72 69 6e 67 28 62 29 29 3b 61 2e 77 72 69 74 65 28 6e 61 28 62 29 29 3b 61 2e 63 6c 6f 73 65 28 29 7d 3b 76 61 72 20 24 61 3d 61 3d 3e 7b 76 61 72 20 62 3d 70 61 28 21 30 29 2e 66 69 6e 64 28 63 3d 3e 21 21 63 2e 67 6f 6f 67 6c 65 5f 72 65 61 63 74 69 76 65 5f 73 72 61 5f 6c 6f 6f 6b 75 70 29 3f 2e 67 6f 6f 67 6c 65 5f 72 65 61 63 74 69 76 65 5f 73 72 61 5f 6c 6f 6f 6b 75 70 3b 72 65 74 75 72 6e 20 62 3f 62 5b 61 5d 3a 28 62 3d 74 61 Data Ascii: werCase());Va="srcdoc"in Xa.createElement(X)}var Ya=Va;function Za(a,b){a.open("text/html","replace");b=Ua(String(b));a.write(na(b));a.close()};var $a=a=>{var b=pa(!0).find(c=>!!c.google_reactive_sra_lookup)?.google_reactive_sra_lookup;return b?b[a]:(b=ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49781	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:01 UTC	1216	OUT	GET /f/AGSKWxW4QFj6GFJvUFhyMCoQBqmQk9xVQfsmiAxpwZ-Hyhj2F-iAJGvA9pU-6J_xoodfRyEUYWzzm7aM4lrmjuFfb-16enC2tszdw4WU_WfhdSHq1xVpwaa6uLBmZy8Zguykwe8toi77Ww==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQwLDIyOTAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20vIixudWxsLFtbOCwiMTVtTHB6cndMckEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:01 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:01 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-E0ODYdKNI31EqLp0wl5e0g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 32 39 33 61 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 68 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 293aif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Sn=function(a){for(var b=_.hc.apply(1,
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6a 6f 28 64 29 3b 74 68 69 73 2e 69 3d 6e 65 77 20 5f 2e 49 6e 28 64 2c 6e 65 77 20 5f 2e 4c 67 28 5f 2e 7a 6b 28 74 68 69 73 2e 67 29 29 29 7d 3b 0a 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 6b 6f 28 74 68 69 73 2e 68 2c 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 6b 6f 28 74 68 69 73 2e 68 2c 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 6f 28 74 68 69 73 2e 68 2c 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 63 3d 74 68 69 73 2e 69 3b 61 3d 5f 2e 44 28 74 68 69 73 2e 67 2c 5f 2e 70 65 2c 31 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 Data Ascii: .location.hostname;this.h=new jo(d);this.i=new _.In(d,new _.Lg(_.zk(this.g)))};mo.prototype.start=function(a,b){switch(a){case 1:ko(this.h,1);break;case 3:ko(this.h,3);break;case 2:ko(this.h,2);break;default:var c=this.i;a=_.D(this.g,_.pe,1);var d=this.g
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 6c 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6e 6f 7d 2c 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 73 6f 28 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 6f 28 61 2c 31 29 7d 2c 61 29 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 31 3d 3d 3d 66 3f 30 3d 3d 3d 65 3f 75 6f 28 61 2c 32 29 3a 75 6f 28 61 2c 33 29 3a 63 2e 6e 6f 74 69 66 79 28 65 29 7d 2c 61 29 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 3d 3d 3d 61 2e 67 26 26 28 61 2e 67 3d 62 2c 61 2e 68 2e 67 28 62 29 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: l;this.h=new no},vo=function(a,b){for(var c=new so(b.map(function(e){return e.g()}),function(){uo(a,1)},a),d=0;d<b.length;d++)b[d].addListener(function(e,f){1===f?0===e?uo(a,2):uo(a,3):c.notify(e)},a)},uo=function(a,b){null===a.g&&(a.g=b,a.h.g(b))},wo=fun
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 6f 28 61 2e 43 2c 61 2e 69 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 65 6c 73 65 20 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 3b 0a 4f 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 52 6f 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 31 29 7d 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 71 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 69 3d 61 3b 74 68 69 73 2e 6c 3d 62 3b 74 68 69 73 2e 41 3d 63 7d 3b 5f 2e 41 28 53 6f 2c 71 6f 29 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: o(a.C,a.i,b,c)}catch(d){Po(a,a.l,b,c)}else Po(a,a.l,b,c)};Oo.prototype.h=function(){var a=this;Ro(this,function(){ro(a,0)},function(){ro(a,1)})};var So=function(a,b,c,d,e){qo.call(this,d,e);this.i=a;this.l=b;this.A=c};_.A(So,qo);So.prototype.g=function()
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 3b 76 61 72 20 63 3d 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3b 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 61 2e 67 26 26 61 2e 68 2e 67 28 61 2e 67 2e 74 65 73 74 28 65 29 2c 65 2c 64 29 3b 63 26 26 63 28 64 2c 65 2c 66 29 7d 7d 2c 59 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 29 7d 3b 76 61 72 20 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 68 3d 6e 65 77 20 5f 2e 67 65 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 62 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 7c 7c 21 64 7c 7c 22 53 63 72 69 70 74 20 65 72 72 6f 72 22 21 3d 3d 65 26 Data Ascii: ;var c=_.t.onerror;_.t.onerror=function(d,e,f){a.g&&a.h.g(a.g.test(e),e,d);c&&c(d,e,f)}},Yo=function(a,b){a.h.addEventListener(b)};var Vo=function(){this.g=new Map;this.h=new _.ge(document)},bp=function(a,b){Yo(b,function(c,d,e){c\|\|!d\|\|"Script error"!==e&
2024-01-15 13:24:01 UTC	1629	IN	Data Raw: 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 77 59 57 64 6c 59 57 51 76 62 33 4e 6b 4c 6d 70 7a 50 32 5a 6a 5a 46 78 31 4d 44 41 7a 5a 48 52 79 64 57 55 69 58 53 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 61 57 4e 76 49 6c 30 73 4d 54 41 77 4c 44 55 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 6d 4c 30 46 48 55 30 74 58 65 46 68 6a 59 6b Data Ascii: vb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvb3NkLmpzP2ZjZFx1MDAzZHRydWUiXSxbbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL2Zhdmljb24uaWNvIl0sMTAwLDUsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9mL0FHU0tXeFhjYk
2024-01-15 13:24:01 UTC	788	IN	Data Raw: 78 52 58 63 30 59 56 42 57 53 58 46 49 64 48 70 77 52 54 42 4e 4d 6a 67 32 64 6b 56 6c 62 46 42 33 58 48 55 77 4d 44 4e 6b 58 48 55 77 4d 44 4e 6b 49 6c 30 73 57 32 35 31 62 47 77 73 57 7a 64 64 58 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 5a 6b 4d 44 68 6d 4e 47 46 6c 4e 6d 5a 6d 59 6a 42 6b 5a 44 6b 69 4c 47 35 31 62 47 77 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 79 61 57 4a 31 64 47 39 79 55 32 56 79 64 6d 6c 75 5a 31 64 6c 59 6c 4e 33 61 58 52 6a 61 47 4a 76 59 58 Data Ascii: xRXc0YVBWSXFIdHpwRTBNMjg2dkVlbFB3XHUwMDNkXHUwMDNkIl0sW251bGwsWzddXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsImZkMDhmNGFlNmZmYjBkZDkiLG51bGwsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnRyaWJ1dG9yU2VydmluZ1dlYlN3aXRjaGJvYX
2024-01-15 13:24:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49794	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	609	OUT	GET /simgad/11229060083375947527 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:02 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 35254 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 05:00:58 GMT Expires: Sun, 12 Jan 2025 05:00:58 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 09 Jun 2023 05:40:16 GMT Content-Type: image/jpeg Age: 202984 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:02 UTC	429	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 8f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 66 32 31 63 64 32 32 2d 30 62 35 34 2d 34 62 31 34 2d 39 31 30 31 2d 36 66 37 65 66 30 34 38 66 32 63 62 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 35 31 42 45 32 39 32 37 34 36 31 31 31 45 44 39 34 35 31 41 32 30 39 38 43 43 39 36 34 35 43 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 35 31 42 45 32 39 31 37 34 36 31 31 31 45 44 39 34 35 31 41 32 30 39 38 43 43 39 36 34 35 43 22 20 78 Data Ascii: /sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f21cd22-0b54-4b14-9101-6f7ef048f2cb" xmpMM:DocumentID="xmp.did:651BE292746111ED9451A2098CC9645C" xmpMM:InstanceID="xmp.iid:651BE291746111ED9451A2098CC9645C" x
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 1d 31 c6 5c 4f 25 27 c1 b7 b6 7d 10 c3 49 69 08 f8 4d a4 78 5b 1c e9 da 7b f1 1c a6 a2 84 00 c7 8a 3a 83 00 b3 4c 8d 48 04 d4 64 7f e9 c4 06 6e a4 31 64 43 1e 2a 75 8a d0 01 ce 9f 60 c4 66 48 c4 71 c5 14 47 86 68 92 8f dd f1 1e c3 88 dd 4a cc 81 f7 7e fc b1 d8 59 76 04 27 c4 fb c5 34 fa 0d a8 14 20 9f de 23 86 29 dc 5d c6 9f ad 59 a3 6c 6a 07 e0 ab c2 da 7e e9 29 c9 f3 e5 19 0f be 6a 4a cd 40 ec 48 ee 18 c4 a9 52 53 2e 56 9b 88 06 8a 8c 3a a3 7c 63 6c d8 25 48 8f 43 39 d2 18 86 07 fe f1 63 23 ee 19 fb b1 8f b9 dc ca 9d 3e ee 67 00 b5 f6 9a 1e 2d 4e f6 43 15 e7 9d d9 52 1e 98 e1 92 a0 a5 95 51 2d a4 83 ed c8 63 89 a8 08 38 e6 bb 20 43 60 90 80 84 24 04 00 e3 a4 e6 78 8c f9 0f 66 04 30 40 49 92 52 96 40 d2 e3 8a a1 3e 54 d0 95 f7 00 0e 58 20 84 72 58 29 b2 Data Ascii: 1\O%'}IiMx[{:LHdn1dC*u`fHqGhJ~Yv'4 #)]Ylj~)jJ@HRS.V:\|cl%HC9c#>g-NCRQ-c8 C`$xf0@IR@>TX rX)
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 62 bc 30 bc 32 13 f8 a0 a2 98 97 48 fa 9c 0b 34 42 85 14 d8 e2 29 c7 3e ee 38 38 84 32 90 29 cf e7 62 b6 9f 45 05 2d 6b a5 14 46 a3 da 73 c4 b1 51 49 2c 4c a8 a5 b5 6b 59 5e 91 a7 50 a5 78 53 2c 4c 0a 84 a7 1b 6d c2 0c 35 7a 62 49 0d 38 aa 21 de 29 4a 8f 23 dd 89 33 51 22 76 de 29 08 70 10 e3 4b 49 f1 a5 44 0c f8 83 5a f0 a6 08 04 24 ad 72 9e 71 2a 43 8d 90 41 01 45 b4 f8 94 00 ec 03 bf bb 06 14 64 3a 4e e3 f7 57 02 5c b6 ae 2d 10 54 49 73 50 34 50 a1 cc 83 dd 96 0c 04 05 90 ed ca db b9 2e 0d 2b d5 bc b7 1a 45 08 4f a2 d9 5a eb c4 78 b5 0f d3 84 c4 e4 59 38 20 1c 9d 57 0b d4 1d f4 cc c9 6c ce b7 cf 91 e8 28 97 24 21 b7 16 d1 af 05 85 24 14 d0 f1 c6 3d 71 71 ab 10 4f c1 6b d2 9d 06 c0 81 f1 46 9b 3f 62 dd ae ad b5 3a ec b5 b2 ca cf f0 60 a5 47 5a 85 3e fa Data Ascii: b02H4B)>882)bE-kFsQI,LkY^PxS,Lm5zbI8!)J#3Q"v)pKIDZ$rq*CAEd:NW\-TIsP4P.+EOZxY8 Wl($!$=qqOkF?b:`GZ>
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 81 25 35 0c 42 67 dc 28 61 2d c4 2e a4 25 d5 29 c6 d2 e9 19 80 42 6a 01 ef a8 c0 43 1c 14 a0 02 5d 42 77 ad cd 1f a6 b7 fb 5b 97 27 db 4c 1b da 96 c1 69 6a 05 2e 52 84 65 cf 25 2b 3e 1f 6e 15 48 c9 9c 0c 95 8a 75 23 f2 92 ce 84 25 74 ca 23 37 c9 fb a7 a5 b3 42 2d f7 c7 1a 95 3f 68 95 e8 f9 79 48 1a 1e 72 21 52 82 0a 5d 49 05 6d a9 49 d3 e9 a7 45 7c 28 4c 91 bb 13 86 99 66 8b 46 82 79 10 a6 5d be 5e b9 59 d0 b5 a9 1f 3d 1d 4b 8f 31 a4 92 0a 5e 6d 5a 56 85 02 12 a4 a9 2a 14 50 50 ae 33 66 55 77 31 38 64 b2 9b 1d b2 42 94 de 99 02 81 40 8a 57 2f d3 86 a7 5a 54 e5 a8 2b 1a 45 40 c5 48 9b 6a f8 2e 0c 26 3b 8e 6a 9d 15 34 73 51 cd 68 14 01 67 bf 91 fb 79 e3 d9 3c b9 bd 8b da 42 24 f7 e3 9f 48 e7 eb e7 ed e2 bc d7 cc 1b 39 b7 99 90 1d d3 ee 3e 99 7b 11 8a 1c 24 Data Ascii: %5Bg(a-.%)BjC]Bw['Lij.Re%+>nHu#%t#7B-?hyHr!R]ImIE\|(LfFy]^Y=K1^mZV*PP3fUw18dB@W/ZT+E@Hj.&;j4sQhgy<B$H9>{$
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: bf 46 06 a5 41 4e 3a 8a 68 42 55 24 c3 35 57 37 7e fb bb 6e 67 d6 b9 d2 16 cd bd b5 7f c2 5a 90 bf e1 23 20 2a 69 40 a3 97 12 3d 98 c2 af 79 2a 87 90 e4 b6 68 da 8a 63 0c f9 af 2e 23 31 e9 b5 43 f1 17 9a 8f 67 60 c5 19 62 b5 29 8d 2b 7f a6 40 2a 26 a4 79 73 a7 1c 03 29 4c 82 cc 50 03 41 a8 72 15 fd b8 4e 84 e2 b4 ad 0b 59 2b 59 09 03 3c 86 07 34 eb 42 c8 00 d3 30 78 57 0c 70 45 25 a8 a8 52 84 e6 38 76 e0 50 ba d2 b5 69 15 3c 70 c5 27 53 37 46 3a 15 ba fa d3 73 96 d5 a9 69 b3 58 2d a9 3f 99 ee 69 2d a9 c6 5b 74 a6 ad b0 da 41 4f a8 e2 8d 09 00 f8 53 99 fb a1 5c a7 99 fc d9 6d b1 d3 06 a7 7a a4 b2 80 2c 48 e2 4f 21 f1 38 0e 2d d2 f9 6f ca f7 1b d5 43 a3 bb 4e 39 c8 8c 1f 80 1c cf c0 62 78 3c 6d be 76 2e e4 e9 ce e4 b8 6d 6d d5 01 50 6e 90 55 e1 22 a5 a7 da Data Ascii: FAN:hBU$5W7~ngZ# i@=yhc.#1Cg`b)+@*&ys)LPArNY+Y<4B0xWpE%R8vPi<p'S7F:siX-?i-[tAOS\mz,HO!8-oCN9bx<mv.mmPnU"
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 74 e6 08 69 29 3e cd b8 59 9a e2 a6 16 c3 0f bc 47 cc d3 30 a2 91 a4 54 8e 34 19 57 b3 14 5c ba 92 a5 10 62 c1 3d 5c 5f 61 e5 00 56 92 a5 66 07 0e 5c be dc 34 e4 a0 a7 48 8c 13 2a 14 ed be 4b 52 98 74 a2 43 54 21 40 d3 50 e7 5f db 8b 9b 76 e1 52 ce a8 a9 02 cc a3 bb b4 8d cd 33 09 87 05 49 d6 ab c3 57 08 c2 43 2a 01 60 e9 7d a0 73 4a bf a8 f2 c7 b7 ed 1b b5 3b ea 42 71 38 f1 1c 8f a6 4b ca 37 6d aa 56 f3 30 97 51 4f 8d c8 49 d2 aa f3 00 8c 6f 42 a3 ae 56 e2 89 83 a2 08 6f b2 aa 6b 5e 91 c0 eb 49 1c 7d d8 53 07 82 ab 12 8a 23 c3 8e ea 41 f9 b0 91 ef e7 ed a6 28 ce a4 87 05 66 34 c1 19 ae e4 49 b1 da 87 a9 2a f6 94 0a 50 a1 55 e5 dc 06 03 f4 b3 fa 88 9e 9c 3e b2 0e dc 1d 69 e9 b6 d1 86 ec db f6 e2 66 0c 76 81 a1 20 ad 6e 1f dd 69 b4 05 2d 6a cf 82 41 38 ab Data Ascii: ti)>YG0T4W\b=\_aVf\4HKRtCT!@P_vR3IWC`}sJ;Bq8K7mV0QOIoBVok^I}S#A(f4I*PU>ifv ni-jA8
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 00 67 53 ee c0 c8 a7 01 d0 b4 4d 9a e6 f7 48 bb df 27 aa 53 e5 20 b3 09 47 43 4c 83 91 08 4a 40 a7 b7 89 c5 79 d0 8d 4c 65 8a 98 57 95 3c 23 82 64 dd 1d 16 8d 1e df 2e 64 34 ad 6e b1 1c bc 96 52 ad 75 a7 20 06 78 ad 53 6f a6 46 19 a9 e1 7d 30 40 2b c6 8e 42 9c 31 82 ba 46 e6 b8 78 56 a7 2c e9 5a 61 8a 41 6b 2a d2 49 15 39 54 d3 80 c0 a2 67 5a 94 a0 e6 44 d0 0c ce 18 a7 49 ce 91 4a 71 e3 aa b8 12 93 62 b4 a9 5c 79 0e de 78 64 ca 6e e8 67 42 ef fd 67 dc 1e 9a 3d 4b 66 d0 b5 b8 3f c4 3b 87 4f 0e 7f 2f 1f 56 4b 79 43 dc 91 e2 57 20 ae 43 cd 9e 6c a1 b1 d0 72 d2 ad 2f 92 1f e2 97 28 8f 7e 43 89 1d 47 96 3c af 5b 7a ad c6 34 a3 f3 4b fc 31 e7 23 ee cc f0 7b 15 d6 bf a8 3b 47 4c 6d b1 3a 3d d0 55 b3 68 67 6f 29 2d 5e 37 24 4d 2e 06 9c 6d 55 5b 0c 2d 41 41 c7 14 Data Ascii: gSMH'S GCLJ@yLeW<#d.d4nRu xSoF}0@+B1FxV,ZaAk*I9TgZDIJqb\yxdngBg=Kf?;O/VKyCW Clr/(~CG<[z4K1#{;GLm:=Uhgo)-^7$M.mU[-AA
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 38 0c fa 41 d5 97 d5 73 26 0d cb 25 bf 6b 63 6a f7 26 a0 3a 69 cb 06 27 01 a8 86 eb 60 31 7f 6a 8d 2e 32 2d 13 ee 0e 49 b4 d9 9b b0 c1 75 29 4b 16 f4 c8 76 40 49 02 84 97 5e 25 44 93 9f 66 3a 1b 6a 55 29 c0 46 a4 f5 cb 9b 01 ee 18 2c 4b 89 c2 a4 de 11 d2 39 39 3e f2 b6 36 c2 5a 1a d2 40 29 15 50 ae 25 2a 20 ab 87 53 37 12 2f b7 74 5b 59 74 3d 16 07 99 20 65 af 18 b7 d5 9e 5a 56 ad a5 33 08 ea 39 94 16 dc 08 c1 1a c9 f4 a9 c5 44 d0 0a f7 f0 c5 0c 94 c4 92 b4 bf 32 1c 54 39 ff 00 14 16 94 24 95 9e 19 7b 4d 06 02 75 00 08 e1 48 c8 81 cd 57 5e a2 ef 5d 31 9f 78 3f e9 9d 2a 6e 0b 35 cc 13 50 a7 08 14 1d 80 65 8e 53 75 bf 70 e3 a9 75 5b 6d 90 89 6f 6f 62 ac d3 b5 3e cc 67 2b 53 29 ca a9 3c fc 39 d3 b7 9e 30 68 1c 5c ad da 99 26 99 8c 05 29 f4 b2 12 04 73 47 e4 Data Ascii: 8As&%kcj&:i'`1j.2-Iu)Kv@I^%Df:jU)F,K99>6Z@)P%* S7/t[Yt= eZV39D2T9${MuHW^]1x?*n5PeSupu[moob>g+S)<90h\&)sG
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 70 d0 91 44 1a 28 1a 0e 14 c5 da 95 a1 10 09 23 1c b1 cc a0 a3 4a 52 24 31 c3 3c 32 4c 37 9d c8 f8 84 e1 77 5a 99 48 c9 86 c1 2a 5a 80 a8 01 23 33 4c 61 6e bb e5 bd 98 11 ab 30 09 c8 71 3f 83 d6 b7 76 dd 96 b5 d3 ca 94 5c 0c cf 01 e9 d0 83 e0 a1 c7 99 33 9e 6c 37 22 5e 94 bb 14 25 41 6d d5 55 d2 a0 a1 c4 80 9a d3 10 58 d7 f1 a1 aa 59 9f 66 2a 6b ca 5e 11 d2 32 0a d0 f4 fa ce 9b 5c 48 d2 dc 40 4c e9 00 8a 0c 8a 50 0d 41 a9 fd e1 9e 2e 12 f9 ac 49 e3 22 a4 a9 32 d3 ab d0 4a a8 aa 1d 40 9a 0e 1a b8 fb 30 82 13 82 65 b9 ee 48 1b 72 12 a6 dc a4 7c bc 5a ff 00 09 b0 2a eb cb 39 84 32 d8 cd 67 3e 1f 6d 30 d2 90 88 72 9e 11 32 2c 10 3b d7 8b ad fe 6b 0d c8 49 b7 db 94 e2 16 c5 95 2b 0a d4 00 5f 89 e5 a6 a1 6a 52 48 a0 15 48 3d bc 70 51 04 e2 7d 89 16 19 22 66 de Data Ascii: pD(#JR$1<2L7wZHZ#3Lan0q?v\3l7"^%AmUXYfk^2\H@LPA.I"2J@0eHr\|Z*92g>m0r2,;kI+_jRHH=pQ}"f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49795	172.253.63.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	592	OUT	GET /activeview/js/current/ufs_web_display.js?cache=r20110914 HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:02 UTC	829	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/active-view-scs-read-write-acl Cross-Origin-Opener-Policy: same-origin; report-to="active-view-scs-read-write-acl" Report-To: {"group":"active-view-scs-read-write-acl","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/active-view-scs-read-write-acl"}]} Timing-Allow-Origin: * Content-Length: 209810 Date: Mon, 15 Jan 2024 13:24:02 GMT Expires: Mon, 15 Jan 2024 13:24:02 GMT Cache-Control: private, max-age=3000 ETag: "1704891455226136" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:02 UTC	423	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 2c 64 61 3d 0a 63 61 28 74 68 69 73 29 2c 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 Data Ascii: ;for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&nu
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 72 65 74 75 72 6e 20 61 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 Data Ascii: =function(a,b){a.raw=b;return a},t=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error("c`"+String(a));},u=function(a){if(!(a instanceof Array)
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 71 63 3d 21 31 3b 74 68 69 73 2e 69 62 3d 6e 75 6c 6c 3b 74 68 69 73 2e 65 66 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6b 61 3d 31 3b 74 68 69 73 2e 4d 61 3d 74 68 69 73 2e 6b 62 3d 30 3b 74 68 69 73 2e 68 65 3d 74 68 69 73 2e 65 61 3d 6e 75 6c 6c 7d 3b 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 71 63 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 66 22 29 3b 74 68 69 73 2e 71 63 3d 21 30 7d 3b 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 76 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 66 3d 61 7d 3b 0a 73 61 2e 70 72 6f 74 6f 74 79 70 65 2e 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 61 3d 7b 43 66 Data Ascii: =function(){this.qc=!1;this.ib=null;this.ef=void 0;this.ka=1;this.Ma=this.kb=0;this.he=this.ea=null};sa.prototype.Wa=function(){if(this.qc)throw new TypeError("f");this.qc=!0};sa.prototype.vc=function(a){this.ef=a};sa.prototype.Fc=function(a){this.ea={Cf
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 60 22 2b 65 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 73 2e 71 63 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 73 2e 69 62 3d 6e 75 6c 6c 2c 61 2e 73 2e 46 63 28 67 29 2c 79 61 28 61 29 7d 61 2e 73 2e 69 62 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 73 2c 66 29 3b 72 65 74 75 72 6e 20 79 61 28 61 29 7d 2c 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 3b 61 2e 73 2e 6b 61 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 75 69 28 61 2e 73 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 73 2e 71 63 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e Data Ascii: of Object))throw new TypeError("e`"+e);if(!e.done)return a.s.qc=!1,e;var f=e.value}catch(g){return a.s.ib=null,a.s.Fc(g),ya(a)}a.s.ib=null;d.call(a.s,f);return ya(a)},ya=function(a){for(;a.s.ka;)try{var b=a.ui(a.s);if(b)return a.s.qc=!1,{value:b.value,don
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 70 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 59 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 66 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 59 61 29 7b 74 68 69 73 2e 59 61 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 71 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 6f 68 Data Ascii: th;c++)b[c-a]=arguments[c];return b};p("Promise",function(a){function b(){this.Ya=null}function c(g){return g instanceof e?g:new e(function(k){k(g)})}if(a)return a;b.prototype.pf=function(g){if(null==this.Ya){this.Ya=[];var k=this;this.qf(function(){k.oh
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 73 67 28 31 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 67 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 59 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 68 60 22 2b 67 2b 22 60 22 2b 6b 2b 22 60 22 2b 74 68 69 73 2e 59 62 29 3b 74 68 69 73 2e 59 62 3d 67 3b 74 68 69 73 2e 43 63 3d 6b 3b 32 3d 3d 3d 74 68 69 73 2e 59 62 26 26 74 68 69 73 2e 46 69 28 29 3b 74 68 69 73 2e 70 68 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 66 69 28 29 29 7b 76 61 72 20 6b 3d 64 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 Data Ascii: function(g){this.sg(1,g)};e.prototype.sg=function(g,k){if(0!=this.Yb)throw Error("h`"+g+"`"+k+"`"+this.Yb);this.Yb=g;this.Cc=k;2===this.Yb&&this.Fi();this.ph()};e.prototype.Fi=function(){var g=this;d(function(){if(g.fi()){var k=da.console;"undefined"!==ty
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 73 77 69 74 63 68 28 6c 2e 59 62 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 43 63 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 28 6c 2e 43 63 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 60 22 2b 0a 6c 2e 59 62 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 54 62 3f 66 2e 70 66 28 68 29 3a 74 68 69 73 2e 54 62 2e 70 75 73 68 28 68 29 3b 74 68 69 73 2e 59 66 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 68 29 7b 68 28 67 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 Data Ascii: ,k){function h(){switch(l.Yb){case 1:g(l.Cc);break;case 2:k(l.Cc);break;default:throw Error("i`"+l.Yb);}}var l=this;null==this.Tb?f.pf(h):this.Tb.push(h);this.Yf=!0};e.resolve=c;e.reject=function(g){return new e(function(k,h){h(g)})};e.race=function(g){r
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 64 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 68 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6d 2e 67 65 74 28 68 29 7c 7c 33 21 3d 6d 2e 67 65 74 28 6c 29 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 68 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 Data Ascii: (m){if(m instanceof b)return m;Object.isExtensible(m)&&d(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var h=Object.seal({}),l=Object.seal({}),m=new a([[h,2],[l,3]]);if(2!=m.get(h)\|\|3!=m.get(l))return!1;m.delete(h);m.set(l,4);return!m.ha
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 2e 64 6f 6e 65 7c 7c 34 21 3d 6d 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 6d 2e 76 61 6c 75 65 5b 31 5d 7c 7c 21 6c 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 74 28 6b 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e Data Ascii: .done\|\|4!=m.value[0].x\|\|"t"!=m.value[1]\|\|!l.next().done?!1:!0}catch(r){return!1}}())return a;var b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=t(k);for(var h;!(h=k.next()).done;)h=h.value,this.set(h[0],h[1])}};c.prototype.set=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49796	172.253.63.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	549	OUT	GET /dcm/dcmads.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:02 UTC	802	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 18834 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 15 Jan 2024 13:04:43 GMT Expires: Mon, 15 Jan 2024 14:04:43 GMT Cache-Control: public, max-age=3600 Age: 1159 Last-Modified: Thu, 02 Nov 2023 23:04:01 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:02 UTC	450	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 Data Ascii: var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),h=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6b 61 3b 61 3a 7b 76 61 72 20 6c 61 3d 7b 61 3a 21 30 7d 2c 6d 61 3d 7b 7d 3b 74 72 79 7b 6d 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6c 61 3b 6b 61 3d 6d 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6b 61 3d 21 31 7d 6a 61 3d 6b 61 3f 66 75 6e 63 74 69 6f 6e 28 Data Ascii: create?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ka;a:{var la={a:!0},ma={};try{ma.__proto__=la;ka=ma.a;break a}catch(a){}ka=!1}ja=ka?function(
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 0a 68 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 Data Ascii: &&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b))return!0}return!1}});h("String.prototype.includes",function(a){return a?a:function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.includes must not be null
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 6c 2c 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 65 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 2c 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 2c 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 75 61 3d 72 61 28 36 31 Data Ascii: ){a:{var c=["CLOSURE_FLAGS"];for(var d=l,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b},sa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ta=function(a){return a};var ua=ra(61
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 75 28 22 45 64 67 65 22 29 7c 7c 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 75 28 22 4d 53 49 45 22 29 7c 7c 75 28 22 45 64 67 65 22 29 3b 2d 31 21 3d 71 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 75 28 22 45 64 67 65 22 29 26 26 75 28 22 4d 6f 62 69 6c 65 22 29 3b 77 28 29 7c 7c 75 28 22 4d 61 63 69 6e 74 6f 73 68 22 29 3b 77 28 29 7c 7c 75 28 22 57 69 6e 64 6f 77 73 22 29 3b 28 77 28 29 3f 22 4c 69 6e 75 78 22 3d 3d 3d 74 2e 70 6c 61 74 66 6f 72 6d 3a 75 28 22 4c 69 6e 75 78 22 29 29 7c 7c 77 28 29 7c 7c 75 28 22 43 72 4f 53 22 29 3b 77 28 29 7c 7c 75 28 22 41 6e 64 72 6f 69 64 22 29 3b 42 61 28 29 3b 75 28 22 69 50 61 64 22 29 3b 75 28 22 69 50 6f 64 22 29 3b 43 61 28 29 3b 71 28 29 2e Data Ascii: u("Edge")\|\|u("Trident")\|\|u("MSIE")\|\|u("Edge");-1!=q().toLowerCase().indexOf("webkit")&&!u("Edge")&&u("Mobile");w()\|\|u("Macintosh");w()\|\|u("Windows");(w()?"Linux"===t.platform:u("Linux"))\|\|w()\|\|u("CrOS");w()\|\|u("Android");Ba();u("iPad");u("iPod");Ca();q().
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 63 74 69 6f 6e 20 4e 61 28 29 7b 76 61 72 20 61 3d 5b 5d 3b 4c 61 28 61 2c 31 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 29 7b 42 28 62 2c 28 61 7c 30 29 26 2d 31 34 35 39 31 29 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 61 2c 62 29 7b 42 28 62 2c 28 61 7c 33 34 29 26 2d 31 34 35 35 37 29 7d 66 75 6e 63 74 69 6f 6e 20 51 61 28 61 29 7b 61 3d 61 3e 3e 31 34 26 31 30 32 33 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 35 33 36 38 37 30 39 31 32 3a 61 7d 3b 76 61 72 20 52 61 3d 7b 7d 2c 53 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 61 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 43 21 3d 3d 53 61 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 72 65 74 75 72 Data Ascii: ction Na(){var a=[];La(a,1);return a}function Oa(a,b){B(b,(a\|0)&-14591)}function Pa(a,b){B(b,(a\|34)&-14557)}function Qa(a){a=a>>14&1023;return 0===a?536870912:a};var Ra={},Sa={};function Ta(a){return!(!a\|\|"object"!==typeof a\|\|a.C!==Sa)}function F(a){retur
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 56 61 7c 7c 21 57 61 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 48 61 26 26 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 69 66 28 49 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 30 32 34 30 3b 63 3c 64 3b 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 Data Ascii: ":return a?1:0;case "object":if(a){if(Array.isArray(a))return Va\|\|!Wa(a,void 0,9999)?a:void 0;if(Ha&&null!=a&&a instanceof Uint8Array){if(Ia){for(var b="",c=0,d=a.length-10240;c<d;)b+=String.fromCharCode.apply(null,a.subarray(c,c+=10240));b+=String.fromCh
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 62 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 6b 3d 64 7c 7c 63 3f 41 28 61 29 3a 30 3b 64 3d 64 3f 21 21 28 6b 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 79 28 61 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 61 5b 67 5d 3d 63 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 63 26 26 63 28 6b 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 65 62 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 3d 3d 3d 52 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 61 62 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 61 2c 62 2c 63 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 50 61 3a 63 3b 69 66 28 6e Data Ascii: else a=b(a,d);return a}}function db(a,b,c,d,e,f){var k=d\|\|c?A(a):0;d=d?!!(k&32):void 0;a=y(a);for(var g=0;g<a.length;g++)a[g]=cb(a[g],b,c,d,e,f);c&&c(k,a);return a}function eb(a){return a.s===Ra?a.toJSON():ab(a)};function fb(a,b,c){c=void 0===c?Pa:c;if(n
2024-01-15 13:24:02 UTC	1252	IN	Data Raw: 65 62 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 2c 21 31 29 2c 61 3d 6b 62 28 74 68 69 73 2c 61 2c 21 30 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4b 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 67 3b 72 65 74 75 72 6e 20 67 62 28 74 68 69 73 2c 61 2c 45 28 61 29 2c 21 31 29 7d 3b 4b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 3d 52 61 3b 4b 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6b 62 28 74 68 69 73 2c 74 68 69 73 2e 67 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 6b 62 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 75 2c 65 3d 45 28 63 3f 61 Data Ascii: eb,void 0,void 0,!1,!1),a=kb(this,a,!0);return a};K.prototype.clone=function(){var a=this.g;return gb(this,a,E(a),!1)};K.prototype.s=Ra;K.prototype.toString=function(){return kb(this,this.g,!1).toString()};function kb(a,b,c){var d=a.constructor.u,e=E(c?a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49798	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	576	OUT	GET /rtb/resources/release-20231121-135-adperformance.js HTTP/1.1 Host: warp.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:02 UTC	665	IN	HTTP/1.1 200 OK Server: UploadServer Content-Length: 73447 Content-Type: application/javascript X-GUploader-UploadID: ABPtcPrHbBlvEvxV9JZPdIuPUtSPCyDx2B_gprnpiJvmF4oXtmicvDd_rZM-PbNyxluXDNTlTynqrlmceQ Strict-Transport-Security: max-age=604800 x-goog-storage-class: STANDARD x-goog-hash: md5=hB2rzgtHepPZz3N5uesTaA== x-goog-hash: crc32c=iBXD1A== x-goog-stored-content-length: 73447 x-goog-stored-content-encoding: identity x-goog-metageneration: 1 x-goog-generation: 1700562102250666 ETag: "841dabce0b477a93d9cf7379b9eb1368" Cache-Control: max-age=3600 Expires: Mon, 15 Jan 2024 14:24:02 GMT Date: Mon, 15 Jan 2024 13:24:02 GMT Connection: close
2024-01-15 13:24:02 UTC	2871	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 28 6e 3d 7b 70 61 74 68 3a 74 2c 65 78 70 6f 72 74 73 3a 7b 7d 2c 72 65 71 75 69 72 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: !function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return func
2024-01-15 13:24:02 UTC	16384	IN	Data Raw: 4a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 3f 58 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 3a 7b 7d 7d 2c 51 3d 21 7a 26 26 21 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4a 28 22 64 69 76 22 29 2c 22 61 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 2e 61 7d 29 29 2c 5a 3d 7a 26 26 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 21 3d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 76 61 6c 75 65 3a 34 32 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2e 70 72 6f 74 6f Data Ascii: J=function(e){return q?X.createElement(e):{}},Q=!z&&!f((function(){return 7!==Object.defineProperty(J("div"),"a",{get:function(){return 7}}).a})),Z=z&&f((function(){return 42!==Object.defineProperty((function(){}),"prototype",{value:42,writable:!1}).proto
2024-01-15 13:24:02 UTC	8192	IN	Data Raw: 3d 5f 72 28 65 29 29 29 74 68 72 6f 77 20 6e 65 77 20 47 72 28 6c 65 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 22 29 3b 69 66 28 52 72 28 69 29 29 7b 66 6f 72 28 6f 3d 30 2c 61 3d 77 74 28 65 29 3b 61 3e 6f 3b 6f 2b 2b 29 69 66 28 28 75 3d 6d 28 65 5b 6f 5d 29 29 26 26 75 65 28 55 72 2c 75 29 29 72 65 74 75 72 6e 20 75 3b 72 65 74 75 72 6e 20 6e 65 77 20 48 72 28 21 31 29 7d 72 3d 56 72 28 65 2c 69 29 7d 66 6f 72 28 63 3d 76 3f 65 2e 6e 65 78 74 3a 72 2e 6e 65 78 74 3b 21 28 73 3d 69 65 28 63 2c 72 29 29 2e 64 6f 6e 65 3b 29 7b 74 72 79 7b 75 3d 6d 28 73 2e 76 61 6c 75 65 29 7d 63 61 74 63 68 28 65 29 7b 42 72 28 72 2c 22 74 68 72 6f 77 22 2c 65 29 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 75 26 26 75 26 26 75 65 Data Ascii: =_r(e)))throw new Gr(le(e)+" is not iterable");if(Rr(i)){for(o=0,a=wt(e);a>o;o++)if((u=m(e[o]))&&ue(Ur,u))return u;return new Hr(!1)}r=Vr(e,i)}for(c=v?e.next:r.next;!(s=ie(c,r)).done;){try{u=m(s.value)}catch(e){Br(r,"throw",e)}if("object"==typeof u&&u&&ue
2024-01-15 13:24:02 UTC	16384	IN	Data Raw: 65 61 72 49 6d 6d 65 64 69 61 74 65 2c 73 6f 3d 6f 2e 70 72 6f 63 65 73 73 2c 66 6f 3d 6f 2e 44 69 73 70 61 74 63 68 2c 6c 6f 3d 6f 2e 46 75 6e 63 74 69 6f 6e 2c 76 6f 3d 6f 2e 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 68 6f 3d 6f 2e 53 74 72 69 6e 67 2c 70 6f 3d 30 2c 79 6f 3d 7b 7d 3b 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 69 3d 6f 2e 6c 6f 63 61 74 69 6f 6e 7d 29 29 3b 76 61 72 20 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6b 28 79 6f 2c 65 29 29 7b 76 61 72 20 74 3d 79 6f 5b 65 5d 3b 64 65 6c 65 74 65 20 79 6f 5b 65 5d 2c 74 28 29 7d 7d 2c 67 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 6f 28 65 29 7d 7d 2c 62 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6d 6f 28 65 2e 64 61 74 61 Data Ascii: earImmediate,so=o.process,fo=o.Dispatch,lo=o.Function,vo=o.MessageChannel,ho=o.String,po=0,yo={};f((function(){Qi=o.location}));var mo=function(e){if(k(yo,e)){var t=yo[e];delete yo[e],t()}},go=function(e){return function(){mo(e)}},bo=function(e){mo(e.data
2024-01-15 13:24:02 UTC	8192	IN	Data Raw: 21 31 7d 7d 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 52 63 28 65 29 3b 69 66 28 74 29 7b 76 61 72 20 69 3d 52 63 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 6e 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 72 2c 61 72 67 75 6d 65 6e 74 73 2c 69 29 7d 65 6c 73 65 20 6e 3d 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 50 63 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 63 28 65 2c 74 29 7b 69 66 28 74 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 41 63 28 74 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 29 29 72 65 74 75 72 6e 20 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 Data Ascii: !1}}();return function(){var n,r=Rc(e);if(t){var i=Rc(this).constructor;n=Reflect.construct(r,arguments,i)}else n=r.apply(this,arguments);return Pc(this,n)}}function Pc(e,t){if(t&&("object"===Ac(t)\|\|"function"==typeof t))return t;if(void 0!==t)throw new T
2024-01-15 13:24:02 UTC	16384	IN	Data Raw: 6d 65 6e 74 73 5b 32 5d 29 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 72 3d 74 68 69 73 2e 65 76 65 6e 74 73 2e 67 65 74 28 65 29 3b 72 7c 7c 28 72 3d 6e 65 77 20 66 73 28 65 29 2c 74 68 69 73 2e 65 76 65 6e 74 73 2e 73 65 74 28 65 2c 72 29 29 2c 72 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 6f 66 66 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 65 76 65 6e 74 73 2e 67 65 74 28 65 29 3b 6e 26 26 28 6e 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 29 2c 30 3d 3d 3d 6e 2e 6c 69 73 74 65 6e 65 72 73 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 65 76 65 6e 74 73 2e 64 65 6c 65 74 65 28 65 29 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6d 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 Data Ascii: ments[2])\|\|arguments[2],r=this.events.get(e);r\|\|(r=new fs(e),this.events.set(e,r)),r.addListener(t,n)}},{key:"off",value:function(e,t){var n=this.events.get(e);n&&(n.removeListener(t),0===n.listeners.length&&this.events.delete(e))}},{key:"emit",value:func
2024-01-15 13:24:02 UTC	5040	IN	Data Raw: 72 7d 72 65 74 75 72 6e 20 48 63 28 65 2c 5b 7b 6b 65 79 3a 22 67 65 74 56 61 6c 75 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 5b 65 5d 7d 7d 2c 7b 6b 65 79 3a 22 69 73 54 72 61 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 56 61 6c 75 65 28 65 29 3b 72 65 74 75 72 6e 20 57 63 28 74 29 26 26 7a 63 28 74 29 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 72 61 63 6b 69 6e 67 55 72 6c 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 67 65 74 56 61 6c 75 65 28 65 29 3b 72 65 74 75 72 6e 20 4b 63 28 74 68 69 73 2e 6d 6e 65 74 54 72 61 63 6b 69 6e 67 55 72 6c Data Ascii: r}return Hc(e,[{key:"getValue",value:function(e){return this.config[e]}},{key:"isTrackingEnabled",value:function(e){var t=this.getValue(e);return Wc(t)&&zc(t)}},{key:"getTrackingUrls",value:function(e){var t=this.getValue(e);return Kc(this.mnetTrackingUrl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49797	23.56.8.25	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	565	OUT	GET /nmedianet.js?cid=8CU7Q771E&ydspr=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:03 UTC	406	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 102980 Content-Type: text/javascript; charset=utf-8 X-MNT-H: 22-5h9m X-MNT-W: 22-5h9m Timing-Allow-Origin: * ETag: "b6b4c6e0e7fa9801f3fc0176fca380cc" Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=300 Expires: Mon, 15 Jan 2024 13:29:03 GMT Date: Mon, 15 Jan 2024 13:24:03 GMT Connection: close
2024-01-15 13:24:03 UTC	4	IN	Data Raw: 20 20 20 20 Data Ascii:
2024-01-15 13:24:03 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 3b 76 61 72 20 5f 6d 4e 20 3d 20 7b 22 5f 70 72 69 64 22 3a 22 38 50 52 56 43 58 58 31 39 22 2c 22 5f 63 69 64 22 3a 22 38 43 55 37 51 37 37 31 45 22 2c 22 5f 63 70 63 64 22 3a 22 51 63 71 67 6f 78 42 75 5f 4a 45 42 79 31 5f 5f 2d 72 72 4a 63 77 3d 3d 22 2c 22 5f 73 69 7a 65 6d 6f 76 6c 22 3a 7b 22 64 66 22 3a 22 33 32 30 78 35 30 22 2c 22 69 70 61 64 22 3a 22 37 32 38 78 39 30 22 7d 2c 22 5f 76 65 72 49 64 22 3a 22 39 31 31 31 32 39 39 22 2c 22 5f 6f 72 65 66 22 3a 22 22 2c 22 5f 6f 70 74 6f 75 74 22 3a 22 22 2c 22 5f 75 65 6e 63 72 75 22 3a 22 38 43 55 37 51 37 37 31 45 22 2c 22 5f 6c 69 6d 67 42 65 61 63 22 3a 74 72 75 65 2c 22 5f 70 6f 70 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f Data Ascii: (function(){;var _mN = {"_prid":"8PRVCXX19","_cid":"8CU7Q771E","_cpcd":"QcqgoxBu_JEBy1__-rrJcw==","_sizemovl":{"df":"320x50","ipad":"728x90"},"_verId":"9111299","_oref":"","_optout":"","_uencru":"8CU7Q771E","_limgBeac":true,"_popUrl":"https:\/\/
2024-01-15 13:24:03 UTC	8192	IN	Data Raw: 69 29 7b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 3b 76 61 72 20 75 2c 6f 2c 63 2c 24 3d 22 22 2c 66 3d 21 21 74 2c 73 3d 66 3f 74 3a 6e 2c 4b 3d 22 22 2c 68 3d 22 22 3b 66 6f 72 28 75 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 26 26 28 66 26 26 28 75 3d 74 5b 75 5d 29 2c 61 2e 24 4b 4d 28 65 2c 75 29 7c 7c 61 2e 24 4b 55 28 6e 5b 75 5d 29 26 26 28 63 3d 75 2c 63 3d 21 61 2e 24 4b 4d 28 69 2e 66 6f 72 63 65 53 6b 69 70 45 6e 63 2c 63 29 26 26 72 2c 63 3d 70 28 75 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 75 5d 3f 6e 5b 75 5d 2e 76 61 6c 75 65 3a 6e 5b 75 5d 2c 63 29 2c 6f 3d 75 2c 61 2e 24 4b 4d 28 69 2e 73 74 61 72 74 50 61 72 61 6d 73 2c 6f 29 3f 4b 2b 3d 63 3a 28 6f 3d Data Ascii: i){i="object"==typeof i?i:{};var u,o,c,$="",f=!!t,s=f?t:n,K="",h="";for(u in s)s.hasOwnProperty(u)&&(f&&(u=t[u]),a.$KM(e,u)\|\|a.$KU(n[u])&&(c=u,c=!a.$KM(i.forceSkipEnc,c)&&r,c=p(u,"object"==typeof n[u]?n[u].value:n[u],c),o=u,a.$KM(i.startParams,o)?K+=c:(o=
2024-01-15 13:24:03 UTC	16384	IN	Data Raw: 66 3d 7b 7d 2c 68 3d 7b 7d 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 69 29 7b 6c 2e 24 4b 55 28 6e 29 26 26 6c 2e 24 4b 56 28 69 29 26 26 28 74 5b 6e 5d 3d 69 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6c 2e 65 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 5b 4b 2b 6e 5d 3d 74 7d 29 2c 69 7d 74 68 69 73 2e 24 32 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 28 69 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 28 75 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 28 24 2c 74 2c 6e 29 7d 2c 74 68 69 73 2e 24 32 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 68 69 73 2e Data Ascii: f={},h={},o={};function e(t,n,i){l.$KU(n)&&l.$KV(i)&&(t[n]=i)}function t(t){var i={};return l.each(t,function(t,n){i[K+n]=t}),i}this.$2b=function(t,n){e(i,t,n)},this.$2c=function(t,n){e(u,t,n)},this.$2d=function(t,n){e($,t,n)},this.$2e=function(t,n){this.
2024-01-15 13:24:03 UTC	8192	IN	Data Raw: 41 2e 5f 63 72 69 64 29 26 26 4a 28 41 2e 5f 63 75 73 74 6f 6d 53 69 7a 65 5b 41 2e 5f 63 72 69 64 5d 29 3f 41 2e 5f 63 75 73 74 6f 6d 53 69 7a 65 5b 41 2e 5f 63 72 69 64 5d 3a 24 29 2c 32 21 3d 3d 41 2e 5f 69 70 32 63 2e 6c 65 6e 67 74 68 26 26 28 41 2e 5f 69 70 32 63 3d 22 55 53 22 2c 61 2e 24 32 65 28 22 69 70 32 63 6c 6d 22 2c 22 31 22 29 29 2c 41 2e 5f 63 68 6e 6d 3d 79 2e 24 41 6a 28 22 63 68 6e 6d 22 29 7c 7c 41 2e 5f 63 68 6e 6d 2c 41 2e 5f 76 49 6d 70 3d 31 2c 4a 28 41 2e 5f 64 56 49 6d 70 29 26 26 28 22 41 4c 4c 22 3d 3d 3d 41 2e 5f 64 56 49 6d 70 7c 7c 45 2e 24 4b 61 28 41 2e 5f 64 56 49 6d 70 2c 41 2e 5f 63 72 69 64 29 29 26 26 28 41 2e 5f 76 49 6d 70 3d 30 29 3b 76 61 72 20 24 3d 45 2e 24 4b 58 28 41 2e 5f 63 75 73 74 6f 6d 2e 24 35 45 29 3f Data Ascii: A._crid)&&J(A._customSize[A._crid])?A._customSize[A._crid]:$),2!==A._ip2c.length&&(A._ip2c="US",a.$2e("ip2clm","1")),A._chnm=y.$Aj("chnm")\|\|A._chnm,A._vImp=1,J(A._dVImp)&&("ALL"===A._dVImp\|\|E.$Ka(A._dVImp,A._crid))&&(A._vImp=0);var $=E.$KX(A._custom.$5E)?
2024-01-15 13:24:03 UTC	16384	IN	Data Raw: 4c 36 5d 29 2c 73 28 29 2c 6e 3d 41 2e 5f 63 75 73 74 6f 6d 50 61 72 61 6d 73 2c 49 2e 70 72 69 76 61 63 79 2e 24 41 46 28 29 2c 4b 3d 49 2e 70 72 69 76 61 63 79 2e 24 41 33 28 29 2c 45 2e 65 61 63 68 28 4b 2c 66 75 6e 63 74 69 6f 6e 28 24 2c 4b 29 7b 63 2e 24 4b 4b 28 4b 2c 24 2c 5b 63 2e 24 4c 35 5d 29 7d 29 2c 45 2e 24 32 24 28 22 5f 35 24 22 29 2e 24 49 55 28 63 29 2c 4c 28 29 2c 76 28 29 2c 41 2e 5f 72 74 62 73 26 26 45 2e 24 4b 55 28 41 2e 5f 72 74 62 73 2e 5f 70 62 63 6d 29 26 26 28 63 2e 24 4b 4b 28 22 70 62 63 6d 22 2c 31 29 2c 61 2e 24 32 65 28 22 70 62 63 6d 22 2c 31 2c 21 30 29 29 2c 6d 28 29 2c 4b 3d 41 2e 5f 63 75 73 74 6f 6d 2c 4a 28 63 2e 24 4b 4c 28 22 63 72 65 66 22 29 29 26 26 63 2e 24 4b 4b 28 22 63 72 65 66 22 2c 50 28 63 2e 24 4b 4c Data Ascii: L6]),s(),n=A._customParams,I.privacy.$AF(),K=I.privacy.$A3(),E.each(K,function($,K){c.$KK(K,$,[c.$L5])}),E.$2$("_5$").$IU(c),L(),v(),A._rtbs&&E.$KU(A._rtbs._pbcm)&&(c.$KK("pbcm",1),a.$2e("pbcm",1,!0)),m(),K=A._custom,J(c.$KL("cref"))&&c.$KK("cref",P(c.$KL
2024-01-15 13:24:03 UTC	8192	IN	Data Raw: 6c 2e 24 4b 66 28 24 29 26 26 28 24 3d 74 2c 75 3d 6e 2c 44 3d 65 2c 72 2e 24 44 66 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 28 28 24 5b 69 2e 24 44 4f 5d 7c 7c 7b 7d 29 5b 69 2e 24 44 50 5d 7c 7c 7b 7d 29 5b 6e 5d 26 26 21 30 3d 3d 3d 28 28 24 5b 69 2e 24 44 52 5d 7c 7c 7b 7d 29 5b 69 2e 24 44 50 5d 7c 7c 7b 7d 29 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 28 28 24 5b 69 2e 24 44 4f 5d 7c 7c 7b 7d 29 5b 69 2e 24 44 51 5d 7c 7c 7b 7d 29 5b 6e 5d 26 26 21 30 3d 3d 3d 28 28 24 5b 69 2e 24 44 52 5d 7c 7c 7b 7d 29 5b 69 2e 24 44 51 5d 7c 7c 7b 7d 29 5b 74 5d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 28 28 28 24 5b 69 2e 24 44 59 5d 7c 7c 7b 7d 29 5b Data Ascii: l.$Kf($)&&($=t,u=n,D=e,r.$Df())}function o(t){return!0===(($[i.$DO]\|\|{})[i.$DP]\|\|{})[n]&&!0===(($[i.$DR]\|\|{})[i.$DP]\|\|{})[t]}function a(t){return!0===(($[i.$DO]\|\|{})[i.$DQ]\|\|{})[n]&&!0===(($[i.$DR]\|\|{})[i.$DQ]\|\|{})[t]}function f(t){return((($[i.$DY]\|\|{})[
2024-01-15 13:24:03 UTC	16384	IN	Data Raw: 63 63 22 29 2c 73 63 3a 64 2e 24 4b 4c 28 22 73 63 22 29 2c 62 64 72 69 64 3a 64 2e 24 49 51 28 22 77 69 6e 50 72 6f 76 22 29 7c 7c 64 2e 24 4b 4c 28 22 62 64 72 49 64 22 29 7c 7c 22 22 2c 73 75 62 42 64 72 3a 64 2e 24 4b 4c 28 22 73 62 64 72 49 64 22 29 7c 7c 22 22 7d 3b 72 65 74 75 72 6e 28 65 3d 76 2e 24 31 56 28 4b 2e 70 72 69 76 61 63 79 2e 24 41 33 28 29 2c 65 29 29 2e 76 67 64 5f 6b 77 72 66 3d 64 2e 24 4b 4c 28 22 6b 77 72 66 22 29 2c 76 2e 65 61 63 68 28 64 2e 24 49 4d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 72 29 7b 76 61 72 20 69 3b 69 3d 72 2c 76 2e 24 4b 55 28 69 29 26 26 21 76 2e 24 4b 4d 28 61 2c 69 29 26 26 28 65 5b 72 5d 3d 76 2e 24 4b 55 28 65 5b 72 5d 29 3f 65 5b 72 5d 3a 64 29 7d 29 2c 65 2e 73 62 64 72 49 64 3d 22 22 2c 65 2e 76 67 Data Ascii: cc"),sc:d.$KL("sc"),bdrid:d.$IQ("winProv")\|\|d.$KL("bdrId")\|\|"",subBdr:d.$KL("sbdrId")\|\|""};return(e=v.$1V(K.privacy.$A3(),e)).vgd_kwrf=d.$KL("kwrf"),v.each(d.$IM(),function(d,r){var i;i=r,v.$KU(i)&&!v.$KM(a,i)&&(e[r]=v.$KU(e[r])?e[r]:d)}),e.sbdrId="",e.vg
2024-01-15 13:24:03 UTC	8192	IN	Data Raw: 2e 62 69 64 29 7d 29 7d 64 2e 24 4a 70 28 22 6c 6f 61 64 3a 3a 43 55 53 54 4f 4d 5f 45 56 45 4e 54 53 22 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 3d 65 2e 61 64 53 63 6f 70 65 2c 64 2e 24 31 62 2e 24 45 37 28 6e 2c 22 6d 65 73 73 61 67 65 22 2c 6f 29 2c 64 2e 24 4a 70 28 22 68 69 64 65 41 64 46 72 61 6d 65 73 22 2c 69 2e 24 4b 4c 28 22 76 69 22 29 2c 74 29 2c 64 2e 24 4a 70 28 22 68 69 64 65 41 64 46 72 61 6d 65 73 57 68 65 6e 41 76 61 69 6c 61 62 6c 65 22 2c 69 2e 24 4b 4c 28 22 76 69 22 29 2c 63 29 2c 64 2e 24 4a 70 28 22 61 6c 74 65 72 41 64 46 72 61 6d 65 44 69 6d 65 6e 73 69 6f 6e 22 2c 69 2e 24 4b 4c 28 22 76 69 22 29 2c 68 29 2c 6c 28 29 7d 29 2c 64 2e 24 31 6b 28 65 29 7d 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 2c 5f 6d 4e 2c 5f 6d Data Ascii: .bid)})}d.$Jp("load::CUSTOM_EVENTS",e,function(e){i=e.adScope,d.$1b.$E7(n,"message",o),d.$Jp("hideAdFrames",i.$KL("vi"),t),d.$Jp("hideAdFramesWhenAvailable",i.$KL("vi"),c),d.$Jp("alterAdFrameDimension",i.$KL("vi"),h),l()}),d.$1k(e)}(window,document,_mN,_m
2024-01-15 13:24:03 UTC	4672	IN	Data Raw: 22 29 29 2c 69 3d 68 2e 24 36 33 28 69 5b 30 5d 2b 22 78 22 2b 69 5b 31 5d 2c 65 29 2c 69 3d 28 6e 65 77 20 4b 2e 24 31 6e 29 2e 73 65 74 28 22 6d 61 72 67 69 6e 57 69 64 74 68 22 2c 30 29 2e 73 65 74 28 22 6d 61 72 67 69 6e 48 65 69 67 68 74 22 2c 30 29 2e 73 65 74 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2e 73 65 74 28 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 30 29 2e 73 65 74 28 22 68 65 69 67 68 74 22 2c 69 2e 68 29 2e 73 65 74 28 22 77 69 64 74 68 22 2c 69 2e 77 29 2e 73 65 74 28 22 69 64 22 2c 6e 29 2e 73 65 74 28 22 61 6c 6c 6f 77 74 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 22 74 72 75 65 22 29 2c 6e 3d 65 2e 24 4b 4c 28 22 76 69 22 29 3b 69 66 28 4b 2e 24 4b 55 28 24 29 26 26 69 2e 73 65 74 28 22 74 69 74 6c 65 22 2c 24 29 2c 31 21 3d Data Ascii: ")),i=h.$63(i[0]+"x"+i[1],e),i=(new K.$1n).set("marginWidth",0).set("marginHeight",0).set("scrolling","no").set("frameBorder",0).set("height",i.h).set("width",i.w).set("id",n).set("allowtransparency","true"),n=e.$KL("vi");if(K.$KU($)&&i.set("title",$),1!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49803	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	858	OUT	POST /el/AGSKWxUg4JjOqwz7KbAgbTZykUHHmgbMldUQgQ7oiR0eJWCp8QO1dme9YXSFVMTocvAGcONJYZTvufCZu2SuMW6zb4sl36u3btMjhEBILrebjSrZzMmO71gJS9VeTubRU3ZO6neZRwn_5Q== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:02 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 34 31 35 36 33 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325041563,null,null,[[1,1]]]
2024-01-15 13:24:02 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-a1zXJld42muez5GEOF0Jjw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49804	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	1072	OUT	GET /f/AGSKWxXcbOESlzFb2BQZEBaPRI5Eh-Ra2y0KQ8RutN9w3j0zsyd6zJkt4EHBxD6A6bE3XR2R70dbKvVTY4FDLa80TkGWkkGw330In6Fo2vJoSLFHAlkc7D36ucEoeWXDiCwPWqatYKqdwXfdSDwZOsKG8pe6wGLugz6JVv3mDYWEenZWqCy2CRhWbB4jCnUr/_/ad_300_/googleadiframe_/adsfiles./ads?spaceid-160x600- HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	1605	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:02 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-RNolD6xpoFqooFtl_mhQNA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:03 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 61 65 63 39 64 65 31 34 2d 38 64 34 61 2d 34 38 33 33 2d 62 64 32 61 2d 37 66 32 30 30 33 30 63 37 63 33 35 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['aec9de14-8d4a-4833-bd2a-7f20030c7c35'] = true;
2024-01-15 13:24:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49808	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	1040	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 15 Jan 2024 13:24:02 GMT Date: Mon, 15 Jan 2024 13:24:02 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:03 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js');
2024-01-15 13:24:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49809	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaR2gw74vdegPbBiZvpyeb6dIzwm5tAUqnWTH0QOv5yWHnHoBnOhYVu61dewbnvCPKgoh09VPY4MH1lj512VHV-ctHh1NA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:03 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49807	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRkIvQ3YKlGcxklsNq5mmXDtntNFs4_mQfgNoJK81k_olyrKv9owRbDTq1ZswOI5NRMypK9SCWTtaJzphH5mfbH4TqZxA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:03 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49813	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRmGN7qeEvMzj6QO_sqLAc4lqJrtU2EWFBt_Bo92JvoAP2qPrKGbtZ71NCrnSJpEUrGc3AtxN_Q7UbebTJFIdxJ65-cJw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:03 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49816	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:02 UTC	1028	OUT	GET /js/bg/0Cqmw64vVDdXjGZEoSN2NjFc6s-AADeaJ1f3yoXUl2A.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:03 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17042 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 09:16:38 GMT Expires: Sun, 12 Jan 2025 09:16:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 03 Jan 2024 11:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 187645 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:03 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4c 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 46 29 7b 69 66 28 21 28 46 3d 28 66 3d 6e 75 6c 6c 2c 63 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 46 29 7c 7c 21 46 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 66 3b 74 72 79 7b 66 3d 46 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var c=this\|\|self,L=function(f){return f},P=function(f,F){if(!(F=(f=null,c.trustedTypes),F)\|\|!F.createPolicy)return f;try{f=F.createPolicy("bg",{createHTM
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 46 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 72 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 22 22 2b 72 7d 7d 28 63 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 46 46 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 72 65 74 75 72 6e 20 59 3d 28 4c 3d 28 46 3d 66 70 28 46 2c 66 75 6e 63 74 69 6f 6e 28 72 29 7b 61 26 26 28 66 26 26 58 28 66 29 2c 63 3d 72 2c 61 28 29 2c 61 3d 76 6f 69 64 20 30 29 7d 2c 21 21 28 63 3d 76 6f 69 64 20 30 2c 66 29 29 2c 46 29 5b 31 5d 2c 46 5b 30 5d 29 2c 7b 69 6e 76 6f 6b 65 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d Data Ascii: F.createScript(r)}:function(r){return""+r}}(c)(Array(7824*Math.random()\|0).join("\n")+'(function(){var FF=function(F,f,c,L,Y){function a(){}return Y=(L=(F=fp(F,function(r){a&&(f&&X(f),c=r,a(),a=void 0)},!!(c=void 0,f)),F)[1],F[0]),{invoke:function(r,P,p,m
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 35 36 33 32 30 3d 3d 28 46 2e 63 68 61 72 43 6f 64 65 41 74 28 63 2b 31 29 26 36 34 35 31 32 29 3f 28 59 3d 36 35 35 33 36 2b 28 28 59 26 31 30 32 33 29 3c 3c 31 30 29 2b 28 46 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 63 29 26 31 30 32 33 29 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 38 7c 32 34 30 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 4c 5b 66 2b 2b 5d 3d 59 3e 3e 31 32 7c 32 32 34 2c 4c 5b 66 2b 2b 5d 3d 59 3e 3e 36 26 36 33 7c 31 32 38 29 2c 4c 5b 66 2b 2b 5d 3d 59 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 4c 7d 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 66 6f 72 28 66 3d 5b 5d 3b 46 2d 2d 3b 29 66 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 66 7d 2c 4e 3d 66 Data Ascii: 56320==(F.charCodeAt(c+1)&64512)?(Y=65536+((Y&1023)<<10)+(F.charCodeAt(++c)&1023),L[f++]=Y>>18\|240,L[f++]=Y>>12&63\|128):L[f++]=Y>>12\|224,L[f++]=Y>>6&63\|128),L[f++]=Y&63\|128);return L},U=function(F,f){for(f=[];F--;)f.push(255*Math.random()\|0);return f},N=f
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 2c 61 2c 72 2c 50 29 7b 72 65 74 75 72 6e 28 72 3d 28 66 3d 5b 38 30 2c 28 61 3d 67 4a 2c 2d 36 33 29 2c 36 2c 35 35 2c 28 50 3d 46 26 37 2c 37 36 29 2c 37 39 2c 66 2c 2d 33 32 2c 37 35 2c 39 37 5d 2c 75 5b 63 2e 4c 5d 28 63 2e 43 73 29 29 2c 72 29 5b 63 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 59 3d 28 50 2b 3d 36 2b 37 2a 46 2c 70 29 2c 50 26 3d 37 7d 2c 72 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 72 65 74 75 72 6e 28 70 3d 28 59 3d 28 70 3d 33 35 39 31 2a 4c 2a 28 70 3d 4c 25 31 36 2b 31 2c 59 29 2b 28 61 28 29 7c 30 29 2a 70 2d 31 31 34 2a 4c 2a 4c 2a 59 2d 20 2d 31 36 35 33 2a 59 2d 70 2a 59 2b 32 2a 4c 2a 4c 2a 70 2b 66 5b 50 2b 36 37 26 37 5d 2a 4c 2a 70 2b 35 37 Data Ascii: g=function(F,f,c,L,Y,a,r,P){return(r=(f=[80,(a=gJ,-63),6,55,(P=F&7,76),79,f,-32,75,97],u[c.L](c.Cs)),r)[c.L]=function(p){Y=(P+=6+7F,p),P&=7},r.concat=function(p){return(p=(Y=(p=3591L(p=L%16+1,Y)+(a()\|0)p-114LLY- -1653Y-pY+2LLp+f[P+67&7]Lp+57
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 28 29 2e 6c 65 6e 67 74 68 7c 7c 46 2e 75 2e 63 72 65 61 74 65 28 29 2e 6c 65 6e 67 74 68 7c 7c 28 46 2e 75 3d 76 6f 69 64 20 30 2c 46 2e 68 3d 76 6f 69 64 20 30 29 2c 66 7d 2c 71 32 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 29 7b 72 65 74 75 72 6e 20 66 2e 4f 28 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 63 3d 4c 7d 2c 66 61 6c 73 65 2c 46 29 2c 63 7d 2c 47 44 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 72 65 74 75 72 6e 20 66 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3c 46 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 46 5b 66 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 66 3d 66 2e 50 5b 46 5d 2c 66 29 Data Ascii: ().length\|\|F.u.create().length\|\|(F.u=void 0,F.h=void 0),f},q2=function(F,f,c){return f.O(function(L){c=L},false,F),c},GD=function(F,f){return f=0,function(){return f<F.length?{done:false,value:F[f++]}:{done:true}}},J=function(F,f){if(void 0===(f=f.P[F],f)
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 2c 68 66 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 29 7b 74 72 79 7b 4c 3d 46 5b 28 28 66 7c 30 29 2b 32 29 25 33 5d 2c 46 5b 66 5d 3d 28 46 5b 66 5d 7c 30 29 2d 28 46 5b 28 28 66 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 4c 7c 30 29 5e 28 31 3d 3d 66 3f 4c 3c 3c 63 3a 4c 3e 3e 3e 63 29 7d 63 61 74 63 68 28 59 29 7b 74 68 72 6f 77 20 59 3b 7d 7d 2c 4b 70 3d 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 20 46 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 2c 63 2c 4c 2c 59 2c 61 29 7b 69 66 28 63 2e 54 2e 6c 65 6e 67 74 68 29 7b 63 2e 5a 3d 28 63 2e 62 5a 3d 28 63 2e 5a 26 26 30 28 29 2c 46 29 2c 74 72 75 65 29 3b 74 72 79 7b 4c 3d 63 2e 43 28 29 2c 63 2e 4e 3d 4c 2c 63 2e 46 3d 4c 2c 63 2e 52 3d 30 2c 59 3d 6e 70 28 63 2c 46 29 2c 61 3d Data Ascii: ,hf=function(F,f,c,L){try{L=F[((f\|0)+2)%3],F[f]=(F[f]\|0)-(F[((f\|0)+1)%3]\|0)-(L\|0)^(1==f?L<<c:L>>>c)}catch(Y){throw Y;}},Kp=function(F){return F},I=function(F,f,c,L,Y,a){if(c.T.length){c.Z=(c.bZ=(c.Z&&0(),F),true);try{L=c.C(),c.N=L,c.F=L,c.R=0,Y=np(c,F),a=
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 28 72 2c 50 2c 70 29 7b 28 50 3d 28 70 3d 28 50 3d 48 28 28 70 3d 48 28 72 29 2c 72 29 29 2c 30 21 3d 4a 28 70 2c 72 29 29 2c 4a 29 28 50 2c 72 29 2c 70 29 26 26 47 28 72 2c 31 31 33 2c 50 29 7d 2c 28 47 28 66 2c 28 54 28 33 31 31 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 29 7b 77 28 72 2c 66 61 6c 73 65 2c 50 2c 74 72 75 65 29 7c 7c 28 50 3d 48 28 72 29 2c 70 3d 48 28 72 29 2c 47 28 72 2c 70 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 6d 29 7d 28 41 66 28 4a 28 50 2c 72 2e 69 29 29 29 29 29 7d 2c 28 54 28 38 36 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 2c 4d 2c 42 29 7b 77 28 72 2c 66 61 6c 73 65 2c 50 2c 74 72 75 65 29 7c 7c 28 4d 3d 49 7a 28 72 2e 69 29 2c 50 3d 4d 2e 41 55 2c 42 3d 4d 2e 7a 45 2c 6d 3d 4d 2e Data Ascii: (r,P,p){(P=(p=(P=H((p=H(r),r)),0!=J(p,r)),J)(P,r),p)&&G(r,113,P)},(G(f,(T(311,function(r,P,p){w(r,false,P,true)\|\|(P=H(r),p=H(r),G(r,p,function(m){return eval(m)}(Af(J(P,r.i)))))},(T(86,function(r,P,p,m,M,B){w(r,false,P,true)\|\|(M=Iz(r.i),P=M.AU,B=M.zE,m=M.
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 2e 5a 3d 66 61 6c 73 65 2c 66 29 2e 4b 73 3d 61 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 61 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 66 2e 53 3d 76 6f 69 64 20 30 2c 66 61 6c 73 65 29 2c 30 29 29 2c 30 29 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 29 7b 69 66 28 50 3d 72 2e 6c 2e 70 6f 70 28 29 29 7b 66 6f 72 28 6d 3d 74 28 72 29 3b 30 3c 6d 3b 6d 2d 2d 29 70 3d 48 28 72 29 2c 50 5b 70 5d 3d 72 2e 50 5b 70 5d 3b 50 5b 34 33 38 5d 3d 72 2e 50 5b 34 33 38 5d 2c 50 5b 32 35 33 5d 3d 72 2e 50 5b 32 35 33 5d 2c 72 2e 50 3d 50 7d 65 6c 73 65 20 47 28 72 2c 31 31 33 2c 72 2e 44 29 7d 29 2c 66 29 2c 31 31 37 29 29 2c 66 29 2e 5a 61 3d 30 2c 66 29 29 2c 34 39 39 29 2c 5b 5d 29 2c 33 33 31 29 2c 30 Data Ascii: .Z=false,f).Ks=a.timeOrigin\|\|(a.timing\|\|{}).navigationStart\|\|0,f.S=void 0,false),0)),0)),function(r,P,p,m){if(P=r.l.pop()){for(m=t(r);0<m;m--)p=H(r),P[p]=r.P[p];P[438]=r.P[438],P[253]=r.P[253],r.P=P}else G(r,113,r.D)}),f),117)),f).Za=0,f)),499),[]),331),0
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 2b 29 50 2e 70 75 73 68 28 74 28 72 29 29 3b 47 28 72 2c 6d 2c 50 29 7d 29 2c 66 29 2c 66 29 29 2c 31 38 30 29 2c 7b 7d 29 2c 66 29 29 2c 30 29 29 2c 54 29 28 34 36 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 66 29 2c 34 35 31 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 50 2c 70 2c 6d 2c 4d 2c 42 2c 67 2c 78 2c 68 2c 41 2c 53 2c 4f 29 7b 66 75 6e 63 74 69 6f 6e 20 79 28 71 2c 43 29 7b 66 6f 72 28 3b 6d 3c 71 3b 29 68 7c 3d 74 28 72 29 3c 3c 6d 2c 6d 2b 3d 38 3b 72 65 74 75 72 6e 20 68 3e 3e 3d 28 43 3d 68 26 28 31 3c 3c 71 29 2d 28 6d 2d 3d 71 2c 31 29 2c 71 29 2c 43 7d 66 6f 72 28 41 3d 28 53 3d 28 6d 3d 68 3d 28 67 3d 48 28 72 29 2c 30 29 2c 79 28 33 29 7c 30 29 2b 31 2c 70 3d 79 28 35 29 2c 50 3d 42 3d 30 2c 5b 5d 29 3b 42 3c 70 3b 42 2b 2b 29 4f 3d 79 28 Data Ascii: +)P.push(t(r));G(r,m,P)}),f),f)),180),{}),f)),0)),T)(460,function(){},f),451),function(r,P,p,m,M,B,g,x,h,A,S,O){function y(q,C){for(;m<q;)h\|=t(r)<<m,m+=8;return h>>=(C=h&(1<<q)-(m-=q,1),q),C}for(A=(S=(m=h=(g=H(r),0),y(3)\|0)+1,p=y(5),P=B=0,[]);B<p;B++)O=y(
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 48 5b 74 68 69 73 2e 48 2e 6c 65 6e 67 74 68 3e 3e 31 5d 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 4c 2c 59 29 7b 28 74 68 69 73 2e 6e 2b 2b 2c 35 30 29 3e 74 68 69 73 2e 48 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 48 2e 70 75 73 68 28 4c 29 3a 28 59 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 35 30 3e 59 26 26 28 74 68 69 73 2e 48 5b 59 5d 3d 4c 29 29 7d 29 2c 63 29 2c 46 3d 6e 65 77 20 63 2c 66 75 6e 63 74 69 6f 6e 28 4c 29 7b 72 65 74 75 72 6e 20 4c 3d 66 2e 54 45 28 29 2e 63 6f 6e 63 61 74 28 46 2e 54 45 28 29 29 2c 46 3d 6e 65 77 20 63 2c 4c 7d 29 5d 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 66 29 7b 69 66 28 46 2e 68 29 72 65 74 75 72 6e 20 58 46 28 46 2c 46 2e 75 29 3b 72 65 74 75 72 6e 28 66 3d Data Ascii: H[this.H.length>>1]]},function(L,Y){(this.n++,50)>this.H.length?this.H.push(L):(Y=Math.floor(Math.random()*this.n),50>Y&&(this.H[Y]=L))}),c),F=new c,function(L){return L=f.TE().concat(F.TE()),F=new c,L})]},H=function(F,f){if(F.h)return XF(F,F.u);return(f=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49819	172.253.63.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	551	OUT	GET /dcm/impl_v99.js HTTP/1.1 Host: www.googletagservices.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:03 UTC	808	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-dcm-tag Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-dcm-tag" Report-To: {"group":"ads-dcm-tag","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-dcm-tag"}]} Content-Length: 60822 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 09 Jan 2024 20:21:11 GMT Expires: Wed, 08 Jan 2025 20:21:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 02 Nov 2023 14:22:33 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 493372 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:03 UTC	444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 Data Ascii: (function(){var ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.va
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 71 3d 64 61 28 74 68 69 73 29 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 71 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c Data Ascii: ;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},q=da(this),r=function(a,b){if(b)a:{var c=q;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&nul
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 2c 69 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 Data Ascii: ined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},ia="function"==typeof Object.create?Object.create:function(a){var b
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6b 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6c 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 76 3d Data Ascii: (;this.g&&this.g.length;){var g=this.g;this.g=[];for(var h=0;h<g.length;++h){var k=g[h];g[h]=null;try{k()}catch(l){this.l(l)}}}this.g=null};b.prototype.l=function(g){this.i(function(){throw g;})};var e=function(g){this.h=0;this.i=void 0;this.g=[];this.v=
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 67 3d 71 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 68 3d 71 2e 45 76 65 6e 74 2c 6b 3d 71 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6b 29 72 65 74 75 72 6e 21 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 67 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 68 3f 67 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 67 3d 71 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 Data Ascii: urn!1;var g=q.CustomEvent,h=q.Event,k=q.dispatchEvent;if("undefined"===typeof k)return!0;"function"===typeof g?g=new g("unhandledrejection",{cancelable:!0}):"function"===typeof h?g=new h("unhandledrejection",{cancelable:!0}):(g=q.document.createEvent("Cus
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 65 29 2e 55 28 68 2c 6b 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 75 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 77 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 6e 5b 77 5d 3d 4b 3b 74 2d 2d 3b 30 3d 3d 74 26 26 6c 28 6e 29 7d 7d 76 61 72 20 6e 3d 5b 5d 2c 74 3d 30 3b 64 6f 20 6e 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 74 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 55 28 70 28 6e 2e 6c 65 6e 67 74 68 2d 31 29 2c 6d 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 0a 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b Data Ascii: e).U(h,k)})};e.all=function(g){var h=u(g),k=h.next();return k.done?c([]):new e(function(l,m){function p(w){return function(K){n[w]=K;t--;0==t&&l(n)}}var n=[],t=0;do n.push(void 0),t++,c(k.value).U(p(n.length-1),m),k=h.next();while(!k.done)})};return e});
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 72 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 72 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 Data Ascii: ot be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};r("String.prototype.includes",function(a){return a?a:function(b,c){return-1!==ra(this,b,"include
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 75 6e 74 20 76 61 6c 75 65 22 29 3b 62 7c 3d 30 3b 66 6f 72 28 76 61 72 20 64 3d 22 22 3b 62 3b 29 69 66 28 62 26 31 26 26 28 64 2b 3d 63 29 2c 62 3e 3e 3e 3d 31 29 63 2b 3d 63 3b 72 65 74 75 72 6e 20 64 7d 7d 29 3b 72 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 64 53 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 72 61 28 74 68 69 73 2c 6e 75 6c 6c 2c 22 70 61 64 53 74 61 72 74 22 29 3b 62 2d 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 76 6f 69 64 20 30 21 3d 3d 63 3f 53 74 72 69 6e 67 28 63 29 3a 22 20 22 3b 72 65 74 75 72 6e 28 30 3c 62 26 26 63 3f Data Ascii: throw new RangeError("Invalid count value");b\|=0;for(var d="";b;)if(b&1&&(d+=c),b>>>=1)c+=c;return d}});r("String.prototype.padStart",function(a){return a?a:function(b,c){var d=ra(this,null,"padStart");b-=d.length;c=void 0!==c?String(c):" ";return(0<b&&c?
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 72 65 74 75 72 6e 20 46 61 3f 78 3f 78 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 3d 62 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 48 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 46 61 3f 21 21 78 26 26 30 3c 78 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 29 7b 72 65 74 75 72 6e 20 7a 28 29 3f 21 31 3a 79 28 22 4f 70 65 72 61 22 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: AgentData\|\|null:null;function Ma(a){return Fa?x?x.brands.some(function(b){return(b=b.brand)&&-1!=b.indexOf(a)}):!1:!1}function y(a){return-1!=Ha().indexOf(a)};function z(){return Fa?!!x&&0<x.brands.length:!1}function Na(){return z()?!1:y("Opera")}function
2024-01-15 13:24:03 UTC	1252	IN	Data Raw: 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 3b 55 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 64 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 2c 61 29 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 58 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 Data Ascii: return Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;Ua(a,function(e,f){d=b.call(void 0,d,e,f,a)});return d},Xa=Array.prototype.some?function(a,b){return Array.prototype.some.call(a,b,void 0)}:function(a,b){for(var c=a.length,d="string"===ty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49824	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	858	OUT	POST /el/AGSKWxUg4JjOqwz7KbAgbTZykUHHmgbMldUQgQ7oiR0eJWCp8QO1dme9YXSFVMTocvAGcONJYZTvufCZu2SuMW6zb4sl36u3btMjhEBILrebjSrZzMmO71gJS9VeTubRU3ZO6neZRwn_5Q== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:03 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 34 32 32 35 32 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325042252,null,null,[[3,1]]]
2024-01-15 13:24:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:03 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0Q1YVL6RjzJMVNHB6hXUjg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49826	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	858	OUT	POST /el/AGSKWxUg4JjOqwz7KbAgbTZykUHHmgbMldUQgQ7oiR0eJWCp8QO1dme9YXSFVMTocvAGcONJYZTvufCZu2SuMW6zb4sl36u3btMjhEBILrebjSrZzMmO71gJS9VeTubRU3ZO6neZRwn_5Q== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:03 UTC	76	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 34 32 32 39 36 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325042296,null,null,[null,[1]]]
2024-01-15 13:24:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:03 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-7oDvGMmSSc_wWGuUSVK9aQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49825	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	858	OUT	POST /el/AGSKWxUg4JjOqwz7KbAgbTZykUHHmgbMldUQgQ7oiR0eJWCp8QO1dme9YXSFVMTocvAGcONJYZTvufCZu2SuMW6zb4sl36u3btMjhEBILrebjSrZzMmO71gJS9VeTubRU3ZO6neZRwn_5Q== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:03 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 34 32 32 39 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325042298,null,null,[[2,1]]]
2024-01-15 13:24:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:03 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-PFw7JE0qVt-TwqBqMbEjwA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49827	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	964	OUT	GET /pagead/drt/s?v=r20120211 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
2024-01-15 13:24:03 UTC	428	IN	HTTP/1.1 200 OK Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Date: Mon, 15 Jan 2024 13:07:06 GMT Cache-Control: public, max-age=3600 Content-Type: text/html; charset=UTF-8 Age: 1017 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:03 UTC	154	IN	Data Raw: 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 64 72 74 2f 75 69 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8f<!DOCTYPE HTML PUBLIC><html> <head> <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" /> </head></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49829	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:03 UTC	1281	OUT	GET /f/AGSKWxW4STNfN8cv0B5qoXtk-_2e7H0oQsXOHpe6zQ_vmgPggJwTYBjx4vYSDfbwn2TU1UzCMNtgAywxKTUuGMqe_5_OUZVdKlCxhwtcyRZmMBEGGCdhbLRMv9FlHw9sAHJ_Qo2DerOT5A==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQyLDM0MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNl0sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsMV0sImh0dHA6Ly9teWxvdmVseWJsdWVza3kuY29tLyIsbnVsbCxbWzgsIjE1bUxwenJ3THJBIl0sWzksImVuLVVTIl0sWzE4LCJbW1swXV1dIl0sWzE5LCIyIl0sWzE3LCJbMF0iXV1d HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:04 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:04 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-iauvZQn9w5RPiX_gcRf7ZQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:04 UTC	1629	IN	Data Raw: 62 38 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 50 41 2c 5f 2e Data Ascii: b8dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var PA=function(a){this.j=_.v(a)};_.A(PA,_.
2024-01-15 13:24:04 UTC	1335	IN	Data Raw: 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 65 6c 5c 2f 41 47 53 4b 57 78 55 2d 69 76 2d 4e 70 6f 64 37 4e 31 6b 34 70 7a 44 55 5a 4a 74 4d 72 65 6a 2d 6c 6d 45 6c 6b 61 34 56 68 4d 51 58 71 30 34 68 34 4e 33 67 55 79 79 61 78 71 73 64 52 62 41 6d 4e 58 42 4f 50 64 58 59 6a 4d 49 73 35 64 64 61 64 75 4a 34 45 70 33 66 70 51 77 4d 74 78 35 43 62 4f 59 65 71 78 45 4f 4a 32 34 35 51 49 6d 43 36 6a 47 67 31 34 51 4e 4f 6a 73 58 4d 39 44 76 36 61 45 34 6b 7a 43 4d 41 4d 42 76 67 77 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 3f 64 6d 69 64 5c 5c 5c 5c 75 30 30 33 64 35 33 Data Ascii: null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/el\/AGSKWxU-iv-Npod7N1k4pzDUZJtMrej-lmElka4VhMQXq04h4N3gUyyaxqsdRbAmNXBOPdXYjMIs5ddaduJ4Ep3fpQwMtx5CbOYeqxEOJ245QImC6jGg14QNOjsXM9Dv6aE4kzCMAMBvgw\\\\u003d\\\\u003d?dmid\\\\u003d53
2024-01-15 13:24:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49830	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1960	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004000;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=155288948;ord=862oyo;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE%26ase%3D2%26gclid%3DEAIaIQobChMIg6PX6r7fgwMVzorRBB2MfQWDEAEYASAAEgK6nvD_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xhgB%26sig%3DAOD64_3JV_ze2I2VX1gDHVU4ZIx9eGzMiQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=826;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
2024-01-15 13:24:04 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi6qGEfXdUooY7PY-YoCKHplUBKalFavr8qDd3qX_KN_1-MxsQ; expires=Sat, 13-Jul-2024 13:24:04 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:04 UTC	370	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 37 38 34 30 35 32 35 34 33 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 39 44 47 6c 5a 59 4b 66 45 66 53 67 6f 50 77 50 74 4d 53 5a 67 41 34 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_784052543"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_9DGlZYKfEfSgoPwPtMSZgA4"\x3e');(function() {var m = document.createElem
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 69 66 20 28 73 73 20 26 26 20 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 20 7b 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6d 2c 20 73 73 29 3b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 Data Ascii: mentsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2e 64 65 74 61 69 6c 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 28 62 2c 67 2c 65 29 7d 29 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 20 63 6c 73 6e 28 22 67 63 63 5f 39 44 47 6c 5a 59 4b 66 45 66 53 67 6f 50 77 50 74 4d 53 5a 67 41 34 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 61 20 74 61 72 67 65 74 5c 78 33 64 5c 78 32 32 5f 62 6c 61 6e 6b 5c 78 32 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 49 4c 70 39 75 75 2d 33 34 4d 44 46 58 51 51 69 41 6b 64 4e 47 49 47 34 41 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 Data Ascii: d",function(e){g(e.detail)});h.addEventListener("message",function(e){q(b,g,e)})}};}).call(this); clsn("gcc_9DGlZYKfEfSgoPwPtMSZgA4");document.write('\x3ca target\x3d\x22_blank\x22 id\x3d\x22img_anch_CILp9uu-34MDFXQQiAkdNGIG4A\x22 href\x3d\x22https://ad.d
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 4a 6c 4e 6f 41 59 52 67 41 65 4b 34 39 59 5f 71 41 66 5a 74 72 45 43 71 41 65 4f 7a 68 75 6f 42 35 50 59 47 36 67 48 37 70 61 78 41 71 67 48 5f 70 36 78 41 71 67 48 31 63 6b 62 71 41 65 6d 76 68 75 6f 42 35 6f 47 71 41 66 7a 30 52 75 6f 42 35 62 59 47 36 67 48 71 70 75 78 41 71 67 48 67 36 32 78 41 71 67 48 5f 35 36 78 41 71 67 48 33 35 2d 78 41 71 67 48 79 71 6d 78 41 71 67 48 36 36 57 78 41 74 67 48 41 4e 49 49 48 77 69 41 59 52 41 42 47 42 38 79 41 6f 6f 43 4f 67 53 41 51 49 42 41 53 4c 33 39 77 54 70 59 76 4f 44 57 36 72 37 66 67 77 4f 41 43 67 47 59 43 77 48 49 43 77 47 41 44 41 48 61 44 42 41 4b 43 68 44 77 34 6f 54 53 5f 38 79 31 70 6d 41 53 41 67 45 44 71 67 30 43 56 56 50 49 44 51 48 59 45 77 33 51 46 51 48 34 46 67 47 41 46 77 45 25 32 36 61 73 Data Ascii: JlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE%26as
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 74 6c 65 78 2d 65 76 65 6e 74 2d 61 64 2d 73 69 67 6e 61 6c 73 5c 78 33 64 5c 78 32 32 5c 78 32 32 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 5c 78 33 64 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 Data Ascii: tlex-event-ad-signals\x3d\x22\x22\x3e(function(){var aa\x3d\x22function\x22\x3d\x3dtypeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a\x3d\x3dArray.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 33 64 5c 78 33 64 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 5c 78 32 32 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 5c 78 32 32 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 68 61 5c 78 33 64 72 3b 20 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 5c 78 33 64 64 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 61 3b 69 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 Data Ascii: 3d\x3db)throw new TypeError(a+\x22 is not extensible\x22);return a}:null}var ha\x3dr; function ia(a,b){a.prototype\x3dda(b.prototype);a.prototype.constructor\x3da;if(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5c 78 32 32 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: .includes must not be null or undefined\x22);if(b instanceof RegExp)throw new TypeError(\x22First argument to String.prototype.includes must not be a regular expression\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){re
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 78 32 32 41 6e 64 72 6f 69 64 5c 78 32 32 29 7c 7c 43 28 29 3b 43 28 29 3b 41 28 5c 78 32 32 53 61 66 61 72 69 5c 78 32 32 29 5c 78 32 36 5c 78 32 36 28 43 28 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 43 6f 61 73 74 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 7a 28 5c 78 32 32 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 5c 78 32 32 29 3a 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e Data Ascii: x22Android\x22)\|\|C();C();A(\x22Safari\x22)\x26\x26(C()\|\|(B()?0:A(\x22Coast\x22))\|\|(B()?0:A(\x22Opera\x22))\|\|(B()?0:A(\x22Edge\x22))\|\|(B()?z(\x22Microsoft Edge\x22):A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefin
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 61 7c 7c 61 2e 73 21 5c 78 33 64 5c 78 33 64 78 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 76 61 72 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 Data Ascii: a\|\|a.s!\x3d\x3dxa)}function J(a){return null!\x3d\x3da\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}var K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x2
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 65 61 6b 20 61 7d 7d 69 66 28 62 29 7b 62 5c 78 33 64 4d 61 74 68 2e 6d 61 78 28 62 2c 65 2d 28 2b 21 21 28 64 5c 78 32 36 35 31 32 29 2d 31 29 29 3b 69 66 28 31 30 32 34 5c 78 33 63 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 64 5c 78 33 64 64 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 62 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 7d 47 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 Data Ascii: eak a}}if(b){b\x3dMath.max(b,e-(+!!(d\x26512)-1));if(1024\x3cb)throw Error();d\x3dd\x26-16760833\|(b\x261023)\x3c\x3c14}}}G(a,d);return a};function Ea(a,b){return Fa(b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);cas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49837	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1961	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=4026222152;ord=3lxc7t;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMI597V6r7fgwMV1IN3AR2cmQuLEAEYASAAEgJWU_D_BwE%26num%3D1%26cid%3DCAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYBgB%26sig%3DAOD64_2GiJB1vOZBCkjo8FmWG9nkmmarNw%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=j_Wdw(DqsW;cmpl=8;gcsr=m;stc=1;sttr=1045;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
2024-01-15 13:24:04 UTC	882	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; expires=Sat, 13-Jul-2024 13:24:04 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:04 UTC	370	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 31 36 38 30 37 34 31 32 33 34 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 39 44 47 6c 5a 64 71 6a 45 2d 2d 62 6f 50 4d 50 6a 76 71 43 6d 41 55 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_1680741234"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_9DGlZdqjE--boPMPjvqCmAU"\x3e');(function() {var m = document.createEle
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 69 66 20 28 73 73 20 26 26 20 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 20 7b 73 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6d 2c 20 73 73 29 3b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 Data Ascii: ementsByTagName('script')[0];if (ss && ss.parentNode) {ss.parentNode.insertBefore(m, ss);}})();(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2e 64 65 74 61 69 6c 29 7d 29 3b 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 71 28 62 2c 67 2c 65 29 7d 29 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 20 63 6c 73 6e 28 22 67 63 63 5f 39 44 47 6c 5a 64 71 6a 45 2d 2d 62 6f 50 4d 50 6a 76 71 43 6d 41 55 22 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 61 20 74 61 72 67 65 74 5c 78 33 64 5c 78 32 32 5f 62 6c 61 6e 6b 5c 78 32 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 4e 72 74 2d 4f 75 2d 33 34 4d 44 46 65 38 4e 61 41 67 64 44 72 30 41 55 77 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e Data Ascii: ad",function(e){g(e.detail)});h.addEventListener("message",function(e){q(b,g,e)})}};}).call(this); clsn("gcc_9DGlZdqjE--boPMPjvqCmAU");document.write('\x3ca target\x3d\x22_blank\x22 id\x3d\x22img_anch_CNrt-Ou-34MDFe8NaAgdDr0AUw\x22 href\x3d\x22https://ad.
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 72 4a 6c 4e 6f 41 59 52 67 41 65 4b 34 39 59 5f 71 41 66 5a 74 72 45 43 71 41 65 4f 7a 68 75 6f 42 35 50 59 47 36 67 48 37 70 61 78 41 71 67 48 5f 70 36 78 41 71 67 48 31 63 6b 62 71 41 65 6d 76 68 75 6f 42 35 6f 47 71 41 66 7a 30 52 75 6f 42 35 62 59 47 36 67 48 71 70 75 78 41 71 67 48 67 36 32 78 41 71 67 48 5f 35 36 78 41 71 67 48 33 35 2d 78 41 71 67 48 79 71 6d 78 41 71 67 48 36 36 57 78 41 74 67 48 41 4e 49 49 48 77 69 41 59 52 41 42 47 42 38 79 41 6f 6f 43 4f 67 53 41 51 49 42 41 53 4c 33 39 77 54 70 59 2d 61 6e 56 36 72 37 66 67 77 4f 41 43 67 47 59 43 77 48 49 43 77 47 41 44 41 47 69 44 41 67 71 42 67 6f 45 72 4c 71 78 41 74 6f 4d 45 41 6f 4b 45 4c 44 35 30 5a 76 74 35 39 53 64 45 52 49 43 41 51 4f 71 44 51 4a 56 55 38 67 4e 41 64 67 54 44 64 41 Data Ascii: rJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdA
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 74 75 72 74 6c 65 78 2d 65 76 65 6e 74 2d 61 64 2d 73 69 67 6e 61 6c 73 5c 78 33 64 5c 78 32 32 5c 78 32 32 5c 78 33 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 5c 78 33 64 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 Data Ascii: x22 data-jcp-turtlex-event-ad-signals\x3d\x22\x22\x3e(function(){var aa\x3d\x22function\x22\x3d\x3dtypeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a\x3d\x3dArray.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 5c 78 33 64 5c 78 33 64 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 5c 78 32 32 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 5c 78 32 32 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 68 61 5c 78 33 64 72 3b 20 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 5c 78 33 64 64 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 61 3b 69 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: f(a.__proto__!\x3d\x3db)throw new TypeError(a+\x22 is not extensible\x22);return a}:null}var ha\x3dr; function ia(a,b){a.prototype\x3dda(b.prototype);a.prototype.constructor\x3da;if(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defin
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 5c 78 32 32 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 Data Ascii: String.prototype.includes must not be null or undefined\x22);if(b instanceof RegExp)throw new TypeError(\x22First argument to String.prototype.includes must not be a regular expression\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x2
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 32 32 4d 53 49 45 5c 78 32 32 29 3b 21 41 28 5c 78 32 32 41 6e 64 72 6f 69 64 5c 78 32 32 29 7c 7c 43 28 29 3b 43 28 29 3b 41 28 5c 78 32 32 53 61 66 61 72 69 5c 78 32 32 29 5c 78 32 36 5c 78 32 36 28 43 28 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 43 6f 61 73 74 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 30 3a 41 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 28 42 28 29 3f 7a 28 5c 78 32 32 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 5c 78 32 32 29 3a 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 Data Ascii: 22MSIE\x22);!A(\x22Android\x22)\|\|C();C();A(\x22Safari\x22)\x26\x26(C()\|\|(B()?0:A(\x22Coast\x22))\|\|(B()?0:A(\x22Opera\x22))\|\|(B()?0:A(\x22Edge\x22))\|\|(B()?z(\x22Microsoft Edge\x22):A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var p
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 7c 7c 61 2e 73 21 5c 78 33 64 5c 78 33 64 78 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 78 33 64 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 76 61 72 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 Data Ascii: !\x3d\x3dtypeof a\|\|a.s!\x3d\x3dxa)}function J(a){return null!\x3d\x3da\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}var K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 32 33 29 5c 78 33 63 5c 78 33 63 31 34 3b 62 72 65 61 6b 20 61 7d 7d 69 66 28 62 29 7b 62 5c 78 33 64 4d 61 74 68 2e 6d 61 78 28 62 2c 65 2d 28 2b 21 21 28 64 5c 78 32 36 35 31 32 29 2d 31 29 29 3b 69 66 28 31 30 32 34 5c 78 33 63 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 64 5c 78 33 64 64 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 62 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 7d 47 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 46 61 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 Data Ascii: 23)\x3c\x3c14;break a}}if(b){b\x3dMath.max(b,e-(+!!(d\x26512)-1));if(1024\x3cb)throw Error();d\x3dd\x26-16760833\|(b\x261023)\x3c\x3c14}}}G(a,d);return a};function Ea(a,b){return Fa(b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49831	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	987	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:04 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49836	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	2509	OUT	GET /pagead/adview?ai=ClOO88TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNYBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQ1f6fHkv4xflgf82TXS-NuyNMevUHP4V6QE6otKUFvd05cmEVUIAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=TK9izpmdiJQ&uach_m=%5BUACH%5D&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6RgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY
2024-01-15 13:24:04 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49839	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1132	OUT	POST /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8998 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6pi9nfxu76t0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:04 UTC	8998	OUT	Data Raw: 0a 18 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 12 a4 0f 30 33 41 46 63 57 65 41 37 69 57 39 42 51 77 47 4e 55 38 6a 4c 31 5a 41 4a 54 2d 31 65 31 46 4b 35 6e 68 7a 68 79 70 32 79 63 6f 33 4b 6f 77 72 71 75 55 6e 44 7a 61 69 53 65 44 6b 48 78 47 63 73 69 68 38 56 58 48 4a 42 79 44 4e 52 37 32 62 36 41 6d 76 78 39 47 6d 46 31 33 4f 74 79 62 6b 75 5f 43 48 44 35 44 35 46 46 49 43 30 4f 52 41 48 32 31 6e 76 61 76 64 54 4d 56 67 45 78 43 2d 6c 59 79 53 68 41 49 72 69 55 32 46 53 56 6d 61 61 58 67 33 79 51 43 48 67 67 48 67 6f 35 61 4c 68 72 4c 69 72 59 37 50 4c 7a 66 58 56 45 56 69 5f 4b 42 75 71 53 77 48 44 79 68 46 4e 6b 6b 76 58 73 6a 4c 6d 45 67 71 54 4d 4c 33 70 69 69 32 42 4d 55 5a 77 77 76 43 4e 38 58 33 65 67 36 58 32 67 Data Ascii: Ya-Cd6PbRI5ktAHEhm9JuKEu03AFcWeA7iW9BQwGNU8jL1ZAJT-1e1FK5nhzhyp2yco3KowrquUnDzaiSeDkHxGcsih8VXHJByDNR72b6Amvx9GmF13Otybku_CHD5D5FFIC0ORAH21nvavdTMVgExC-lYyShAIriU2FSVmaaXg3yQCHggHgo5aLhrLirY7PLzfXVEVi_KBuqSwHDyhFNkkvXsjLmEgqTML3pii2BMUZwwvCN8X3eg6X2g
2024-01-15 13:24:04 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:04 GMT Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8;Path=/recaptcha;Expires=Sat, 13-Jul-2024 13:24:04 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:04 UTC	556	IN	Data Raw: 61 38 30 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 6b 2d 49 31 7a 45 4a 70 49 70 73 49 59 5f 47 6f 4e 30 52 78 76 78 73 69 38 4b 45 30 4e 61 57 6d 76 34 6b 50 32 4f 38 77 7a 51 70 52 30 77 39 6d 50 75 70 34 46 77 53 45 4c 7a 35 43 6d 39 73 51 31 36 42 30 42 2d 4a 46 52 76 33 78 39 54 45 75 4c 6a 4e 39 5f 35 67 5a 6b 37 44 33 30 53 4b 79 47 6a 6e 72 67 73 42 72 45 4c 49 51 67 56 78 72 6a 78 62 45 42 55 38 4d 36 6c 75 44 69 62 76 48 61 73 67 65 79 54 38 75 54 38 6c 47 6e 58 57 6c 43 79 68 6d 58 4c 76 35 62 77 37 30 75 74 69 44 48 4e 48 4c 68 71 52 50 6d 4e 45 4f 61 58 62 6d 46 4f 2d 36 7a 4a 42 4c 68 55 55 69 36 56 43 46 35 75 65 41 4c 59 30 65 66 54 4a 75 6c 30 73 6b 72 59 59 44 44 49 66 59 35 31 6e 69 43 62 50 46 4b 7a Data Ascii: a80)]}'["rresp","03AFcWeA4k-I1zEJpIpsIY_GoN0Rxvxsi8KE0NaWmv4kP2O8wzQpR0w9mPup4FwSELz5Cm9sQ16B0B-JFRv3x9TEuLjN9_5gZk7D30SKyGjnrgsBrELIQgVxrjxbEBU8M6luDibvHasgeyT8uT8lGnXWlCyhmXLv5bw70utiDHNHLhqRPmNEOaXbmFO-6zJBLhUUi6VCF5ueALY0efTJul0skrYYDDIfY51niCbPFKz
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 68 63 55 43 66 32 6e 39 71 49 4f 6c 4a 56 36 31 41 33 43 46 78 67 78 50 58 72 39 33 51 35 59 56 6f 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 22 2c 22 22 2c 22 54 56 6c 35 63 6c 6c 73 56 6a 5a 4c 51 57 78 61 5a 6a 67 72 61 57 45 31 62 6d 30 35 64 57 46 42 53 32 77 31 51 58 51 31 59 6b 64 42 62 6d 5a 35 52 7a 41 7a 52 58 6c 52 4f 44 51 31 4e 6a 6c 55 57 47 4e 45 54 33 55 72 62 56 64 36 62 44 4a 71 4b 7a 68 79 4e 47 70 Data Ascii: hcUCf2n9qIOlJV61A3CFxgxPXr93Q5YVo",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz","","TVl5cllsVjZLQWxaZjgraWE1bm05dWFBS2w1QXQ1YkdBbmZ5RzAzRXlRODQ1NjlUWGNET3UrbVd6bDJqKzhyNGp
2024-01-15 13:24:04 UTC	887	IN	Data Raw: 63 6b 6b 30 62 45 73 35 4d 7a 6b 7a 5a 6d 52 42 64 33 4e 34 54 55 6c 77 64 57 4a 50 51 31 59 31 53 46 70 4d 55 54 42 6c 63 6d 56 73 52 47 46 55 4d 47 70 5a 54 55 6c 56 64 57 56 71 51 30 52 6d 61 30 6c 56 5a 48 70 6e 65 47 5a 61 4d 57 78 77 56 31 67 77 61 57 5a 55 5a 6b 34 78 57 57 4a 59 62 6b 78 53 61 69 39 70 5a 6e 6f 34 52 58 42 54 54 6e 56 33 5a 58 70 72 51 6b 4a 54 4e 55 4a 53 4d 54 4e 47 63 6a 42 36 5a 6a 4a 42 64 6d 68 79 59 33 5a 42 4b 7a 4e 6a 56 57 46 54 57 54 51 77 54 44 68 6b 59 32 74 6b 56 6c 4e 6b 4d 6c 5a 73 64 47 70 6c 62 6d 5a 53 56 30 56 6c 62 46 5a 6b 55 32 74 57 57 46 6c 51 61 6e 70 6e 55 7a 41 35 63 31 52 6f 54 46 4a 4a 52 45 5a 4c 65 6d 74 4f 65 57 64 6b 57 6e 4d 72 5a 44 6c 4f 51 32 6b 77 51 53 39 56 64 48 4e 50 59 30 68 75 5a 57 31 Data Ascii: ckk0bEs5MzkzZmRBd3N4TUlwdWJPQ1Y1SFpMUTBlcmVsRGFUMGpZTUlVdWVqQ0Rma0lVZHpneGZaMWxwV1gwaWZUZk4xWWJYbkxSai9pZno4RXBTTnV3ZXprQkJTNUJSMTNGcjB6ZjJBdmhyY3ZBKzNjVWFTWTQwTDhkY2tkVlNkMlZsdGplbmZSV0VlbFZkU2tWWFlQanpnUzA5c1RoTFJJREZLemtOeWdkWnMrZDlOQ2kwQS9VdHNPY0huZW1
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 31 36 38 32 0d 0a 47 35 52 62 58 64 34 62 6b 70 6e 57 69 39 4e 54 57 70 73 4d 45 46 43 53 32 68 36 4d 6a 4e 30 52 30 70 42 59 6c 56 5a 5a 47 78 4e 53 30 45 32 4d 45 52 34 5a 56 46 31 65 47 74 53 57 47 56 58 56 58 68 68 4e 31 5a 68 51 6b 6c 61 55 6e 46 54 54 44 52 53 55 54 56 33 53 6b 70 58 64 56 68 4e 4d 33 4d 78 63 55 46 6c 59 58 42 4c 55 44 68 58 63 55 52 4e 4d 56 4e 56 59 6a 49 30 62 56 6c 6c 62 58 46 68 52 48 5a 34 4d 57 6c 50 52 54 5a 61 56 6d 74 71 52 47 70 79 54 45 70 50 65 44 46 69 55 57 38 33 54 48 70 42 57 43 39 53 4b 31 70 53 4d 33 70 46 4e 32 68 55 64 6c 67 34 63 6e 5a 47 62 56 6f 77 61 44 5a 43 5a 56 6c 68 62 57 4e 58 63 47 31 56 4f 54 4a 34 53 6e 52 35 61 31 4a 70 56 44 4e 49 4e 6b 38 34 4d 32 6c 6c 54 46 52 7a 5a 45 68 44 61 53 74 32 51 56 Data Ascii: 1682G5RbXd4bkpnWi9NTWpsMEFCS2h6MjN0R0pBYlVZZGxNS0E2MER4ZVF1eGtSWGVXVXhhN1ZhQklaUnFTTDRSUTV3SkpXdVhNM3MxcUFlYXBLUDhXcURNMVNVYjI0bVllbXFhRHZ4MWlPRTZaVmtqRGpyTEpPeDFiUW83THpBWC9SK1pSM3pFN2hUdlg4cnZGbVowaDZCZVlhbWNXcG1VOTJ4SnR5a1JpVDNINk84M2llTFRzZEhDaSt2QV
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 47 56 6d 70 4b 4f 47 74 51 55 58 5a 6f 52 30 56 5a 4d 45 52 4e 4e 47 68 68 54 57 39 71 5a 79 74 35 52 79 39 33 62 57 5a 4d 4e 7a 64 51 64 44 51 77 51 6c 5a 6d 4b 31 70 33 5a 6d 4e 44 57 46 5a 4a 54 32 35 74 57 57 45 35 62 6d 6c 6a 63 30 39 7a 55 6d 31 42 4e 6b 38 77 4e 58 68 7a 5a 44 42 79 65 55 6b 72 4d 6b 68 4b 4c 7a 5a 7a 62 47 31 6d 56 32 52 59 56 6d 39 55 62 47 4e 6a 5a 6d 4a 45 4f 58 52 50 64 6c 4e 70 56 56 6b 32 55 6e 4a 4b 61 56 41 7a 4d 45 78 59 65 6c 4a 6f 4d 54 52 44 4d 31 42 6c 4d 6c 4a 4f 5a 6a 68 48 55 46 42 43 4f 58 70 47 61 6d 39 77 59 57 77 78 55 54 4d 34 51 6c 5a 47 55 58 52 70 4f 44 5a 30 4c 33 68 46 4e 45 5a 45 54 44 4a 70 54 48 52 49 54 57 52 51 54 56 70 57 51 6c 45 33 57 56 5a 46 54 7a 64 44 5a 32 56 46 65 58 46 79 56 6d 56 79 64 58 Data Ascii: GVmpKOGtQUXZoR0VZMERNNGhhTW9qZyt5Ry93bWZMNzdQdDQwQlZmK1p3ZmNDWFZJT25tWWE5bmljc09zUm1BNk8wNXhzZDByeUkrMkhKLzZzbG1mV2RYVm9UbGNjZmJEOXRPdlNpVVk2UnJKaVAzMExYelJoMTRDM1BlMlJOZjhHUFBCOXpGam9wYWwxUTM4QlZGUXRpODZ0L3hFNEZETDJpTHRITWRQTVpWQlE3WVZFTzdDZ2VFeXFyVmVydX
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 7a 56 47 31 72 63 32 5a 68 54 7a 4e 6e 59 6d 4a 61 63 6c 42 53 4f 54 5a 4d 53 30 6b 7a 56 6d 39 4c 52 30 78 4f 55 54 4a 32 51 57 74 68 4e 6b 4a 46 64 33 46 6b 63 48 4d 77 63 69 74 35 64 58 68 36 54 45 31 44 4e 56 4e 5a 54 30 56 59 55 6e 46 31 54 30 31 51 4f 45 30 30 4e 45 39 48 56 46 51 7a 4f 55 64 35 54 57 70 74 52 30 49 34 4e 6d 70 6a 4b 7a 5a 4b 54 47 64 76 59 6b 74 6c 54 56 4e 55 64 57 45 76 65 55 59 78 52 47 56 79 63 6c 42 71 57 56 46 7a 5a 48 56 6a 56 31 70 74 5a 44 4d 79 52 47 56 4e 57 57 35 4b 56 32 78 6f 55 30 45 30 4b 31 4d 79 65 6e 64 6f 55 6a 4a 51 61 45 78 32 4f 55 34 79 64 55 74 6d 64 46 42 54 62 6c 6c 53 61 56 56 6b 62 33 42 68 62 55 31 31 61 46 56 43 53 47 64 33 65 46 4e 54 53 6a 42 6e 4e 6e 4a 72 63 48 56 56 65 6b 6c 75 5a 30 64 76 62 31 Data Ascii: zVG1rc2ZhTzNnYmJaclBSOTZMS0kzVm9LR0xOUTJ2QWthNkJFd3FkcHMwcit5dXh6TE1DNVNZT0VYUnF1T01QOE00NE9HVFQzOUd5TWptR0I4NmpjKzZKTGdvYktlTVNUdWEveUYxRGVyclBqWVFzZHVjV1ptZDMyRGVNWW5KV2xoU0E0K1MyendoUjJQaEx2OU4ydUtmdFBTbllSaVVkb3BhbU11aFVCSGd3eFNTSjBnNnJrcHVVekluZ0dvb1
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 79 61 7a 5a 32 57 6c 5a 79 64 7a 4a 58 4b 33 68 58 59 55 77 77 61 30 52 34 4d 30 74 61 63 55 74 76 5a 55 4a 56 54 48 41 79 53 44 4e 44 61 57 5a 32 4d 55 39 6e 5a 32 4e 44 4f 44 6c 49 4e 45 56 69 63 47 4e 4f 52 47 63 79 59 56 41 30 64 69 74 52 54 6e 46 7a 64 58 46 35 4e 47 35 49 59 6d 78 6a 4e 6e 4d 72 64 55 46 76 4d 55 31 6c 51 32 56 6c 61 33 70 31 52 44 6c 30 65 47 39 4b 52 55 39 55 64 47 6c 69 64 45 30 35 55 44 63 78 4b 32 4e 57 54 45 46 6f 4d 33 46 46 55 30 56 4e 52 33 56 54 56 58 46 79 51 55 4e 34 52 31 6c 35 56 45 56 76 54 31 6b 31 4b 32 4e 4c 55 6c 42 42 63 31 4e 42 4d 79 73 7a 4e 6c 64 36 53 47 74 70 65 57 46 6a 4c 32 78 70 52 30 70 70 61 6b 34 76 53 30 4a 74 59 58 49 33 4e 46 64 53 5a 6e 70 47 4d 30 35 43 4f 57 46 30 4d 45 4e 59 57 6c 52 54 65 54 Data Ascii: yazZ2WlZydzJXK3hXYUwwa0R4M0tacUtvZUJVTHAySDNDaWZ2MU9nZ2NDODlINEVicGNORGcyYVA0ditRTnFzdXF5NG5IYmxjNnMrdUFvMU1lQ2Vla3p1RDl0eG9KRU9UdGlidE05UDcxK2NWTEFoM3FFU0VNR3VTVXFyQUN4R1l5VEVvT1k1K2NLUlBBc1NBMyszNld6SGtpeWFjL2xpR0ppak4vS0JtYXI3NFdSZnpGM05COWF0MENYWlRTeT
2024-01-15 13:24:04 UTC	762	IN	Data Raw: 6e 52 6d 52 56 4b 31 5a 51 56 56 42 73 57 57 30 78 55 33 64 42 53 6c 4e 43 56 6b 74 33 5a 44 4a 56 55 55 55 78 51 57 31 36 5a 7a 5a 32 53 46 46 6b 4e 6b 46 58 5a 30 46 50 53 6b 6f 79 4e 6c 5a 50 51 6d 5a 48 56 7a 6c 30 51 58 6b 72 4f 48 6c 7a 61 32 5a 49 5a 31 46 4c 56 46 51 35 4d 32 6c 32 54 6b 6c 72 59 30 74 31 4e 44 56 54 63 32 31 58 59 57 68 32 59 6d 64 56 4f 56 70 56 56 47 30 72 59 54 64 34 51 6d 78 47 65 55 49 79 61 57 39 56 61 79 38 72 62 58 42 57 61 6b 78 69 54 55 64 54 4d 47 70 4b 4f 58 64 47 63 33 56 44 61 6b 6c 4c 56 6c 67 33 4f 46 56 6d 57 6a 46 44 51 6a 64 59 62 55 46 46 51 6b 74 58 51 58 68 6c 65 46 70 4f 51 6d 52 49 59 54 64 6d 53 43 39 69 54 30 70 6f 53 31 67 78 53 7a 6c 50 4e 32 5a 4f 4e 45 4e 77 4b 33 59 77 5a 47 31 79 4e 44 42 4c 55 6d Data Ascii: nRmRVK1ZQVVBsWW0xU3dBSlNCVkt3ZDJVUUUxQW16ZzZ2SFFkNkFXZ0FPSkoyNlZPQmZHVzl0QXkrOHlza2ZIZ1FLVFQ5M2l2TklrY0t1NDVTc21XYWh2YmdVOVpVVG0rYTd4QmxGeUIyaW9Vay8rbXBWakxiTUdTMGpKOXdGc3VDaklLVlg3OFVmWjFDQjdYbUFFQktXQXhleFpOQmRIYTdmSC9iT0poS1gxSzlPN2ZONENwK3YwZG1yNDBLUm
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 31 31 66 31 0d 0a 59 65 44 55 79 65 57 74 73 4d 6a 68 4d 56 56 5a 4d 4e 46 56 34 65 6d 38 79 64 6d 4a 43 51 69 74 45 57 54 42 44 64 54 68 6d 54 30 70 4d 5a 6d 70 53 55 56 52 68 64 45 56 47 55 6e 56 74 64 6e 4e 4a 53 44 56 70 5a 45 70 30 64 6a 51 7a 59 7a 5a 79 59 30 46 59 56 57 5a 52 4c 31 5a 44 52 6b 78 5a 5a 48 46 78 51 58 70 5a 63 55 5a 48 61 56 5a 53 55 47 56 30 56 56 64 4c 55 47 39 7a 62 55 68 69 59 33 6c 72 4f 44 42 42 5a 33 52 33 59 57 6c 6e 57 6e 6c 42 64 7a 4d 76 64 45 45 72 55 30 64 4b 63 55 5a 61 57 6c 5a 6c 52 58 56 30 52 55 77 72 51 6e 6f 30 4e 30 52 5a 61 54 45 76 54 31 5a 4a 64 58 70 54 4d 6a 45 77 61 56 49 34 52 30 74 7a 5a 6b 68 54 51 54 49 35 63 56 6b 76 59 6d 64 55 59 6c 42 50 55 55 59 30 65 57 5a 7a 62 32 30 72 4b 33 67 72 55 47 56 35 Data Ascii: 11f1YeDUyeWtsMjhMVVZMNFV4em8ydmJCQitEWTBDdThmT0pMZmpSUVRhdEVGUnVtdnNJSDVpZEp0djQzYzZyY0FYVWZRL1ZDRkxZZHFxQXpZcUZHaVZSUGV0VVdLUG9zbUhiY3lrODBBZ3R3YWlnWnlBdzMvdEErU0dKcUZaWlZlRXV0RUwrQno0N0RZaTEvT1ZJdXpTMjEwaVI4R0tzZkhTQTI5cVkvYmdUYlBPUUY0eWZzb20rK3grUGV5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49840	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	3189	OUT	GET /bping.php?vgd_len=2604&&vgd_cdv=1148&vgd_cage=0&vgd_tsce=L379&vgd_mcf=76592&gdpr=0&mspa=0&prid=8PRVCXX19&cid=8CU7Q771E&crid=764666904&vi=1705325043284750660&ugd=4&lf=6&cc=US&sc=DC&lper=100&wsip=170785157&r=1705325042823&rrr=Qp8eyO4s8R1Cp4Yfo7r5QIpsZX5WmhZQdT6IBJgEmIo%3D&requrl=http%3A%2F%2Fmylovelybluesky.com%2F&vgde_bdata=QOfvzxjj~8xLjMjvu9~myJLEYv9.9i~OmYMGv9.XA~QNOvON~L1Jv9%2C9~OmYMjvf9~ejfLMQOvf9fH9uuHfu~8xLjMGvhFu.XA~xLjM7UNv9~xLjMLf1MGv9~Q7OvFuWHuhiX9~YzMGJwMGmmQ7v9.Fu~L17v9.999%2C9~8Evub-TUg~kGGvuF~GwM8Yvf9A~L88Ex1v9%2C9~LNvu~L8Qx8Ov9%2C9~LEQMQOvf9fH9uuX9H~L1Oev9.999%2C9~xLjMGvu.Au~ejfLMxLjMGv9~QYYMBLvF.h9hH~xLjMjvu9~Qjevfh.Ah~yN17vou9~GGvufW~QYYMYxjv9.Hi~JLEYv9.9i~ejfLMxLjMUNv949~EQ8MNvf%2Cf%2C9%2C9%2C9%2C9%2C9%2C9~GYvu~EQ8MOvu~LUJv9%2C9~1AEMGvA.hF%2CW9.u~QOvu~x8OvfV1ZjhZq1yzsjEIeG6~NejfLMGvh.iA~G7OvFhuiA9fWHifWiiuhHXiuXAX9WiiHuHHAF9AA9fiWhFXuiFXXhFuuHuuhFFWWHFXuXHuH9HFFf9WfWWFihFHFuFXFi9uH9WFXAWH9AWH~x8Yv9~LU7v9.999%2C9~myOfEMGv9.iW~QQvIK~NNvPb~UGMOjvzS1~x8Bvou~NJv9~LNevAX.Fu~%3DVvA9i9~UGMxNv9~z7QvA~UGMxjvzS1~UGMNNUQv9~N7vB1Qw8zy7mz~GQQMC_pvIK%2CIK~GO7vuh9XAfX9Hu~UGM77v9~GwMQOvf9fH9uuH9f~ONvW~ejfLMGvA.hF~77vfWWWW~xjYMEv9.9iA~eBMJ-Nv9.Hi~QYYMG8Ov9.9H~e8QMQOvAXh~xLjMLEQMGvi.if~GwMNmvA~QmGdv9~ONfvu~eM1QzvuhH~j1Q7v~Nemyvh.iA~e8QMxLjMGv9.Xh~ejfLM8MQOvf9fH9uuHfu~e8QMxLjMjv9~J7vAu~ejfLM8MGv9.9f~e8QMGvHhh.fW~ejfLMxLjMe8vu4ouF~xLjM7e8v9~eev9~NejfLMQOvAXh~LkevAX.Fu~jfLMGvu999~QYYMQOvf9fH9uuX9u~L1OEv9.999%2C9~Q8OvhFHFFFi9H~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.Hi~OfEMjvu9~Nejfvh.iA~AENkvu99H.iF~myMYQwv9.9i~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGvu~LEQMGvW9.u~xLjMQLEQMGvi.if~LUBEv9.999%2C9~c0fv.jmeJ.~LUBOv9.999%2C9~8QDJkv9~8Q8kv9~xLjMLENMGv9~G8Ov9.9H~UGME7vqmYJE1yJ~xLjMLEQMLev9~NGOEv9.9H9~QOvu~875EJM8Ovuh~QJjjJLM71yM8OvFuWHuhiX9~QxEEj5M71yM8Ov~OJ7JN7JOM71yM8Ov~e8JB1G8j875v9.Hi~EmQvA~1NM75EJvu~1OGjUvFuWHuhiX9~1YEvu~myG8Ov9.9i9~GkjLv9.9u9~Qx8Ov%3DK4b4Tg95oEWO7j9Lae4wrpfUBH~O7NvJ1Q7MQN~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMwmYJE1yJMN17Nw1jj~QmGEv~-8OvKrtoExGoFuFAfifAuhAAA9uu~w7Yjvu~QYYM1E8veu~8GNvu~zQlvA~7yQvfX9-fX9%7CA99-fX9%7CAAF-fW9~GQGv9~GQEv9~7Y-vfAW&ssld=%7B%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQNN%22%3A%22Pb%22%2C%22QQQN%22%3A%22r%3D%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%7D&vgd_bid=349065&vgd_ydspr=1&vgd_sbSup=1&vgd_is_amp=0&vgd_asn=174&vgd_rakh=1705325042152550719&vgd_l1rhst=contextual.media.net&vgd_rpth=%2Fnmedianet.js&vgd_hb_audit_1=8CUU9JF8H&vgd_hb_audit_2=839288643&vgd_pgid=p0967114284t202401151324&vgd_pgids=1&vgd_uspa=0&vgda_l1btm=%5B%22SPAMPXL%22%5D&hvsid=00001705325042819017221018024201&gdpr=0&mspa=0&vgd_l2type=scs_newfl&vgd_end=2 HTTP/1.1 Host: lg3.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	328	IN	HTTP/1.1 200 OK Content-Length: 35 Content-Type: image/gif Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=21600 Alt-Svc: h3=":443"; ma=93600 Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:04 GMT Connection: close
2024-01-15 13:24:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49842	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	6716	OUT	GET /clog?pixel_len_bucket=6132&logid=awlog&lper=1&itypeid=17&itype=ADX&cc=US&cid=8CUU9JF8H&reqid=hKuDd_gKgbNTPC1IRghbYA&vid=hKuDd_gKgbNTPC1IRghbYA&dn=mylovelybluesky.com&rawDn=mylovelybluesky.com&requrl_dn=mylovelybluesky.com&pid=8PR113JGC&ugd=4&fleet=appnexus&requrl=http%3A%2F%2Fmylovelybluesky.com&cliIPType=v4&coppa_enf=true&lmt_status=N&lmt_applied=N&lmt_enf=true&dnt_enf=false&geo_source=1&sc=DC&ct=washington&zip=20011&pubid=pub-ADX-116310109131&tgtval=pub-ADX-116310109131&csip=rtb-appnexus-6d87b4697f-szn49.SC&dtc=east_sc&zone=d&sd=1&ptype=23&tmax=300&xtmax=280&gdpr=0&gpp_present=false&app=0&sat=1&device_id=4&asn=174&sckfl=1&suid=CAESELQ0y-p8dtl0rOvEhDW2kw4&sckfl2=0&smbrid=adx-1&cxtSgmt=long_tail_homepage_catchall&usp_status=0&usp_enf=1&mspa_enforced=true&gqid=AD8Fdm5noyDknKE-CLb2n5p7ZMNuXLl4BcYI8gaAqeksCi15ZuH41DUPLrQnfRN9lucBu-Iu&pexid=ADX-pub-6163292317333011&geoll=false&is_ortb=false&commit_id=4f4eb818&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-01-12+00%3A00%3A00&schain_cmpl=1&schain_nodes_count=1&dummy_vsid=false&amptype=1&second_call=false&supply_cc=US&ipcc=US&is_msnnative_src=false&proxy=envoy&header_lang=false&rtttime=68&req_tid_present=false&pvid=460&prvAccId=764666904&prvApiId=8CU7Q771E&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=839288643&prspt=headerBid&prvReqId=346321243488093_565735447_8392886434601&size=336x280&chnl=smm_migration_test&bdp=0.090&bid_uuid=1916ab425690ab27b2536a79696a948d&cbdp=0.04&og_cbdp=0.090&ogbdp=0.09&pv_adtype=0&res_mtype=0&mnet_ckfl=0&ckfl=0&be=0&advUrl=https%3A%2F%2Frelated.investorfocus.net&dfpBd=0.04&dsrc=-2&dp=0&dbf=1&epc=764666904&s=1&snm=SUCCESS&pcrid=8CU7Q771E-764666904-3-3&tpbTkn=false&exid=218&bidflr=0.010&pbidflr=0.010&opbidflr=0.010&spbf=0&viewability=49&sbdrid=128&exp=ssProfile%3D0%7Csfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7Cclt%3D3%7Ctpi%3D1%7Cfl_rl%3D1%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100%7Ctpi%3D1&mnrf=0&ortbseat=BID_API&brsrclk=0&bidrestime=1705325041753&fpuReq=1&bfs=103&acsn=1&ybnca_erpm=0.09&dmm_erpm=false&dmm_ogerpm=false&bcrid=1700080807683300336028000059500&strg=smm_migration_test&vls=0&scrid=1700080807683300336028000059500&mang=1&pvdTmax=238&fpusp=false&ae=false&epcexp=false&moau=true&ucrid_ver=2&omid=0&mnet_static_share=0.0&apTags%3C%3E=75&dt=O&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_sdr=false&mx_sbp=-10.0&mx_sua_cvg=0011010&mx_tid_sent=false&mx_epbc=8CU7Q771E&mx_SPRIG=2&mx_bsBucket=0&mx_ssProfile=0&mx_sua_os_n=Windows&mx_lr=0&mx_TAS=1&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=None&mx_uid_sent=0&mx_bsBucketRa=0&mx_sid=8CUU9JF8H&mx_SC=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_nsz=3&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_bsBucketKtwRl=0&mx_tgs=250x250%7C300x250%7C336x280&mx_bsProfileRa=0&mx_IAB2=2&mx_bss_algos%3C%3E=0&mx_aurl_hc=0&mx_aabpc=0&mx_PC=1&mx_UCC=5&mx_isLossNtf=false&mx_bsWhitelistBucket=0&mx_bsProfileKtwRl=0&mx_bsProfile=0&mx_ssBucket=0&mx_TAF=3&mx_bsWhitelistAlgo=0&mx_gpid_sent=false&mx_commit_id=2bf0eb232d&mx_exp_tokens%3C%3E=IPBLOCK_DM%3AGCS%23%23ctx_canonical_exp%3Atrue%23%23launchexp%3Atoken1%23%23NedCkflWithData%3ALesBlk%23%23RealTimeValidBid%3A15m%23%23bsNed%3AvalidBid%23%23prll_req%3Atrue%23%23NedCkfl%3ADEFAULT%23%23BssTgtMig%3ADEFAULT&mx_isNed=1&acid=d56a68249159d7d3473ab8ec3b8419e3&rtime=39.0&wsip=mowx-lite-7c6dc5885b-hq7fv&ltime=49.0&act=headerBid&abs=0%7C0%7Cxtmax%3D280%7Cbrr%3D1&adtypes=0&adblk=618417950&impId=1&reftime=0&reftype=0&psrc=fail&mowxReqId=d56a68249159d7d3473ab8ec3b8419e3_1&policy_enf=2&pub_blk_enf=1&req_size=300x250%7C336x280%7C250x250&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=2&adpos=3&media=0&native_asset=0&req_mtype%3C%3E=0&ctr=-1.0&rfc=-1&skadidfl=0&feedback_id=hKuDd_gKgbNTPC1IRghbYA_1&supplyTagId=618417950&mnrfc=-1&viewability_vendor=EXCHANGE&vcmplrt=-1.0&imp_tid_present=false&mp_seg%3C%3E=100273&debug_ts=2024-01-15+13%3A24%3A01&__expireat=1705325642005&mview=1&lo_pvid=%5B460%5D&lo_dp=0&lo_bdp=0.090&lo_cbdp=0.04&actltime=50&rme=adm&bdata=sd2%3Dnull~iurl_l%3D10~ogerpm%3D0.09~dom_b%3D0.53~scd%3Ddc~rae%3D0%2C0~dom_l%3D20~vl2r_sd%3D2024011421~iurl_b%3D761.53~url_tkc%3D0~url_r2a_b%3D0~std%3D618417950~mn_beh_boost%3D0.61~rat%3D0.000%2C0~ip%3D1SxLkQ~fbb%3D16~bh_im%3D203~riipua%3D0%2C0~rc%3D1~risuid%3D0%2C0~rps_sd%3D2024011504~radv%3D0.000%2C0~url_b%3D1.31~vl2r_url_b%3D0~smm_wr%3D6.7074~url_l%3D10~slv%3D27.37~gcat%3D-10~bb%3D128~smm_mul%3D0.49~erpm%3D0.09~vl2r_url_kc%3D0E0~psi_c%3D2%2C2%2C0%2C0%2C0%2C0%2C0%2C0~bm%3D1~psi_d%3D1~rke%3D0%2C0~a3p_b%3D3.76%2C80.1~sd%3D1~uid%3D2IaGl7GHagnFlpNvbJ~cvl2r_b%3D7.93~btd%3D6719302849289917459153508994144360330298765196557611411766884651541404662082886976461656901408653840384~uim%3D0~rkt%3D0.000%2C0~ogd2p_b%3D0.98~ss%3DNA~cc%3DUS~kb_dl%3Dn%2Fa~uiw%3D-1~ce%3D0~rcv%3D35.61~CI%3D3090~kb_uc%3D0~nts%3D3~kb_ul%3Dn%2Fa~kb_ccks%3D0~ct%3Dwashington~bss_KTW%3DNA%2CNA~bdt%3D1705325041~kb_tt%3D0~bh_sd%3D2024011402~dc%3D8~vl2r_b%3D3.76~tt%3D28888~ulm_p%3D0.093~vw_exc%3D0.49~smm_bid%3D0.04~vis_sd%3D357~url_rps_b%3D9.92~bh_co%3D3~sobj%3D0~dc2%3D1~v_asn%3D174~last%3D~cvog%3D7.93~vis_url_b%3D0.57~vl2r_i_sd%3D2024011421~vis_url_l%3D0~et%3D31~vl2r_i_b%3D0.02~vis_b%3D477.28~vl2r_url_vi%3D1E-16~url_tvi%3D0~vv%3D0~cvl2r_sd%3D357~rfv%3D35.61~l2r_b%3D1000~smm_sd%3D2024011501~radp%3D0.000%2C0~sid%3D764666904~url_rps_kc%3D0~kb_src%3Dkbb~vwu%3D0.49~d2p_l%3D10~cvl2%3D7.93~3pcf%3D1004.96~og_msh%3D0.09~dmm_strg%3Dsmm_migration_test~d2p_b%3D1~rps_b%3D80.1~url_srps_b%3D9.92~rkwp%3D0.000%2C0~MP2%3D.love.~rkwd%3D0.000%2C0~isRef%3D0~isif%3D0~url_rpc_b%3D0~bid%3D0.04~kb_pt%3DHomepage~url_rps_rv%3D0~cbdp%3D0.040%7Esd%3D1%7Eitype_id%3D17%7Eseller_tag_id%3D618417950%7Esupply_tag_id%3D%7Edetected_tag_id%3D%7Eviewability%3D0.49%7Epos%3D3%7Eac_type%3D1%7Eadblk%3D618417950%7Eamp%3D1%7Eogbid%3D0.090%7Ebflr%3D0.010%7Esuid%3DCAESELQ0y-p8dtl0rOvEhDW2kw4%7Edtc%3Deast_sc%7Edmm_erpm%3Dfalse%7Edmm%3Dsmm_migration_test%7Ebdpcapd%3D0%7Edalg%3Dsmm%7Esgmt%3Dlong_tail_homepage_catchall%7Esobp%3D%7Exid%3DADX-pub-6163292317333011%7Ehtml%3D1%7Esmm_api%3Dv1~ibc%3D1~nsz%3D3~tgs%3D250x250%7C300x250%7C336x280~bsb%3D0~bsp%3D0~tmx%3D238&utime=1085&sf=0&cpr=0.9582261418714186 HTTP/1.1 Host: hblg.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:04 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-15 13:24:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49841	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1201	OUT	GET /log?logid=kfke&evtid=plutol1&__q=AYYEIwKELwQCAAABAAAAAgAAAABAAAEABgAAQIABAAgAMNAATjM0NjMyMTI0MzQ4ODA5M181NjU3MzU0NDdfODM5Mjg4NjQzNDYwMUBkNTZhNjgyNDkxNTlkN2QzNDczYWI4ZWMzYjg0MTllM5gHCtejcD0Ktz80aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20EVVOAwKnqDN4BTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Jm15bG92ZWx5Ymx1ZXNreS5jb20SOENVVTlKRjhICA4zMzZ4MjgwCDAuMDQOZWFzdF9zYwZBRFgICG51cmwAAAAAAACASECy4djUoWMCMgAAAAAAAPC_QHJ0Yi1hcHBuZXh1cy02ZDg3YjQ2OTdmLXN6bjQ5LlNDPjE3MDAwODA4MDc2ODMzMDAzMzYwMjgwMDAwNTk1MDACEDRmNGViODE4AmQC&cbvp=2 HTTP/1.1 Host: hblg.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:04 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-15 13:24:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49833	23.56.8.25	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	3647	OUT	GET /sr/2722522032/SAFEFRAME.html?ule=2967&&kkdd=HA%7C3%7CAnH9&-y=5iS(.R(Sl.RYli(S!!S&CEa_=S&A~ac=S&VE-=55lY&b~Vu=d.iW&VyE=YI2ifii56&VaVE=fVzC)JQMp96Qt5ppr__9VT%3D%3D&V_yE=i!l!!!WSl&~yBu=..!JRYS&VV=21&~V=eI&V8jA=~AApAyC_cby)jpbu~b&ayE=Yx!iFK.1&bayE=D56.!!Y&8bba~=5&___=faYutl~YF5IalKP)i_(fqa~kZ(oA8kfED!qQ9C6Aq)%3D&j~u=(&3T=5&MCE=l&cEb5=YI22W90Yn&cEbR=Y.WRYY!l.&UEcbc=~ER%3DjM33OyM_3p3%3D5SO)Cu_aA%3DSLSWOE)ApU%3DSL(.O~VE%3DEVO_cu%3DS%2CSOE)Ap3%3DRSO-3R_p~E%3DRSRlS55lR5OyM_3pU%3Di!5L(.OM_3pbvV%3DSOM_3p_RcpU%3DSO~bE%3D!5Yl5iW(SOAjpUu8pU))~b%3DSL!5O_cb%3DSLSSS%2CSOya%3D51JdvfOPUU%3D5!OU8pyA%3DRS.O_yyaMc%3DS%2CSO_V%3D5O_y~MyE%3DS%2CSO_a~p~E%3DRSRlS55(SlO_cE-%3DSLSSS%2CSOM_3pU%3D5L.5O-3R_pM_3pU%3DSO~AApT_%3D!LiSilOM_3p3%3D5SO~3-%3DRiL.iOCVcb%3Dr5SOUU%3D5RYO~AApAM3%3DSLlWOu_aA%3DSLSWO-3R_pM_3pvV%3DS6SOa~ypV%3DR%2CR%2CS%2CS%2CS%2CS%2CS%2CSOUA%3D5Oa~ypE%3D5O_vu%3DS%2CSOc.apU%3D.Li!%2CYSL5O~E%3D5OMyE%3DRqcH3iHncCj03am-U9OV-3R_pU%3DiLW.OUbE%3D!i5W.SRYlWRYWW5il(W5(.(SYWWl5ll.!S..SRWYi!(5W!((i!55l55i!!YYl!(5(l5lSl!!RSYRYY!Wi!l!5!(!WS5lSY!(.YlS.YlOMyA%3DSO_vb%3DSLSSS%2CSO)CERapU%3DSLWYO~~%3DmwOVV%3D21OvUpE3%3Dj%2FcOMyT%3Dr5OVu%3DSO_V-%3D.(L!5OIq%3D.SWSOvUpMV%3DSOjb~%3D.OvUpM3%3Dj%2FcOvUpVVv~%3DSOVb%3DTc~8yjCb)jOU~~pGDo%3Dmw%2CmwOUEb%3D5iS(.R(Sl5OvUpbb%3DSOU8p~E%3DRSRlS55lSROEV%3DYO-3R_pU%3D.Li!Obb%3DRYYYYOM3Apa%3DSLSW.O-TpuJV%3DSLlWO~AApUyE%3DSLSlO-y~p~E%3D.(iOM_3p_a~pU%3DWLWROU8pV)%3D.O~)Us%3DSOEVR%3D5O-pc~j%3D5ilO3c~b%3DOV-)C%3DiLW.O-y~pM_3pU%3DSL(iO-3R_pyp~E%3DRSRlS55lR5O-y~pM_3p3%3DSOub%3D.5O-3R_pypU%3DSLSRO-y~pU%3DliiLRYO-3R_pM_3p-y%3D56r5!OM_3pb-y%3DSO--%3DSOV-3R_p~E%3D.(iO_P-%3D.(L!5O3R_pU%3D5SSSO~AAp~E%3DRSRlS55(S5O_cEa%3DSLSSS%2CSO~yE%3Di!l!!!WSlOM_3p_a~pvV%3DSOvUp~_V%3DvUUO-TM%3DSLlWOERap3%3D5SOV-3R%3DiLW.O.aVP%3D5SSlLW!O)CpA~8%3DSLSWOEAAp~b_C%3D~AApAyC_cby)jpbu~bOERapU%3D5O_a~pU%3DYSL5OM_3p~_a~pU%3DWLWRO_vTa%3DSLSSS%2CSOhxR%3DLg3)-uLgO_vTE%3DSLSSS%2CSOy~FuP%3DSOy~yP%3DSOM_3p_aVpU%3DSOUyE%3DSLSlOvUpab%3Dn)AuacCuOM_3p_a~p_-%3DSOVUEa%3DSLSlSO~E%3D5OybtaupyE%3D5iO~u33u_pbcCpyE%3D!5Yl5iW(SO~Maa3tpbcCpyE%3DOEubuVbuEpbcCpyE%3DO-yuTcUy3ybt%3DSLlWOa)~%3D.OcVpbtau%3D5OcEU3v%3D!5Yl5iW(SOcAa%3D5O)CUyE%3DSLSWSOUP3_%3DSLS5SO~MyE%3DIw616dfStraYEb3S_-68eoRvTlOEbV%3Duc~bp~VOEAApu_aA%3DPc3~uOEAA%3D~AApAyC_cby)jpbu~bOUEaVcaE%3DSOEc3C%3D~AAO~CAb%3D3)jCpbcy3p8)AuacCupVcbV8c33O~)Ua%3DOJyE%3DweZraMUr!5!.RWR.5i...S55O8bA3%3D5O~AApcay%3D-5OyUV%3D5Oj~B%3D.ObC~%3DR(SJR(S%7C.SSJR(S%7C..!JRYSOU~U%3DSOU~a%3DSObAJ%3DR.Y&jb-=S&AAA=KTh3wGKe1GJrP0l3AC6d04rV1kF5mY)qm_4._b)mhdcryhyEAyfhREpjF8Yu0I4qYJh3(w8Y5AVJ(Hd--fDzxBommBR3&yT=..!&yjqP_=5&UE_qE=l!S&UyE=.lWS!(&AVP=i!(WR&tE~a_=5&Ucu=QJuB%2FCBumQOQJuB%2FCBlmQOluu&vcba_u=5&vcbUyE=r5SR&VcE)Acyj=bBFr8dV3rdrn18mlRrMMPEj(Z8RyISm!zE.Rtlq1Vs4nspvts)BC%3D%3D&ta3a=5&y~yE=(&cE-=qj-u~b)_%200)VM~&~~AV_p-u_=(&aCyE=aSW!i55lRYlbRSRlS55(5.Rl&~~3E=%7B%22~~ya%22%3A%225SRL5!(LlYLS%22%2C%22~~VV%22%3A%2221%22%2C%22~~~V%22%3A%22eI%22%2C%22~~Vbt%22%3A%22Tc~8yjCb)j%22%7D&8bA3~_V=5&sflct=5095147&bVPpVAa=5&ure=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	494	IN	HTTP/1.1 200 OK Content-Type: text/html timing-allow-origin: * x-sc-h: 22-z5ms Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:04 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Set-Cookie: visitor-id=3483266440180255000V10; Path=/; Domain=media.net; Max-Age=31536000; Secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 Strict-Transport-Security: max-age=31536000
2024-01-15 13:24:04 UTC	15890	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 Data Ascii: 00006000<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><style type="text/css">body{background-color: transparent;}</style><scr
2024-01-15 13:24:04 UTC	8698	IN	Data Raw: 73 41 53 6f 69 59 32 76 36 49 51 63 48 68 55 67 4c 4c 45 52 45 44 63 4d 6c 75 6e 35 78 54 76 2f 51 52 4d 73 55 79 6e 6a 4b 56 72 4d 50 6a 73 69 6b 5a 65 31 79 41 32 48 33 2f 41 72 70 56 4c 65 33 37 52 61 51 4c 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 27 29 20 63 65 6e 74 65 72 2f 63 6f 76 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 73 63 72 5f 77 72 61 70 7b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 39 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e Data Ascii: sASoiY2v6IQcHhUgLLEREDcMlun5xTv/QRMsUynjKVrMPjsikZe1yA2H3/ArpVLe37RaQLAAAAAElFTkSuQmCC') center/cover no-repeat;cursor:pointer;overflow:hidden}#scr_wrap{z-index:9999999;background:#fff;left:0;top:0;box-shadow:0 1px 5px 0 rgba(0,0,0,.17);font-size:14px;lin
2024-01-15 13:24:05 UTC	14089	IN	Data Raw: 30 30 30 30 33 36 46 44 0d 0a 74 2d 73 69 7a 65 3a 32 30 70 78 3b 0d 0a 63 6f 6c 6f 72 3a 20 23 38 30 62 32 38 30 3b 0d 0a 0d 0a 7d 0d 0a 0d 0a 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 7d 0d 0a 0d 0a 6c 69 3a 68 6f 76 65 72 20 2e 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 66 66 66 3b 0d 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 38 30 62 32 38 30 7d 0d 0a 0d 0a 6c 69 3a 68 6f 76 65 72 20 2e 61 72 72 6f 77 7b 63 6f 6c 6f 72 3a 20 23 38 30 62 32 38 30 3b 7d 0d 0a 0d 0a 6c 69 3a 68 6f 76 65 72 20 2e 61 6e 63 68 6f 72 74 65 78 74 20 61 7b 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0d 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 55 6e 64 65 72 6c 69 6e 65 3b Data Ascii: 000036FDt-size:20px;color: #80b280;}li:first-child{margin-top: 0;}li:hover .content{background:#ffffff;border-bottom-color:#80b280}li:hover .arrow{color: #80b280;}li:hover .anchortext a{color: #000000;text-decoration:Underline;
2024-01-15 13:24:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 5b 65 5d 29 7c 7c 21 31 21 3d 3d 72 2e 69 73 55 72 6c 45 6e 74 69 74 79 29 26 26 28 6f 2b 3d 66 28 65 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 5b 65 5d 3f 74 5b 65 5d 2e 76 61 6c 75 65 3a 74 5b 65 5d 29 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 22 22 21 3d 3d 74 Data Ascii: 00004000t[e])\|\|!1!==r.isUrlEntity)&&(o+=f(e,"object"==typeof t[e]?t[e].value:t[e]));return o}function i(t){return"[object Array]"===Object.prototype.toString.call(t)}function c(t){return"function"==typeof t}function u(t){return"string"==typeof t&&""!==t
2024-01-15 13:24:05 UTC	12	IN	Data Raw: 79 28 73 29 2c 61 2e 24 34 31 0d 0a Data Ascii: y(s),a.$41
2024-01-15 13:24:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 72 29 29 29 7d 72 65 74 75 72 6e 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 24 3b 73 3d 72 2e 24 31 4e 28 22 73 73 6d 63 72 22 29 7c 7c 7b 7d 2c 6f 3d 72 2e 24 31 4e 28 22 63 6c 6b 54 72 6b 44 61 74 61 22 29 7c 7c 7b 7d 2c 6b 28 29 2c 61 2e 24 33 6f 28 73 29 7c 7c 61 2e 24 33 6f 28 64 2e 70 76 4c 6f 67 29 7c 7c 31 21 3d 3d 64 2e 70 76 4c 6f 67 2e 65 6e 61 62 6c 65 64 7c 7c 28 24 3d 7b 7d 2c 61 2e 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 61 2e 24 33 78 28 64 2e 70 76 4c 6f 67 2e 62 6c 50 61 72 61 6d 73 2c 74 29 7c 7c 28 24 5b 74 5d 3d 72 29 7d 29 2c 63 2e 24 32 32 28 61 2e 24 33 6c 28 22 76 67 64 65 5f 73 73 6d 63 72 22 2c 61 2e 24 33 73 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 Data Ascii: 00004000(r)))}return{init:function(){var $;s=r.$1N("ssmcr")\|\|{},o=r.$1N("clkTrkData")\|\|{},k(),a.$3o(s)\|\|a.$3o(d.pvLog)\|\|1!==d.pvLog.enabled\|\|($={},a.each(s,function(r,t){a.$3x(d.pvLog.blParams,t)\|\|($[t]=r)}),c.$22(a.$3l("vgde_ssmcr",a.$3s(JSON.stringify
2024-01-15 13:24:05 UTC	12	IN	Data Raw: 3d 3d 74 79 70 65 6f 66 20 74 0d 0a Data Ascii: ==typeof t
2024-01-15 13:24:05 UTC	10121	IN	Data Raw: 30 30 30 30 32 37 37 44 0d 0a 2e 5f 63 75 73 74 6f 6d 2e 70 6f 73 74 52 65 6e 64 65 72 69 6e 67 29 26 26 74 2e 5f 63 75 73 74 6f 6d 2e 70 6f 73 74 52 65 6e 64 65 72 69 6e 67 28 77 69 6e 64 6f 77 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 7d 29 3b 24 30 30 28 22 6c 6f 67 67 69 6e 67 70 69 70 65 6c 69 6e 65 22 2c 5b 22 75 74 69 6c 22 2c 22 63 6f 6d 6d 6f 6e 63 6f 6e 73 74 61 6e 74 73 22 2c 22 6c 33 72 65 63 65 69 76 65 72 22 2c 22 6d 65 74 61 70 61 72 61 6d 75 74 69 6c 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 68 2c 70 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 7b 7d 2c 63 3d 7b 7d 2c 65 3d 7b 7d 2c 69 3d 7b 7d 2c 24 3d 68 2e 24 30 47 2c 6f 3d 2f 5b 7c 3a 5d 2f 2c 72 3d 74 68 69 Data Ascii: 0000277D._custom.postRendering)&&t._custom.postRendering(window)}catch(t){}}}});$00("loggingpipeline",["util","commonconstants","l3receiver","metaparamutil"],function(m,h,p,d){"use strict";return function(){var u={},c={},e={},i={},$=h.$0G,o=/[\|:]/,r=thi
2024-01-15 13:24:05 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49834	23.56.8.25	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	910	OUT	GET /checksync.php?vsSync=1&cs=6&cv=31&https=1&cid=8CUU9JF8H&prvid=99%2C77%2C20000%2C294%2C262%2C460%2C461%2C462%2C4%2C313%2C10000%2C459%2C229%2C9%2C319&itype=ADX&purpose1=1&gdprconsent=1&gdpr=0&usp_status=0&usp_consent=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	537	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 27348 Content-Type: text/html; charset=UTF-8 Set-Cookie: visitor-id=3483266450180228000V10; Expires=Tue, 14 Jan 2025 13:24:05 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Wed, 17 Jan 2024 13:24:05 GMT Date: Mon, 15 Jan 2024 13:24:05 GMT Connection: close
2024-01-15 13:24:05 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-01-15 13:24:05 UTC	16384	IN	Data Raw: 20 20 20 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 34 31 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 20 65 20 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 36 22 Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":141,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":" e ","coc":"NA"},"cs":"6"
2024-01-15 13:24:05 UTC	8192	IN	Data Raw: 6e 2e 67 65 74 43 75 73 74 6f 6d 65 72 49 44 28 29 2c 73 2e 69 74 79 70 65 3d 6e 2e 67 65 74 49 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 28 29 2c 73 2e 62 73 3d 6e 2e 67 65 74 42 61 74 63 68 53 69 7a 65 28 29 2c 73 2e 62 69 3d 6e 2e 67 65 74 42 61 74 63 68 49 6e 74 65 72 76 61 6c 28 29 2c 73 2e 63 63 73 3d 6e 2e 67 65 74 43 6f 6f 6b 69 65 53 6f 75 72 63 65 28 29 2c 73 2e 73 76 72 3d 6e 2e 67 65 74 53 6f 75 72 63 65 43 6f 64 65 56 65 72 73 69 6f 6e 28 29 2c 73 2e 67 64 70 72 3d 6e 2e 67 65 74 47 44 50 52 46 6c 61 67 28 29 3f 31 3a 30 2c 73 2e 63 73 65 78 3d 6e 2e 67 65 74 47 44 50 52 43 6f 6e 73 65 6e 74 28 29 7c 7c 30 2c 73 2e 63 73 73 74 72 3d 61 28 29 2c 73 2e 75 73 70 5f 73 74 61 74 75 73 3d 6e 2e 67 65 74 43 63 70 61 46 6c 61 67 28 29 3f 31 3a 30 2c Data Ascii: n.getCustomerID(),s.itype=n.getIntegrationType(),s.bs=n.getBatchSize(),s.bi=n.getBatchInterval(),s.ccs=n.getCookieSource(),s.svr=n.getSourceCodeVersion(),s.gdpr=n.getGDPRFlag()?1:0,s.csex=n.getGDPRConsent()\|\|0,s.csstr=a(),s.usp_status=n.getCcpaFlag()?1:0,
2024-01-15 13:24:05 UTC	2771	IN	Data Raw: 65 6e 74 4c 69 62 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 64 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6f 28 29 7d 76 61 72 20 72 2c 64 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 6e 74 4c 69 62 2e 61 64 64 45 76 65 6e 74 28 77 69 6e 64 6f 77 2c 22 6d 65 73 73 61 67 65 22 2c 69 29 2c 7b 61 64 64 43 61 6c 6c 42 61 63 6b 3a 73 2c 73 74 6f 70 50 65 72 69 6f 64 69 63 53 79 6e 63 3a 61 2c 73 74 61 72 74 50 65 72 69 6f 64 69 63 53 79 6e 63 3a 75 7d 7d 29 3b 5f 63 44 28 22 6d 6e 73 79 6e 63 22 2c 5b 77 69 6e 64 6f 77 2c 77 69 6e 64 6f 77 2e 5f 6d 4e 43 6b 2e 75 74 69 6c 2c 22 65 6d 22 2c 22 76 69 73 69 74 6f 72 63 6b 73 79 6e 63 22 2c 22 63 6b 73 79 6e 63 22 2c Data Ascii: entLib.removeEvent(window,"message",i)}function s(t){d=t}function u(){o()}var r,d;return t.eventLib.addEvent(window,"message",i),{addCallBack:s,stopPeriodicSync:a,startPeriodicSync:u}});_cD("mnsync",[window,window._mNCk.util,"em","visitorcksync","cksync",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49845	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1280	OUT	GET /f/AGSKWxULU5s5oeDg_iEjqYDV1hvqo2vSKzmrTKeKjc86zlEuFpPUyYXppirFcM1_NNKkD3dkv8BblLnvGYBY1K9Upq9MltyzheSMFpi_NN7rTG2WTXOT_v_6cdOgihN4LO4MPPvec4OyyQ==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzA1MzI1MDQzLDI5MjAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsNiw5XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20vIixudWxsLFtbOCwiMTVtTHB6cndMckEiXSxbOSwiZW4tVVMiXSxbMTgsIltbWzBdXV0iXSxbMTksIjIiXSxbMTcsIlswXSJdXV0 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:04 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:04 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-paYMP82KXRFyxoMwYmLjqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:04 UTC	1629	IN	Data Raw: 64 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 4d 6e 2c 5f 2e Data Ascii: d16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Mn=function(a){this.j=_.v(a)};_.A(Mn,_.
2024-01-15 13:24:04 UTC	1629	IN	Data Raw: 71 77 2f 6d 3d 63 6f 6f 6b 69 65 5f 72 65 66 72 65 73 68 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 37 2c 5c 78 32 32 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 5c 5c 5c 78 32 32 2c 5c 5c 5c 78 32 32 41 4b 73 52 6f 6c 38 2d 72 72 62 4a 5a 41 61 58 69 7a 64 7a 79 38 73 49 4b 45 61 65 76 70 48 62 7a 34 50 4e 61 50 51 43 6b 49 55 72 74 69 66 72 45 75 55 4f 72 56 6b 36 32 30 6f 51 62 62 32 36 53 43 57 45 64 6b 74 4b 31 5a 62 38 79 44 38 54 70 56 68 4e 6d 46 70 59 65 53 68 54 61 68 63 6c 7a 35 51 70 55 46 61 38 4b 65 74 48 34 70 33 74 30 63 38 72 32 32 6f 69 31 36 6a Data Ascii: qw/m=cookie_refresh_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b7,\x22\x5b\x5bnull,\\\x22mylovelybluesky.com\\\x22,\\\x22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16j
2024-01-15 13:24:04 UTC	99	IN	Data Raw: 5f 6f 62 66 6d 4f 37 4f 6d 76 59 69 65 33 30 65 71 48 4d 53 33 6c 66 30 37 49 30 7a 5f 64 76 54 6b 4c 56 6b 54 62 4a 51 42 78 39 2d 5a 35 5a 6f 57 75 63 50 65 35 56 37 6e 52 67 4a 31 53 42 46 67 64 67 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 27 29 3b 7d 0d 0a Data Ascii: _obfmO7OmvYie30eqHMS3lf07I0z_dvTkLVkTbJQBx9-Z5ZoWucPe5V7nRgJ1SBFgdg\\u003d\\u003d\x22\x5d\x5d');}
2024-01-15 13:24:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49844	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	362	OUT	GET /simgad/11229060083375947527 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 35254 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 05:01:46 GMT Expires: Fri, 10 Jan 2025 05:01:46 GMT Cache-Control: public, max-age=31536000 Age: 375738 Last-Modified: Fri, 09 Jun 2023 05:40:16 GMT Content-Type: image/jpeg Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:04 UTC	429	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 ff e1 03 8f 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 30 2d 63 30 30 30 20 37 39 2e 31 37 31 63 32 37 66 61 62 2c 20 32 30 32 32 2f 30 38 2f 31 36 2d 32 32 3a 33 35 3a 34 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 Data Ascii: ExifII*DuckyPhttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.0-c000 79.171c27fab, 2022/08/16-22:35:41 "> <rdf:RDF
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 66 32 31 63 64 32 32 2d 30 62 35 34 2d 34 62 31 34 2d 39 31 30 31 2d 36 66 37 65 66 30 34 38 66 32 63 62 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 35 31 42 45 32 39 32 37 34 36 31 31 31 45 44 39 34 35 31 41 32 30 39 38 43 43 39 36 34 35 43 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 35 31 42 45 32 39 31 37 34 36 31 31 31 45 44 39 34 35 31 41 32 30 39 38 43 43 39 36 34 35 43 22 20 78 Data Ascii: /sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6f21cd22-0b54-4b14-9101-6f7ef048f2cb" xmpMM:DocumentID="xmp.did:651BE292746111ED9451A2098CC9645C" xmpMM:InstanceID="xmp.iid:651BE291746111ED9451A2098CC9645C" x
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 1d 31 c6 5c 4f 25 27 c1 b7 b6 7d 10 c3 49 69 08 f8 4d a4 78 5b 1c e9 da 7b f1 1c a6 a2 84 00 c7 8a 3a 83 00 b3 4c 8d 48 04 d4 64 7f e9 c4 06 6e a4 31 64 43 1e 2a 75 8a d0 01 ce 9f 60 c4 66 48 c4 71 c5 14 47 86 68 92 8f dd f1 1e c3 88 dd 4a cc 81 f7 7e fc b1 d8 59 76 04 27 c4 fb c5 34 fa 0d a8 14 20 9f de 23 86 29 dc 5d c6 9f ad 59 a3 6c 6a 07 e0 ab c2 da 7e e9 29 c9 f3 e5 19 0f be 6a 4a cd 40 ec 48 ee 18 c4 a9 52 53 2e 56 9b 88 06 8a 8c 3a a3 7c 63 6c d8 25 48 8f 43 39 d2 18 86 07 fe f1 63 23 ee 19 fb b1 8f b9 dc ca 9d 3e ee 67 00 b5 f6 9a 1e 2d 4e f6 43 15 e7 9d d9 52 1e 98 e1 92 a0 a5 95 51 2d a4 83 ed c8 63 89 a8 08 38 e6 bb 20 43 60 90 80 84 24 04 00 e3 a4 e6 78 8c f9 0f 66 04 30 40 49 92 52 96 40 d2 e3 8a a1 3e 54 d0 95 f7 00 0e 58 20 84 72 58 29 b2 Data Ascii: 1\O%'}IiMx[{:LHdn1dC*u`fHqGhJ~Yv'4 #)]Ylj~)jJ@HRS.V:\|cl%HC9c#>g-NCRQ-c8 C`$xf0@IR@>TX rX)
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 62 bc 30 bc 32 13 f8 a0 a2 98 97 48 fa 9c 0b 34 42 85 14 d8 e2 29 c7 3e ee 38 38 84 32 90 29 cf e7 62 b6 9f 45 05 2d 6b a5 14 46 a3 da 73 c4 b1 51 49 2c 4c a8 a5 b5 6b 59 5e 91 a7 50 a5 78 53 2c 4c 0a 84 a7 1b 6d c2 0c 35 7a 62 49 0d 38 aa 21 de 29 4a 8f 23 dd 89 33 51 22 76 de 29 08 70 10 e3 4b 49 f1 a5 44 0c f8 83 5a f0 a6 08 04 24 ad 72 9e 71 2a 43 8d 90 41 01 45 b4 f8 94 00 ec 03 bf bb 06 14 64 3a 4e e3 f7 57 02 5c b6 ae 2d 10 54 49 73 50 34 50 a1 cc 83 dd 96 0c 04 05 90 ed ca db b9 2e 0d 2b d5 bc b7 1a 45 08 4f a2 d9 5a eb c4 78 b5 0f d3 84 c4 e4 59 38 20 1c 9d 57 0b d4 1d f4 cc c9 6c ce b7 cf 91 e8 28 97 24 21 b7 16 d1 af 05 85 24 14 d0 f1 c6 3d 71 71 ab 10 4f c1 6b d2 9d 06 c0 81 f1 46 9b 3f 62 dd ae ad b5 3a ec b5 b2 ca cf f0 60 a5 47 5a 85 3e fa Data Ascii: b02H4B)>882)bE-kFsQI,LkY^PxS,Lm5zbI8!)J#3Q"v)pKIDZ$rq*CAEd:NW\-TIsP4P.+EOZxY8 Wl($!$=qqOkF?b:`GZ>
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 81 25 35 0c 42 67 dc 28 61 2d c4 2e a4 25 d5 29 c6 d2 e9 19 80 42 6a 01 ef a8 c0 43 1c 14 a0 02 5d 42 77 ad cd 1f a6 b7 fb 5b 97 27 db 4c 1b da 96 c1 69 6a 05 2e 52 84 65 cf 25 2b 3e 1f 6e 15 48 c9 9c 0c 95 8a 75 23 f2 92 ce 84 25 74 ca 23 37 c9 fb a7 a5 b3 42 2d f7 c7 1a 95 3f 68 95 e8 f9 79 48 1a 1e 72 21 52 82 0a 5d 49 05 6d a9 49 d3 e9 a7 45 7c 28 4c 91 bb 13 86 99 66 8b 46 82 79 10 a6 5d be 5e b9 59 d0 b5 a9 1f 3d 1d 4b 8f 31 a4 92 0a 5e 6d 5a 56 85 02 12 a4 a9 2a 14 50 50 ae 33 66 55 77 31 38 64 b2 9b 1d b2 42 94 de 99 02 81 40 8a 57 2f d3 86 a7 5a 54 e5 a8 2b 1a 45 40 c5 48 9b 6a f8 2e 0c 26 3b 8e 6a 9d 15 34 73 51 cd 68 14 01 67 bf 91 fb 79 e3 d9 3c b9 bd 8b da 42 24 f7 e3 9f 48 e7 eb e7 ed e2 bc d7 cc 1b 39 b7 99 90 1d d3 ee 3e 99 7b 11 8a 1c 24 Data Ascii: %5Bg(a-.%)BjC]Bw['Lij.Re%+>nHu#%t#7B-?hyHr!R]ImIE\|(LfFy]^Y=K1^mZV*PP3fUw18dB@W/ZT+E@Hj.&;j4sQhgy<B$H9>{$
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: bf 46 06 a5 41 4e 3a 8a 68 42 55 24 c3 35 57 37 7e fb bb 6e 67 d6 b9 d2 16 cd bd b5 7f c2 5a 90 bf e1 23 20 2a 69 40 a3 97 12 3d 98 c2 af 79 2a 87 90 e4 b6 68 da 8a 63 0c f9 af 2e 23 31 e9 b5 43 f1 17 9a 8f 67 60 c5 19 62 b5 29 8d 2b 7f a6 40 2a 26 a4 79 73 a7 1c 03 29 4c 82 cc 50 03 41 a8 72 15 fd b8 4e 84 e2 b4 ad 0b 59 2b 59 09 03 3c 86 07 34 eb 42 c8 00 d3 30 78 57 0c 70 45 25 a8 a8 52 84 e6 38 76 e0 50 ba d2 b5 69 15 3c 70 c5 27 53 37 46 3a 15 ba fa d3 73 96 d5 a9 69 b3 58 2d a9 3f 99 ee 69 2d a9 c6 5b 74 a6 ad b0 da 41 4f a8 e2 8d 09 00 f8 53 99 fb a1 5c a7 99 fc d9 6d b1 d3 06 a7 7a a4 b2 80 2c 48 e2 4f 21 f1 38 0e 2d d2 f9 6f ca f7 1b d5 43 a3 bb 4e 39 c8 8c 1f 80 1c cf c0 62 78 3c 6d be 76 2e e4 e9 ce e4 b8 6d 6d d5 01 50 6e 90 55 e1 22 a5 a7 da Data Ascii: FAN:hBU$5W7~ngZ# i@=yhc.#1Cg`b)+@*&ys)LPArNY+Y<4B0xWpE%R8vPi<p'S7F:siX-?i-[tAOS\mz,HO!8-oCN9bx<mv.mmPnU"
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 74 e6 08 69 29 3e cd b8 59 9a e2 a6 16 c3 0f bc 47 cc d3 30 a2 91 a4 54 8e 34 19 57 b3 14 5c ba 92 a5 10 62 c1 3d 5c 5f 61 e5 00 56 92 a5 66 07 0e 5c be dc 34 e4 a0 a7 48 8c 13 2a 14 ed be 4b 52 98 74 a2 43 54 21 40 d3 50 e7 5f db 8b 9b 76 e1 52 ce a8 a9 02 cc a3 bb b4 8d cd 33 09 87 05 49 d6 ab c3 57 08 c2 43 2a 01 60 e9 7d a0 73 4a bf a8 f2 c7 b7 ed 1b b5 3b ea 42 71 38 f1 1c 8f a6 4b ca 37 6d aa 56 f3 30 97 51 4f 8d c8 49 d2 aa f3 00 8c 6f 42 a3 ae 56 e2 89 83 a2 08 6f b2 aa 6b 5e 91 c0 eb 49 1c 7d d8 53 07 82 ab 12 8a 23 c3 8e ea 41 f9 b0 91 ef e7 ed a6 28 ce a4 87 05 66 34 c1 19 ae e4 49 b1 da 87 a9 2a f6 94 0a 50 a1 55 e5 dc 06 03 f4 b3 fa 88 9e 9c 3e b2 0e dc 1d 69 e9 b6 d1 86 ec db f6 e2 66 0c 76 81 a1 20 ad 6e 1f dd 69 b4 05 2d 6a cf 82 41 38 ab Data Ascii: ti)>YG0T4W\b=\_aVf\4HKRtCT!@P_vR3IWC`}sJ;Bq8K7mV0QOIoBVok^I}S#A(f4I*PU>ifv ni-jA8
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 00 67 53 ee c0 c8 a7 01 d0 b4 4d 9a e6 f7 48 bb df 27 aa 53 e5 20 b3 09 47 43 4c 83 91 08 4a 40 a7 b7 89 c5 79 d0 8d 4c 65 8a 98 57 95 3c 23 82 64 dd 1d 16 8d 1e df 2e 64 34 ad 6e b1 1c bc 96 52 ad 75 a7 20 06 78 ad 53 6f a6 46 19 a9 e1 7d 30 40 2b c6 8e 42 9c 31 82 ba 46 e6 b8 78 56 a7 2c e9 5a 61 8a 41 6b 2a d2 49 15 39 54 d3 80 c0 a2 67 5a 94 a0 e6 44 d0 0c ce 18 a7 49 ce 91 4a 71 e3 aa b8 12 93 62 b4 a9 5c 79 0e de 78 64 ca 6e e8 67 42 ef fd 67 dc 1e 9a 3d 4b 66 d0 b5 b8 3f c4 3b 87 4f 0e 7f 2f 1f 56 4b 79 43 dc 91 e2 57 20 ae 43 cd 9e 6c a1 b1 d0 72 d2 ad 2f 92 1f e2 97 28 8f 7e 43 89 1d 47 96 3c af 5b 7a ad c6 34 a3 f3 4b fc 31 e7 23 ee cc f0 7b 15 d6 bf a8 3b 47 4c 6d b1 3a 3d d0 55 b3 68 67 6f 29 2d 5e 37 24 4d 2e 06 9c 6d 55 5b 0c 2d 41 41 c7 14 Data Ascii: gSMH'S GCLJ@yLeW<#d.d4nRu xSoF}0@+B1FxV,ZaAk*I9TgZDIJqb\yxdngBg=Kf?;O/VKyCW Clr/(~CG<[z4K1#{;GLm:=Uhgo)-^7$M.mU[-AA
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 38 0c fa 41 d5 97 d5 73 26 0d cb 25 bf 6b 63 6a f7 26 a0 3a 69 cb 06 27 01 a8 86 eb 60 31 7f 6a 8d 2e 32 2d 13 ee 0e 49 b4 d9 9b b0 c1 75 29 4b 16 f4 c8 76 40 49 02 84 97 5e 25 44 93 9f 66 3a 1b 6a 55 29 c0 46 a4 f5 cb 9b 01 ee 18 2c 4b 89 c2 a4 de 11 d2 39 39 3e f2 b6 36 c2 5a 1a d2 40 29 15 50 ae 25 2a 20 ab 87 53 37 12 2f b7 74 5b 59 74 3d 16 07 99 20 65 af 18 b7 d5 9e 5a 56 ad a5 33 08 ea 39 94 16 dc 08 c1 1a c9 f4 a9 c5 44 d0 0a f7 f0 c5 0c 94 c4 92 b4 bf 32 1c 54 39 ff 00 14 16 94 24 95 9e 19 7b 4d 06 02 75 00 08 e1 48 c8 81 cd 57 5e a2 ef 5d 31 9f 78 3f e9 9d 2a 6e 0b 35 cc 13 50 a7 08 14 1d 80 65 8e 53 75 bf 70 e3 a9 75 5b 6d 90 89 6f 6f 62 ac d3 b5 3e cc 67 2b 53 29 ca a9 3c fc 39 d3 b7 9e 30 68 1c 5c ad da 99 26 99 8c 05 29 f4 b2 12 04 73 47 e4 Data Ascii: 8As&%kcj&:i'`1j.2-Iu)Kv@I^%Df:jU)F,K99>6Z@)P%* S7/t[Yt= eZV39D2T9${MuHW^]1x?*n5PeSupu[moob>g+S)<90h\&)sG
2024-01-15 13:24:04 UTC	1252	IN	Data Raw: 70 d0 91 44 1a 28 1a 0e 14 c5 da 95 a1 10 09 23 1c b1 cc a0 a3 4a 52 24 31 c3 3c 32 4c 37 9d c8 f8 84 e1 77 5a 99 48 c9 86 c1 2a 5a 80 a8 01 23 33 4c 61 6e bb e5 bd 98 11 ab 30 09 c8 71 3f 83 d6 b7 76 dd 96 b5 d3 ca 94 5c 0c cf 01 e9 d0 83 e0 a1 c7 99 33 9e 6c 37 22 5e 94 bb 14 25 41 6d d5 55 d2 a0 a1 c4 80 9a d3 10 58 d7 f1 a1 aa 59 9f 66 2a 6b ca 5e 11 d2 32 0a d0 f4 fa ce 9b 5c 48 d2 dc 40 4c e9 00 8a 0c 8a 50 0d 41 a9 fd e1 9e 2e 12 f9 ac 49 e3 22 a4 a9 32 d3 ab d0 4a a8 aa 1d 40 9a 0e 1a b8 fb 30 82 13 82 65 b9 ee 48 1b 72 12 a6 dc a4 7c bc 5a ff 00 09 b0 2a eb cb 39 84 32 d8 cd 67 3e 1f 6d 30 d2 90 88 72 9e 11 32 2c 10 3b d7 8b ad fe 6b 0d c8 49 b7 db 94 e2 16 c5 95 2b 0a d4 00 5f 89 e5 a6 a1 6a 52 48 a0 15 48 3d bc 70 51 04 e2 7d 89 16 19 22 66 de Data Ascii: pD(#JR$1<2L7wZHZ#3Lan0q?v\3l7"^%AmUXYfk^2\H@LPA.I"2J@0eHr\|Z*92g>m0r2,;kI+_jRHH=pQ}"f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49848	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	963	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi6qGEfXdUooY7PY-YoCKHplUBKalFavr8qDd3qX_KN_1-MxsQ
2024-01-15 13:24:04 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Mon, 15-Jan-2024 14:24:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:04 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49849	35.244.154.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	774	OUT	GET /466606.gif?cparams=google_push%3DAXcoOmSvKXZnvXfDrlT_RpDfYTKoihT2dQUcpUM0tTWPukGCIw5SZab1d2x4Q-u5TJRdVvdGsExcrZSw0axhlJPcFXdH-ewHQ8N7PJU&google_gid=CAESEFnPY-kHMZNLMEj40Iiq_Tg&google_cver=1 HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	817	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CK69HBoNCPTjlK0GEgUI6AcQAEIASnNnb29nbGVfcHVzaD1BWGNvT21TdktYWm52WGZEcmxUX1JwRGZZVEtvaWhUMmRRVWNwVU0wdFRXUHVrR0NJdzVTWmFiMWQyeDRRLXU1VEpSZFZ2ZEdzRXhjclpTdzBheGhsSlBjRlhkSC1ld0hROE43UEpV P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=5Khj8R3VHae4q7osNuQCARQRNkgF/XsMqFxje/QNuzU=; Path=/; Domain=rlcdn.com; Expires=Tue, 14 Jan 2025 13:24:04 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Fri, 15 Mar 2024 13:24:04 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 15 Jan 2024 13:24:04 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49858	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	859	OUT	POST /el/AGSKWxW2GjVVcTSL2QbwLXaKxWZzOZVHgt59MaMbJEqQcgzKbiTtZFEyPxQePvXi7VJJnuKfis0uijX2pVIUHSXPM1KWUMiLBXwbavCrUC0H46_r3y7RA598EWlDO0P0sU3RGRC2IJy7JQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	166	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 34 33 37 38 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 38 36 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325043789,null,null,null,null,null,null,null,null,null,null,null,[[1,186,"mylovelybluesky.com","mylovelybluesky.com",3]]]
2024-01-15 13:24:05 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:05 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-XVZ-iTPbdPT_jyd8Mwl5cA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49859	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	858	OUT	POST /el/AGSKWxUg4JjOqwz7KbAgbTZykUHHmgbMldUQgQ7oiR0eJWCp8QO1dme9YXSFVMTocvAGcONJYZTvufCZu2SuMW6zb4sl36u3btMjhEBILrebjSrZzMmO71gJS9VeTubRU3ZO6neZRwn_5Q== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:04 UTC	63	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 30 2c 6e 75 6c 6c 2c 31 5d 5d 2c 31 37 30 35 33 32 35 30 34 33 37 39 30 5d Data Ascii: [null,null,null,null,null,null,null,[[0,null,1]],1705325043790]
2024-01-15 13:24:05 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:05 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-UzJcq-AgESCAEIuaDagMvQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49851	204.2.226.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	764	OUT	GET /sn.ashx?google_gid=CAESEC1TZgQ0su3cqRSxMvGtH9w&google_cver=1&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is HTTP/1.1 Host: aep.mxptint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	751	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is&google_hm=UjMzNjQ2XzEwRjU0MzhFQV8yMEI3MjM0RA%3D%3D P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" P3P: CP="NON CUR ADM DEVo PSAo PSDo OUR IND UNI COM NAV DEM STA PRE" Set-Cookie: mxpim=R33646_10F5438EA_20B7234D.1.65A531F4; domain=mxptint.net; expires=Thu, 15-Jan-2026 13:24:04 GMT; path=/; secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:04 GMT Connection: close Content-Length: 349 Strict-Transport-Security: max-age=-388329845; includeSubDomains
2024-01-15 13:24:05 UTC	349	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 66 38 62 33 7a 68 34 6b 79 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 6a 50 42 63 61 67 38 7a 6b 56 71 63 58 58 6d 6d 61 51 36 47 43 56 42 5f 48 4e 55 57 68 4f 61 74 4b 51 56 53 6d 61 43 36 63 59 5f 6d 36 38 6a 50 36 6c 30 68 61 73 5a 6c 53 4b 35 47 71 5a 33 41 6b 35 76 68 38 74 6b 42 6e 31 37 6a 42 4f 4c 6d 39 55 39 4e 66 79 31 4a 61 71 42 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cm.g.doubleclick.net/pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49861	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	609	OUT	GET /simgad/17205409499713138048 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 85415 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 19:21:19 GMT Expires: Fri, 10 Jan 2025 19:21:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 16:15:05 GMT Content-Type: image/jpeg Age: 324166 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:05 UTC	429	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 Data Ascii: 1966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb Data Ascii: &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 Data Ascii: XQKFA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: 62 fe 72 ec 63 3f b1 d0 60 b9 26 7c a4 ee 79 88 bd a1 e7 bb 8a 06 ec a3 06 9f 66 15 04 c0 98 b6 6b e6 b8 45 c0 c1 14 c1 e9 f0 71 d7 e4 32 dc e6 40 8b ae 19 f5 27 b8 c7 f3 bb 0e 90 b1 c6 9e 63 95 0a 25 ab 31 dc fb 39 ae 39 cb 58 af 48 15 ae 58 6f a8 99 6f ae 75 61 2e 66 c5 55 95 20 ab ef 8e e8 75 b6 f6 e6 cb 25 dc cf 3b 9e e1 39 47 d4 74 79 df 3a d7 6d a5 60 34 db 3d 51 bf 32 62 c0 6a d2 eb ee 65 2e 4a 3d 23 88 45 37 4a 6f 41 98 cd 9f b1 2a 12 6b 7a 01 8a 42 a4 a7 05 ae 9a 1d f4 b2 66 a4 1b fc b9 05 8f 17 5c b3 0e a7 a8 97 cd 3a 0d 3f 32 f7 6e 45 65 2d 64 ab c7 13 6c d9 b5 71 db 36 83 7c 53 38 63 ba 14 ab 59 55 56 64 a9 db 4d 52 5c 87 af bc 3c 61 9c ec c8 77 38 99 b3 a5 3c 79 22 db 8e 7d ca e0 55 64 bb 30 51 b0 65 17 f3 75 a7 ed 80 6b ad 5e 1d 8d c3 f4 51 Data Ascii: brc?`&\|yfkEq2@'c%199XHXooua.fU u%;9Gty:m`4=Q2bje.J=#E7JoA*kzBf\:?2nEe-dlq6\|S8cYUVdMR\<aw8<y"}Ud0Qeuk^Q
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: fe a3 27 71 83 e1 bb e4 fd 11 d9 32 b1 95 68 be 51 74 9a 93 f6 af bb 95 92 2f c9 df 96 89 61 b1 da f9 86 96 8a cb f5 35 3a 18 48 6b 29 76 34 68 b7 e2 4b 2e 8b 6c 76 f4 19 37 b8 45 8e e7 2a 26 07 ec 3a 7f 78 eb 95 18 1e 88 3c 29 e3 5b 91 2b a1 1e 11 31 0f f5 10 a4 94 97 74 09 46 53 cb 41 02 df 61 88 05 d5 44 37 ca b5 d4 2c b2 81 b8 cd ca 34 eb e4 d1 5c b2 95 ab c1 fd 34 91 cb 6d 93 08 ce d1 9b 65 cb 38 4a b7 10 eb ce 7c bc 09 63 93 9a 9f b7 19 94 5a 4b a2 fc f4 88 a7 66 a7 21 c2 89 a3 86 e7 db 49 d8 e1 51 8d 3a 5f ac 06 5d 35 55 04 67 1e ec b2 df 91 cb 71 91 44 96 bc 29 b7 e6 ea 69 aa 1a 1c 90 2e 57 8a 8a 12 6e 4d 0b 85 29 d1 d3 6f 4a ea eb 04 b8 2e d9 b9 04 fa 0e 15 2d a4 4a af 68 f3 1d 7e 6f b4 08 fc e3 a9 78 47 d1 a8 6d cb f5 e7 2c 6f b1 16 58 63 92 bc Data Ascii: 'q2hQt/a5:Hk)v4hK.lv7E*&:x<)[+1tFSAaD7,4\4me8J\|cZKf!IQ:_]5UgqD)i.WnM)oJ.-Jh~oxGm,oXc
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: 63 14 14 db 21 ac 05 b5 76 7d 9f a3 09 25 b0 57 47 8f b2 8e f7 2a a9 d5 ab 79 e0 ad b5 e5 dc 41 6f b1 18 db 9c 3d d5 1a c2 e7 31 7b 99 00 eb 34 df a4 9b 59 f6 d9 d0 dd 2a 6d 76 b5 94 e6 33 60 a6 7b e2 26 fa 01 af c0 f0 55 bf 62 99 a2 72 eb 9d eb e3 f3 af f4 b4 c7 c3 f4 58 6f 55 a5 ea f6 26 45 27 9c 74 8f 4b 83 8f 7b 9e 7f 29 e6 96 68 bb 4c ae 12 be 7d d1 04 bf 4f e4 e5 17 9d 34 80 cb 74 a0 f1 ed fa 36 f9 ab 9f 64 ec 8d a6 da 32 c1 7f 40 5f 68 e1 33 cd 95 dd ba de 3f 72 58 46 db 53 8a af b4 6c fa c9 c9 30 32 04 7c 12 de 6f 6b d7 2a 39 be 46 54 c9 60 68 41 27 60 0d 9a 2b 2c 8b a2 05 b2 2b e7 41 cb 5b c7 a2 fc 9d ba 48 c3 b8 5f cf ff 00 d5 e3 3f e7 1f b1 f5 e9 a6 1e 27 11 d5 e2 bd b5 d6 e5 31 52 2d 76 ca ec a6 0e 61 95 84 83 5d d6 af 31 83 97 8d 1d bd c7 e5 Data Ascii: c!v}%WGyAo=1{4Ymv3`{&UbrXoU&E'tK{)hL}O4t6d2@_h3?rXFSl02\|ok*9FT`hA'`+,+A[H_?'1R-va]1
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: cd 03 f4 9d f1 4f 8a bd 3b cd e9 ce a0 22 61 0e 10 0a 27 7a 60 8e 88 54 0c 29 43 51 ee d6 21 52 87 0d 0e 0f 58 d7 85 03 97 91 0e d4 8f 5e a5 66 19 53 22 53 10 d7 68 d4 54 78 42 f7 f2 6d 44 9a 83 82 98 54 f7 7f 0c 97 5f 6c 3e 02 1e 89 87 55 4d ed 87 25 04 a3 c1 01 0e 18 0d d1 42 18 e5 83 40 45 15 43 b0 92 43 e8 50 11 1e de bc 10 00 e1 7f 33 70 e8 8b ae 2b c5 3a f7 74 0e 08 07 07 a8 72 19 37 aa ca be c6 f2 04 24 83 00 68 6a 7c 8c 95 9d 07 74 08 67 ed ad 34 b9 08 17 e9 25 da 56 47 20 2b 13 3c 35 f7 6e f3 2c 34 63 db 8b 86 13 31 1f a9 d2 70 e5 5c 8d 80 4a 3d 4f ef c8 ff 00 6c cc d9 34 22 ae 9a fb 69 80 99 4f 94 50 4a fc a7 21 94 01 37 04 e3 c4 0e 98 03 24 00 a8 2e 6e ee 48 f0 9f 1f 51 e1 b8 40 fc 49 7a 37 74 1f 85 40 ea 07 e0 f4 11 e8 1d 4c 01 d6 b1 24 68 99 Data Ascii: O;"a'z`T)CQ!RX^fS"ShTxBmDT_l>UM%B@ECCP3p+:tr7$hj\|tg4%VG +<5n,4c1p\J=Ol4"iOPJ!7$.nHQ@Iz7t@L$h
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: 9c 33 a5 79 55 82 24 5a 6a 10 a3 c6 69 2c 77 32 32 ce 59 44 19 ca a4 4f df 57 8e 7f b8 61 e1 1a 2c a0 2c d5 54 03 b0 4c 03 14 f8 e6 fa 5b c1 51 db 07 2d 01 bc 73 a7 9c 6c 82 ec da 1d 05 55 23 98 b7 80 11 0c 4c 73 c8 8a c8 8b e4 d6 54 8b 33 5d 13 b9 2f e0 7c 5e 2c 5e a5 32 2a 18 46 39 c0 94 ac 54 13 fd 28 de d1 63 57 55 58 ca d3 a8 46 2c a3 d7 29 a0 17 23 66 86 70 0e 64 5d a2 75 d0 90 88 23 81 52 11 13 10 91 ad 98 24 a7 41 30 75 1e 57 59 f7 a8 b3 81 7c ec 54 fc 5f 22 ff 00 e4 57 f5 50 43 8c 48 64 d0 e8 53 09 9a 33 ea 04 29 f8 b2 2a 2e 47 4c d4 72 c9 54 1d a2 d1 af cc 8a 65 11 22 11 ae 96 5d 48 f5 54 07 93 0e 5c 19 79 d7 ea 47 47 a7 2a e1 7a a8 5d 5d 80 1e e0 8a a0 7b 1c 6a 80 8d aa 25 bf 11 be b1 03 49 5c 63 48 af d5 99 8b 47 11 c5 8c 65 3d 3f 32 f2 4e 83 Data Ascii: 3yU$Zji,w22YDOWa,,TL[Q-slU#LsT3]/\|^,^2F9T(cWUXF,)#fpd]u#R$A0uWY\|T_"WPCHdS3).GLrTe"]HT\yGG*z]]{j%I\cHGe=?2N
2024-01-15 13:24:05 UTC	1252	IN	Data Raw: d6 df aa 6a 94 dd 4f e9 c1 13 0f 09 d4 a7 50 7d 54 02 80 b1 28 29 c0 90 ef 50 26 4c 8f 1d 5e e6 d0 3b 6c bf 3c 28 25 12 33 ac 41 81 51 74 bc 89 50 08 98 99 0b 2c 84 14 63 48 56 12 8f 05 ba 58 ed 8a 8e 2d 96 37 9d 5f b1 4c e6 3d d7 b1 28 f6 e0 61 4d d8 89 4b 3e 51 2a b4 a9 47 0e 21 be 71 7e a6 f8 f4 0e 7a 07 33 9e e4 e3 3d 79 b8 ab e4 ef 5f 55 2a 5e 50 70 1a 28 ff 00 ba 0e 07 e0 79 42 c0 dc 0f 28 78 0f 9f ee 89 af e1 cf f7 45 d7 ee 49 f9 3c d7 f7 ad 55 f2 35 83 cd c1 f2 27 84 44 7f dc 4f 07 73 09 ed 06 3d cf b6 b1 85 7a 63 04 2b b5 4e f5 d1 63 b8 a2 a8 1d 04 90 2a 84 72 d8 e4 04 4a a9 46 ab 62 98 ae af 07 62 42 45 08 b8 19 29 87 f5 c8 36 91 09 8f 54 d3 b6 be 23 68 2a 0a 89 36 7e 54 54 54 d1 89 77 48 5f 8c 29 34 ed f6 c8 f7 b3 a2 c9 fb ac e9 ed fb 0f f2 aa Data Ascii: jOP}T()P&L^;l<(%3AQtP,cHVX-7_L=(aMK>QG!q~z3=y_U^Pp(yB(xEI<U5'DOs=zc+NcrJFbbBE)6T#h6~TTTwH_)4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49857	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1063	OUT	OPTIONS /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49852	69.90.254.78	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	767	OUT	GET /tum?umid=4&uid=CAESEGHwcaT1kwnpvW79lqyvWDc&google_cver=1&google_push=AXcoOmRQsWpn4ZpXZSPeA2_4_ScuklG-zLulB-fd8e2aAW3P_MhJHCCKhAn1GyKDB_Xpb-0wI_k3GEVS4Ybo28yUw_gXj6hcZnTQK9k HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	684	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=877145267063; Domain=.acuityplatform.com; Expires=Tue, 14-Jan-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANPqNdXNlck1hdGNoaW5nSWTIkWxhc3REcm9wVGltZU1pbGxpcyUBRkMpMii4mGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUZDKTIouI90aGlyZFBhcnR5VXNlcklkWkNBRVNFR0h3Y2FUMWt3bnB2Vzc5bHF5dldEY/v7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Tue, 14-Jan-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Location: https://cm.g.doubleclick.net/pixel?google_nid=acuity&google_hm=877145267063&us_privacy=1---
2024-01-15 13:24:05 UTC	766	OUT	GET /tum?umid=4&uid=CAESEDJ532h6tSbmFfeQKrWiKgI&google_cver=1&google_push=AXcoOmSkrMJqGPh5ij0kbH32VflGjLVmpiM02UHTl11W-8_JtfpnINWtiaoXRqJ7QnoE9UIetYXqajycMdw9PgfgGMNyEAnsnABtCA HTTP/1.1 Host: ums.acuityplatform.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	684	IN	HTTP/1.1 302 Found Content-Length: 0 Access-Control-Allow-Origin: * Set-Cookie: auid=877145232820; Domain=.acuityplatform.com; Expires=Tue, 14-Jan-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: aum="OikKAfqbdXNlck1hdGNoQnlVc2VyTWF0Y2hpbmdJZE1hcPqANPqNdXNlck1hdGNoaW5nSWTIkWxhc3REcm9wVGltZU1pbGxpcyUBRkMpMjGAmGxhc3RTdWNjZXNzZnVsTWF0Y2hNaWxsaXMlAUZDKTIxgI90aGlyZFBhcnR5VXNlcklkWkNBRVNFREo1MzJoNnRTYm1GZmVRS3JXaUtnSfv7hnZlcnNpb27C+w=="; Version=1; Domain=.acuityplatform.com; Max-Age=31536000; Expires=Tue, 14-Jan-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Location: https://cm.g.doubleclick.net/pixel?google_nid=acuity&google_hm=877145232820&us_privacy=1---

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49862	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	1063	OUT	OPTIONS /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49856	35.208.249.213	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:04 UTC	772	OUT	GET /ju/cs/google?google_gid=CAESEKudZrNnT_rcVg4A96tF6QM&google_cver=1&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2 HTTP/1.1 Host: gtrace.mediago.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	700	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, POST, OPTIONS Location: https://cm.g.doubleclick.net/pixel?google_nid=baidu_mediago&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2&google_hm=22210ca7b8f13f0e2q6keg00lreyi26g Set-Cookie: __mguid_=22210ca7b8f13f0e2q6keg00lreyi26g; Path=/; Domain=mediago.io; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Length: 8 Content-Type: text/plain; charset=utf-8 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:05 UTC	8	IN	Data Raw: 72 65 64 69 72 65 63 74 Data Ascii: redirect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49853	35.211.178.172	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	772	OUT	GET /sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	915	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw Set-Cookie: tuuid=be743e64-4ffd-4fa0-ab73-16d03b47df68; path=/; expires=Tue, 14-Jan-2025 13:24:05 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1705325045; path=/; expires=Tue, 14-Jan-2025 13:24:05 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1705325045; path=/; expires=Tue, 14-Jan-2025 13:24:05 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1705325045; path=/; expires=Tue, 14-Jan-2025 13:24:05 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49850	34.237.132.177	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	770	OUT	GET /CookieSyncAdX?google_gid=CAESEBCuhElsTjbgX1kIcQ62GUM&google_cver=1&google_push=AXcoOmTP6JM8fEEVhlY08kGzv5aeKY_aiiPd6b3TU5C4X1DY6rhCH1rafaIypKxqEZ3X0Dka2ZIJqTlbrC9H7OQgXJPaXFU4XtxMdA HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	128	IN	HTTP/1.1 204 No Content Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49874	35.190.90.30	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	783	OUT	GET /t/v2/sync?tagid=V2_4530&src.visitorid=CAESEN0nhbvMce4tpX8nuEm75y8&google_cver=1&google_push=AXcoOmS-T_8ywdeQPYSHEH6pGhHDSGfvH9jyKk6y7plIvsQGh5tGlRlTUAI73rAyZVpDjevLBLrru8VlUOO0oDvOC3SAULYQuTcNLn4 HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	884	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:05 GMT Server: Apache P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml" X-Application-Context: application Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: id=10595281083246962949; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: mdata=1\|10595281083246962949\|1705325045512; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: ov=5f87d0bc6119200a69f83f6bd1182010; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:05 GMT; Path=/; SameSite=None; Secure Content-Type: image/gif;charset=UTF-8 Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49875	18.235.50.99	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	768	OUT	GET /trk?tid=11711&google_gid=CAESEG1r7n0k6n9VMjo8-C80kIE&google_cver=1&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg HTTP/1.1 Host: ag.innovid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	374	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Type: image/gif Content-Length: 43 Connection: close Pragma: no-cache Expires: -1 Set-Cookie: uuid=ce6c4286-e59c-4e95-bf95-c21fad1357d3-20240115 08:24:05; Max-Age=7776000; Expires=Sun, 14 Apr 2024 13:24:05 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 0 Cache-Control: no-cache
2024-01-15 13:24:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49879	35.244.154.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	854	OUT	GET /1000.gif?memo=CK69HBoNCPTjlK0GEgUI6AcQAEIASnNnb29nbGVfcHVzaD1BWGNvT21TdktYWm52WGZEcmxUX1JwRGZZVEtvaWhUMmRRVWNwVU0wdFRXUHVrR0NJdzVTWmFiMWQyeDRRLXU1VEpSZFZ2ZEdzRXhjclpTdzBheGhsSlBjRlhkSC1ld0hROE43UEpV HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=5Khj8R3VHae4q7osNuQCARQRNkgF/XsMqFxje/QNuzU=; pxrc=CAA=
2024-01-15 13:24:05 UTC	767	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=liveramp&google_hm=WGMzMDcwSlVRQWtHd0g2N0hMYlJHRjJON0w2UVlTMGNrWHRKTDRoOVZ3UUhsYmFRSQ==&google_push P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=N2faD+xp9S+4q7osNuQCARQRNkgF/XsMqFxje/QNuzU=; Path=/; Domain=rlcdn.com; Expires=Tue, 14 Jan 2025 13:24:05 GMT; Secure; SameSite=None Set-Cookie: pxrc=CPXjlK0GEgUI6AcQABIGCOndKhAA; Path=/; Domain=rlcdn.com; Expires=Fri, 15 Mar 2024 13:24:05 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49883	51.222.39.184	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	779	OUT	GET /match/?int_id=19&redir=1&google_gid=CAESEBZBsUifPzHCMWMFpya5qZ8&google_cver=1&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg HTTP/1.1 Host: onetag-sys.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	482	IN	HTTP/1.1 302 Found p3p: CP='CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR' cache-control: no-transform, no-cache location: https://cm.g.doubleclick.net/pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg content-length: 0 strict-transport-security: max-age=15552000 alt-svc: h3=":443"; ma=900, h3-29=":443"; ma=900 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49887	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	6993	OUT	GET /bql.php?vgd_len=6433&&vgd_canary=0&vgd_l2type=scs_newfl&fp=tQScSFTHM7qq6SRQ94ey8au62Rd3vFzlR2KwIQSg84S4CdNp8OoIYIJz3Q6yHv71MO_ApY458s5GEVEdClgn1bf3Jds0v6uR_ezHotxMrxYRqEbvf0-JIJwJGaGtXA9FHCAZfhms81wXsUAo2PMbgQ%3D%3D&cme=kU-eVkVLiCGd3E1AvNRqaEIUwlQpLMtOgGGlHDjP7A5N2Y5OMxDX5MN0k-l7ktN9i_WVBouw-6_tjp2c9AGw-F-jRRl2aFI2cgG0bjwtKaYwWkqRn2x6trgztxK7c8sEiaBtX8CKECXchGZpkfZKpk4qJssv6Fm4WStvwiGJQr9qo4NT6ni_DncW8OKWCCrycGI3Vz8rnqK1vTWSPOxrSNgqlfWyOuNUAlH3QdzcJ5b2bkHjKDQ4jg%3D%3D%7C%7Cu8A6SM53vAcxkZY9VHWafLSuY-HKDieQ%7CUFJJWZ1lEVdklaUp4Q9x5TG45h_4b8t5%7CWGV0YFlErcpuo3Pma1EBA706uXx3IZ3_s1njI9zvr5U%3D%7CxDcVMoSqRIR7BloiCBBcf72WFkGzQWtJrY_KpdpTQD8EJq6LxiDxVw%3D%3D%7CcPcb3VhU0BVjXgWFWEAzinttU1oq1ouO%7CVqjnkVrbIDBz3avdm1eoN_O2dR92TW_s6yxC7fuOmP8Jr1CrzLodhpoLIU8PlbiwLiI6C1NJyVoobdARwwHtw597s3elegfFa8jU1zjp0QmnFT0hYUXHAU2qa8mSGhwl-qGMXvaFwgsAKaDPFjBB6lk5TjT6Gkjcs2U6m7Fb61AhCB3SbbNZOGBKJXsC1whzO_-TS74k9NmilgnPoWur-XmNNmZ3LfmdI_paHGU5xPB3w8n3KIyG2r-csYWE9Wd2BqRKpMNTO8Hu0lSXa-yZo_qA5KO-u-nVtNbHhRQruC4%3D%7C&subBdr=128&bdrid=460&ksu=224&fdkt=267&vgde_kbbh=ffoyxQJuO&kwd[]=Costco+Storage+Containers+Deals&kwt[]=267&kbc[]=119665&kwp[]=1&kid[]=380380307&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0006%7C8%3D011417%7C13%3D0.1207%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.11%7C2%3D1.54&ktd[]=824650694912&kwd[]=Food+Storage+Set&kwt[]=267&kbc[]=119665&kwp[]=2&kid[]=11231706&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0006%7C8%3D011417%7C13%3D0.1193%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.09%7C2%3D2.02&ktd[]=274894881024&kwd[]=How+to+Remove+Bags+Under+Eyes&kwt[]=267&kbc[]=119665&kwp[]=3&kid[]=98649708&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0005%7C8%3D011417%7C13%3D0.0892%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.22%7C2%3D2.26&ktd[]=274894881024&kwd[]=Masking+Tape&kwt[]=266&kbc[]=105227&kwp[]=4&kid[]=18626252&kbc2[]=0%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0005%7C8%3D011417%7C13%3D0.0605%7C14%3D011508%7Cokt%3D266%7Cbdkt%3D266%7Cps%3D0.970%7C1%3D0.87%7C2%3D1.44&ktd[]=3023673950464&kwd[]=7%25+Interest+Savings+Accounts&kwt[]=391&kbc[]=1262292604&kwp[]=5&kid[]=329753404&kbc2[]=pmb%3D1%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0002%7C8%3D011417%7C13%3D0.1460%7C14%3D011508%7Cokt%3D391%7Cbdkt%3D391%7Cps%3D0.354%7C1%3D1.01%7C2%3D5.33&ktd[]=4503874522251520&kwd[]=Packing+Jobs+at+Home&kwt[]=267&kbc[]=119665&kwp[]=6&kid[]=211330547&kbc2[]=119665%7C%7C%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C7%3D0.0004%7C8%3D011417%7C13%3D0.0639%7C14%3D011508%7Cokt%3D267%7Cbdkt%3D267%7Cps%3D0.705%7C1%3D1.89%7C2%3D2.91&ktd[]=824650694912&v=1&geo=40.32%7C-80.04&dlper=20&lper=100&lpid=&tsid=7&hint=&cc=US&wsip=170774818&bca=0&ugd=4&vgde_setid=Nff&ssld=%7B%22QQNN%22%3A%22Pb%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%2C%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQQN%22%3A%22r%3D%22%7D&cid=8CU7Q771E&vi=1705325043284750660&vsid=3483266440180255&tdAdd[]=asnum%3D174&vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D&vgd_adprefflag=11&vgd_adpref_diff=0110&vgd_fm_lang=EN&vgd_implt=3&vgd_cage=5&vgd_tsce=L379-S379&vgd_imdtl=1&vgd_l3_sc=DC&vgd_chost=contextual.media.net&vgd_sslb=1111&vgd_hb_audit_1=8CUU9JF8H&vgd_hb_audit_2=839288643&vgd_katbid=-102&vgd_pdtid=1&vgd_nrrv=37575&vgd_nrrmf=3000ca6a&vgd_nrrsf=scrr&vgd_cty=bethel+park&vgd_ifrmode=14&sttm=1705325042819&upk=1705325043.5693&hvsid=00001705325042819017221018024201&verid=3111299&sbdrId=128&tsrc=entity&kafm_ull_cache=00&tdAdd[]=%7C%40%7Cfsap%3D1%7C%40%7Clsat%3D3&vgd_l1rakh=1705325042152550719&vgd_ecrid=1700080807683300336028000059500&vgd_isiolc=1&kbbq=%26asn%3D174&vgde_ydsp=%7B%22QEx%22%3A%22%2FKTP4nXuWX%22%7D&vgd_mcf=76592&vgd_vstrid=3483266440180255&vgde_bdata=QOfvzxjj~8xLjMjvu9~myJLEYv9.9i~OmYMGv9.XA~QNOvON~L1Jv9%2C9~OmYMjvf9~ejfLMQOvf9fH9uuHfu~8xLjMGvhFu.XA~xLjM7UNv9~xLjMLf1MGv9~Q7OvFuWHuhiX9~YzMGJwMGmmQ7v9.Fu~L17v9.999%2C9~8Evub-TUg~kGGvuF~GwM8Yvf9A~L88Ex1v9%2C9~LNvu~L8Qx8Ov9%2C9~LEQMQOvf9fH9uuX9H~L1Oev9.999%2C9~xLjMGvu.Au~ejfLMxLjMGv9~QYYMBLvF.h9hH~xLjMjvu9~Qjevfh.Ah~yN17vou9~GGvufW~QYYMYxjv9.Hi~JLEYv9.9i~ejfLMxLjMUNv949~EQ8MNvf%2Cf%2C9%2C9%2C9%2C9%2C9%2C9~GYvu~EQ8MOvu~LUJv9%2C9~1AEMGvA.hF%2CW9.u~QOvu~x8OvfV1ZjhZq1yzsjEIeG6~NejfLMGvh.iA~G7OvFhuiA9fWHifWiiuhHXiuXAX9WiiHuHHAF9AA9fiWhFXuiFXXhFuuHuuhFFWWHFXuXHuH9HFFf9WfWWFihFHFuFXFi9uH9WFXAWH9AWH~x8Yv9~LU7v9.999%2C9~myOfEMGv9.iW~QQvIK~NNvPb~UGMOjvzS1~x8Bvou~NJv9~LNevAX.Fu~%3DVvA9i9~UGMxNv9~z7QvA~UGMxjvzS1~UGMNNUQv9~N7vB1Qw8zy7mz~GQQMC_pvIK%2CIK~GO7vuh9XAfX9Hu~UGM77v9~GwMQOvf9fH9uuH9f~ONvW~ejfLMGvA.hF~77vfWWWW~xjYMEv9.9iA~eBMJ-Nv9.Hi~QYYMG8Ov9.9H~e8QMQOvAXh~xLjMLEQMGvi.if~GwMNmvA~QmGdv9~ONfvu~eM1QzvuhH~j1Q7v~Nemyvh.iA~e8QMxLjMGv9.Xh~ejfLM8MQOvf9fH9uuHfu~e8QMxLjMjv9~J7vAu~ejfLM8MGv9.9f~e8QMGvHhh.fW~ejfLMxLjMe8vu4ouF~xLjM7e8v9~eev9~NejfLMQOvAXh~LkevAX.Fu~jfLMGvu999~QYYMQOvf9fH9uuX9u~L1OEv9.999%2C9~Q8OvhFHFFFi9H~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.Hi~OfEMjvu9~Nejfvh.iA~AENkvu99H.iF~myMYQwv9.9i~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGvu~LEQMGvW9.u~xLjMQLEQMGvi.if~LUBEv9.999%2C9~c0fv.jmeJ.~LUBOv9.999%2C9~8QDJkv9~8Q8kv9~xLjMLENMGv9~G8Ov9.9H~UGME7vqmYJE1yJ~xLjMLEQMLev9~NGOEv9.9H9~QOvu~875EJM8Ovuh~QJjjJLM71yM8OvFuWHuhiX9~QxEEj5M71yM8Ov~OJ7JN7JOM71yM8Ov~e8JB1G8j875v9.Hi~EmQvA~1NM75EJvu~1OGjUvFuWHuhiX9~1YEvu~myG8Ov9.9i9~GkjLv9.9u9~Qx8Ov%3DK4b4Tg95oEWO7j9Lae4wrpfUBH~O7NvJ1Q7MQN~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMwmYJE1yJMN17Nw1jj~QmGEv~-8OvKrtoExGoFuFAfifAuhAAA9uu~w7Yjvu~QYYM1E8veu~8GNvu~zQlvA~7yQvfX9-fX9%7CA99-fX9%7CAAF-fW9~GQGv9~GQEv9~7Y-vfAW&vgd_cfud=230323&vgd_scsver=318&vgd_optout=0&vgd_ydspr=1&vgd_l2shld=1&vgd_rensize=336_280&vgd_scr_h=1024&vgd_scr_w=1280&vgd_dma=511&vgd_ect=4g&vgde_ydata=duh%25Aru&vgd_l1cdv=1148&vgd_l1rpth=%2Fnmedianet.js&vgd_lbt=500&vgd_mbr=1&vgd_pgids=1&tdAdd[]=uiparams%3D%3Brend_w%3A336%3Brend_h%3A280&vgd_uspa=0&vgd_sc=DC&vgd_l1rhst=contextual.media.net&hvsid=00001705325042819017221018024201&rc=0&rand=1705325044349&acid=d56a68249159d7d3473ab8ec3b8419e3&matm=1705325044349&vgd_ltimesrc=1&vgd_ltime=3019&vgd_rtime=3018&vgd_etm=7&vgd_l1hcsd=S5h9m%7C224&vgd_tcf_cmp=1&vgda_l1btm=%5B%22SPAMPXL%22%5D&vgd_l1ch=1&vgd_lhl=6190&vgd_pgid=p0967114284t202401151324&vgd_csip=rtb-appnexus-6d87b4697f-szn49.SC&vgd_sbSup=1&vgd_nrrs=37575&vgd_cntrdt=SL%7CBODY%7CHTML%7Cundefined&vgd_eadm=1&vgd_matchstr=hr%3D0%7Cbcat%3D3t%2C8z%2C3v%2C1u%2C27%2Cg%2Cl4%2Cgo%2Ci%2C1z%2Cfo%2Cc0%2Chv%2Cc2%2C1b%2Cau%2Cod%2Ccy%2Cy%2Cje%2Cy7%2Cjh%7Ccsh%3D1&vgd_end=2 HTTP/1.1 Host: lg3.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10
2024-01-15 13:24:06 UTC	358	IN	HTTP/1.1 200 OK Content-Length: 15 Content-Type: text/javascript Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=21600 Alt-Svc: h3=":443"; ma=93600 timing-allow-origin: * Expires: Mon, 15 Jan 2024 13:24:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:06 GMT Connection: close
2024-01-15 13:24:06 UTC	15	IN	Data Raw: 76 61 72 20 6c 6f 67 67 65 64 20 3d 20 31 3b Data Ascii: var logged = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49885	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	1387	OUT	GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
2024-01-15 13:24:06 UTC	1591	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"12817624589554529568","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"945609724275135908"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49884	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	1387	OUT	GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
2024-01-15 13:24:06 UTC	1592	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"5435041402390859418","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"10687927535832195341"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:05 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49867	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:05 UTC	806	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEOzRtX562fjwmB4DbY8-tuo&google_cver=1&google_push=AXcoOmTYQdCWDydIGcw8i8YhhVhC8jiBMetgHfAKyGB3jyI6COu2KF-9ydt_2X2Tqd22LMQXt_kk25wn77scqJqGrgME0ZWdyeqEafo HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:05 UTC	614	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EEYBCQH0KoEA; expires=Sun, 14-Apr-2024 13:24:05 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=65a531f5-d309d-de80f-655d6; expires=Fri, 14-Feb-2025 13:24:05 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-01-15 13:24:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49886	35.211.178.172	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	865	OUT	GET /ul_cb/sync?ssp=google&google_gid=CAESEMne_-YM-9LZ_kG94a_kNOg&google_cver=1&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=be743e64-4ffd-4fa0-ab73-16d03b47df68; c=1705325045; tuuid_lu=1705325045
2024-01-15 13:24:06 UTC	880	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Mon, 15 Jan 2024 13:24:06 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cm.g.doubleclick.net/pixel?google_nid=bdsw&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw&google_hm=vnQ-ZE_9T6CrcxbQO0ffaA== Set-Cookie: tuuid=be743e64-4ffd-4fa0-ab73-16d03b47df68; path=/; expires=Tue, 14-Jan-2025 13:24:06 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1705325046; path=/; expires=Tue, 14-Jan-2025 13:24:06 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw; path=/; expires=Mon, 15-Jan-2024 13:29:06 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49870	172.105.221.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	759	OUT	GET /gcm?google_gid=CAESEGXjSffKCZYfhR-a0w5jhKg&google_cver=1&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k HTTP/1.1 Host: a.c.appier.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:06 UTC	840	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jan 2024 13:24:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 246 Connection: close Accept-Ch: Sec-CH-UA-Model,Sec-CH-UA-Platform-Version Cache-Control: no-store Location: https://cm.g.doubleclick.net/pixel?google_nid=appier&google_hm=RU0yb2pWemlCbWlTeDBpUzlqR2xaUQ%3D%3D&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k P3p: CP="CUR ADM DEV TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Set-Cookie: _auid=EM2ojVziBmiSx0iS9jGlZQ; Path=/; Domain=c.appier.net; Expires=Wed, 15 Jan 2025 13:24:06 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Set-Cookie: _gu=CAESEGXjSffKCZYfhR-a0w5jhKg; Path=/; Domain=c.appier.net; Max-Age=2592000; HttpOnly; Secure; SameSite=None
2024-01-15 13:24:06 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 70 70 69 65 72 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 52 55 30 79 62 32 70 57 65 6d 6c 43 62 57 6c 54 65 44 42 70 55 7a 6c 71 52 32 78 61 55 51 25 33 44 25 33 44 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 53 43 59 75 49 55 33 67 59 62 66 53 31 35 49 48 70 72 48 65 46 4d 77 4b 41 42 50 58 66 49 31 43 74 4a 64 74 34 6a 67 79 55 59 70 44 67 34 4c 38 34 70 79 58 38 36 30 72 53 52 34 6a 71 2d 74 30 5a 35 47 49 58 69 36 76 58 41 7a 54 35 77 61 6b 66 38 77 44 5f 49 50 66 2d 50 57 35 57 78 65 37 6b 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=appier&google_hm=RU0yb2pWemlCbWlTeDBpUzlqR2xaUQ%3D%3D&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49897	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	2961	OUT	GET /pagead/adview?ai=CWkfu8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcv5qnCsJWW1IGtlpgT5JpTGuW5akXn4jGi_3P6MchajIDVQodITxwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCtwALSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLzg1uq-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAdoMEAoKEPDihNL_zLWmYBICAQPYEw3QFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=hCXV7PUMxzE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xhgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
2024-01-15 13:24:06 UTC	1213	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"1036356429035176135","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"13632045941521604161"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49895	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	1080	OUT	OPTIONS /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=811&vt=11&dtpt=810&dett=2&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:06 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49899	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	2968	OUT	GET /pagead/adview?ai=CMK3L8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWY5hs23B7yl7eFHDd4vr_C4c4jiuuMon08_-F5CnCDrUK6Ti3gk2wATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCY6gTSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPmp1eq-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQsPnRm-3n1J0REgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=sra16_AfWoE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYBgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA
2024-01-15 13:24:06 UTC	1213	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"8922919619519022893","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"13379352909221703441"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49905	23.199.48.23	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	6512	OUT	GET /clog?pixel_len_bucket=6132&logid=awlog&lper=1&itypeid=17&itype=ADX&cc=US&cid=8CUU9JF8H&reqid=hKuDd_gKgbNTPC1IRghbYA&vid=hKuDd_gKgbNTPC1IRghbYA&dn=mylovelybluesky.com&rawDn=mylovelybluesky.com&requrl_dn=mylovelybluesky.com&pid=8PR113JGC&ugd=4&fleet=appnexus&requrl=http%3A%2F%2Fmylovelybluesky.com&cliIPType=v4&coppa_enf=true&lmt_status=N&lmt_applied=N&lmt_enf=true&dnt_enf=false&geo_source=1&sc=DC&ct=washington&zip=20011&pubid=pub-ADX-116310109131&tgtval=pub-ADX-116310109131&csip=rtb-appnexus-6d87b4697f-szn49.SC&dtc=east_sc&zone=d&sd=1&ptype=23&tmax=300&xtmax=280&gdpr=0&gpp_present=false&app=0&sat=1&device_id=4&asn=174&sckfl=1&suid=CAESELQ0y-p8dtl0rOvEhDW2kw4&sckfl2=0&smbrid=adx-1&cxtSgmt=long_tail_homepage_catchall&usp_status=0&usp_enf=1&mspa_enforced=true&gqid=AD8Fdm5noyDknKE-CLb2n5p7ZMNuXLl4BcYI8gaAqeksCi15ZuH41DUPLrQnfRN9lucBu-Iu&pexid=ADX-pub-6163292317333011&geoll=false&is_ortb=false&commit_id=4f4eb818&ocurr=USD&omul=1.0&currsrc=API&currsrc_date=2024-01-12+00%3A00%3A00&schain_cmpl=1&schain_nodes_count=1&dummy_vsid=false&amptype=1&second_call=false&supply_cc=US&ipcc=US&is_msnnative_src=false&proxy=envoy&header_lang=false&rtttime=68&req_tid_present=false&pvid=460&prvAccId=764666904&prvApiId=8CU7Q771E&adj0=0.0&adj1=0.0&adj2=0.0&pst=0&crid=839288643&prspt=headerBid&prvReqId=346321243488093_565735447_8392886434601&size=336x280&chnl=smm_migration_test&bdp=0.090&bid_uuid=1916ab425690ab27b2536a79696a948d&cbdp=0.04&og_cbdp=0.090&ogbdp=0.09&pv_adtype=0&res_mtype=0&mnet_ckfl=0&ckfl=0&be=0&advUrl=https%3A%2F%2Frelated.investorfocus.net&dfpBd=0.04&dsrc=-2&dp=0&dbf=1&epc=764666904&s=1&snm=SUCCESS&pcrid=8CU7Q771E-764666904-3-3&tpbTkn=false&exid=218&bidflr=0.010&pbidflr=0.010&opbidflr=0.010&spbf=0&viewability=49&sbdrid=128&exp=ssProfile%3D0%7Csfl%3Dfalse%7CssBucket%3D0%7Cbfl%3D-100%7Csch%3D1%7Cclt%3D3%7Ctpi%3D1%7Cfl_rl%3D1%7Cdbr%3D1%7Csfl%3Dfalse%7Cbfl%3D-100%7Ctpi%3D1&mnrf=0&ortbseat=BID_API&brsrclk=0&bidrestime=1705325041753&fpuReq=1&bfs=103&acsn=1&ybnca_erpm=0.09&dmm_erpm=false&dmm_ogerpm=false&bcrid=1700080807683300336028000059500&strg=smm_migration_test&vls=0&scrid=1700080807683300336028000059500&mang=1&pvdTmax=238&fpusp=false&ae=false&epcexp=false&moau=true&ucrid_ver=2&omid=0&mnet_static_share=0.0&apTags%3C%3E=75&dt=O&mx_svc_mode=http&incentive_type=0&aogbdp=0.0&spIvt=3&spSource=0&spTo=3&spIsReq=3&spFst=0&spCst=0&mx_sdr=false&mx_sbp=-10.0&mx_sua_cvg=0011010&mx_tid_sent=false&mx_epbc=8CU7Q771E&mx_SPRIG=2&mx_bsBucket=0&mx_ssProfile=0&mx_sua_os_n=Windows&mx_lr=0&mx_TAS=1&mx_ep_sent%3C%3E=badv&mx_g_one_uid_sent=None&mx_uid_sent=0&mx_bsBucketRa=0&mx_sid=8CUU9JF8H&mx_SC=0&mx_lr_seg_deal=0&mx_aqcpl_crid=0&mx_nsz=3&mx_GCID=0&mx_maq_call=false&mx_aurt=0&mx_bsBucketKtwRl=0&mx_tgs=250x250%7C300x250%7C336x280&mx_bsProfileRa=0&mx_IAB2=2&mx_bss_algos%3C%3E=0&mx_aurl_hc=0&mx_aabpc=0&mx_PC=1&mx_UCC=5&mx_isLossNtf=false&mx_bsWhitelistBucket=0&mx_bsProfileKtwRl=0&mx_bsProfile=0&mx_ssBucket=0&mx_TAF=3&mx_bsWhitelistAlgo=0&mx_gpid_sent=false&mx_commit_id=2bf0eb232d&mx_exp_tokens%3C%3E=IPBLOCK_DM%3AGCS%23%23ctx_canonical_exp%3Atrue%23%23launchexp%3Atoken1%23%23NedCkflWithData%3ALesBlk%23%23RealTimeValidBid%3A15m%23%23bsNed%3AvalidBid%23%23prll_req%3Atrue%23%23NedCkfl%3ADEFAULT%23%23BssTgtMig%3ADEFAULT&mx_isNed=1&acid=d56a68249159d7d3473ab8ec3b8419e3&rtime=39.0&wsip=mowx-lite-7c6dc5885b-hq7fv&ltime=49.0&act=headerBid&abs=0%7C0%7Cxtmax%3D280%7Cbrr%3D1&adtypes=0&adblk=618417950&impId=1&reftime=0&reftype=0&psrc=fail&mowxReqId=d56a68249159d7d3473ab8ec3b8419e3_1&policy_enf=2&pub_blk_enf=1&req_size=300x250%7C336x280%7C250x250&renderer=0&ifst=0&iframingState=0&ifdp=0&slotVisibility=2&adpos=3&media=0&native_asset=0&req_mtype%3C%3E=0&ctr=-1.0&rfc=-1&skadidfl=0&feedback_id=hKuDd_gKgbNTPC1IRghbYA_1&supplyTagId=618417950&mnrfc=-1&viewability_vendor=EXCHANGE&vcmplrt=-1.0&imp_tid_present=false&mp_seg%3C%3E=100273&debug_ts=2024-01-15+13%3A24%3A01&__expireat=1705325642005&mview=1&lo_pvid=%5B460%5D&lo_dp=0&lo_bdp=0.090&lo_cbdp=0.04&actltime=50&rme=adm&bdata=sd2%3Dnull~iurl_l%3D10~ogerpm%3D0.09~dom_b%3D0.53~scd%3Ddc~rae%3D0%2C0~dom_l%3D20~vl2r_sd%3D2024011421~iurl_b%3D761.53~url_tkc%3D0~url_r2a_b%3D0~std%3D618417950~mn_beh_boost%3D0.61~rat%3D0.000%2C0~ip%3D1SxLkQ~fbb%3D16~bh_im%3D203~riipua%3D0%2C0~rc%3D1~risuid%3D0%2C0~rps_sd%3D2024011504~radv%3D0.000%2C0~url_b%3D1.31~vl2r_url_b%3D0~smm_wr%3D6.7074~url_l%3D10~slv%3D27.37~gcat%3D-10~bb%3D128~smm_mul%3D0.49~erpm%3D0.09~vl2r_url_kc%3D0E0~psi_c%3D2%2C2%2C0%2C0%2C0%2C0%2C0%2C0~bm%3D1~psi_d%3D1~rke%3D0%2C0~a3p_b%3D3.76%2C80.1~sd%3D1~uid%3D2IaGl7GHagnFlpNvbJ~cvl2r_b%3D7.93~btd%3D6719302849289917459153508994144360330298765196557611411766884651541404662082886976461656901408653840384~uim%3D0~rkt%3D0.000%2C0~ogd2p_b%3D0.98~ss%3DNA~cc%3DUS~kb_dl%3Dn%2Fa~uiw%3D-1~ce%3D0~rcv%3D35.61~CI%3D3090~kb_uc%3D0~nts%3D3~kb_ul%3Dn%2Fa~kb_ccks%3D0~ct%3Dwashington~bss_KTW%3DNA%2CNA~bdt%3D1705325041~kb_tt%3D0~bh_sd%3D2024011402~dc%3D8~vl2r_b%3D3.76~tt%3D28888~ulm_p%3D0.093~vw_exc%3D0.49~smm_bid%3D0.04~vis_sd%3D357~url_rps_b%3D9.92~bh_co%3D3~sobj%3D0~dc2%3D1~v_asn%3D174~last%3D~cvog%3D7.93~vis_url_b%3D0.57~vl2r_i_sd%3D2024011421~vis_url_l%3D0~et%3D31~vl2r_i_b%3D0.02~vis_b%3D477.28~vl2r_url_vi%3D1E-16~url_tvi%3D0~vv%3D0~cvl2r_sd%3D357~rfv%3D35.61~l2r_b%3D1000~smm_sd%3D2024011501~radp%3D0.000%2C0~sid%3D764666904~url_rps_kc%3D0~kb_src%3Dkbb~vwu%3D0.49~d2p_l%3D10~cvl2%3D7.93~3pcf%3D1004.96~og_msh%3D0.09~dmm_strg%3Dsmm_migration_test~d2p_b%3D1~rps_b%3D80.1~url_srps_b%3D9.92~rkwp%3D0.000%2C0~MP2%3D.love.~rkwd%3D0.000%2C0~isRef%3D0~isif%3D0~url_rpc_b%3D0~bid%3D0.04~kb_pt%3DHomepage~url_rps_rv%3D0~cbdp%3D0.040%7Esd%3D1%7Eitype_id%3D17%7Eseller_tag_id%3D618417950%7Esupply_tag_id%3D%7Edetected_tag_id%3D%7Eviewability%3D0.49%7Epos%3D3%7Eac_type%3D1%7Eadblk%3D618417950%7Eamp%3D1%7Eogbid%3D0.090%7Ebflr%3D0.010%7Esuid%3DCAESELQ0y-p8dtl0rOvEhDW2kw4%7Edtc%3Deast_sc%7Edmm_erpm%3Dfalse%7Edmm%3Dsmm_migration_test%7Ebdpcapd%3D0%7Edalg%3Dsmm%7Esgmt%3Dlong_tail_homepage_catchall%7Esobp%3D%7Exid%3DADX-pub-6163292317333011%7Ehtml%3D1%7Esmm_api%3Dv1~ibc%3D1~nsz%3D3~tgs%3D250x250%7C300x250%7C336x280~bsb%3D0~bsp%3D0~tmx%3D238&utime=1085&sf=0&cpr=0.9582261418714186 HTTP/1.1 Host: hblg.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10
2024-01-15 13:24:06 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Mon, 15 Jan 2024 13:24:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:06 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-15 13:24:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49896	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	1080	OUT	OPTIONS /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=806&vt=11&dtpt=805&dett=2&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:06 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49907	172.253.62.106	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:06 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Mon, 15 Jan 2024 13:24:06 GMT Expires: Mon, 15 Jan 2024 13:24:06 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:06 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-01-15 13:24:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49906	23.199.48.23	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	997	OUT	GET /log?logid=kfke&evtid=plutol1&__q=AYYEIwKELwQCAAABAAAAAgAAAABAAAEABgAAQIABAAgAMNAATjM0NjMyMTI0MzQ4ODA5M181NjU3MzU0NDdfODM5Mjg4NjQzNDYwMUBkNTZhNjgyNDkxNTlkN2QzNDczYWI4ZWMzYjg0MTllM5gHCtejcD0Ktz80aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb20EVVOAwKnqDN4BTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2Jm15bG92ZWx5Ymx1ZXNreS5jb20SOENVVTlKRjhICA4zMzZ4MjgwCDAuMDQOZWFzdF9zYwZBRFgICG51cmwAAAAAAACASECy4djUoWMCMgAAAAAAAPC_QHJ0Yi1hcHBuZXh1cy02ZDg3YjQ2OTdmLXN6bjQ5LlNDPjE3MDAwODA4MDc2ODMzMDAzMzYwMjgwMDAwNTk1MDACEDRmNGViODE4AmQC&cbvp=2 HTTP/1.1 Host: hblg.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10
2024-01-15 13:24:06 UTC	318	IN	HTTP/1.1 200 OK Content-Type: image/gif Access-Control-Allow-Origin: * Content-Length: 35 Expires: Mon, 15 Jan 2024 13:24:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:06 GMT Connection: close Strict-Transport-Security: max-age=86400 ; includeSubDomains
2024-01-15 13:24:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49904	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	362	OUT	GET /simgad/17205409499713138048 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:06 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 85415 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 19:17:08 GMT Expires: Fri, 10 Jan 2025 19:17:08 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 16:15:05 GMT Content-Type: image/jpeg Age: 324418 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:06 UTC	429	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 Data Ascii: 1966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb Data Ascii: &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 Data Ascii: XQKFA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: 62 fe 72 ec 63 3f b1 d0 60 b9 26 7c a4 ee 79 88 bd a1 e7 bb 8a 06 ec a3 06 9f 66 15 04 c0 98 b6 6b e6 b8 45 c0 c1 14 c1 e9 f0 71 d7 e4 32 dc e6 40 8b ae 19 f5 27 b8 c7 f3 bb 0e 90 b1 c6 9e 63 95 0a 25 ab 31 dc fb 39 ae 39 cb 58 af 48 15 ae 58 6f a8 99 6f ae 75 61 2e 66 c5 55 95 20 ab ef 8e e8 75 b6 f6 e6 cb 25 dc cf 3b 9e e1 39 47 d4 74 79 df 3a d7 6d a5 60 34 db 3d 51 bf 32 62 c0 6a d2 eb ee 65 2e 4a 3d 23 88 45 37 4a 6f 41 98 cd 9f b1 2a 12 6b 7a 01 8a 42 a4 a7 05 ae 9a 1d f4 b2 66 a4 1b fc b9 05 8f 17 5c b3 0e a7 a8 97 cd 3a 0d 3f 32 f7 6e 45 65 2d 64 ab c7 13 6c d9 b5 71 db 36 83 7c 53 38 63 ba 14 ab 59 55 56 64 a9 db 4d 52 5c 87 af bc 3c 61 9c ec c8 77 38 99 b3 a5 3c 79 22 db 8e 7d ca e0 55 64 bb 30 51 b0 65 17 f3 75 a7 ed 80 6b ad 5e 1d 8d c3 f4 51 Data Ascii: brc?`&\|yfkEq2@'c%199XHXooua.fU u%;9Gty:m`4=Q2bje.J=#E7JoA*kzBf\:?2nEe-dlq6\|S8cYUVdMR\<aw8<y"}Ud0Qeuk^Q
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: fe a3 27 71 83 e1 bb e4 fd 11 d9 32 b1 95 68 be 51 74 9a 93 f6 af bb 95 92 2f c9 df 96 89 61 b1 da f9 86 96 8a cb f5 35 3a 18 48 6b 29 76 34 68 b7 e2 4b 2e 8b 6c 76 f4 19 37 b8 45 8e e7 2a 26 07 ec 3a 7f 78 eb 95 18 1e 88 3c 29 e3 5b 91 2b a1 1e 11 31 0f f5 10 a4 94 97 74 09 46 53 cb 41 02 df 61 88 05 d5 44 37 ca b5 d4 2c b2 81 b8 cd ca 34 eb e4 d1 5c b2 95 ab c1 fd 34 91 cb 6d 93 08 ce d1 9b 65 cb 38 4a b7 10 eb ce 7c bc 09 63 93 9a 9f b7 19 94 5a 4b a2 fc f4 88 a7 66 a7 21 c2 89 a3 86 e7 db 49 d8 e1 51 8d 3a 5f ac 06 5d 35 55 04 67 1e ec b2 df 91 cb 71 91 44 96 bc 29 b7 e6 ea 69 aa 1a 1c 90 2e 57 8a 8a 12 6e 4d 0b 85 29 d1 d3 6f 4a ea eb 04 b8 2e d9 b9 04 fa 0e 15 2d a4 4a af 68 f3 1d 7e 6f b4 08 fc e3 a9 78 47 d1 a8 6d cb f5 e7 2c 6f b1 16 58 63 92 bc Data Ascii: 'q2hQt/a5:Hk)v4hK.lv7E*&:x<)[+1tFSAaD7,4\4me8J\|cZKf!IQ:_]5UgqD)i.WnM)oJ.-Jh~oxGm,oXc
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: 63 14 14 db 21 ac 05 b5 76 7d 9f a3 09 25 b0 57 47 8f b2 8e f7 2a a9 d5 ab 79 e0 ad b5 e5 dc 41 6f b1 18 db 9c 3d d5 1a c2 e7 31 7b 99 00 eb 34 df a4 9b 59 f6 d9 d0 dd 2a 6d 76 b5 94 e6 33 60 a6 7b e2 26 fa 01 af c0 f0 55 bf 62 99 a2 72 eb 9d eb e3 f3 af f4 b4 c7 c3 f4 58 6f 55 a5 ea f6 26 45 27 9c 74 8f 4b 83 8f 7b 9e 7f 29 e6 96 68 bb 4c ae 12 be 7d d1 04 bf 4f e4 e5 17 9d 34 80 cb 74 a0 f1 ed fa 36 f9 ab 9f 64 ec 8d a6 da 32 c1 7f 40 5f 68 e1 33 cd 95 dd ba de 3f 72 58 46 db 53 8a af b4 6c fa c9 c9 30 32 04 7c 12 de 6f 6b d7 2a 39 be 46 54 c9 60 68 41 27 60 0d 9a 2b 2c 8b a2 05 b2 2b e7 41 cb 5b c7 a2 fc 9d ba 48 c3 b8 5f cf ff 00 d5 e3 3f e7 1f b1 f5 e9 a6 1e 27 11 d5 e2 bd b5 d6 e5 31 52 2d 76 ca ec a6 0e 61 95 84 83 5d d6 af 31 83 97 8d 1d bd c7 e5 Data Ascii: c!v}%WGyAo=1{4Ymv3`{&UbrXoU&E'tK{)hL}O4t6d2@_h3?rXFSl02\|ok*9FT`hA'`+,+A[H_?'1R-va]1
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: cd 03 f4 9d f1 4f 8a bd 3b cd e9 ce a0 22 61 0e 10 0a 27 7a 60 8e 88 54 0c 29 43 51 ee d6 21 52 87 0d 0e 0f 58 d7 85 03 97 91 0e d4 8f 5e a5 66 19 53 22 53 10 d7 68 d4 54 78 42 f7 f2 6d 44 9a 83 82 98 54 f7 7f 0c 97 5f 6c 3e 02 1e 89 87 55 4d ed 87 25 04 a3 c1 01 0e 18 0d d1 42 18 e5 83 40 45 15 43 b0 92 43 e8 50 11 1e de bc 10 00 e1 7f 33 70 e8 8b ae 2b c5 3a f7 74 0e 08 07 07 a8 72 19 37 aa ca be c6 f2 04 24 83 00 68 6a 7c 8c 95 9d 07 74 08 67 ed ad 34 b9 08 17 e9 25 da 56 47 20 2b 13 3c 35 f7 6e f3 2c 34 63 db 8b 86 13 31 1f a9 d2 70 e5 5c 8d 80 4a 3d 4f ef c8 ff 00 6c cc d9 34 22 ae 9a fb 69 80 99 4f 94 50 4a fc a7 21 94 01 37 04 e3 c4 0e 98 03 24 00 a8 2e 6e ee 48 f0 9f 1f 51 e1 b8 40 fc 49 7a 37 74 1f 85 40 ea 07 e0 f4 11 e8 1d 4c 01 d6 b1 24 68 99 Data Ascii: O;"a'z`T)CQ!RX^fS"ShTxBmDT_l>UM%B@ECCP3p+:tr7$hj\|tg4%VG +<5n,4c1p\J=Ol4"iOPJ!7$.nHQ@Iz7t@L$h
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: 9c 33 a5 79 55 82 24 5a 6a 10 a3 c6 69 2c 77 32 32 ce 59 44 19 ca a4 4f df 57 8e 7f b8 61 e1 1a 2c a0 2c d5 54 03 b0 4c 03 14 f8 e6 fa 5b c1 51 db 07 2d 01 bc 73 a7 9c 6c 82 ec da 1d 05 55 23 98 b7 80 11 0c 4c 73 c8 8a c8 8b e4 d6 54 8b 33 5d 13 b9 2f e0 7c 5e 2c 5e a5 32 2a 18 46 39 c0 94 ac 54 13 fd 28 de d1 63 57 55 58 ca d3 a8 46 2c a3 d7 29 a0 17 23 66 86 70 0e 64 5d a2 75 d0 90 88 23 81 52 11 13 10 91 ad 98 24 a7 41 30 75 1e 57 59 f7 a8 b3 81 7c ec 54 fc 5f 22 ff 00 e4 57 f5 50 43 8c 48 64 d0 e8 53 09 9a 33 ea 04 29 f8 b2 2a 2e 47 4c d4 72 c9 54 1d a2 d1 af cc 8a 65 11 22 11 ae 96 5d 48 f5 54 07 93 0e 5c 19 79 d7 ea 47 47 a7 2a e1 7a a8 5d 5d 80 1e e0 8a a0 7b 1c 6a 80 8d aa 25 bf 11 be b1 03 49 5c 63 48 af d5 99 8b 47 11 c5 8c 65 3d 3f 32 f2 4e 83 Data Ascii: 3yU$Zji,w22YDOWa,,TL[Q-slU#LsT3]/\|^,^2F9T(cWUXF,)#fpd]u#R$A0uWY\|T_"WPCHdS3).GLrTe"]HT\yGG*z]]{j%I\cHGe=?2N
2024-01-15 13:24:06 UTC	1252	IN	Data Raw: d6 df aa 6a 94 dd 4f e9 c1 13 0f 09 d4 a7 50 7d 54 02 80 b1 28 29 c0 90 ef 50 26 4c 8f 1d 5e e6 d0 3b 6c bf 3c 28 25 12 33 ac 41 81 51 74 bc 89 50 08 98 99 0b 2c 84 14 63 48 56 12 8f 05 ba 58 ed 8a 8e 2d 96 37 9d 5f b1 4c e6 3d d7 b1 28 f6 e0 61 4d d8 89 4b 3e 51 2a b4 a9 47 0e 21 be 71 7e a6 f8 f4 0e 7a 07 33 9e e4 e3 3d 79 b8 ab e4 ef 5f 55 2a 5e 50 70 1a 28 ff 00 ba 0e 07 e0 79 42 c0 dc 0f 28 78 0f 9f ee 89 af e1 cf f7 45 d7 ee 49 f9 3c d7 f7 ad 55 f2 35 83 cd c1 f2 27 84 44 7f dc 4f 07 73 09 ed 06 3d cf b6 b1 85 7a 63 04 2b b5 4e f5 d1 63 b8 a2 a8 1d 04 90 2a 84 72 d8 e4 04 4a a9 46 ab 62 98 ae af 07 62 42 45 08 b8 19 29 87 f5 c8 36 91 09 8f 54 d3 b6 be 23 68 2a 0a 89 36 7e 54 54 54 d1 89 77 48 5f 8c 29 34 ed f6 c8 f7 b3 a2 c9 fb ac e9 ed fb 0f f2 aa Data Ascii: jOP}T()P&L^;l<(%3AQtP,cHVX-7_L=(aMK>QG!q~z3=y_U^Pp(yB(xEI<U5'DOs=zc+NcrJFbbBE)6T#h6~TTTwH_)4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49908	23.199.48.23	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	2985	OUT	GET /bping.php?vgd_len=2604&&vgd_cdv=1148&vgd_cage=0&vgd_tsce=L379&vgd_mcf=76592&gdpr=0&mspa=0&prid=8PRVCXX19&cid=8CU7Q771E&crid=764666904&vi=1705325043284750660&ugd=4&lf=6&cc=US&sc=DC&lper=100&wsip=170785157&r=1705325042823&rrr=Qp8eyO4s8R1Cp4Yfo7r5QIpsZX5WmhZQdT6IBJgEmIo%3D&requrl=http%3A%2F%2Fmylovelybluesky.com%2F&vgde_bdata=QOfvzxjj~8xLjMjvu9~myJLEYv9.9i~OmYMGv9.XA~QNOvON~L1Jv9%2C9~OmYMjvf9~ejfLMQOvf9fH9uuHfu~8xLjMGvhFu.XA~xLjM7UNv9~xLjMLf1MGv9~Q7OvFuWHuhiX9~YzMGJwMGmmQ7v9.Fu~L17v9.999%2C9~8Evub-TUg~kGGvuF~GwM8Yvf9A~L88Ex1v9%2C9~LNvu~L8Qx8Ov9%2C9~LEQMQOvf9fH9uuX9H~L1Oev9.999%2C9~xLjMGvu.Au~ejfLMxLjMGv9~QYYMBLvF.h9hH~xLjMjvu9~Qjevfh.Ah~yN17vou9~GGvufW~QYYMYxjv9.Hi~JLEYv9.9i~ejfLMxLjMUNv949~EQ8MNvf%2Cf%2C9%2C9%2C9%2C9%2C9%2C9~GYvu~EQ8MOvu~LUJv9%2C9~1AEMGvA.hF%2CW9.u~QOvu~x8OvfV1ZjhZq1yzsjEIeG6~NejfLMGvh.iA~G7OvFhuiA9fWHifWiiuhHXiuXAX9WiiHuHHAF9AA9fiWhFXuiFXXhFuuHuuhFFWWHFXuXHuH9HFFf9WfWWFihFHFuFXFi9uH9WFXAWH9AWH~x8Yv9~LU7v9.999%2C9~myOfEMGv9.iW~QQvIK~NNvPb~UGMOjvzS1~x8Bvou~NJv9~LNevAX.Fu~%3DVvA9i9~UGMxNv9~z7QvA~UGMxjvzS1~UGMNNUQv9~N7vB1Qw8zy7mz~GQQMC_pvIK%2CIK~GO7vuh9XAfX9Hu~UGM77v9~GwMQOvf9fH9uuH9f~ONvW~ejfLMGvA.hF~77vfWWWW~xjYMEv9.9iA~eBMJ-Nv9.Hi~QYYMG8Ov9.9H~e8QMQOvAXh~xLjMLEQMGvi.if~GwMNmvA~QmGdv9~ONfvu~eM1QzvuhH~j1Q7v~Nemyvh.iA~e8QMxLjMGv9.Xh~ejfLM8MQOvf9fH9uuHfu~e8QMxLjMjv9~J7vAu~ejfLM8MGv9.9f~e8QMGvHhh.fW~ejfLMxLjMe8vu4ouF~xLjM7e8v9~eev9~NejfLMQOvAXh~LkevAX.Fu~jfLMGvu999~QYYMQOvf9fH9uuX9u~L1OEv9.999%2C9~Q8OvhFHFFFi9H~xLjMLEQMUNv9~UGMQLNvUGG~eBxv9.Hi~OfEMjvu9~Nejfvh.iA~AENkvu99H.iF~myMYQwv9.9i~OYYMQ7LyvQYYMY8yL178mzM7JQ7~OfEMGvu~LEQMGvW9.u~xLjMQLEQMGvi.if~LUBEv9.999%2C9~c0fv.jmeJ.~LUBOv9.999%2C9~8QDJkv9~8Q8kv9~xLjMLENMGv9~G8Ov9.9H~UGME7vqmYJE1yJ~xLjMLEQMLev9~NGOEv9.9H9~QOvu~875EJM8Ovuh~QJjjJLM71yM8OvFuWHuhiX9~QxEEj5M71yM8Ov~OJ7JN7JOM71yM8Ov~e8JB1G8j875v9.Hi~EmQvA~1NM75EJvu~1OGjUvFuWHuhiX9~1YEvu~myG8Ov9.9i9~GkjLv9.9u9~Qx8Ov%3DK4b4Tg95oEWO7j9Lae4wrpfUBH~O7NvJ1Q7MQN~OYYMJLEYvk1jQJ~OYYvQYYMY8yL178mzM7JQ7~GOEN1EOv9~O1jyvQYY~QyY7vjmzyM718jMwmYJE1yJMN17Nw1jj~QmGEv~-8OvKrtoExGoFuFAfifAuhAAA9uu~w7Yjvu~QYYM1E8veu~8GNvu~zQlvA~7yQvfX9-fX9%7CA99-fX9%7CAAF-fW9~GQGv9~GQEv9~7Y-vfAW&ssld=%7B%22QQ8E%22%3A%22u9f.uFX.HW.9%22%2C%22QQNN%22%3A%22Pb%22%2C%22QQQN%22%3A%22r%3D%22%2C%22QQN75%22%3A%22B1Qw8zy7mz%22%7D&vgd_bid=349065&vgd_ydspr=1&vgd_sbSup=1&vgd_is_amp=0&vgd_asn=174&vgd_rakh=1705325042152550719&vgd_l1rhst=contextual.media.net&vgd_rpth=%2Fnmedianet.js&vgd_hb_audit_1=8CUU9JF8H&vgd_hb_audit_2=839288643&vgd_pgid=p0967114284t202401151324&vgd_pgids=1&vgd_uspa=0&vgda_l1btm=%5B%22SPAMPXL%22%5D&hvsid=00001705325042819017221018024201&gdpr=0&mspa=0&vgd_l2type=scs_newfl&vgd_end=2 HTTP/1.1 Host: lg3.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10
2024-01-15 13:24:06 UTC	328	IN	HTTP/1.1 200 OK Content-Length: 35 Content-Type: image/gif Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=21600 Alt-Svc: h3=":443"; ma=93600 Expires: Mon, 15 Jan 2024 13:24:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:06 GMT Connection: close
2024-01-15 13:24:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49922	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	1416	OUT	GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=811&vt=11&dtpt=810&dett=2&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:06 UTC	1591	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"7434751361610342019","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"1607221796241067905"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49923	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	1416	OUT	GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=806&vt=11&dtpt=805&dett=2&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:06 UTC	1591	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"238537942570714981","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"15948525236847323800"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:06 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49928	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	690	OUT	GET /cksync?type=g&cs=6&google_gid=CAESEPx3zv_JZPnTixNbvGEeREw&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10
2024-01-15 13:24:07 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEPx3zv_JZPnTixNbvGEeREw~~6;Expires=Mon, 29 Jan 2024 13:24:06 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Mon, 15 Jan 2024 13:24:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:07 GMT Connection: close
2024-01-15 13:24:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-15 13:24:07 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49934	35.190.90.30	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:06 UTC	648	OUT	GET /t/v2/sync?tagid=V2_4530&src.visitorid=CAESEN0nhbvMce4tpX8nuEm75y8&google_cver=1&google_push=AXcoOmS-T_8ywdeQPYSHEH6pGhHDSGfvH9jyKk6y7plIvsQGh5tGlRlTUAI73rAyZVpDjevLBLrru8VlUOO0oDvOC3SAULYQuTcNLn4 HTTP/1.1 Host: odr.mookie1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id=10595281083246962949; mdata=1\|10595281083246962949\|1705325045512; ov=5f87d0bc6119200a69f83f6bd1182010
2024-01-15 13:24:07 UTC	884	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:07 GMT Server: Apache P3P: CP="NON DSP COR NID CURa PSAa PSDa OUR STP UNI COM NAV STA LOC OTC",policyref="/w3c/p3p.xml" X-Application-Context: application Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: id=10595281083246962949; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: mdata=1\|10595281083246962949\|1705325045512; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:07 GMT; Path=/; SameSite=None; Secure Set-Cookie: ov=5f87d0bc6119200a69f83f6bd1182010; Domain=.mookie1.com; Expires=Thu, 13-Feb-2025 13:24:07 GMT; Path=/; SameSite=None; Secure Content-Type: image/gif;charset=UTF-8 Content-Length: 43 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49933	54.236.169.36	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	588	OUT	GET /trk?tid=11711&google_gid=CAESEG1r7n0k6n9VMjo8-C80kIE&google_cver=1&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg HTTP/1.1 Host: ag.innovid.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=ce6c4286-e59c-4e95-bf95-c21fad1357d3-20240115 08:24:05
2024-01-15 13:24:07 UTC	568	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:07 GMT Content-Length: 0 Connection: close Pragma: no-cache Expires: -1 Location: https://cm.g.doubleclick.net/pixel?google_nid=innovid_ddp&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg&google_hm=zmxChuWcTpW_lcIfrRNX0w Set-Cookie: uuid=ce6c4286-e59c-4e95-bf95-c21fad1357d3-20240115 08:24:05; Max-Age=7776000; Expires=Sun, 14 Apr 2024 13:24:07 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 2 Cache-Control: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49937	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	743	OUT	GET /pixel?google_nid=pf8b3zh4kyw&google_push=AXcoOmRjPBcag8zkVqcXXmmaQ6GCVB_HNUWhOatKQVSmaC6cY_m68jP6l0hasZlSK5GqZ3Ak5vh8tkBn17jBOLm9U9Nfy1JaqByk_Is&google_hm=UjMzNjQ2XzEwRjU0MzhFQV8yMEI3MjM0RA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49942	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	610	OUT	GET /pixel?google_nid=acuity&google_hm=877145267063&us_privacy=1--- HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49940	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	738	OUT	GET /pixel?google_nid=baidu_mediago&google_push=AXcoOmTLQwwmhKnSOmvJd5id-YpyJE7YEQKFMAZG91UslNqr4qMwYbdWXIqJ0ACTzXoKoHuEHYBWXxmg3z16HBW_enG7hELh-lKamKi2&google_hm=22210ca7b8f13f0e2q6keg00lreyi26g HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49944	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	1066	OUT	GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:07 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi4Vpu0PvGiv6zBqo65uaVM5zn5HgqRfCV_MZR1vU_XXFnZOLQ; expires=Sat, 13-Jul-2024 13:24:07 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49947	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	1066	OUT	GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=1&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:07 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi7S-P6N1uPCe4OME9cJcg4t_26sdQ-juhj1xpxXwN2TTjg3lQ; expires=Sat, 13-Jul-2024 13:24:07 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49941	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	610	OUT	GET /pixel?google_nid=acuity&google_hm=877145232820&us_privacy=1--- HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49945	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	1083	OUT	GET /pcs/view?xai=AKAOjssNDP2MsQBYRgpOKtcbEg6RG2767m9lmP6XN056gF6pVc0rf0Zy66lkvs0Ygb_iXzOh2oSFJCHiZmQlnVtOT0K2_AKlcwF-uEnNsvScw-5ZNCsBHUSBoKVkmZhR94FVgoOBekv_3g9Diye433eufEttzIYFFuvuYjoh28PCE1CbyDfF-0j783NOxmfKYHufyHk&sai=AMfl-YRBo56Ta7yfpqYeEgOzkyrCpAcY0w3lBRA348QB7zQfBdRlUvSnGVroHA4x9Z2OhJziHyRAvTsZAjqzgL18wkABo73IF044ifOaRQ&sig=Cg0ArKJSzBphDhqeVEmFEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=811&vt=11&dtpt=810&dett=2&cstd=0&cisv=r20240109.54275&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:07 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ; expires=Sat, 13-Jul-2024 13:24:07 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49939	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	664	OUT	GET /pixel?google_nid=liveramp&google_hm=WGMzMDcwSlVRQWtHd0g2N0hMYlJHRjJON0w2UVlTMGNrWHRKTDRoOVZ3UUhsYmFRSQ==&google_push HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49938	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	698	OUT	GET /pixel?google_nid=one_tag&google_hm=&google_push=AXcoOmSMythpetD_7iNyg5MXa5LiguNgXYn2PsA17uLuHNv_Nmxk6ibGJFM46SD25Srtu2mJZMty-vFoCK9-FJ271klruU9gNjDpqg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49946	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	1083	OUT	GET /pcs/view?xai=AKAOjstVG8_VSHFMhqB4qjkKzl1cHKwMK8iJeGp4MXGEivPqPHk1t0-EvxRpv3FarnxTApSGc7grATNstJTX8NAwvYLyUySa5s8I-IeR6dVDO1MaVZgBOjJlxF7LTsqPsLQFqwekt3W8rt3H62S2G-t17946yoxiTKCRyf9jBdQNxAC1fuZalwWB0T2NefhvUo7o59Q&sai=AMfl-YRCYMYydIdRRgHoc42f_jyZqi8gNsKIKIiHVMUwvXliCGUN2tg-hI6V9OFcf-SCehRKZpXRTW4yMDPjMj7zzLNtYK9zZssiVATifA&sig=Cg0ArKJSzOIJHe1PSALaEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=806&vt=11&dtpt=805&dett=2&cstd=0&cisv=r20240109.24965&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:07 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: APC=AfxxVi5iZAyBGcWw9O_bm2ZpiShRpVdBZJGe2MnDX2BTj5BiqVFTQg; expires=Sat, 13-Jul-2024 13:24:07 GMT; path=/; domain=doubleclick.net; Secure; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49943	192.184.68.134	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	612	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEOzRtX562fjwmB4DbY8-tuo&google_cver=1&google_push=AXcoOmTYQdCWDydIGcw8i8YhhVhC8jiBMetgHfAKyGB3jyI6COu2KF-9ydt_2X2Tqd22LMQXt_kk25wn77scqJqGrgME0ZWdyeqEafo HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:24:07 UTC	354	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-01-15 13:24:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49960	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	736	OUT	GET /pixel?google_nid=zeta_interactive&google_push=AXcoOmS3kD2wTnlOSZyzuBoE2QI8D3cGBzWBsvLem9IGSNfrVsVCZhiL2mgROkVKWublrob2QL-35_Bkd_sKtBvaqdDNOgZK5cuGNqg&google_hm=MTc3NDY0OTkwNzQ0NTQ3OTA3Mw== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49961	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	720	OUT	GET /pixel?google_nid=bdsw&google_push=AXcoOmRYTPwIqyKAXrXlTHSf9kn3z2vbJjp6KioRa_fxK3CzIAhBhzqF7EVEC_PTyYBu6h3EDvv427STOTlmWYzLotH9nhED7hDJ9Gw&google_hm=vnQ-ZE_9T6CrcxbQO0ffaA== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49959	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	691	OUT	GET /pixel?google_nid=toutiao_usd&google_push=AXcoOmR1rXiOjpQnseGmYTjPFo7J5m9RLCOnPTctxzHZrc6O5Aiz0SHgc6_yH9afZnxXCCJtYIL5yu2n-gUfVzwiQEB0sRjZimeExA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49962	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	790	OUT	GET /pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmTGN2X_d50pHLLDJD0qrXXS8E6cq-PbVfjQ3H6ZiL87GDaLyGfjejSJ698loF3AontM07lADS7F9wJvWFLA2zxV010C7Rn8hQ&google_cver=1&google_gid=CAESENea1cA6TkOafqa1xSG3nzE&google_hm=UTc1ODYxMTQ0NTE2MDAxMDQ0NDg= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49965	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	734	OUT	GET /pixel?google_nid=appier&google_hm=RU0yb2pWemlCbWlTeDBpUzlqR2xaUQ%3D%3D&google_push=AXcoOmSCYuIU3gYbfS15IHprHeFMwKABPXfI1CtJdt4jgyUYpDg4L84pyX860rSR4jq-t0Z5GIXi6vXAzT5wakf8wD_IPf-PW5Wxe7k HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49966	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	741	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=NzAyMjUxNDczMjI2OTQ1MTY0Mg&google_push=AXcoOmTXQtNWdcta8yfPq670zhfPsOnDIBDv3eQMeeMwH6By8x23HeGHcA-dRtyoA_YJwr9NBNOopwfjyw510NPMJM6Zshq8-Q_E3-4 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49967	23.39.32.29	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	489	OUT	GET /cksync?type=g&cs=6&google_gid=CAESEPx3zv_JZPnTixNbvGEeREw&google_cver=1 HTTP/1.1 Host: cs.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitor-id=3483266450180228000V10; data-g=CAESEPx3zv_JZPnTixNbvGEeREw~~6
2024-01-15 13:24:07 UTC	560	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-g=CAESEPx3zv_JZPnTixNbvGEeREw~~6;Expires=Mon, 29 Jan 2024 13:24:07 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA x-mnet-hl2: E Expires: Mon, 15 Jan 2024 13:24:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:07 GMT Connection: close
2024-01-15 13:24:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-01-15 13:24:07 UTC	14	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49964	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2483 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1705325013835&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-01-15 13:24:07 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-01-15 13:24:07 UTC	2482	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-01-15 13:24:08 UTC	476	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B5A6FD892B594F7383E2C7B57B059843 Ref B: BY3EDGE0113 Ref C: 2024-01-15T13:24:07Z Date: Mon, 15 Jan 2024 13:24:07 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1705325047.17904e7c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49971	192.0.73.2	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	500	OUT	GET /avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g HTTP/1.1 Host: 2.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:07 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jan 2024 13:24:07 GMT Content-Type: image/jpeg Content-Length: 6435 Connection: close Last-Modified: Sun, 25 Jun 2017 15:07:06 GMT Link: <https://gravatar.com/avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g>; rel="canonical" Content-Disposition: inline; filename="edad71c0d5b089917bad4ed31186388d.jpeg" Access-Control-Allow-Origin: * Expires: Mon, 15 Jan 2024 13:29:07 GMT Cache-Control: max-age=300 X-nc: HIT dca 3 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-01-15 13:24:07 UTC	835	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7d 00 7d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC}}"
2024-01-15 13:24:07 UTC	625	IN	Data Raw: 16 df 6a 5d be d4 fc af a8 a5 e2 8b 8f 91 74 22 c5 1b 7d a9 ee c8 83 e6 20 7e 35 11 bc 84 0f bc 28 57 7b 09 a8 ad d8 fd 9e d4 6d f6 a6 a5 cc 4f 9c 38 1f 5a 77 9f 10 ea e2 8d 7b 0d 28 6f 73 8a 5f 10 b3 75 62 07 e5 52 c5 ad b7 55 63 f9 d7 29 1d f3 64 65 b7 67 b1 15 65 2f 98 72 4f 1d 3a 67 15 eb fb 14 79 3e dc eb 23 d7 a4 c7 0d 9f ad 39 f5 bb 89 01 01 d5 7d c0 e6 b9 91 7d 22 8c 29 19 cf 70 0d 58 8f 50 72 39 da ac 7a 7c a2 93 a0 96 b6 2b db 5f a8 9e 2e d7 9b 44 f0 fd ee a3 23 b4 cd 0a 65 23 63 c3 39 e1 47 e6 45 7c 7f e3 69 75 2f 11 6a 72 de df ce d7 57 32 1e fc ed 1d 94 0e 80 7b 57 b2 fe d0 7f 15 74 df 0a e8 5f 63 b8 bb 85 24 5f df 4e a4 80 23 40 32 a5 8f 6e 79 c5 7e 66 fc 58 fd af 75 ff 00 12 ea b2 e9 7e 0d 61 63 64 5f 60 bf 65 1e 64 84 f7 50 78 51 ee 46 7e Data Ascii: j]t"} ~5(W{mO8Zw{(os_ubRUc)dege/rO:gy>#9}}")pXPr9z\|+_.D#e#c9GE\|iu/jrW2{Wt_c$_N#@2ny~fXu~acd_`edPxQF~
2024-01-15 13:24:07 UTC	1369	IN	Data Raw: 75 a9 57 5c b0 57 00 cd 16 4f 00 12 01 fc 8e 2b da b3 67 0d d1 bf 11 78 d7 04 99 0f 63 81 c7 eb 54 3c 61 e2 61 e1 3f 09 6a 9a b3 46 5d ed 6d de 55 c8 c0 2c 3a 03 cf a9 15 10 d5 bc b5 0d 0a 06 8c 8e a4 67 f5 15 5f 59 9a db 59 d1 6f 34 fb e8 63 b9 b3 ba 8d a1 96 21 bb 25 48 c1 f7 ac ea 46 72 83 51 dc d6 9c e0 a6 9c b5 5d 4f ca 1f da 93 e2 ee a3 e2 fd 66 7d 02 1b 96 9e 59 5b ce bc 6d df eb 0f 24 2f e9 fc 85 63 6b bf 01 67 f0 ff 00 c2 fd 27 c4 96 b1 5c 5d 5d ea 28 1a 48 99 30 b0 1c 13 81 8e bd 0f 51 fc ab 8d f8 f7 a2 1f 00 fc 69 f1 15 bd a4 92 cb 05 b6 a1 27 91 25 c1 dc cc 81 c8 1b bb 1f 4f c2 be f3 fd 9b 7c 61 e1 df 8c 9f 00 99 6e 6c 63 2d 61 23 41 71 66 ed bc c6 ea 72 a7 3c 70 41 04 1a f8 da 8e a6 09 46 dd f5 3f 4b c3 aa 58 a9 b7 2e da 2f 23 e2 0f 87 fa 7e Data Ascii: uW\WO+gxcT<aa?jF]mU,:g_YYo4c!%HFrQ]Of}Y[m$/ckg'\]](H0Qi'%O\|anlc-a#Aqfr<pAF?KX./#~
2024-01-15 13:24:07 UTC	1369	IN	Data Raw: 69 5a 6c 81 89 e3 38 f5 c1 fe 75 cd 5b ea 72 a8 0a 74 e1 0f 6c 30 61 fd 48 a9 96 e3 71 63 f6 29 54 9e 4f 96 5b 15 3e cc be 74 7c ed ab 6a da 52 c6 e6 74 9c bf 5c c8 db 03 7a 60 6e c9 ac 09 2f 9b 50 8b 1e 6c da 41 6e 3c c8 51 63 90 8f f7 88 e3 8f 43 5e 60 be 1b d6 66 04 1b 2f 31 87 f1 c6 c9 1b 7e 63 15 94 df 0f b5 cb 6d 45 2e a3 82 e6 19 33 9d eb 39 95 87 e7 90 2b df 8d 28 ae a7 99 29 c9 f4 3d e3 46 bd d6 f4 49 04 56 7a e4 b2 23 f0 16 f9 84 83 f0 cf f8 d3 bc 55 ac 4d 70 86 5b 82 86 76 51 bf cb 18 19 03 b0 ac af 03 cf a9 49 6a a9 a8 c1 e7 ac 40 15 b9 2e 99 1f 55 1f ce a2 f1 05 ca ce 92 9c e7 93 5f 11 9f e2 1f b6 8e 19 6c b5 7f a1 fa 0f 0d 61 17 b1 9e 29 ef 7b 2f d4 f0 1f 8a 7e 0b 93 c6 36 ba 85 f2 7c ef 6a a4 22 95 dd c0 e5 b1 cf 52 37 0e 95 73 e1 dd ab 49 Data Ascii: iZl8u[rtl0aHqc)TO[>t\|jRt\z`n/PlAn<QcC^`f/1~cmE.39+()=FIVz#UMp[vQIj@.U_la){/~6\|j"R7sI
2024-01-15 13:24:07 UTC	1369	IN	Data Raw: 72 7b 9c 63 af 5e d5 ce eb 46 8d e5 39 59 17 1a 33 ae d4 61 1b b3 be f0 77 c5 ed 3f c5 6d 3f 86 d5 ed ef a3 95 48 74 89 0a a9 18 ec 71 80 7d 39 af 3e d4 3c 5d 69 a6 eb b7 b6 09 2d a3 43 1c ac 91 5c 34 4b c8 07 a7 1d 7f 1a e2 fc 23 e3 0b df 0e 78 9e 3b fb e9 5a ca c5 08 26 d3 4f 41 1a c9 ff 00 5d 08 e5 80 f4 24 d7 6f e3 3f 0a 47 79 a6 a6 bb a1 79 7a 86 8d 74 7e 70 b0 ab 49 6a c7 b3 73 82 be 86 ba f0 18 fc 2d 5a ce 9c 2e af df ab 3c dc db 2e c4 d1 a1 1a b2 49 db 7b 74 43 a2 d5 60 95 48 33 58 bb 9f f9 f7 46 89 bf 98 fd 2b 3a ff 00 52 86 dd d9 a5 b3 4b 98 c7 5f 2a 69 37 ff 00 5a e4 7f b0 27 88 ee 8b 50 86 67 5e 44 51 98 62 75 fd 41 ad 3b 0f 11 5e 69 b1 95 9f 4d 13 22 fd e0 da 88 3c 7d 0f 15 f4 ca 29 6c 7c 77 33 7b 92 c5 e3 9d 0a ca e7 69 d3 f5 58 fd 54 5d ca Data Ascii: r{c^F9Y3aw?m?Htq}9><]i-C\4K#x;Z&OA]$o?Gyyzt~pIjs-Z.<.I{tC`H3XF+:RK_*i7Z'Pg^DQbuA;^iM"<})l\|w3{iXT]
2024-01-15 13:24:07 UTC	868	IN	Data Raw: 12 3e f7 38 e0 a8 e3 27 0c 0e 54 63 06 ba 0f 01 78 08 f8 83 c5 56 da 6f 82 6e 46 9a f7 52 88 ae b4 7d 46 09 19 51 41 f9 da 44 db d3 af ce 0f 50 01 c1 38 ae fb e1 07 84 6c fc 59 a5 dd db 5b 49 36 87 36 9d 64 96 d6 f2 58 b0 0a a8 9b 30 db 48 ce ff 00 94 0d d9 ed d2 bd 12 c4 0f 84 9f 0a fc 73 f1 07 9d 6f c4 56 11 4d 6c b3 ce c5 32 a9 c9 c0 e4 2e e3 82 70 07 41 5e 3d 2a b4 2a e1 da bb 97 6b f4 7e 5f f0 e7 bf 89 8e 26 8e 2b 9a ca 3d 1d b6 6b cf b9 cc fe d0 fe 33 d3 b4 7d 12 1f 85 de 0f 36 b2 dc 59 c4 ad 36 9e d3 f9 26 e0 1e 4a ab 11 82 c4 f2 41 39 c6 3d 6b e7 cb 9b 9d 43 40 b4 d4 ae 6e 7c 34 2c 22 b0 b6 7b 89 42 c6 c7 08 91 96 c9 38 23 07 07 fc 6b a1 d1 3c 55 63 f1 bb e1 c6 bd a8 de e8 e2 ca e8 08 ee e4 7f 3f 7b 34 aa 7f d6 02 aa 85 58 e7 92 0f e1 4d f8 c7 79 Data Ascii: >8'TcxVonFR}FQADP8lY[I66dX0HsoVMl2.pA^=**k~_&+=k3}6Y6&JA9=kC@n\|4,"{B8#k<Uc?{4XMy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49970	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	1619	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325032318&gcd=11l1l1l1l1&dma=0&tcfd=10000&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=0&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=2&tfd=17449 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 292 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:07 UTC	292	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4f 36 6f 78 65 69 2d 33 34 4d 44 46 61 69 37 30 51 51 64 55 73 63 4e 42 41 26 5f 65 74 3d 37 30 31 37 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4f 79 6f 78 65 69 2d 33 34 4d 44 46 61 69 37 30 51 51 64 55 73 63 4e 42 41 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4c 48 47 31 4f 71 2d 33 34 4d 44 46 52 75 37 30 51 51 64 47 7a 45 4e 63 41 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 49 4f 6a 31 2d 71 2d 33 34 4d 44 46 63 36 4b 30 51 51 64 6a 48 30 46 67 77 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 Data Ascii: en=ad_impression&ep.query_id=CO6oxei-34MDFai70QQdUscNBA&_et=7017en=ad_impression&ep.query_id=COyoxei-34MDFai70QQdUscNBAen=ad_impression&ep.query_id=CLHG1Oq-34MDFRu70QQdGzENcAen=ad_impression&ep.query_id=CIOj1-q-34MDFc6K0QQdjH0Fgwen=ad_impression&e
2024-01-15 13:24:08 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49972	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	741	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=MTI3NDIzNjYxMDIxOTI0MzU2Mg&google_push=AXcoOmRdmYmZ4OVmK1WG5fslHU1BHTIcfL-6QRefX15D6m5hLPjPx2TWTJh7FH_sniuBxHdo-HwmTjmqhzezdpa3vtcO1Vh0RU2rtXg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:08 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:08 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49973	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	627	OUT	GET /pixel?google_nid=innovid_ddp&google_push=AXcoOmRcl3WE9Z9eIAfAP1HYnew9jcUi0xD6DGbyc3XZDZGX8iKQjnntgvlNLSW8pczkbtYgzF8GEf5RXuZuJbq5Yze7QAamINVDtg&google_hm=zmxChuWcTpW_lcIfrRNX0w HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:08 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:08 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49957	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	642	OUT	GET /wp-content/uploads/2018/12/mylovelybluesky-icon-a-100x100.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:08 UTC	554	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:08 GMT content-type: image/png last-modified: Fri, 21 Dec 2018 14:47:32 GMT accept-ranges: bytes content-length: 3468 date: Mon, 15 Jan 2024 13:24:08 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:08 UTC	814	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 44 50 4c 54 45 47 70 4c 01 02 02 01 02 04 00 00 00 00 01 01 00 00 00 00 00 00 05 07 09 09 0c 11 00 00 01 00 00 00 01 02 03 04 06 09 00 00 00 88 b7 ff 01 01 03 02 04 06 79 a7 ec 63 9e f4 66 9c eb 76 a8 f2 4d 7d c5 1b 2c 45 84 b6 ff 60 94 e1 84 b3 fa 68 a3 fa 84 b5 fe 68 a3 f9 37 59 8d 86 b6 fe 42 61 90 5c 8b d1 63 a1 fb 67 8e ca 6d 93 cc 84 b5 fe 7f ae f5 53 7e c0 31 4e 79 85 b6 fe 70 a7 f9 81 b4 fe 5a 9d ff 76 ad ff 78 af ff 74 ad ff 72 ab ff 58 9b ff f9 f9 fa f3 f3 f3 e3 eb fa 6e a9 ff 6c a7 ff 68 a5 ff 56 9b ff 70 ab ff f7 f7 f8 7b b1 ff fb fb fc 70 a9 ff eb f0 f7 dd e9 fb f5 f5 f5 7a Data Ascii: PNGIHDRddG<efpHYs+DPLTEGpLycfvM},E`hh7YBa\cgmS~1NypZvxtrXnlhVp{pz
2024-01-15 13:24:08 UTC	2654	IN	Data Raw: ad ed 6e 8e c5 8d 31 4a f9 d0 42 ae e1 d1 a2 15 73 cd f7 d2 33 61 74 5f 6f ce 3c 97 70 28 de a5 c8 ff 0b e4 ba f1 17 33 58 c2 e1 d8 22 df 2b 08 d0 32 a4 4d 71 c4 c4 0c 57 f3 ea 5d 62 24 62 a1 69 96 70 24 65 38 81 58 a2 65 55 08 59 67 79 0c bc 13 a8 a9 ac 4d bf 03 c2 a1 58 42 fd 4f d1 9d 4e 25 14 59 33 2c 08 c1 a2 c6 11 aa 77 38 a1 9d a5 17 23 cb 58 0b 86 27 13 d9 ec aa 4f b9 60 3b 20 89 29 b7 2e 9b b4 24 b1 39 91 4a 28 92 a9 58 12 54 a9 fd 11 d4 c9 3e 57 54 32 91 b0 37 11 5f ca d8 b7 f6 a1 aa fb 16 54 cb da e7 cb f6 3d d1 42 f5 4e d0 98 ea 3e f7 be 6f 31 2b 55 4d 05 3d a9 c0 6e 49 89 e4 3d 81 e6 c5 38 3f 39 97 9f cc 29 ef 5d 91 48 cb 24 90 48 b2 c2 67 c9 22 ef 16 69 2c 0d 2c ab bb 08 7f 5f 74 65 4b 52 4b fd 7c 25 19 92 58 c2 a1 e0 9a ca 5c e4 f3 79 9d 89 Data Ascii: n1JBs3at_o<p(3X"+2MqW]b$bip$e8XeUYgyMXBON%Y3,w8#X'O`; ).$9J(XT>WT27_T=BN>o1+UM=nI=8?9)]H$Hg"i,,_teKRK\|%X\y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49958	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	638	OUT	GET /wp-content/uploads/2024/01/Teluk_Bahang_cover-768x513.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:08 UTC	557	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:08 GMT content-type: image/jpeg last-modified: Thu, 11 Jan 2024 12:30:07 GMT accept-ranges: bytes content-length: 155266 date: Mon, 15 Jan 2024 13:24:08 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:08 UTC	811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 fd 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 Data Ascii: JFIFdd,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:1
2024-01-15 13:24:08 UTC	14994	IN	Data Raw: 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 54 72 61 76 65 6c 20 28 46 61 63 65 62 6f 6f 6b 20 50 6f 73 74 29 20 2d 20 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 37 31 36 38 31 45 44 41 38 38 34 31 31 45 45 38 39 31 33 42 31 42 41 42 37 46 37 42 32 34 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 31 36 38 31 45 45 41 38 38 34 31 31 45 45 38 39 31 33 42 31 42 41 42 37 46 37 42 32 34 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 Data Ascii: ang="x-default">Travel (Facebook Post) - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:271681EDA88411EE8913B1BAB7F7B246" stRef:documentID="xmp.did:271681EEA88411EE8913B1BAB7F7B246"/> </rdf:Description> </rdf:RDF> </x:xmpme
2024-01-15 13:24:08 UTC	16384	IN	Data Raw: 29 29 c7 ae 73 fe 55 16 c9 a6 4b 41 25 9d 85 07 3d 73 51 4c 6c d9 74 23 ec bb a2 ed cd 28 b6 e3 63 21 49 ce 70 77 9e 84 74 35 92 e5 89 64 b6 bf 94 be 58 dc 65 50 13 15 b7 77 bb 1c 6d 5a 55 f8 87 3d ff 00 ce b4 c1 e6 28 e4 ea 62 d4 ce b4 ec 44 33 39 33 1c 69 0d 89 4e 0f d6 1c 76 1f 7a b5 b2 3b 5b 28 1a 82 cc f4 75 5c 6e fa 61 a9 32 a4 a4 07 7c 31 e5 41 09 4f 39 cf 0a 1c 13 eb ef 51 9c 77 77 37 55 26 96 18 1f 56 6f 9b a4 1d 7a 6a 5a 65 c7 12 da 96 94 ab 29 49 24 74 3e 9c d5 55 f1 3c 13 bf 3e 16 51 8a 5c 6d 8e 40 91 e2 c7 52 90 a6 d5 90 50 70 52 7d 52 7b 56 ee 0e 7d 56 b5 dc 26 75 b8 9d 6f 0d dd 06 64 b4 46 c9 08 4f f6 83 be 47 65 7f 3a ab c3 c3 e0 dc a7 94 0e 7b 56 9f c3 1a 30 18 ee e1 c9 fc a9 ed 62 ca 07 c8 bc 4f 97 9f 16 4a f6 9f d9 47 94 7f 0a 78 18 5b Data Ascii: ))sUKA%=sQLlt#(c!Ipwt5dXePwmZU=(bD393iNvz;[(u\na2\|1AO9Qww7U&VozjZe)I$t>U<>Q\m@RPpR}R{V}V&uodFOGe:{V0bOJGx[
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 3e e3 f2 aa a4 e3 f8 98 f1 ea d0 e2 b8 0a 33 21 0f a5 11 a5 20 3d 1d e4 23 f5 8b 58 29 0a 29 19 e7 b6 4f 6e 95 a3 49 64 94 30 b9 c3 ed ea 2c 7a 81 15 a7 9d 64 2d 56 d0 f3 12 a3 8c 94 0e 30 08 cf 90 f7 ff 00 09 cd 74 14 e1 73 d9 6a ca f7 ff 00 3b 32 51 60 b6 1c 58 f9 89 1e 21 85 32 32 92 e7 ea 93 b5 0b 07 8d e9 1f b2 46 4e e4 f4 20 e4 62 94 b4 f1 a6 71 52 e5 3e 13 7d fe df d9 f7 2c 4f 9c 04 a1 7c 56 10 e5 2a d1 aa 91 e2 01 cb 32 5b 4e e5 75 c6 14 07 3f 43 5d 5a 60 f6 a9 41 89 b5 da 40 7d 49 63 40 9d 28 c1 b8 46 98 d5 dd 49 f0 50 85 e1 69 52 94 4f 98 7d c0 cd 6c 84 df 66 54 e0 53 6d b1 57 02 ee 86 9e 8c b7 92 95 16 dd 00 14 84 f3 83 93 ed 56 36 8a b6 f3 82 e1 7f 5c 07 a0 26 3c 19 ab 71 7b 52 85 90 c1 4b 78 4f 43 95 1c 93 55 6e 23 1d 32 8c b7 22 c3 f0 dd 4f Data Ascii: >3! =#X))OnId0,zd-V0tsj;2Q`X!22FN bqR>},O\|V*2[Nu?C]Z`A@}Ic@(FIPiRO}lfTSmWV6\&<q{RKxOCUn#2"O
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 0c 92 99 6b b3 df 2c d2 1a 30 e3 dc d9 9f 05 c0 b0 ca 14 a1 e2 34 48 27 6e 0f f2 e8 6a 0d 34 4b 71 3a c3 15 09 8a dd a6 54 34 ad f8 ed 25 e6 06 41 f1 10 7a 94 13 d0 8e 98 3c 73 d2 ab 7c 8d 22 06 aa d3 f0 25 30 b9 2a 5a 02 d2 d2 92 d2 76 ec 4a b0 0e 50 38 f2 ab 3c ed 39 ea 71 d4 55 0e 29 3c 91 92 29 d3 ac f2 74 e2 a3 38 f7 88 d2 64 36 82 db cc 8c 85 83 ce 70 7f 68 7b 62 a3 3a db 58 65 7c 85 cb 4a 97 1d 0f 32 5c fd 58 fd 7a f0 01 c2 b8 e5 58 e4 9c 7b 57 3a 5e 54 e2 8b 12 c1 1d 0d b7 19 e7 d4 cb ab 29 3e 54 93 c0 6d bf 44 8e c4 91 9c f5 ac 53 96 56 dc 7f db 19 e6 1e f1 1f 60 e3 0d 87 11 8f ce 94 16 de 7d 40 44 e8 6d c9 48 6c 84 b6 e0 ce c5 8e 9d 7a 1a ba 36 b4 c4 d1 61 f8 52 a5 c7 7d f8 ae b6 9f d5 ac ef 4a ca 89 19 fe e8 e0 fb 64 57 7f 4b 2c d7 91 c3 80 56 Data Ascii: k,04H'nj4Kq:T4%Az<s\|"%0*ZvJP8<9qU)<)t8d6ph{b:Xe\|J2\XzX{W:^T)>TmDSV`}@DmHlz6aR}JdWK,V
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 65 82 3f b4 47 9b 20 ff 00 de fe 15 24 c5 80 1b 76 a1 22 dc 9b 24 a5 17 de 80 85 31 bd 43 95 b6 54 3c 35 7f dd 38 fa a4 d5 91 ad 4a 2f 26 6b a7 b1 22 92 98 7f 37 11 70 e4 78 25 71 9f c2 15 8c 1f 61 c7 20 e6 b9 73 83 83 69 16 27 b9 64 52 c3 ce b5 0e 6c 75 46 08 6d 6e b6 a6 54 9c 94 a9 24 6e dc 3b e4 64 e0 fd aa ca a4 a1 f3 2f 61 35 c0 4a d6 a5 4a 71 22 7b 4b 5b 7e 17 86 db bc 2b 62 02 96 78 ee 52 4a 86 33 c8 c5 6c d4 45 d8 b8 45 70 49 3e 45 5e f4 74 3b 93 6a 45 9a e8 95 a5 b5 12 86 1f e7 04 9e 40 3d ab 6d 51 e1 49 ae 5a 33 4e 2f 38 45 24 d9 a4 c6 84 3c 46 17 86 d4 b4 2d 49 1b 80 50 51 18 cd 5a 2c 35 dc d0 fe 11 c0 dc 84 38 90 42 7c 42 95 2c 27 f8 66 aa 9f a9 bf 4b f2 14 6f 8b 16 d4 af 5d 5d 7c db b0 a4 f3 8c 76 a7 4b f2 99 35 33 f3 b2 86 fd a9 43 27 6d 5a Data Ascii: e?G $v"$1CT<58J/&k"7px%qa si'dRluFmnT$n;d/a5JJq"{K[~+bxRJ3lEEpI>E^t;jE@=mQIZ3N/8E$<F-IPQZ,58B\|B,'fKo]]\|vK53C'mZ
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 5a 69 78 46 57 17 bf 25 85 0e 78 99 29 39 04 9c 63 eb 54 cf b9 a9 0e 83 ea 73 50 03 c9 e3 24 d3 02 04 f0 53 7b 82 bf de 8e e6 0f fd b1 5a 68 f9 59 ca ea cb c8 81 97 db 7c cb 8c d1 1e 04 57 a4 bc 50 a0 10 ca 77 1e 54 3f 2a d3 05 c1 c5 a6 2e 5d 90 60 7c 29 d5 93 6d 50 d0 21 34 ca c2 d0 a5 07 5d 00 80 08 cf 15 34 8d 6b 4b 63 6d 84 6d bf 01 a5 4b 0e 0b ed c5 a6 99 5a d2 a2 dc 51 95 10 14 4f 53 d2 99 a2 bd 23 cf 98 d1 ac fa 2b 4f e9 a6 1b 45 be da c2 56 9f f7 ae 27 7a cf dc d0 6c ae a8 c7 b2 0e a5 45 43 71 ef 9a 58 2f 24 46 3c 0c 91 c5 03 47 25 ff 00 6c 71 8e 82 80 19 02 81 0e 30 7f 5c 8f ad 21 a0 82 94 47 41 f7 a8 81 cc f1 93 d7 d6 9a 03 9c 1a 62 1a 0c 36 b5 af 72 7b 8c 7b 50 02 55 0c 1f c2 bf ce 98 64 6f e5 d6 d9 2a 29 51 f4 da 68 03 8d 65 0b 51 c7 3b 4f 51 Data Ascii: ZixFW%x)9cTsP$S{ZhY\|WPwT?.]`\|)mP!4]4kKcmmKZQOS#+OEV'zlECqX/$F<G%lq0\!GAb6r{{PUdo)QheQ;OQ
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: d4 f1 df ad 55 a8 ab 62 8c a1 ea 4d 60 2f 6d 8e c9 b2 c6 8a b9 6d a0 aa 62 1b 8e e9 25 1b 16 72 42 86 73 92 0a 47 41 83 8c 75 34 a3 a7 9c 9e f8 f7 44 8d 33 44 df 1a b2 6a c9 8d 26 7b 6b 82 fb 69 3e 0f e0 da b5 79 f2 8e d8 fc 47 1e 84 54 9f 92 dd be e3 5c 36 16 d7 73 5a 9b 78 87 e1 ad 2b 1f 2e b5 f9 54 0f ed fd 6b 74 1c 63 1c 64 9a 01 43 75 30 ed 97 07 5c 4a 1e 79 4e a7 05 5f b0 92 15 8e 9e e3 1f 7a 94 e6 a3 54 9f d0 87 3e 24 4a 6e af 4c b4 03 32 00 6d 2a 46 d2 46 54 00 4a ba 1c a4 83 d5 38 fb 9a e0 f4 1b a2 f5 12 83 f5 ed f9 1d 1e aa dc 68 56 63 38 33 6b 8e b0 d4 cc 45 92 ca 8c 65 b5 b4 87 30 c2 54 76 9e de 60 4f df 35 ec 94 23 9e 11 c1 f1 b7 3f b9 58 84 64 c3 91 1e 6c 59 0e b0 f2 12 14 85 20 80 52 73 f4 a6 d2 7e 56 5f 1e 0d 4f 42 6a 2b 96 a0 9a ca 6e d7 Data Ascii: UbM`/mmb%rBsGAu4D3Dj&{ki>yGT\6sZx+.TktcdCu0\JyN_zT>$JnL2m*FFTJ8hVc83kEe0Tv`O5#?XdlY Rs~V_OBj+n
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 4d 3a 20 b6 d1 bb c2 49 76 22 96 9f ed 31 d5 b3 f5 ed ef 49 c1 31 e4 cc bf d1 b7 e2 cb ad 4e ff 00 50 ef d9 8e e2 56 a4 c1 2e 9e 50 ac f9 99 39 e9 cf 4f ca 9e 30 84 99 f4 5b d2 8a 1d 5a 42 41 c1 a5 80 2b 53 5d b2 7c 47 d3 b7 0b 7c 57 d9 98 c1 5a 99 53 8d 1c f8 2f 24 9c 1f 62 0f e6 28 71 ca c0 f7 60 f9 fd 8f 87 b7 34 dd 98 81 76 f0 a2 f8 ce 29 a5 3a ca 54 b4 a0 80 4f 39 03 19 c5 65 93 4b 26 88 41 b5 96 4f 9f a5 e7 c8 8c c4 29 6d a6 74 6b 56 e6 3c 78 48 da e2 5b 51 c8 25 24 79 bf 3a 5b e2 c9 3a b0 55 ee 1a 62 6c 68 6f 4d 62 d9 71 91 11 b0 72 a5 46 28 73 19 c6 76 9e bd 7b 53 58 7c 64 83 83 5d 90 37 5a 5f ed 70 af c5 b9 81 f4 3b f2 d1 73 fa be 98 61 b0 47 d7 22 a5 08 49 c4 ad c9 a7 c8 29 bd 47 61 74 84 a5 f5 03 ee 83 52 f0 e4 2d c4 69 f7 6b 34 86 54 96 a6 23 Data Ascii: M: Iv"1I1NPV.P9O0[ZBA+S]\|G\|WZS/$b(q`4v):TO9eK&AO)mtkV<xH[Q%$y:[:UblhoMbqrF(sv{SX\|d]7Z_p;saG"I)GatR-ik4T#
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: b5 07 c5 e9 d7 5b 75 f6 da 6d ee 6d 79 5e 1c 45 36 9c 6d 48 56 08 57 ae 40 cf de be b5 d3 7e 10 af 4b 6e 9f 55 07 cc 79 92 7e ed 7a 7d bb 1e 67 51 d4 dd 8a 75 3e cf b1 9f b7 3a 42 dc 01 c8 0e f3 c9 f2 80 49 af 72 72 53 43 ef 48 52 da d8 b8 72 0e e0 52 40 38 c0 c1 1c 1c d2 06 d1 f6 62 80 20 61 35 51 a4 e2 12 52 a1 9a 00 53 a3 20 62 81 08 23 14 0c e2 13 b9 78 3d 3b 9a 00 79 69 2d b8 b4 9e a0 e3 ed 40 09 2d 10 95 1f bd 00 78 30 b0 9d c3 9e 33 8a 40 8e 04 83 92 46 68 26 8a 57 c4 eb 06 9f 67 4f dd b5 34 ab 1c 29 b7 16 19 49 4b 8f 83 e6 c1 00 03 83 e9 5b f4 57 db bd 54 a5 c1 8f 59 54 36 39 b5 93 3e 89 a5 25 4c 8c cc 94 58 b4 3a 52 ea 02 c2 57 20 82 01 1d 0f 3c 57 4a 77 45 49 a7 29 fe 87 3a 15 e5 29 28 af d4 91 fe a7 cd 3c 7e 82 d0 7f 79 07 fc ea b7 a8 5e 92 97 Data Ascii: [ummy^E6mHVW@~KnUy~z}gQu>:BIrrSCHRrR@8b a5QRS b#x=;yi-@-x03@Fh&WgO4)IK[WTYT69>%LX:RW <WJwEI):)(<~y^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49956	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	640	OUT	GET /wp-content/banners/travel-with-mylovelybluesky-vertical.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:08 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:08 GMT content-type: image/jpeg last-modified: Wed, 08 Nov 2017 15:52:30 GMT accept-ranges: bytes content-length: 74414 date: Mon, 15 Jan 2024 13:24:08 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:08 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 2d 4f 70 74 69 6d 69 7a 65 64 20 62 79 20 4a 50 45 47 6d 69 6e 69 20 33 2e 31 33 2e 33 2e 31 35 20 30 78 38 62 65 37 62 63 33 64 00 ff db 00 43 00 03 01 01 03 01 01 03 03 03 03 03 03 03 02 05 08 05 05 02 02 05 0a 07 07 05 08 0c 0a 0c 0c 0b 0a 0b 0b 0c 0e 12 0f 0c 0d 11 0e 0b 0b 0f 15 10 11 13 13 14 14 14 0c 0f 16 18 16 14 18 12 14 14 13 ff db 00 43 01 03 03 03 05 02 05 09 05 05 09 13 0d 0b 0d 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 ff c0 00 11 08 02 58 01 04 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 03 04 09 02 01 Data Ascii: JFIFHH-Optimized by JPEGmini 3.13.3.15 0x8be7bc3dCCX
2024-01-15 13:24:08 UTC	14994	IN	Data Raw: ef 15 79 8f 83 e3 8b 25 c9 ac 82 a1 53 71 b0 bf c6 fe 3b 2f 7e bf 12 b2 db 8f 11 ff d0 e9 7e 49 d7 68 77 3e 56 53 5d b7 ea 4c 55 a8 e2 c0 84 7a ac 39 4b 25 1c 04 4d 13 e3 15 49 49 74 f3 55 d7 0d c4 e9 8a f9 3f 31 2b 30 82 a2 8e a1 d2 a9 2d 7f 9f 0e 6b 7f 08 e4 c3 84 53 87 5c 5a 7f ce e6 fe ff 00 ac 95 3f f7 c7 71 dd f2 ef 92 c5 dc 5f 64 c3 d4 7c 6b fd a3 5b 13 06 8f ff d1 ac 98 f4 19 82 0c 00 18 00 30 01 ff d2 ac 98 f4 19 82 0c 00 18 00 30 01 ff d3 ab ed cc 6d d7 36 8b 80 45 ed 6c 6c 93 c3 1e 85 b5 8e 7e 1e b0 6f 97 bb 98 1b 4f c3 bd 84 da 06 5c 02 cd fb 5f 2d eb 37 e4 29 0e d2 68 b5 8a b3 54 dd a2 f4 9b 7e 13 af a3 2a bd 51 09 41 17 4d 71 16 7a ea 7c b6 c4 9a 54 4b b8 99 54 76 28 1e 6d c4 b8 ff d4 ac 75 46 ca 83 50 e4 4c 66 4c 17 fd 9e cd 54 6c 99 3d 7e Data Ascii: y%Sq;/~~Ihw>VS]LUz9K%MIItU?1+0-kS\Z?q_d\|k[00m6Ell~oO\_-7)hT~*QAMqz\|TKTv(muFPLfLTl=~
2024-01-15 13:24:08 UTC	16384	IN	Data Raw: d2 bc c6 ad bd 5c ba 33 09 b7 18 62 39 93 a7 dd 19 3c b5 05 1d 7e 52 a7 bb 0b 96 2a 7a 31 37 b0 bd 33 84 7a cc fa 1b 92 ab 2e 04 ee c6 22 48 10 e4 8b 6b d5 7b c8 aa 5a a6 18 5c ce 2b bc 88 bd 83 12 46 59 e4 1d 03 2f a4 33 22 9d 4b ec 32 39 7b bb 4c 81 5e 60 a1 22 6a 8a aa b8 a8 9e ba 5a cd 0e e4 b5 89 0f ff d2 7a 54 39 fd 9c b6 f7 5a f3 e6 16 3a 0d e5 20 cd b9 2e 40 81 33 68 89 bc 61 f8 b0 ea b0 87 10 db a8 2c 59 04 e9 b7 dd 0e f6 cf a7 0e dc 26 d3 c3 b7 69 b8 f1 10 36 c8 a1 ae ab dd f1 5f 7e 00 3f ff d3 ba 8e 7d d4 be fb 1f 9f d3 ef b9 d6 14 47 f4 8d 7a 46 dc f4 7e d6 2c 4a 74 2b 1a a3 7d d5 b3 72 53 d0 e1 50 68 12 c1 87 05 c6 c4 17 6f 78 57 7e ed ff 00 57 1f a1 19 76 59 15 64 57 f8 96 dc 17 ab 81 cb 25 95 ae 21 fa 27 e8 8b 4a e1 96 dd 35 ac 97 ba 4a e7 Data Ascii: \3b9<~R*z173z."Hk{Z\+FY/3"K29{L^`"jZzT9Z: .@3ha,Y&i6_~?}GzF~,Jt+}rSPhoxW~WvYdW%!'J5J
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: af bf 45 5f 1c 02 ee 3f ff d6 ba 8f fc bc 7e 7e 49 d7 3a c2 90 47 e8 9c 66 0c 0f 45 1d a6 e9 b2 72 81 9b aa 9a 45 05 b1 d5 5c 44 69 f5 da 89 e7 af 86 3d ff 00 f0 63 fc ae 8b ee 93 f2 9c cb 34 f9 44 bd f1 ab 2b d2 43 95 bc f5 ff 00 91 65 ea 3f 53 e0 3c 51 fe 6d 98 d5 2d 2d 4f fd 47 fb 90 ae ec 88 de 8f ac e8 a1 67 af e8 86 a9 75 1b 7b 2c 6a 99 55 09 9b 1e 4b 25 64 dc 94 b0 a7 b8 f3 88 e2 aa be 8d 82 22 2a 12 28 8e ef 3d 98 55 5c 4f 05 16 b7 bb c7 fa 4f 9c fc e7 ff d7 bc 37 bf f6 71 3f fc 32 e3 c4 fc b8 fe 7f 98 7d e3 1d 2b 2c f9 2c 5f 61 48 1d b8 2a 16 be 72 5c 87 3e 60 76 5f 5b 4c 25 39 04 aa 8d b6 52 1c 40 fa 7a 79 f9 26 3a 9c 70 43 59 4b 16 cd 3c 7c cb ec 9c bb 30 6d b5 44 b6 7d 2c 40 3e 90 cc e1 9f 4f cd 46 e2 c5 8b 26 3d 2e 8e 5c e5 99 20 be 26 5c 95 Data Ascii: E_?~~I:GfErE\Di=c4D+Ce?S<Qm--OGgu{,jUK%d"(=U\OO7q?2}+,,_aHr\>`v_[L%9R@zy&:pCYK<\|0mD},@>OF&=.\ &\
2024-01-15 13:24:09 UTC	16384	IN	Data Raw: 5a 7b d3 25 4f 92 dc b4 81 1f e3 1e 6d 1b d3 68 8b 8b d7 6f 4d 17 df 89 aa ab 96 c5 63 b8 c6 b9 9c 7b 51 f8 89 af d2 e6 54 2a ec 5b b5 27 9a 9e 2d c4 75 e9 92 49 19 8c e9 b8 a6 88 9a 27 5d ce 6e e8 7f 66 20 35 24 5a 23 bc 7f 6e fb e7 ff d0 58 b4 f3 a2 ec a5 b7 1e 0b 56 9c 97 1f b1 9b 65 ed 91 dc 50 72 33 60 ae 10 91 a2 78 eb ab 9d 7c b6 74 e9 8e a3 2d 2d 3e 3a f6 bb c6 69 65 7e 0d d3 35 c1 c5 25 7e b3 0e 54 a2 b3 cc 61 df 3b 8d 89 32 35 7f 99 17 92 80 4d 8a aa 75 45 0e 5a aa e1 2b 43 17 f9 bb be d0 a6 9d b8 06 de 68 5c 97 06 65 fa be a9 22 d7 99 15 9b 19 87 23 bf 25 b1 70 10 50 51 1b 2d c6 9a 10 20 aa 75 4f 7f d1 89 50 2c 54 77 a5 fb c3 12 df 37 53 74 62 d1 ed f7 ea 8d 90 c7 64 e4 76 66 f7 39 d9 c7 5d a8 9d 35 5d 31 60 cc 31 61 ff d1 65 d5 32 ee a9 41 b6 Data Ascii: Z{%OmhoMc{QT*['-uI']nf 5$Z#nXVePr3`x\|t-->:ie~5%~Ta;25MuEZ+Ch\e"#%pPQ- uOP,Tw7Stbdvf9]5]1`1ae2A
2024-01-15 13:24:09 UTC	9456	IN	Data Raw: 70 1a 06 d8 f5 25 f5 94 50 a9 f0 d9 7e 56 4d 56 96 2f 90 03 9b 9a aa f3 9d 84 9b 74 e8 bc b7 57 4f f8 e1 2b 2c 5d 71 d6 cb aa a6 dc fd 23 9e 8b 67 dd f6 65 90 d9 d7 29 a6 f3 ac 96 cf 59 5b 92 de 71 e2 4f 79 a3 48 49 af d6 d3 0d 33 2c db 84 e8 a2 a8 85 3c b2 09 57 37 17 52 f2 86 bb d9 66 0d db 0f ba 26 2e 48 21 78 09 15 3e 6b e0 9f eb c2 96 9b 6c 46 93 33 e8 8f e5 2f f7 ef 1f ff d7 a6 ff 00 d5 13 8c 42 3a 46 29 5d 3a c8 91 4f 01 5f c4 0e 69 84 74 43 55 e1 d4 f7 53 b3 ce 7b 65 f7 d8 f0 13 6f 9a e5 06 fe eb 84 03 15 5b 3d bd 3e d4 3e 1f b3 7a e0 b7 2a 56 5d 54 66 da ae 72 82 4f ae 21 8b 32 49 09 04 bb fa a8 86 9b 85 74 d5 7e 9d b8 ea b9 57 c1 6d 46 7b 4f 15 54 35 0b 6b f6 1f 49 9a 9b 3b d8 b3 25 a7 ff d0 b7 79 39 99 8d 67 46 53 51 eb ec 33 d9 58 b9 e3 04 a6 Data Ascii: p%P~VMV/tWO+,]q#ge)Y[qOyHI3,<W7Rf&.H!x>klF3/B:F)]:O_itCUS{eo[=>>z*V]TfrO!2It~WmF{OT5kI;%y9gFSQ3X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49974	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	850	OUT	GET /pixel?google_nid=owneriq1&google_sc&google_push=AXcoOmRfk3Bxs_Sbl_E6Flm5bXGgK4G1tb3a-vwRD-AXeHcvvmthsefZhnmA4QYs4BkwXgECX-2muWWGUTA84WyEnvCbdAEDVQwElQ&google_cver=1&google_gid=CAESEITSmp977taxVGXtUwfhpwg&google_hm=UTc1ODYxMTQ0NTE0NTg4NDI0MjE= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4Vpu0PvGiv6zBqo65uaVM5zn5HgqRfCV_MZR1vU_XXFnZOLQ
2024-01-15 13:24:08 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:08 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49975	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:07 UTC	800	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQvis-t3_6M4QEWDBG_KHgmNpfrYG3utLScePpT0XUhvezDgkECHNSG5Ud6V3JQ02WA0SAzggh07t82ukwqMFIhV6vAKANsjw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4Vpu0PvGiv6zBqo65uaVM5zn5HgqRfCV_MZR1vU_XXFnZOLQ
2024-01-15 13:24:08 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:08 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49982	192.0.73.2	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:08 UTC	392	OUT	GET /avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g HTTP/1.1 Host: 2.gravatar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:08 UTC	534	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 15 Jan 2024 13:24:08 GMT Content-Type: image/jpeg Content-Length: 6435 Connection: close Last-Modified: Sun, 25 Jun 2017 15:07:06 GMT Link: <https://gravatar.com/avatar/edad71c0d5b089917bad4ed31186388d?s=125&d=mm&r=g>; rel="canonical" Content-Disposition: inline; filename="edad71c0d5b089917bad4ed31186388d.jpeg" Access-Control-Allow-Origin: * Expires: Mon, 15 Jan 2024 13:29:08 GMT Cache-Control: max-age=300 X-nc: HIT dca 4 Alt-Svc: h3=":443"; ma=86400 Accept-Ranges: bytes
2024-01-15 13:24:08 UTC	835	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 39 30 0a ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 00 7d 00 7d 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90CC}}"
2024-01-15 13:24:08 UTC	1369	IN	Data Raw: 16 df 6a 5d be d4 fc af a8 a5 e2 8b 8f 91 74 22 c5 1b 7d a9 ee c8 83 e6 20 7e 35 11 bc 84 0f bc 28 57 7b 09 a8 ad d8 fd 9e d4 6d f6 a6 a5 cc 4f 9c 38 1f 5a 77 9f 10 ea e2 8d 7b 0d 28 6f 73 8a 5f 10 b3 75 62 07 e5 52 c5 ad b7 55 63 f9 d7 29 1d f3 64 65 b7 67 b1 15 65 2f 98 72 4f 1d 3a 67 15 eb fb 14 79 3e dc eb 23 d7 a4 c7 0d 9f ad 39 f5 bb 89 01 01 d5 7d c0 e6 b9 91 7d 22 8c 29 19 cf 70 0d 58 8f 50 72 39 da ac 7a 7c a2 93 a0 96 b6 2b db 5f a8 9e 2e d7 9b 44 f0 fd ee a3 23 b4 cd 0a 65 23 63 c3 39 e1 47 e6 45 7c 7f e3 69 75 2f 11 6a 72 de df ce d7 57 32 1e fc ed 1d 94 0e 80 7b 57 b2 fe d0 7f 15 74 df 0a e8 5f 63 b8 bb 85 24 5f df 4e a4 80 23 40 32 a5 8f 6e 79 c5 7e 66 fc 58 fd af 75 ff 00 12 ea b2 e9 7e 0d 61 63 64 5f 60 bf 65 1e 64 84 f7 50 78 51 ee 46 7e Data Ascii: j]t"} ~5(W{mO8Zw{(os_ubRUc)dege/rO:gy>#9}}")pXPr9z\|+_.D#e#c9GE\|iu/jrW2{Wt_c$_N#@2ny~fXu~acd_`edPxQF~
2024-01-15 13:24:08 UTC	1369	IN	Data Raw: f4 63 c6 ef 63 59 97 9a a3 5a 48 4a d8 df 46 14 9c b8 84 b7 e4 49 38 ae 57 c5 1f 64 d7 05 9d cb c5 21 36 85 9f 6d ca 6d 62 c4 60 7e 15 e5 66 55 2a 50 c3 ba 91 67 bb 93 50 a3 8a c5 aa 55 15 d5 9b fb 8f cf ff 00 da d6 0d 3f 50 f1 46 af aa da db c9 14 06 e1 21 82 49 01 f9 86 d2 e4 9c f3 b9 99 c9 39 e7 80 7b d7 95 fc 16 f8 cf af fc 0d f1 23 6b 1a 4f fa 46 9f 39 10 df d8 cd 9f 26 e5 3a e0 9e cc 39 c1 ea 3e 84 8a f6 ff 00 da fb 43 b7 48 d2 ea c6 de 3b 4b 89 66 df 72 d1 1d be 77 07 1b 94 70 c7 dc f4 e6 bc 73 c0 bf 07 35 8f 19 f8 6d ef 60 9f 1a 7a 5d 08 bc ac 12 1a 4c 64 91 ce 06 00 19 e3 bd 7c f5 18 fb 7a 6d 4b 5b ee 7d 7d 6b d1 ac 95 3d 2d 6b 1f a1 9a d6 bf a4 eb 7e 11 b0 d7 2d 40 8a c6 e2 d9 2e d5 82 6e 3e 59 5d dd 47 b5 7c c1 a8 7c 5a 8f e2 e7 88 96 28 ec ee Data Ascii: ccYZHJFI8Wd!6mmb`~fU*PgPU?PF!I9{#kOF9&:9>CH;Kfrwps5m`z]Ld\|zmK[}}k=-k~-@.n>Y]G\|\|Z(
2024-01-15 13:24:08 UTC	1369	IN	Data Raw: a7 f6 93 c7 20 39 02 78 88 cf d3 73 62 ba df 9a 38 6f ae e3 e4 f1 7e ad 2a 8d d3 e9 8c 07 42 48 6c fe 64 54 67 55 9a ec ef 9e cf 47 b8 7f ef 24 a6 3f d0 13 fc ea cc 77 d7 71 39 5b 88 e4 d4 17 3c 9f b0 29 fd 40 22 af 2c c8 ca 37 69 12 0f 40 2d b6 7e 81 85 43 e5 5f 64 a5 77 d4 f8 3f fe 16 9f 88 96 51 b3 4b bd 98 0e 1a 08 b6 e0 7e 9b bf 33 5a 71 7c 4a 9b 50 88 24 b6 77 56 53 af 58 db 27 eb d0 d7 d1 7e 28 f0 37 c3 6f 8c 68 0b cd 6d fd a0 46 52 e6 ce 61 05 c2 9f 52 3b ff 00 c0 81 af 24 d7 7f 65 6f 13 f8 72 f3 cf d1 f5 85 d7 f4 f5 e9 15 c2 ec b8 51 e9 d7 0d f8 11 4e 8e 61 46 6e d5 17 2b f3 3a eb 65 f5 a1 ef 53 7c cb c8 ce f0 5f 8d 75 4b 5b e0 52 78 af ac 5f e5 92 d6 e6 22 ac 80 ff 00 75 c0 e0 fb 1e 2b bb d3 f4 43 ae 5c 3a 2c eb 1a 91 bb cb 95 4e f2 3d 87 43 f9 Data Ascii: 9xsb8o~*BHldTgUG$?wq9[<)@",7i@-~C_dw?QK~3Zq\|JP$wVSX'~(7ohmFRaR;$eorQNaFn+:eS\|_uK[Rx_"u+C\:,N=C
2024-01-15 13:24:08 UTC	1369	IN	Data Raw: 53 54 9f 4f d4 fd c5 26 29 74 d8 55 48 90 87 2e 19 4e 46 18 f3 83 f5 c5 70 fa ac 66 d7 52 91 5f 3b 83 64 9a fc 76 d1 fe 22 f8 8b c2 f7 d0 4d a4 eb 57 fa 7b 47 22 cc a9 05 d3 ac 65 81 c8 ca 83 83 d3 bd 7b 4e b1 ff 00 05 03 f8 b5 a8 c0 a2 2b 8d 22 ca 40 3e 69 ad b4 e5 2c e7 d4 ef 2c 3f 20 2b cd 87 bb b9 ea bd 76 3f 4a ac 24 69 e6 0b 0a 92 c3 bf bd 69 f8 a2 5d 27 47 f0 e4 b0 5f 4d ff 00 13 2e 19 15 41 24 7a 83 f5 af ca ed 47 f6 e5 f8 c3 7f 6c 52 3f 11 43 63 9e ad 69 63 04 6e 7f e0 5b 49 1f 85 7e 98 7c 23 f8 91 e0 8f da 47 c1 36 1a a6 8b aa db 4b aa 34 09 f6 ed 32 69 00 b9 b6 9b 03 72 b2 1e 48 ce 70 dd 08 a8 a9 1a 75 53 a7 3d 99 a4 2a 4e 94 94 e1 ba 38 1b 8b db 7d 53 18 cc 67 1f 75 d4 83 5a fe 0e f1 dd c7 c3 b9 ee 1a 48 d2 f3 44 99 0a dc d9 4c 7e 47 53 d7 83 Data Ascii: STO&)tUH.NFpfR_;dv"MW{G"e{N+"@>i,,? +v?J$ii]'G_M.A$zGlR?Ccicn[I~\|#G6K42irHpuS=*N8}SguZHDL~GS
2024-01-15 13:24:08 UTC	124	IN	Data Raw: dc 2d 79 57 c1 46 74 1e a9 ea 9f e4 75 9a 9e 8d e2 9f 13 58 5a a6 ad 6b 0d e0 b2 7f b5 35 c6 94 c2 68 6e d9 06 54 3a 8e 50 86 c3 fd d0 09 41 c0 ef cd 3e 9f 75 20 0c 91 c6 ce 73 bb 74 84 30 e4 e0 10 dd 2b d3 a4 d3 12 29 4c f6 b2 49 69 32 9e 1e 16 2a 6a ab f8 aa ea 29 59 6e ad ec b5 19 06 07 9d 75 6e a5 f1 ee 46 33 f8 d6 f4 e1 a5 a0 ee bc cf 32 ad 44 dd dc 52 f4 3f ff d9 Data Ascii: -yWFtuXZk5hnT:PA>u st0+)LIi2*j)YnunF32DR?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49881	5.161.188.99	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:08 UTC	775	OUT	GET /match/google?google_gid=CAESEFJn_9FjZPk4vKX-Zmn7wCE&google_cver=1&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:08 UTC	464	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jan 2024 13:24:08 GMT Content-Length: 0 Connection: close Location: https://sync-dmp.mobtrakk.com/match/google?google_gid=CAESEFJn_9FjZPk4vKX-Zmn7wCE&google_cver=1&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49984	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:08 UTC	1089	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:08 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 15 Jan 2024 13:24:08 GMT Date: Mon, 15 Jan 2024 13:24:08 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-5E5Oy65vuutbMx-939FStw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:08 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 35 45 35 4f 79 36 35 76 75 75 74 62 4d 78 2d 39 33 39 46 53 74 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="5E5Oy65vuutbMx-939FStw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-01-15 13:24:08 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2024-01-15 13:24:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49985	5.161.188.99	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:09 UTC	796	OUT	GET /match/google?google_gid=CAESEFJn_9FjZPk4vKX-Zmn7wCE&google_cver=1&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y&chk=1 HTTP/1.1 Host: sync-dmp.mobtrakk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chk=1
2024-01-15 13:24:09 UTC	511	IN	HTTP/1.1 302 Found Server: nginx Date: Mon, 15 Jan 2024 13:24:09 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=992917243&google_hm=NTNmOGJjN2VhODlhYjlhNg&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y Set-Cookie: pid=NTNmOGJjN2VhODlhYjlhNg; expires=Tue, 15 Jul 2025 13:24:09 GMT; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49988	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:09 UTC	877	OUT	GET /wp-content/uploads/2018/12/mylovelybluesky-icon-a-100x100.png HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
2024-01-15 13:24:10 UTC	554	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:10 GMT content-type: image/png last-modified: Fri, 21 Dec 2018 14:47:32 GMT accept-ranges: bytes content-length: 3468 date: Mon, 15 Jan 2024 13:24:10 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:10 UTC	814	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 01 44 50 4c 54 45 47 70 4c 01 02 02 01 02 04 00 00 00 00 01 01 00 00 00 00 00 00 05 07 09 09 0c 11 00 00 01 00 00 00 01 02 03 04 06 09 00 00 00 88 b7 ff 01 01 03 02 04 06 79 a7 ec 63 9e f4 66 9c eb 76 a8 f2 4d 7d c5 1b 2c 45 84 b6 ff 60 94 e1 84 b3 fa 68 a3 fa 84 b5 fe 68 a3 f9 37 59 8d 86 b6 fe 42 61 90 5c 8b d1 63 a1 fb 67 8e ca 6d 93 cc 84 b5 fe 7f ae f5 53 7e c0 31 4e 79 85 b6 fe 70 a7 f9 81 b4 fe 5a 9d ff 76 ad ff 78 af ff 74 ad ff 72 ab ff 58 9b ff f9 f9 fa f3 f3 f3 e3 eb fa 6e a9 ff 6c a7 ff 68 a5 ff 56 9b ff 70 ab ff f7 f7 f8 7b b1 ff fb fb fc 70 a9 ff eb f0 f7 dd e9 fb f5 f5 f5 7a Data Ascii: PNGIHDRddG<efpHYs+DPLTEGpLycfvM},E`hh7YBa\cgmS~1NypZvxtrXnlhVp{pz
2024-01-15 13:24:10 UTC	2654	IN	Data Raw: ad ed 6e 8e c5 8d 31 4a f9 d0 42 ae e1 d1 a2 15 73 cd f7 d2 33 61 74 5f 6f ce 3c 97 70 28 de a5 c8 ff 0b e4 ba f1 17 33 58 c2 e1 d8 22 df 2b 08 d0 32 a4 4d 71 c4 c4 0c 57 f3 ea 5d 62 24 62 a1 69 96 70 24 65 38 81 58 a2 65 55 08 59 67 79 0c bc 13 a8 a9 ac 4d bf 03 c2 a1 58 42 fd 4f d1 9d 4e 25 14 59 33 2c 08 c1 a2 c6 11 aa 77 38 a1 9d a5 17 23 cb 58 0b 86 27 13 d9 ec aa 4f b9 60 3b 20 89 29 b7 2e 9b b4 24 b1 39 91 4a 28 92 a9 58 12 54 a9 fd 11 d4 c9 3e 57 54 32 91 b0 37 11 5f ca d8 b7 f6 a1 aa fb 16 54 cb da e7 cb f6 3d d1 42 f5 4e d0 98 ea 3e f7 be 6f 31 2b 55 4d 05 3d a9 c0 6e 49 89 e4 3d 81 e6 c5 38 3f 39 97 9f cc 29 ef 5d 91 48 cb 24 90 48 b2 c2 67 c9 22 ef 16 69 2c 0d 2c ab bb 08 7f 5f 74 65 4b 52 4b fd 7c 25 19 92 58 c2 a1 e0 9a ca 5c e4 f3 79 9d 89 Data Ascii: n1JBs3at_o<p(3X"+2MqW]b$bip$e8XeUYgyMXBON%Y3,w8#X'O`; ).$9J(XT>WT27_T=BN>o1+UM=nI=8?9)]H$Hg"i,,_teKRK\|%X\y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49989	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:09 UTC	875	OUT	GET /wp-content/banners/travel-with-mylovelybluesky-vertical.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
2024-01-15 13:24:10 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:10 GMT content-type: image/jpeg last-modified: Wed, 08 Nov 2017 15:52:30 GMT accept-ranges: bytes content-length: 74414 date: Mon, 15 Jan 2024 13:24:10 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:10 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff fe 00 2d 4f 70 74 69 6d 69 7a 65 64 20 62 79 20 4a 50 45 47 6d 69 6e 69 20 33 2e 31 33 2e 33 2e 31 35 20 30 78 38 62 65 37 62 63 33 64 00 ff db 00 43 00 03 01 01 03 01 01 03 03 03 03 03 03 03 02 05 08 05 05 02 02 05 0a 07 07 05 08 0c 0a 0c 0c 0b 0a 0b 0b 0c 0e 12 0f 0c 0d 11 0e 0b 0b 0f 15 10 11 13 13 14 14 14 0c 0f 16 18 16 14 18 12 14 14 13 ff db 00 43 01 03 03 03 05 02 05 09 05 05 09 13 0d 0b 0d 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 13 ff c0 00 11 08 02 58 01 04 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 05 06 07 08 03 04 09 02 01 Data Ascii: JFIFHH-Optimized by JPEGmini 3.13.3.15 0x8be7bc3dCCX
2024-01-15 13:24:10 UTC	14994	IN	Data Raw: ef 15 79 8f 83 e3 8b 25 c9 ac 82 a1 53 71 b0 bf c6 fe 3b 2f 7e bf 12 b2 db 8f 11 ff d0 e9 7e 49 d7 68 77 3e 56 53 5d b7 ea 4c 55 a8 e2 c0 84 7a ac 39 4b 25 1c 04 4d 13 e3 15 49 49 74 f3 55 d7 0d c4 e9 8a f9 3f 31 2b 30 82 a2 8e a1 d2 a9 2d 7f 9f 0e 6b 7f 08 e4 c3 84 53 87 5c 5a 7f ce e6 fe ff 00 ac 95 3f f7 c7 71 dd f2 ef 92 c5 dc 5f 64 c3 d4 7c 6b fd a3 5b 13 06 8f ff d1 ac 98 f4 19 82 0c 00 18 00 30 01 ff d2 ac 98 f4 19 82 0c 00 18 00 30 01 ff d3 ab ed cc 6d d7 36 8b 80 45 ed 6c 6c 93 c3 1e 85 b5 8e 7e 1e b0 6f 97 bb 98 1b 4f c3 bd 84 da 06 5c 02 cd fb 5f 2d eb 37 e4 29 0e d2 68 b5 8a b3 54 dd a2 f4 9b 7e 13 af a3 2a bd 51 09 41 17 4d 71 16 7a ea 7c b6 c4 9a 54 4b b8 99 54 76 28 1e 6d c4 b8 ff d4 ac 75 46 ca 83 50 e4 4c 66 4c 17 fd 9e cd 54 6c 99 3d 7e Data Ascii: y%Sq;/~~Ihw>VS]LUz9K%MIItU?1+0-kS\Z?q_d\|k[00m6Ell~oO\_-7)hT~*QAMqz\|TKTv(muFPLfLTl=~
2024-01-15 13:24:10 UTC	16384	IN	Data Raw: d2 bc c6 ad bd 5c ba 33 09 b7 18 62 39 93 a7 dd 19 3c b5 05 1d 7e 52 a7 bb 0b 96 2a 7a 31 37 b0 bd 33 84 7a cc fa 1b 92 ab 2e 04 ee c6 22 48 10 e4 8b 6b d5 7b c8 aa 5a a6 18 5c ce 2b bc 88 bd 83 12 46 59 e4 1d 03 2f a4 33 22 9d 4b ec 32 39 7b bb 4c 81 5e 60 a1 22 6a 8a aa b8 a8 9e ba 5a cd 0e e4 b5 89 0f ff d2 7a 54 39 fd 9c b6 f7 5a f3 e6 16 3a 0d e5 20 cd b9 2e 40 81 33 68 89 bc 61 f8 b0 ea b0 87 10 db a8 2c 59 04 e9 b7 dd 0e f6 cf a7 0e dc 26 d3 c3 b7 69 b8 f1 10 36 c8 a1 ae ab dd f1 5f 7e 00 3f ff d3 ba 8e 7d d4 be fb 1f 9f d3 ef b9 d6 14 47 f4 8d 7a 46 dc f4 7e d6 2c 4a 74 2b 1a a3 7d d5 b3 72 53 d0 e1 50 68 12 c1 87 05 c6 c4 17 6f 78 57 7e ed ff 00 57 1f a1 19 76 59 15 64 57 f8 96 dc 17 ab 81 cb 25 95 ae 21 fa 27 e8 8b 4a e1 96 dd 35 ac 97 ba 4a e7 Data Ascii: \3b9<~R*z173z."Hk{Z\+FY/3"K29{L^`"jZzT9Z: .@3ha,Y&i6_~?}GzF~,Jt+}rSPhoxW~WvYdW%!'J5J
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: af bf 45 5f 1c 02 ee 3f ff d6 ba 8f fc bc 7e 7e 49 d7 3a c2 90 47 e8 9c 66 0c 0f 45 1d a6 e9 b2 72 81 9b aa 9a 45 05 b1 d5 5c 44 69 f5 da 89 e7 af 86 3d ff 00 f0 63 fc ae 8b ee 93 f2 9c cb 34 f9 44 bd f1 ab 2b d2 43 95 bc f5 ff 00 91 65 ea 3f 53 e0 3c 51 fe 6d 98 d5 2d 2d 4f fd 47 fb 90 ae ec 88 de 8f ac e8 a1 67 af e8 86 a9 75 1b 7b 2c 6a 99 55 09 9b 1e 4b 25 64 dc 94 b0 a7 b8 f3 88 e2 aa be 8d 82 22 2a 12 28 8e ef 3d 98 55 5c 4f 05 16 b7 bb c7 fa 4f 9c fc e7 ff d7 bc 37 bf f6 71 3f fc 32 e3 c4 fc b8 fe 7f 98 7d e3 1d 2b 2c f9 2c 5f 61 48 1d b8 2a 16 be 72 5c 87 3e 60 76 5f 5b 4c 25 39 04 aa 8d b6 52 1c 40 fa 7a 79 f9 26 3a 9c 70 43 59 4b 16 cd 3c 7c cb ec 9c bb 30 6d b5 44 b6 7d 2c 40 3e 90 cc e1 9f 4f cd 46 e2 c5 8b 26 3d 2e 8e 5c e5 99 20 be 26 5c 95 Data Ascii: E_?~~I:GfErE\Di=c4D+Ce?S<Qm--OGgu{,jUK%d"(=U\OO7q?2}+,,_aHr\>`v_[L%9R@zy&:pCYK<\|0mD},@>OF&=.\ &\
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 5a 7b d3 25 4f 92 dc b4 81 1f e3 1e 6d 1b d3 68 8b 8b d7 6f 4d 17 df 89 aa ab 96 c5 63 b8 c6 b9 9c 7b 51 f8 89 af d2 e6 54 2a ec 5b b5 27 9a 9e 2d c4 75 e9 92 49 19 8c e9 b8 a6 88 9a 27 5d ce 6e e8 7f 66 20 35 24 5a 23 bc 7f 6e fb e7 ff d0 58 b4 f3 a2 ec a5 b7 1e 0b 56 9c 97 1f b1 9b 65 ed 91 dc 50 72 33 60 ae 10 91 a2 78 eb ab 9d 7c b6 74 e9 8e a3 2d 2d 3e 3a f6 bb c6 69 65 7e 0d d3 35 c1 c5 25 7e b3 0e 54 a2 b3 cc 61 df 3b 8d 89 32 35 7f 99 17 92 80 4d 8a aa 75 45 0e 5a aa e1 2b 43 17 f9 bb be d0 a6 9d b8 06 de 68 5c 97 06 65 fa be a9 22 d7 99 15 9b 19 87 23 bf 25 b1 70 10 50 51 1b 2d c6 9a 10 20 aa 75 4f 7f d1 89 50 2c 54 77 a5 fb c3 12 df 37 53 74 62 d1 ed f7 ea 8d 90 c7 64 e4 76 66 f7 39 d9 c7 5d a8 9d 35 5d 31 60 cc 31 61 ff d1 65 d5 32 ee a9 41 b6 Data Ascii: Z{%OmhoMc{QT*['-uI']nf 5$Z#nXVePr3`x\|t-->:ie~5%~Ta;25MuEZ+Ch\e"#%pPQ- uOP,Tw7Stbdvf9]5]1`1ae2A
2024-01-15 13:24:11 UTC	9456	IN	Data Raw: 70 1a 06 d8 f5 25 f5 94 50 a9 f0 d9 7e 56 4d 56 96 2f 90 03 9b 9a aa f3 9d 84 9b 74 e8 bc b7 57 4f f8 e1 2b 2c 5d 71 d6 cb aa a6 dc fd 23 9e 8b 67 dd f6 65 90 d9 d7 29 a6 f3 ac 96 cf 59 5b 92 de 71 e2 4f 79 a3 48 49 af d6 d3 0d 33 2c db 84 e8 a2 a8 85 3c b2 09 57 37 17 52 f2 86 bb d9 66 0d db 0f ba 26 2e 48 21 78 09 15 3e 6b e0 9f eb c2 96 9b 6c 46 93 33 e8 8f e5 2f f7 ef 1f ff d7 a6 ff 00 d5 13 8c 42 3a 46 29 5d 3a c8 91 4f 01 5f c4 0e 69 84 74 43 55 e1 d4 f7 53 b3 ce 7b 65 f7 d8 f0 13 6f 9a e5 06 fe eb 84 03 15 5b 3d bd 3e d4 3e 1f b3 7a e0 b7 2a 56 5d 54 66 da ae 72 82 4f ae 21 8b 32 49 09 04 bb fa a8 86 9b 85 74 d5 7e 9d b8 ea b9 57 c1 6d 46 7b 4f 15 54 35 0b 6b f6 1f 49 9a 9b 3b d8 b3 25 a7 ff d0 b7 79 39 99 8d 67 46 53 51 eb ec 33 d9 58 b9 e3 04 a6 Data Ascii: p%P~VMV/tWO+,]q#ge)Y[qOyHI3,<W7Rf&.H!x>klF3/B:F)]:O_itCUS{eo[=>>z*V]TfrO!2It~WmF{OT5kI;%y9gFSQ3X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49990	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:10 UTC	873	OUT	GET /wp-content/uploads/2024/01/Teluk_Bahang_cover-768x513.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; FCNEC=%5B%5B%22AKsRol8-rrbJZAaXizdzy8sIKEaevpHbz4PNaPQCkIUrtifrEuUOrVk620oQbb26SCWEdktK1Zb8yD8TpVhNmFpYeShTahclz5QpUFa8KetH4p3t0c8r22oi16jkGX3daJFCAjOwSrvOw0fYYONkoBvtQgQrx2WrqQ%3D%3D%22%5D%5D; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.0.1705325044.49.0.0
2024-01-15 13:24:10 UTC	557	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:10 GMT content-type: image/jpeg last-modified: Thu, 11 Jan 2024 12:30:07 GMT accept-ranges: bytes content-length: 155266 date: Mon, 15 Jan 2024 13:24:10 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:10 UTC	811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 fd 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 Data Ascii: JFIFdd,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:1
2024-01-15 13:24:11 UTC	14994	IN	Data Raw: 61 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 54 72 61 76 65 6c 20 28 46 61 63 65 62 6f 6f 6b 20 50 6f 73 74 29 20 2d 20 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 37 31 36 38 31 45 44 41 38 38 34 31 31 45 45 38 39 31 33 42 31 42 41 42 37 46 37 42 32 34 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 31 36 38 31 45 45 41 38 38 34 31 31 45 45 38 39 31 33 42 31 42 41 42 37 46 37 42 32 34 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 Data Ascii: ang="x-default">Travel (Facebook Post) - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:271681EDA88411EE8913B1BAB7F7B246" stRef:documentID="xmp.did:271681EEA88411EE8913B1BAB7F7B246"/> </rdf:Description> </rdf:RDF> </x:xmpme
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 29 29 c7 ae 73 fe 55 16 c9 a6 4b 41 25 9d 85 07 3d 73 51 4c 6c d9 74 23 ec bb a2 ed cd 28 b6 e3 63 21 49 ce 70 77 9e 84 74 35 92 e5 89 64 b6 bf 94 be 58 dc 65 50 13 15 b7 77 bb 1c 6d 5a 55 f8 87 3d ff 00 ce b4 c1 e6 28 e4 ea 62 d4 ce b4 ec 44 33 39 33 1c 69 0d 89 4e 0f d6 1c 76 1f 7a b5 b2 3b 5b 28 1a 82 cc f4 75 5c 6e fa 61 a9 32 a4 a4 07 7c 31 e5 41 09 4f 39 cf 0a 1c 13 eb ef 51 9c 77 77 37 55 26 96 18 1f 56 6f 9b a4 1d 7a 6a 5a 65 c7 12 da 96 94 ab 29 49 24 74 3e 9c d5 55 f1 3c 13 bf 3e 16 51 8a 5c 6d 8e 40 91 e2 c7 52 90 a6 d5 90 50 70 52 7d 52 7b 56 ee 0e 7d 56 b5 dc 26 75 b8 9d 6f 0d dd 06 64 b4 46 c9 08 4f f6 83 be 47 65 7f 3a ab c3 c3 e0 dc a7 94 0e 7b 56 9f c3 1a 30 18 ee e1 c9 fc a9 ed 62 ca 07 c8 bc 4f 97 9f 16 4a f6 9f d9 47 94 7f 0a 78 18 5b Data Ascii: ))sUKA%=sQLlt#(c!Ipwt5dXePwmZU=(bD393iNvz;[(u\na2\|1AO9Qww7U&VozjZe)I$t>U<>Q\m@RPpR}R{V}V&uodFOGe:{V0bOJGx[
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 3e e3 f2 aa a4 e3 f8 98 f1 ea d0 e2 b8 0a 33 21 0f a5 11 a5 20 3d 1d e4 23 f5 8b 58 29 0a 29 19 e7 b6 4f 6e 95 a3 49 64 94 30 b9 c3 ed ea 2c 7a 81 15 a7 9d 64 2d 56 d0 f3 12 a3 8c 94 0e 30 08 cf 90 f7 ff 00 09 cd 74 14 e1 73 d9 6a ca f7 ff 00 3b 32 51 60 b6 1c 58 f9 89 1e 21 85 32 32 92 e7 ea 93 b5 0b 07 8d e9 1f b2 46 4e e4 f4 20 e4 62 94 b4 f1 a6 71 52 e5 3e 13 7d fe df d9 f7 2c 4f 9c 04 a1 7c 56 10 e5 2a d1 aa 91 e2 01 cb 32 5b 4e e5 75 c6 14 07 3f 43 5d 5a 60 f6 a9 41 89 b5 da 40 7d 49 63 40 9d 28 c1 b8 46 98 d5 dd 49 f0 50 85 e1 69 52 94 4f 98 7d c0 cd 6c 84 df 66 54 e0 53 6d b1 57 02 ee 86 9e 8c b7 92 95 16 dd 00 14 84 f3 83 93 ed 56 36 8a b6 f3 82 e1 7f 5c 07 a0 26 3c 19 ab 71 7b 52 85 90 c1 4b 78 4f 43 95 1c 93 55 6e 23 1d 32 8c b7 22 c3 f0 dd 4f Data Ascii: >3! =#X))OnId0,zd-V0tsj;2Q`X!22FN bqR>},O\|V*2[Nu?C]Z`A@}Ic@(FIPiRO}lfTSmWV6\&<q{RKxOCUn#2"O
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 0c 92 99 6b b3 df 2c d2 1a 30 e3 dc d9 9f 05 c0 b0 ca 14 a1 e2 34 48 27 6e 0f f2 e8 6a 0d 34 4b 71 3a c3 15 09 8a dd a6 54 34 ad f8 ed 25 e6 06 41 f1 10 7a 94 13 d0 8e 98 3c 73 d2 ab 7c 8d 22 06 aa d3 f0 25 30 b9 2a 5a 02 d2 d2 92 d2 76 ec 4a b0 0e 50 38 f2 ab 3c ed 39 ea 71 d4 55 0e 29 3c 91 92 29 d3 ac f2 74 e2 a3 38 f7 88 d2 64 36 82 db cc 8c 85 83 ce 70 7f 68 7b 62 a3 3a db 58 65 7c 85 cb 4a 97 1d 0f 32 5c fd 58 fd 7a f0 01 c2 b8 e5 58 e4 9c 7b 57 3a 5e 54 e2 8b 12 c1 1d 0d b7 19 e7 d4 cb ab 29 3e 54 93 c0 6d bf 44 8e c4 91 9c f5 ac 53 96 56 dc 7f db 19 e6 1e f1 1f 60 e3 0d 87 11 8f ce 94 16 de 7d 40 44 e8 6d c9 48 6c 84 b6 e0 ce c5 8e 9d 7a 1a ba 36 b4 c4 d1 61 f8 52 a5 c7 7d f8 ae b6 9f d5 ac ef 4a ca 89 19 fe e8 e0 fb 64 57 7f 4b 2c d7 91 c3 80 56 Data Ascii: k,04H'nj4Kq:T4%Az<s\|"%0*ZvJP8<9qU)<)t8d6ph{b:Xe\|J2\XzX{W:^T)>TmDSV`}@DmHlz6aR}JdWK,V
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 65 82 3f b4 47 9b 20 ff 00 de fe 15 24 c5 80 1b 76 a1 22 dc 9b 24 a5 17 de 80 85 31 bd 43 95 b6 54 3c 35 7f dd 38 fa a4 d5 91 ad 4a 2f 26 6b a7 b1 22 92 98 7f 37 11 70 e4 78 25 71 9f c2 15 8c 1f 61 c7 20 e6 b9 73 83 83 69 16 27 b9 64 52 c3 ce b5 0e 6c 75 46 08 6d 6e b6 a6 54 9c 94 a9 24 6e dc 3b e4 64 e0 fd aa ca a4 a1 f3 2f 61 35 c0 4a d6 a5 4a 71 22 7b 4b 5b 7e 17 86 db bc 2b 62 02 96 78 ee 52 4a 86 33 c8 c5 6c d4 45 d8 b8 45 70 49 3e 45 5e f4 74 3b 93 6a 45 9a e8 95 a5 b5 12 86 1f e7 04 9e 40 3d ab 6d 51 e1 49 ae 5a 33 4e 2f 38 45 24 d9 a4 c6 84 3c 46 17 86 d4 b4 2d 49 1b 80 50 51 18 cd 5a 2c 35 dc d0 fe 11 c0 dc 84 38 90 42 7c 42 95 2c 27 f8 66 aa 9f a9 bf 4b f2 14 6f 8b 16 d4 af 5d 5d 7c db b0 a4 f3 8c 76 a7 4b f2 99 35 33 f3 b2 86 fd a9 43 27 6d 5a Data Ascii: e?G $v"$1CT<58J/&k"7px%qa si'dRluFmnT$n;d/a5JJq"{K[~+bxRJ3lEEpI>E^t;jE@=mQIZ3N/8E$<F-IPQZ,58B\|B,'fKo]]\|vK53C'mZ
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 5a 69 78 46 57 17 bf 25 85 0e 78 99 29 39 04 9c 63 eb 54 cf b9 a9 0e 83 ea 73 50 03 c9 e3 24 d3 02 04 f0 53 7b 82 bf de 8e e6 0f fd b1 5a 68 f9 59 ca ea cb c8 81 97 db 7c cb 8c d1 1e 04 57 a4 bc 50 a0 10 ca 77 1e 54 3f 2a d3 05 c1 c5 a6 2e 5d 90 60 7c 29 d5 93 6d 50 d0 21 34 ca c2 d0 a5 07 5d 00 80 08 cf 15 34 8d 6b 4b 63 6d 84 6d bf 01 a5 4b 0e 0b ed c5 a6 99 5a d2 a2 dc 51 95 10 14 4f 53 d2 99 a2 bd 23 cf 98 d1 ac fa 2b 4f e9 a6 1b 45 be da c2 56 9f f7 ae 27 7a cf dc d0 6c ae a8 c7 b2 0e a5 45 43 71 ef 9a 58 2f 24 46 3c 0c 91 c5 03 47 25 ff 00 6c 71 8e 82 80 19 02 81 0e 30 7f 5c 8f ad 21 a0 82 94 47 41 f7 a8 81 cc f1 93 d7 d6 9a 03 9c 1a 62 1a 0c 36 b5 af 72 7b 8c 7b 50 02 55 0c 1f c2 bf ce 98 64 6f e5 d6 d9 2a 29 51 f4 da 68 03 8d 65 0b 51 c7 3b 4f 51 Data Ascii: ZixFW%x)9cTsP$S{ZhY\|WPwT?.]`\|)mP!4]4kKcmmKZQOS#+OEV'zlECqX/$F<G%lq0\!GAb6r{{PUdo)QheQ;OQ
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: d4 f1 df ad 55 a8 ab 62 8c a1 ea 4d 60 2f 6d 8e c9 b2 c6 8a b9 6d a0 aa 62 1b 8e e9 25 1b 16 72 42 86 73 92 0a 47 41 83 8c 75 34 a3 a7 9c 9e f8 f7 44 8d 33 44 df 1a b2 6a c9 8d 26 7b 6b 82 fb 69 3e 0f e0 da b5 79 f2 8e d8 fc 47 1e 84 54 9f 92 dd be e3 5c 36 16 d7 73 5a 9b 78 87 e1 ad 2b 1f 2e b5 f9 54 0f ed fd 6b 74 1c 63 1c 64 9a 01 43 75 30 ed 97 07 5c 4a 1e 79 4e a7 05 5f b0 92 15 8e 9e e3 1f 7a 94 e6 a3 54 9f d0 87 3e 24 4a 6e af 4c b4 03 32 00 6d 2a 46 d2 46 54 00 4a ba 1c a4 83 d5 38 fb 9a e0 f4 1b a2 f5 12 83 f5 ed f9 1d 1e aa dc 68 56 63 38 33 6b 8e b0 d4 cc 45 92 ca 8c 65 b5 b4 87 30 c2 54 76 9e de 60 4f df 35 ec 94 23 9e 11 c1 f1 b7 3f b9 58 84 64 c3 91 1e 6c 59 0e b0 f2 12 14 85 20 80 52 73 f4 a6 d2 7e 56 5f 1e 0d 4f 42 6a 2b 96 a0 9a ca 6e d7 Data Ascii: UbM`/mmb%rBsGAu4D3Dj&{ki>yGT\6sZx+.TktcdCu0\JyN_zT>$JnL2m*FFTJ8hVc83kEe0Tv`O5#?XdlY Rs~V_OBj+n
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: 4d 3a 20 b6 d1 bb c2 49 76 22 96 9f ed 31 d5 b3 f5 ed ef 49 c1 31 e4 cc bf d1 b7 e2 cb ad 4e ff 00 50 ef d9 8e e2 56 a4 c1 2e 9e 50 ac f9 99 39 e9 cf 4f ca 9e 30 84 99 f4 5b d2 8a 1d 5a 42 41 c1 a5 80 2b 53 5d b2 7c 47 d3 b7 0b 7c 57 d9 98 c1 5a 99 53 8d 1c f8 2f 24 9c 1f 62 0f e6 28 71 ca c0 f7 60 f9 fd 8f 87 b7 34 dd 98 81 76 f0 a2 f8 ce 29 a5 3a ca 54 b4 a0 80 4f 39 03 19 c5 65 93 4b 26 88 41 b5 96 4f 9f a5 e7 c8 8c c4 29 6d a6 74 6b 56 e6 3c 78 48 da e2 5b 51 c8 25 24 79 bf 3a 5b e2 c9 3a b0 55 ee 1a 62 6c 68 6f 4d 62 d9 71 91 11 b0 72 a5 46 28 73 19 c6 76 9e bd 7b 53 58 7c 64 83 83 5d 90 37 5a 5f ed 70 af c5 b9 81 f4 3b f2 d1 73 fa be 98 61 b0 47 d7 22 a5 08 49 c4 ad c9 a7 c8 29 bd 47 61 74 84 a5 f5 03 ee 83 52 f0 e4 2d c4 69 f7 6b 34 86 54 96 a6 23 Data Ascii: M: Iv"1I1NPV.P9O0[ZBA+S]\|G\|WZS/$b(q`4v):TO9eK&AO)mtkV<xH[Q%$y:[:UblhoMbqrF(sv{SX\|d]7Z_p;saG"I)GatR-ik4T#
2024-01-15 13:24:11 UTC	16384	IN	Data Raw: b5 07 c5 e9 d7 5b 75 f6 da 6d ee 6d 79 5e 1c 45 36 9c 6d 48 56 08 57 ae 40 cf de be b5 d3 7e 10 af 4b 6e 9f 55 07 cc 79 92 7e ed 7a 7d bb 1e 67 51 d4 dd 8a 75 3e cf b1 9f b7 3a 42 dc 01 c8 0e f3 c9 f2 80 49 af 72 72 53 43 ef 48 52 da d8 b8 72 0e e0 52 40 38 c0 c1 1c 1c d2 06 d1 f6 62 80 20 61 35 51 a4 e2 12 52 a1 9a 00 53 a3 20 62 81 08 23 14 0c e2 13 b9 78 3d 3b 9a 00 79 69 2d b8 b4 9e a0 e3 ed 40 09 2d 10 95 1f bd 00 78 30 b0 9d c3 9e 33 8a 40 8e 04 83 92 46 68 26 8a 57 c4 eb 06 9f 67 4f dd b5 34 ab 1c 29 b7 16 19 49 4b 8f 83 e6 c1 00 03 83 e9 5b f4 57 db bd 54 a5 c1 8f 59 54 36 39 b5 93 3e 89 a5 25 4c 8c cc 94 58 b4 3a 52 ea 02 c2 57 20 82 01 1d 0f 3c 57 4a 77 45 49 a7 29 fe 87 3a 15 e5 29 28 af d4 91 fe a7 cd 3c 7e 82 d0 7f 79 07 fc ea b7 a8 5e 92 97 Data Ascii: [ummy^E6mHVW@~KnUy~z}gQu>:BIrrSCHRrR@8b a5QRS b#x=;yi-@-x03@Fh&WgO4)IK[WTYT69>%LX:RW <WJwEI):)(<~y^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49992	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:10 UTC	783	OUT	GET /pixel?google_nid=992917243&google_hm=NTNmOGJjN2VhODlhYjlhNg&google_push=AXcoOmTpu0KbZaD2SMnXImu8mNBgr9ezW9XMKmf4BEu1VMZ_Tas9lJIxyfczkpi2CHpp84L_ARavLw3GAEvH5trF_vSyoe7lFHndp0Y HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:10 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:10 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:10 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49995	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:11 UTC	2332	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325050&plat=2%3A16777216%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x612_l%7C404x612_r&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&dt=1705325050529&bpp=122&bdt=218&idt=122&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=7739714387177&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=1320123715&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=203 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:12 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:12 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:12 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 6c 69 6e 6b 20 68 72 65 66 5c 78 33 64 5c 78 32 37 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 5c 78 33 64 52 6f 62 6f 74 6f 3a 77 67 68 74 40 34 30 30 3b 37 30 30 5c 78 32 36 64 69 73 70 6c 61 79 5c 78 33 64 73 77 61 70 5c 78 32 37 20 72 65 6c 5c 78 33 64 Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3clink href\x3d\x27//fonts.googleapis.com/css2?family\x3dRoboto:wght@400;700\x26display\x3dswap\x27 rel\x3d
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 65 20 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 31 73 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 23 63 61 72 64 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 Data Ascii: e {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {h
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 31 32 70 78 20 34 70 78 20 30 3b 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 7d 23 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 20 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 5c 78 33 63 2f 73 74 79 6c 65 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 Data Ascii: 12px 4px 0;float: right;}#ad_position_box {display: flex;align-items: center;justify-content: center;height: 100%;width: 100%;}\x3c/style\x3e\x3c/head\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 34 39 32 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 31 39 36 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 34 39 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 39 36 70 78 3b 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 61 6d 65 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 64 6f 63 20 5c 78 33 64 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 5c 78 32 37 61 64 5f 69 66 72 61 6d 65 5c 78 32 37 29 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 64 6f 63 2e 6f 70 Data Ascii: \x220\x22width\x3d\x22492px\x22 height\x3d\x22196px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 492px; height: 196px;\x22\x3e\x3c/iframe\x3e\x3cscript\x3evar doc \x3d document.getElementById(\x27ad_iframe\x27).contentWindow.document;doc.op
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 33 64 5c 5c 78 32 32 6c 61 72 67 65 2d 62 61 6e 6e 65 72 2d 72 64 61 2d 6c 6f 67 6f 2d 76 61 6e 69 6c 6c 61 5c 5c 78 32 32 20 64 61 74 61 2d 6e 73 5c 5c 78 33 64 5c 5c 78 32 32 6e 73 2d 78 65 6e 78 71 5c 5c 78 32 32 20 78 2d 70 68 61 73 65 5c 5c 78 33 64 5c 5c 78 32 32 61 73 73 65 6d 62 6c 65 5c 5c 78 32 32 5c 5c 78 33 65 2e 6e 73 2d 78 65 6e 78 71 2d 6c 2d 6c 61 72 67 65 2d 62 61 6e 6e 65 72 2d 72 64 61 2d 6c 6f 67 6f 2d 76 61 6e 69 6c 6c 61 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 34 39 32 70 78 3b 68 65 69 67 68 74 3a 31 39 36 70 78 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 30 7b 6c 69 6e 65 2d 68 65 69 Data Ascii: 3d\\x22large-banner-rda-logo-vanilla\\x22 data-ns\\x3d\\x22ns-xenxq\\x22 x-phase\\x3d\\x22assemble\\x22\\x3e.ns-xenxq-l-large-banner-rda-logo-vanilla{opacity:.01;position:absolute;top:0;left:0;display:block;width:492px;height:196px;}.ns-xenxq-e-0{line-hei
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 6c 65 78 2d 67 72 6f 77 3a 31 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 34 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 35 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 36 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 Data Ascii: lex-grow:1;}.ns-xenxq-e-14{line-height:1.3;box-sizing:border-box;display:flex;align-items:center;flex-direction:row;flex-grow:1;}.ns-xenxq-e-15{line-height:1.3;box-sizing:border-box;width:100%;}.ns-xenxq-e-16{box-sizing:border-box;font-weight:400;line-hei
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 70 78 3b 68 65 69 67 68 74 3a 33 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 33 70 78 3b 7d 5c 5c 78 33 63 2f 73 74 79 6c 65 5c 5c 78 33 65 5c 5c 78 33 63 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 5c 5c 78 33 64 5c 5c 78 32 32 6c 61 72 67 65 2d 62 61 6e 6e 65 72 2d 72 64 61 2d 6c 6f 67 6f 2d 76 61 6e 69 6c 6c 61 5c 5c 78 32 32 20 64 61 74 61 2d 6e 73 5c 5c 78 33 64 5c 5c 78 32 32 6e 73 2d 78 65 6e 78 71 5c 5c 78 32 32 20 78 2d 70 68 61 73 65 5c 5c 78 33 64 5c 5c 78 32 32 64 65 63 6f 72 61 74 65 5c 5c 78 32 32 5c 5c 78 33 65 2e 6e 73 2d 78 65 6e 78 71 2d 6c 2d 6c 61 72 67 65 2d 62 61 6e 6e 65 72 2d 72 64 61 2d 6c 6f 67 6f 2d 76 61 6e 69 6c 6c 61 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: px;height:33px;line-height:33px;max-height:33px;}\\x3c/style\\x3e\\x3cstyle data-nl\\x3d\\x22large-banner-rda-logo-vanilla\\x22 data-ns\\x3d\\x22ns-xenxq\\x22 x-phase\\x3d\\x22decorate\\x22\\x3e.ns-xenxq-l-large-banner-rda-logo-vanilla{opacity:1;position:
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 69 6e 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 66 Data Ascii: 100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframes bounce{from{transform:translateY(-100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframes slide-in{from{transform:translateX(-100%);f
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 71 2d 65 2d 31 30 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 36 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 5c 78 32 32 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 5c 78 32 32 2c 20 5c 5c 78 32 32 52 6f 62 6f 74 6f 5c 5c 78 32 32 2c 47 6f 6f 67 6c 65 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 31 2c 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 37 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 78 65 6e 78 71 2d 65 2d 31 36 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 5c 78 32 32 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 5c 78 32 32 2c 20 5c 5c 78 32 32 52 6f Data Ascii: q-e-10{color:rgba(0,0,0,0.6);font-family:\\x22Google Sans\\x22, \\x22Roboto\\x22,Google Sans,sans-serif;}.ns-xenxq-e-11,.ns-xenxq-e-17{text-decoration:none;white-space:nowrap;}.ns-xenxq-e-16{color:rgba(0,0,0,0.4);font-family:\\x22Google Sans\\x22, \\x22Ro
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 68 5c 5c 78 33 64 6c 7d 76 61 72 20 70 5c 5c 78 33 64 68 5c 5c 78 32 36 5c 5c 78 32 36 68 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 5c 5c 78 33 64 6e 75 6c 6c 21 5c 5c 78 33 64 70 3f 70 3a 21 31 3b 76 61 72 20 71 3b 63 6f 6e 73 74 20 74 5c 5c 78 33 64 66 2e 6e 61 76 69 67 61 74 6f 72 3b 71 5c 5c 78 33 64 74 3f 74 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 29 7b 72 65 74 75 72 6e 20 67 3f 71 3f 71 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 5c 5c 78 33 64 5c 5c 78 33 65 62 5c 5c 78 32 36 5c 5c 78 32 36 2d 31 21 5c 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b Data Ascii: ull;break a}h\\x3dl}var p\\x3dh\\x26\\x26h[610401301];g\\x3dnull!\\x3dp?p:!1;var q;const t\\x3df.navigator;q\\x3dt?t.userAgentData\|\|null:null;function u(a){return g?q?q.brands.some(({brand:b})\\x3d\\x3eb\\x26\\x26-1!\\x3db.indexOf(a)):!1:!1}function v(a){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49997	31.13.66.19	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	404	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	1760	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fzh_CN%2Fall.js reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: HefX/hqi55a7Gy4Lt7POGuCmy1bJikX4E6OkPdnxX0ow2DAxfFAMlpRzvkhRrUUL1PaVGBs5Rz5WCbvRfgpkvg== Date: Mon, 15 Jan 2024 13:24:12 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	50000	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	610	OUT	GET /menu/svg/icons/facebook.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	883	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 430 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "3c6ccaafe275b5b477d0400b5847bbce" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rr4YTPgqx3DMzHgbvwB8eZXRpIOyIkci81J4scbvnqnurxmOOrsiQ8LyR8NCRm%2FTQ9GQDtQ6oX%2BXwWXc9nMBBu9Yw0p6P0ocgCCYr5ektRA6XXeSmH%2ByQOn5iANeFKpO0b55Uz7s"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700b894f8f28-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	430	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 66 61 63 65 62 6f 6f 6b 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 38 20 31 36 63 30 2d 36 2e 36 32 37 2d 35 2e 33 37 33 2d 31 32 2d 31 32 2d 31 32 53 34 20 39 2e 33 37 33 20 34 20 31 36 63 30 20 35 2e 36 32 38 20 33 2e 38 37 35 20 31 30 2e 33 35 20 39 2e 31 30 31 20 31 31 2e 36 34 37 76 2d 37 2e 39 38 68 2d 32 2e 34 37 34 56 31 36 48 31 33 2e 31 76 2d 31 2e 35 38 63 30 2d 34 2e 30 38 35 20 31 2e 38 34 39 2d 35 2e 39 37 38 20 35 2e 38 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook:'<path fill="#fff" d="M28 16c0-6.627-5.373-12-12-12S4 9.373 4 16c0 5.628 3.875 10.35 9.101 11.647v-7.98h-2.474V16H13.1v-1.58c0-4.085 1.849-5.978 5.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	50002	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	620	OUT	GET /menu/svg/icons/facebook_messenger.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	887	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 378 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "a7acd011eeba6d8c34c891c7c795d4e3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JBXNqIOBPv58MLcaLi7oxKG7mvt4Ud6RNMyIayNv9yLo%2B5KFZYsMV%2BocorBS12DzI9YWwPajCx8pYjIbiCnBQ48VvH0gYwoiNtml5%2FUu%2B0fwqKpYUIuPl935igF3UDPJJ%2F5gAagT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700bbb3b1316-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 66 61 63 65 62 6f 6f 6b 5f 6d 65 73 73 65 6e 67 65 72 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 31 36 20 35 43 39 2e 39 38 36 20 35 20 35 2e 31 31 20 39 2e 35 36 20 35 2e 31 31 20 31 35 2e 31 38 32 63 30 20 33 2e 32 20 31 2e 35 38 20 36 2e 30 35 34 20 34 2e 30 34 36 20 37 2e 39 32 56 32 37 6c 33 2e 37 31 36 2d 32 2e 30 36 63 2e 39 39 2e 32 37 36 20 32 2e 30 34 2e 34 32 35 20 33 2e 31 32 38 2e 34 32 35 20 36 2e 30 31 34 20 30 20 31 30 2e Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({facebook_messenger:'<path fill="#FFF" d="M16 5C9.986 5 5.11 9.56 5.11 15.182c0 3.2 1.58 6.054 4.046 7.92V27l3.716-2.06c.99.276 2.04.425 3.128.425 6.014 0 10.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	50005	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	608	OUT	GET /menu/svg/icons/wechat.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	882	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 1201 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "53260f29b5353538ebc955f4ccc6bf4f" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HjlSeWUgt3jQIf0uOEmN86fcF8b4H8QeMftbygXgB9LKA1tB1e8GZyR%2FqemLsnNyIB6m9bSDbawqGoYp03Ezb8Yp4CiqyhaIGo5x8vtfjOmPgGu4ZGrE39WBAXBCM%2FYr4NtxJZPh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700bdb793b8f-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	487	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 77 65 63 68 61 74 3a 27 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 30 2e 36 37 34 20 31 32 2e 34 35 38 63 2d 32 2e 32 32 38 2e 31 31 36 2d 34 2e 31 36 35 2e 37 39 32 2d 35 2e 37 33 38 20 32 2e 33 31 38 2d 31 2e 35 39 20 31 2e 35 34 32 2d 32 2e 33 31 35 20 33 2e 34 33 2d 32 2e 31 31 36 20 35 2e 37 37 32 2d 2e 38 37 2d 2e 31 30 38 2d 31 2e 36 36 34 2d 2e 32 32 37 2d 32 2e 34 36 32 2d 2e 32 39 34 2d 2e 32 37 36 2d 2e 30 32 33 2d 2e 36 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({wechat:'<g fill="#FFF"><path d="M20.674 12.458c-2.228.116-4.165.792-5.738 2.318-1.59 1.542-2.315 3.43-2.116 5.772-.87-.108-1.664-.227-2.462-.294-.276-.023-.6
2024-01-15 13:24:12 UTC	714	IN	Data Raw: 2e 39 30 36 63 2e 30 32 35 2d 2e 35 33 32 2d 2e 34 34 2d 31 2e 30 31 2d 2e 39 38 34 2d 31 2e 30 32 37 61 2e 39 39 37 2e 39 39 37 20 30 20 30 20 30 2d 31 2e 30 33 38 2e 39 36 34 2e 39 38 34 2e 39 38 34 20 30 20 30 20 30 20 2e 39 37 37 20 31 2e 30 32 20 31 2e 30 31 37 20 31 2e 30 31 37 20 30 20 30 20 30 20 31 2e 30 35 2d 2e 39 36 7a 6d 35 2e 33 35 2d 31 2e 30 32 38 63 2d 2e 35 35 2e 30 31 2d 31 2e 30 31 2e 34 37 38 2d 31 20 31 2e 30 31 32 2e 30 31 2e 35 35 34 2e 34 36 36 2e 39 38 37 20 31 2e 30 33 2e 39 38 61 2e 39 38 32 2e 39 38 32 20 30 20 30 20 30 20 2e 39 39 2d 31 2e 30 31 2e 39 39 32 2e 39 39 32 20 30 20 30 20 30 2d 31 2e 30 32 2d 2e 39 38 32 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 32 35 2e 36 38 20 32 36 2e 33 34 37 63 2d 2e 37 30 35 2d 2e 33 31 34 Data Ascii: .906c.025-.532-.44-1.01-.984-1.027a.997.997 0 0 0-1.038.964.984.984 0 0 0 .977 1.02 1.017 1.017 0 0 0 1.05-.96zm5.35-1.028c-.55.01-1.01.478-1 1.012.01.554.466.987 1.03.98a.982.982 0 0 0 .99-1.01.992.992 0 0 0-1.02-.982z"/><path d="M25.68 26.347c-.705-.314

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	50004	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	610	OUT	GET /menu/svg/icons/whatsapp.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	884	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 1137 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "6a035bb94747645017c1cfe9f5801857" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3NsS5mxGVRR%2FsGW3mdj8OrA5AgIZobgYgpZh67UUJhpxa1TkVWyY7LjAY3hLs5EdqIW2wZHU2jU53iX2x7jcG4ruE2TiGKlXKCTSPzEaAJ6015HdLTYAXbkd2X%2FmQWbMQS%2FTeDyt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700c0ca720a6-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	485	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 77 68 61 74 73 61 70 70 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 2e 32 31 20 34 2e 34 31 43 39 2e 39 37 33 20 34 2e 34 31 20 34 2e 39 31 37 20 39 2e 34 36 35 20 34 2e 39 31 37 20 31 35 2e 37 63 30 20 32 2e 31 33 34 2e 35 39 32 20 34 2e 31 33 20 31 2e 36 32 20 35 2e 38 33 32 4c 34 2e 35 20 32 37 2e 35 39 6c 36 2e 32 35 2d 32 2e 30 30 32 61 31 31 2e 32 34 31 20 31 31 2e 32 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({whatsapp:'<path fill="#FFF" fill-rule="evenodd" d="M16.21 4.41C9.973 4.41 4.917 9.465 4.917 15.7c0 2.134.592 4.13 1.62 5.832L4.5 27.59l6.25-2.002a11.241 11.2
2024-01-15 13:24:12 UTC	652	IN	Data Raw: 30 20 35 2e 31 38 38 2d 34 2e 32 31 34 20 39 2e 34 2d 39 2e 33 39 38 20 39 2e 34 7a 6d 35 2e 32 39 33 2d 36 2e 38 33 32 63 2d 2e 32 38 34 2d 2e 31 35 35 2d 31 2e 36 37 33 2d 2e 39 30 36 2d 31 2e 39 33 34 2d 31 2e 30 31 32 2d 2e 32 36 35 2d 2e 31 30 36 2d 2e 34 35 35 2d 2e 31 36 2d 2e 36 35 38 2e 31 32 73 2d 2e 37 38 2e 39 31 2d 2e 39 35 34 20 31 2e 30 39 36 63 2d 2e 31 37 36 2e 31 38 36 2d 2e 33 34 35 2e 32 30 33 2d 2e 36 32 38 2e 30 34 38 2d 2e 32 38 32 2d 2e 31 35 34 2d 31 2e 32 2d 2e 34 39 34 2d 32 2e 32 36 34 2d 31 2e 35 31 37 2d 2e 38 33 2d 2e 37 39 35 2d 31 2e 33 37 33 2d 31 2e 37 36 2d 31 2e 35 33 2d 32 2e 30 35 35 2d 2e 31 35 38 2d 2e 32 39 35 20 30 2d 2e 34 34 35 2e 31 35 2d 2e 35 38 34 2e 31 33 34 2d 2e 31 32 34 2e 33 2d 2e 33 32 36 2e 34 35 2d Data Ascii: 0 5.188-4.214 9.4-9.398 9.4zm5.293-6.832c-.284-.155-1.673-.906-1.934-1.012-.265-.106-.455-.16-.658.12s-.78.91-.954 1.096c-.176.186-.345.203-.628.048-.282-.154-1.2-.494-2.264-1.517-.83-.795-1.373-1.76-1.53-2.055-.158-.295 0-.445.15-.584.134-.124.3-.326.45-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	50001	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	606	OUT	GET /menu/svg/icons/line.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	885	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 910 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "9c8b7f1cd66a7993f9596e3b8b09ff84" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVl6b7XfngFD8HxlHOhzt1RoeNM%2Bf9oiRW2lJp0J38NNwHUsLMbqn8rF09sbFapN%2Bn%2BLVW09XkNUq48cAbM7%2Bhu3jKwkI2psDTYekDsJOxmAM6O0EMm4K6Qj50RIuNsJUcCa7MiY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700bfe553882-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	484	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 6c 69 6e 65 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 46 46 46 22 20 64 3d 22 4d 32 38 20 31 34 2e 33 30 34 63 30 2d 35 2e 33 37 2d 35 2e 33 38 34 2d 39 2e 37 33 38 2d 31 32 2d 39 2e 37 33 38 53 34 20 38 2e 39 33 36 20 34 20 31 34 2e 33 30 34 63 30 20 34 2e 38 31 34 20 34 2e 32 37 20 38 2e 38 34 36 20 31 30 2e 30 33 35 20 39 2e 36 30 38 2e 33 39 2e 30 38 34 2e 39 32 33 2e 32 35 38 20 31 2e 30 35 38 2e 35 39 32 2e 31 32 32 2e 33 30 33 2e 30 38 2e 37 37 38 2e 30 34 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({line:'<path fill="#FFF" d="M28 14.304c0-5.37-5.384-9.738-12-9.738S4 8.936 4 14.304c0 4.814 4.27 8.846 10.035 9.608.39.084.923.258 1.058.592.122.303.08.778.04
2024-01-15 13:24:12 UTC	426	IN	Data Raw: 33 61 2e 36 33 31 2e 36 33 31 20 30 20 30 20 31 2d 2e 36 33 2e 36 32 38 2e 36 32 39 2e 36 32 39 20 30 20 30 20 31 2d 2e 36 33 2d 2e 36 33 56 31 32 2e 31 61 2e 36 33 2e 36 33 20 30 20 31 20 31 20 31 2e 32 36 20 30 76 34 2e 37 37 7a 6d 35 2e 37 34 20 30 61 2e 36 33 32 2e 36 33 32 20 30 20 30 20 31 2d 31 2e 31 33 37 2e 33 37 38 6c 2d 32 2e 34 34 33 2d 33 2e 33 33 76 32 2e 39 35 61 2e 36 33 31 2e 36 33 31 20 30 20 30 20 31 2d 31 2e 32 36 20 30 56 31 32 2e 31 61 2e 36 33 34 2e 36 33 34 20 30 20 30 20 31 20 2e 36 33 2d 2e 36 33 2e 36 33 2e 36 33 20 30 20 30 20 31 20 2e 35 30 34 2e 32 35 32 6c 32 2e 34 34 34 20 33 2e 33 32 38 56 31 32 2e 31 61 2e 36 33 2e 36 33 20 30 20 30 20 31 20 31 2e 32 36 20 30 76 34 2e 37 37 7a 6d 33 2e 38 35 33 2d 33 2e 30 31 34 61 2e 36 Data Ascii: 3a.631.631 0 0 1-.63.628.629.629 0 0 1-.63-.63V12.1a.63.63 0 1 1 1.26 0v4.77zm5.74 0a.632.632 0 0 1-1.137.378l-2.443-3.33v2.95a.631.631 0 0 1-1.26 0V12.1a.634.634 0 0 1 .63-.63.63.63 0 0 1 .504.252l2.444 3.328V12.1a.63.63 0 0 1 1.26 0v4.77zm3.853-3.014a.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	50003	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	612	OUT	GET /menu/svg/icons/sina_weibo.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:12 UTC	892	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Type: application/javascript Content-Length: 1394 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "f6c69f782d9b162afe71b57db62ed65d" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EbaXZjubQs2lLcHtNTSiydEhKlW4sUbGp%2BetfCV2LZ%2FckrBjRN0%2B6gxyb4JN6bphB6vuesx%2BD6Q2%2F9ZFYNeqkIFcnwWcz%2BAAXcsew18w%2FBZC64iSwwizKq5TrtmhyBiJnVQPaMEB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700beacc0838-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:12 UTC	477	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 73 69 6e 61 5f 77 65 69 62 6f 3a 27 3c 67 20 66 69 6c 6c 3d 22 23 46 46 46 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 39 32 20 32 34 2e 39 39 63 2d 34 2e 33 30 33 2e 34 32 34 2d 38 2e 30 32 2d 31 2e 35 32 2d 38 2e 33 2d 34 2e 33 34 36 2d 2e 32 37 38 2d 32 2e 38 32 37 20 32 2e 39 38 37 2d 35 2e 34 36 33 20 37 2e 32 39 32 2d 35 2e 38 38 38 20 34 2e 33 30 34 2d 2e 34 32 36 20 38 2e 30 31 38 20 31 2e 35 32 20 38 2e 32 39 37 20 34 2e 33 34 35 2e 32 37 34 20 32 2e 38 33 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({sina_weibo:'<g fill="#FFF"><path d="M13.92 24.99c-4.303.424-8.02-1.52-8.3-4.346-.278-2.827 2.987-5.463 7.292-5.888 4.304-.426 8.018 1.52 8.297 4.345.274 2.83
2024-01-15 13:24:12 UTC	917	IN	Data Raw: 33 37 20 33 20 31 39 2e 36 31 37 63 30 20 34 2e 33 20 35 2e 35 31 33 20 36 2e 39 31 33 20 31 30 2e 39 30 37 20 36 2e 39 31 33 20 37 2e 30 37 20 30 20 31 31 2e 37 37 36 2d 34 2e 31 30 35 20 31 31 2e 37 37 36 2d 37 2e 33 37 20 30 2d 31 2e 39 37 2d 31 2e 36 36 2d 33 2e 30 39 2d 33 2e 31 35 2d 33 2e 35 35 6d 34 2e 36 39 33 2d 37 2e 38 37 61 36 2e 38 39 20 36 2e 38 39 20 30 20 30 20 30 2d 36 2e 35 35 2d 32 2e 31 32 68 2d 2e 30 30 32 61 2e 39 39 37 2e 39 39 37 20 30 20 30 20 30 2d 2e 37 36 35 20 31 2e 31 38 32 2e 39 39 2e 39 39 20 30 20 30 20 30 20 31 2e 31 38 2e 37 36 35 20 34 2e 39 31 20 34 2e 39 31 20 30 20 30 20 31 20 34 2e 36 36 20 31 2e 35 30 38 20 34 2e 38 39 39 20 34 2e 38 39 39 20 30 20 30 20 31 20 31 2e 30 32 20 34 2e 37 38 37 2e 39 39 35 2e 39 39 35 Data Ascii: 37 3 19.617c0 4.3 5.513 6.913 10.907 6.913 7.07 0 11.776-4.105 11.776-7.37 0-1.97-1.66-3.09-3.15-3.55m4.693-7.87a6.89 6.89 0 0 0-6.55-2.12h-.002a.997.997 0 0 0-.765 1.182.99.99 0 0 0 1.18.765 4.91 4.91 0 0 1 4.66 1.508 4.899 4.899 0 0 1 1.02 4.787.995.995

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	50006	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	1245	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejo HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:12 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:12 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-MXX2Ol_lBk0AuPOT1lMqAw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:12 UTC	361	IN	Data Raw: 32 61 36 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a65<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 6c 5f 6c 42 6b 30 41 75 50 4f 54 31 6c 4d 71 41 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 4d 58 58 32 4f Data Ascii: l_lBk0AuPOT1lMqAw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="MXX2O
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 51 33 42 33 6f 5a 77 72 35 41 77 75 62 56 4c 37 36 74 73 71 4f 66 48 7a 59 45 38 49 42 42 59 39 56 6e 45 38 68 52 6f 66 51 4f 65 7a 57 75 4d 5f 72 61 46 67 37 74 51 77 53 59 7a 7a 46 62 69 5a 37 72 41 6e 39 63 58 45 31 65 36 65 76 66 48 64 45 31 53 55 33 62 7a 6b 50 4c 61 6b 4e 6d 61 6a 70 76 6f 47 2d 4e 52 6e 47 76 7a 6c 56 69 63 52 7a 39 44 78 58 42 50 64 71 2d 36 46 49 34 64 49 6e 61 55 31 74 4d 64 70 45 45 68 79 44 7a 43 67 65 56 43 53 61 42 50 55 4e 6b 33 70 6a 7a 63 6f 75 34 30 78 69 4b 4b 76 49 52 64 4a 52 50 4a 73 6c 42 62 4c 56 56 73 64 5f 45 43 48 74 5a 4e 78 46 57 57 75 58 70 46 72 44 6e 72 5a 7a 79 63 63 6f 77 4b 62 6f 54 45 45 77 4d 6d 62 52 69 70 37 68 78 37 44 41 76 51 74 5f 41 5f 66 66 64 7a 50 65 68 43 75 30 59 74 58 4f 38 78 49 63 33 76 Data Ascii: Q3B3oZwr5AwubVL76tsqOfHzYE8IBBY9VnE8hRofQOezWuM_raFg7tQwSYzzFbiZ7rAn9cXE1e6evfHdE1SU3bzkPLakNmajpvoG-NRnGvzlVicRz9DxXBPdq-6FI4dInaU1tMdpEEhyDzCgeVCSaBPUNk3pjzcou40xiKKvIRdJRPJslBbLVVsd_ECHtZNxFWWuXpFrDnrZzyccowKboTEEwMmbRip7hx7DAvQt_A_ffdzPehCu0YtXO8xIc3v
2024-01-15 13:24:12 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 56 6c 35 55 7a 41 72 56 45 6c 78 62 6a 64 48 56 46 4a 36 57 47 74 46 53 45 4a 6a 52 47 30 34 59 6a 63 30 4d 57 6b 32 54 32 4a 68 53 30 70 59 55 56 42 6d 54 55 6c 49 55 6e 68 4b 54 47 31 6c 5a 7a 68 54 53 57 68 74 52 6a 42 73 53 47 56 35 56 48 55 34 4e 54 67 77 51 6b 77 30 64 55 68 33 4d 30 70 4a 56 30 31 59 4e 48 56 72 52 56 70 4a 64 44 5a 4e 62 57 4a 55 61 48 68 73 57 46 5a 4d 57 45 4e 70 62 31 52 69 4f 56 6c 57 62 6b Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz\x22,\x22\x22,\x22TVl5UzArVElxbjdHVFJ6WGtFSEJjRG04Yjc0MWk2T2JhS0pYUVBmTUlIUnhKTG1lZzhTSWhtRjBsSGV5VHU4NTgwQkw0dUh3M0pJV01YNHVrRVpJdDZNbWJUaHhsWFZMWENpb1RiOVlWbk
2024-01-15 13:24:12 UTC	484	IN	Data Raw: 77 51 6d 39 68 55 6b 56 57 62 31 70 75 55 58 52 4d 51 6d 70 6d 55 6c 42 4f 59 6b 35 74 54 57 34 32 55 30 39 52 4d 32 4d 35 5a 31 56 4c 54 6c 68 76 4e 57 55 77 4c 30 39 30 51 58 6c 33 4d 6b 59 30 4d 55 4e 5a 4d 47 6c 6b 61 57 31 79 53 6c 46 70 56 53 74 36 64 48 4e 35 64 46 42 6c 4e 6b 70 32 61 56 4e 68 61 33 52 55 5a 6d 31 33 53 32 74 6a 65 48 5a 57 57 44 46 36 51 58 52 44 51 7a 64 42 51 30 68 59 4e 55 6c 47 63 54 4e 51 54 7a 56 32 56 30 5a 54 55 48 52 30 4d 6d 74 4d 62 57 78 54 55 55 73 32 62 45 5a 46 54 48 42 4b 56 6c 59 76 5a 30 39 4c 64 47 70 61 64 6a 42 74 57 48 68 4a 53 48 5a 48 52 45 4e 53 4f 54 6c 6c 57 57 39 73 5a 32 78 4c 63 6b 4e 32 55 46 4e 4e 53 79 39 4a 51 7a 55 79 56 46 42 33 53 6e 52 32 4d 6b 63 76 4d 32 78 43 55 6b 46 4a 54 55 56 6f 51 57 Data Ascii: wQm9hUkVWb1puUXRMQmpmUlBOYk5tTW42U09RM2M5Z1VLTlhvNWUwL090QXl3MkY0MUNZMGlkaW1ySlFpVSt6dHN5dFBlNkp2aVNha3RUZm13S2tjeHZWWDF6QXRDQzdBQ0hYNUlGcTNQTzV2V0ZTUHR0MmtMbWxTUUs2bEZFTHBKVlYvZ09LdGpadjBtWHhJSHZHRENSOTllWW9sZ2xLckN2UFNNSy9JQzUyVFB3SnR2MkcvM2xCUkFJTUVoQW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	50007	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:12 UTC	2213	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:13 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:13 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 76 69 73 69 74 65 64 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 68 6f 76 65 72 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 30 30 6b 72 35 22 20 78 2d 70 68 61 73 65 3d 22 61 73 73 65 6d 62 6c 65 22 3e 2e 6e 73 2d 30 30 6b 72 35 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 37 35 30 70 78 3b Data Ascii: ic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019"></script><style data-nl="stacked_layout" data-ns="ns-00kr5" x-phase="assemble">.ns-00kr5-l-stacked_layout{opacity:.01;position:absolute;top:0;left:0;display:block;width:750px;
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 65 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 35 2e 30 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 32 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 33 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 35 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 36 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 38 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 39 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 Data Ascii: ex;min-height:95.03px;width:100%;position:relative;}.ns-00kr5-e-5,.ns-00kr5-e-20,.ns-00kr5-e-35,.ns-00kr5-e-50,.ns-00kr5-e-66,.ns-00kr5-e-81,.ns-00kr5-e-96,.ns-00kr5-e-111{box-sizing:border-box;display:flex;flex-direction:column;flex:1 1 auto;justify-cont
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 38 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 7d 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 32 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 34 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 35 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 37 32 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 38 37 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 32 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 37 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 Data Ascii: ,.ns-00kr5-e-85,.ns-00kr5-e-100,.ns-00kr5-e-115{font-weight:700;line-height:1.2;min-height:1.3em;text-overflow:ellipsis;}.ns-00kr5-e-11,.ns-00kr5-e-26,.ns-00kr5-e-41,.ns-00kr5-e-56,.ns-00kr5-e-72,.ns-00kr5-e-87,.ns-00kr5-e-102,.ns-00kr5-e-117{box-sizing:b
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 76 2d 30 20 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 76 2d 30 20 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 30 30 6b 72 35 22 20 78 2d 70 68 61 73 65 3d 22 64 65 63 6f 72 61 74 65 22 3e 2e 6e 73 2d 30 30 6b 72 35 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 74 69 74 6c 65 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: 5,.ns-00kr5-v-0 .ns-00kr5-e-100,.ns-00kr5-v-0 .ns-00kr5-e-115{font-size:18px;display:block;}</style><style data-nl="stacked_layout" data-ns="ns-00kr5" x-phase="decorate">.ns-00kr5-l-stacked_layout{opacity:1;position:relative;}.title:hover{text-decoration:
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 30 6b 72 35 2d 65 2d 37 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 37 37 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 38 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 39 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 39 32 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 35 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 30 37 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 32 30 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 32 32 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 31 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 32 36 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 34 31 2c 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 35 36 2c 2e 6e 73 2d 30 30 6b 72 35 Data Ascii: 0kr5-e-75,.ns-00kr5-e-77,.ns-00kr5-e-86,.ns-00kr5-e-90,.ns-00kr5-e-92,.ns-00kr5-e-101,.ns-00kr5-e-105,.ns-00kr5-e-107,.ns-00kr5-e-116,.ns-00kr5-e-120,.ns-00kr5-e-122{white-space:nowrap;}.ns-00kr5-e-11,.ns-00kr5-e-26,.ns-00kr5-e-41,.ns-00kr5-e-56,.ns-00kr5
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 33 33 30 31 38 30 33 34 38 38 31 34 32 35 34 34 34 37 30 2f 31 34 37 36 33 30 30 34 36 35 38 31 31 37 37 38 39 35 33 37 29 3b 7d 2e 6e 73 2d 30 30 6b 72 35 2d 65 2d 36 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f Data Ascii: o-repeat;background-size:contain;background-position:center;cursor:pointer;background-image:url(https://tpc.googlesyndication.com/simgad/3301803488142544470/14763004658117789537);}.ns-00kr5-e-65{background-color:#cccccc;background-repeat:no-repeat;backgro
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 6d 2c 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 65 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f Data Ascii: The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b){functio
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 61 2e 6f 3d 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 29 7b 6c 65 74 20 62 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 62 2b 2b 7d 63 6f 6e 73 74 20 6b 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 6c 65 74 20 63 2c 64 3b 66 6f 72 28 6c 65 74 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 63 20 69 6e 20 Data Ascii: a.o=null};function ja(a){let b=0;for(const c in a)b++}const ka="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");function la(a,b){let c,d;for(let e=1;e<arguments.length;e++){d=arguments[e];for(c in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49999	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	591	OUT	OPTIONS /wp-json/wordpress-popular-posts/v2/widget?is_single=0 HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with,x-wp-nonce Origin: http://mylovelybluesky.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:14 UTC	1035	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: application/json; charset=UTF-8 x-robots-tag: noindex link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type allow: POST x-litespeed-tag: 8bb_HTTP.200 access-control-allow-origin: http://mylovelybluesky.com access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE access-control-allow-credentials: true vary: Origin,User-Agent x-litespeed-cache-control: no-cache content-length: 333 date: Mon, 15 Jan 2024 13:24:14 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:14 UTC	333	IN	Data Raw: 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 77 6f 72 64 70 72 65 73 73 2d 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 5c 2f 76 32 22 2c 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 61 72 67 73 22 3a 7b 22 69 73 5f 73 69 6e 67 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 67 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 5d 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 Data Ascii: {"namespace":"wordpress-popular-posts\/v2","methods":["POST"],"endpoints":[{"methods":["POST"],"args":{"is_single":{"type":"integer","default":null,"required":false},"lang":{"type":"string","default":null,"required":false}}}],"_links":{"self":[{"href":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50008	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1953	OUT	GET /pagead/adview?ai=CYKaY7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgTeAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrJ9QLjrtllcJ3KmN5KkeKFofvPD47nJMQX_rur2mP0h1lM0k0KPpMAE9LCKhr0EiAXjsMmvTJIFBAgEGAGSBQQIBRgEgAfA_9xkqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwUQnYDlAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOaCZABaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3Q_dj1ESVNOUyZwMT04NDQtMzAwLTk1MTYmb2ZmY21wPWZwcHN0MiZjbXA9YmFuX2dkbnJlc18xMl8zNzM4OTk2MjNfMTgxMTIwMzgwJmRjbGlkPUNOX2FtcGJ0Z29FREZidTdTd1VkcERrTmdBgAoByAsB2gwRCgsQwPfE48vW6YTkARICAQPYEw3QFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=Fj6RcWcFHwc&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObBgB&template_id=5001&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	1211	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xf6afdc717a29d52e0000000000000000","2":"0x44dfe456a032e7440000000000000000","3":"0xab0c710a523effd40000000000000000","4":"0x27ec2a437afb02340000000000000000","5":"0x43b1083498454ca70000000000000000"},"debug_key":"6266196196773343443","debug_reporting":true,"destination":"https://spectrum.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["827760606"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"8562145640693675169"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50009	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	2613	OUT	GET /pagead/interaction/?ai=CfoeI8TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNkBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQl_y_jMcJdMahzrpw9khcON9GUqgpJ0OP8yl5PQQtkcW3p8gqkQAfvoAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA_oLAggBgAwB0BUBgBcB&sigh=-6qpob8JjVc&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6Q&label=window_focus&gqid=8TGlZZ7tJOS4oPMPgom2eA&qqid=CLHG1Oq-34MDFRu70QQdGzENcA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	50015	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	611	OUT	GET /menu/svg/icons/pinterest.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:13 UTC	883	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:13 GMT Content-Type: application/javascript Content-Length: 901 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "573fae6e51435ee7155601d053377d81" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IV3r9YY40hS18VlgESL88w7Pq1EFS15WmGhfL9qr%2FYLsmTmSnmEJGqgF4ywLhMBfiYNxiNrwLHCq6hvjaoleynhsGah3zDqd1P66GeaJjiBo5VDF1FtEluJboGUgjwhS%2B%2BEDvv6l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700f0d87821e-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:13 UTC	486	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 70 69 6e 74 65 72 65 73 74 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 31 35 2e 39 39 35 20 34 43 39 2e 33 36 31 20 34 20 34 20 39 2e 33 37 20 34 20 31 35 2e 39 39 35 63 30 20 35 2e 30 38 34 20 33 2e 31 36 20 39 2e 34 32 38 20 37 2e 36 32 32 20 31 31 2e 31 37 36 2d 2e 31 30 39 2d 2e 39 34 38 2d 2e 31 39 38 2d 32 2e 34 31 2e 30 33 39 2d 33 2e 34 34 36 2e 32 31 37 2d 2e 39 33 38 20 31 2e 34 30 32 2d 35 2e 39 36 33 20 31 2e 34 30 32 2d 35 2e Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({pinterest:'<path fill="#fff" d="M15.995 4C9.361 4 4 9.37 4 15.995c0 5.084 3.16 9.428 7.622 11.176-.109-.948-.198-2.41.039-3.446.217-.938 1.402-5.963 1.402-5.
2024-01-15 13:24:13 UTC	415	IN	Data Raw: 35 2e 32 30 33 20 30 20 31 2e 30 32 37 2e 33 39 35 20 32 2e 31 33 32 2e 38 38 38 20 32 2e 37 33 35 61 2e 33 35 37 2e 33 35 37 20 30 20 30 20 31 20 2e 30 38 2e 33 34 35 63 2d 2e 30 39 2e 33 37 35 2d 2e 32 39 37 20 31 2e 31 39 35 2d 2e 33 33 36 20 31 2e 33 36 33 2d 2e 30 35 2e 32 31 37 2d 2e 31 37 38 2e 32 36 36 2d 2e 34 30 35 2e 31 35 38 2d 31 2e 34 38 31 2d 2e 37 31 31 2d 32 2e 34 30 39 2d 32 2e 39 30 33 2d 32 2e 34 30 39 2d 34 2e 36 36 20 30 2d 33 2e 37 38 31 20 32 2e 37 34 35 2d 37 2e 32 35 37 20 37 2e 39 32 38 2d 37 2e 32 35 37 20 34 2e 31 35 36 20 30 20 37 2e 33 39 34 20 32 2e 39 36 32 20 37 2e 33 39 34 20 36 2e 39 33 31 20 30 20 34 2e 31 33 37 2d 32 2e 36 30 36 20 37 2e 34 36 34 2d 36 2e 32 32 20 37 2e 34 36 34 2d 31 2e 32 31 34 20 30 2d 32 2e 33 36 Data Ascii: 5.203 0 1.027.395 2.132.888 2.735a.357.357 0 0 1 .08.345c-.09.375-.297 1.195-.336 1.363-.05.217-.178.266-.405.158-1.481-.711-2.409-2.903-2.409-4.66 0-3.781 2.745-7.257 7.928-7.257 4.156 0 7.394 2.962 7.394 6.931 0 4.137-2.606 7.464-6.22 7.464-1.214 0-2.36

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	50010	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	2783	OUT	GET /pagead/interaction/?ai=CMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=4_7hs0noD5Q&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYA&label=window_focus&gqid=8TGlZfnHJuucoPMPmYiswAc&qqid=COfe1eq-34MDFdSDdwEdnJkLiw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	50011	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	2776	OUT	GET /pagead/interaction/?ai=CfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=tIWHopABmJQ&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xg&label=window_focus&gqid=8TGlZY7wJ9_NoPMP2e6UmAk&qqid=CIOj1-q-34MDFc6K0QQdjH0Fgw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	50017	104.22.70.197	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	607	OUT	GET /menu/svg/icons/email.js HTTP/1.1 Host: static.addtoany.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://mylovelybluesky.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://static.addtoany.com/menu/modules/core.KJQApO2n.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:13 UTC	893	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:13 GMT Content-Type: application/javascript Content-Length: 427 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=7776000, stale-while-revalidate=30, public ETag: "48a669f03d3a3ea93ea22be8f12d6cc2" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H%2B6XwRYMphr8d4g5%2Bt%2B3CqbBRGX%2BjlHe%2Fqo46tO3rCSXY4Su6RvKV5P4gzYgn3YW2qBM9PDFEIx%2FZPk6cmwFyX83vabYfglI0D7kexGlicu%2BG6ag3Ac2KZNG3xgR%2Fl4g6K1gwyP5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} CF-Cache-Status: MISS Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 845e700f4d0620d2-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:13 UTC	427	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 2e 73 76 67 2e 61 64 64 26 26 63 2e 73 76 67 2e 61 64 64 28 7b 65 6d 61 69 6c 3a 27 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 32 37 20 32 31 2e 37 37 35 76 2d 39 2e 39 73 2d 31 30 2e 30 31 20 36 2e 39 38 35 2d 31 30 2e 39 38 32 20 37 2e 33 34 38 43 31 35 2e 30 35 38 20 31 38 2e 38 37 38 20 35 20 31 31 2e 38 37 35 20 35 20 31 31 2e 38 37 35 76 39 2e 39 63 30 20 31 2e 33 37 35 2e 32 39 33 20 31 2e 36 35 20 31 2e 36 35 20 31 2e 36 35 68 31 38 2e 37 63 31 2e 33 39 33 20 30 20 31 2e 36 35 2d 2e 32 34 32 20 31 Data Ascii: !function(c){"object"==typeof c&&"object"==typeof c.svg&&"function"==typeof c.svg.add&&c.svg.add({email:'<path fill="#fff" d="M27 21.775v-9.9s-10.01 6.985-10.982 7.348C15.058 18.878 5 11.875 5 11.875v9.9c0 1.375.293 1.65 1.65 1.65h18.7c1.393 0 1.65-.242 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	50013	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1204	OUT	GET /ddm/trackimp/N727992.3159GOOGLE/B30198601.372262804;dc_trk_aid=562456318;dc_trk_cid=181024020;ord=886815866;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	1058	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Location: https://ad.doubleclick.net/ddm/trackimp/N727992.3159GOOGLE/B30198601.372262804;dc_pre=CMGTn_C-34MDFb4LaAgdgVcNdg;dc_trk_aid=562456318;dc_trk_cid=181024020;ord=886815866;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	50018	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1028	OUT	GET /js/bg/kn2owPU74JTsOwTGty0aoUlXRSKSJihCWxBMzE3aLQs.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:13 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 17050 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 08:01:29 GMT Expires: Sun, 12 Jan 2025 08:01:29 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 28 Nov 2023 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 192164 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:13 UTC	440	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 58 3d 66 75 6e 63 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 75 7d 2c 53 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 29 7b 69 66 28 28 75 3d 28 76 3d 53 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 76 29 7c 7c 21 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 75 3b 74 72 79 7b 75 3d 76 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var X=function(u){return u},S=this\|\|self,g=function(u,v){if((u=(v=S.trustedTypes,null),!v)\|\|!v.createPolicy)return u;try{u=v.createPolicy("bg",{createHTM
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 76 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 79 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 79 29 7b 72 65 74 75 72 6e 22 22 2b 79 7d 7d 28 53 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 33 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 29 7b 72 65 74 75 72 6e 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 28 75 28 66 75 6e 63 74 69 6f 6e 28 53 29 7b 53 28 76 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 63 2c 76 6e 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 29 7b 72 65 74 75 72 6e 20 75 5b 76 5d 3c 3c 32 34 7c 75 5b 28 76 7c 30 29 2b 31 5d 3c 3c 31 36 7c 75 5b 28 76 7c 30 29 2b 32 5d 3c 3c 38 7c 75 5b 28 76 7c Data Ascii: v.createScript(y)}:function(y){return""+y}}(S)(Array(7824*Math.random()\|0).join("\n")+'(function(){var u3=function(u,v){return[function(){return v},(u(function(S){S(v)}),function(){})]},c,vn=function(u,v){return u[v]<<24\|u[(v\|0)+1]<<16\|u[(v\|0)+2]<<8\|u[(v\|
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 2a 61 2b 28 43 28 29 7c 30 29 2a 67 2c 76 6f 69 64 20 30 29 2c 79 5b 67 5d 29 2c 79 5b 28 58 2b 36 31 26 37 29 2b 28 76 26 32 29 5d 3d 67 2c 79 5b 58 2b 28 76 26 32 29 5d 3d 32 31 2c 67 7d 2c 72 7d 2c 6d 2c 43 77 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 29 7b 66 6f 72 28 53 3d 55 28 76 29 2c 79 3d 30 3b 30 3c 75 3b 75 2d 2d 29 79 3d 79 3c 3c 38 7c 64 28 76 29 3b 49 28 53 2c 76 2c 79 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 29 7b 66 6f 72 28 76 3d 5b 5d 3b 75 2d 2d 3b 29 76 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 76 7d 2c 59 44 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 7d 72 65 74 75 72 6e 20 75 3d 61 30 28 75 2c 28 Data Ascii: a+(C()\|0)g,void 0),y[g]),y[(X+61&7)+(v&2)]=g,y[X+(v&2)]=21,g},r},m,Cw=function(u,v,S,y){for(S=U(v),y=0;0<u;u--)y=y<<8\|d(v);I(S,v,y)},f=function(u,v){for(v=[];u--;)v.push(255*Math.random()\|0);return v},YD=function(u,v,S,y,a){function r(){}return u=a0(u,(
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 72 3c 79 3f 72 3a 79 2c 52 3d 59 3e 3e 33 2c 4e 3d 53 2e 41 5b 52 5d 2c 75 26 26 28 58 3d 53 2c 58 2e 46 21 3d 59 3e 3e 36 26 26 28 58 2e 46 3d 59 3e 3e 36 2c 43 3d 5a 28 34 36 31 2c 58 29 2c 58 2e 52 4e 3d 68 48 28 58 2e 46 2c 5b 30 2c 30 2c 43 5b 31 5d 2c 43 5b 32 5d 5d 2c 58 2e 59 29 29 2c 4e 5e 3d 53 2e 52 4e 5b 52 26 65 5d 29 2c 61 7c 3d 28 4e 3e 3e 38 2d 28 42 7c 30 29 2d 28 72 7c 30 29 26 28 31 3c 3c 72 29 2d 31 29 3c 3c 28 79 7c 30 29 2d 28 72 7c 30 29 2c 79 2d 3d 72 2c 59 2b 3d 72 3b 72 65 74 75 72 6e 20 49 28 32 30 2c 28 75 3d 61 2c 53 29 2c 28 67 7c 30 29 2b 28 76 7c 30 29 29 2c 75 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 2c 61 2c 72 2c 58 2c 43 2c 67 29 7b 69 66 28 28 28 28 67 3d 28 72 3d 28 43 3d 28 61 3d 28 79 7c 7c 75 2e Data Ascii: r<y?r:y,R=Y>>3,N=S.A[R],u&&(X=S,X.F!=Y>>6&&(X.F=Y>>6,C=Z(461,X),X.RN=hH(X.F,[0,0,C[1],C[2]],X.Y)),N^=S.RN[R&e]),a\|=(N>>8-(B\|0)-(r\|0)&(1<<r)-1)<<(y\|0)-(r\|0),y-=r,Y+=r;return I(20,(u=a,S),(g\|0)+(v\|0)),u},W=function(u,v,S,y,a,r,X,C,g){if((((g=(r=(C=(a=(y\|\|u.
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 29 7c 30 29 2d 31 3a 31 29 2c 55 28 75 29 29 2c 30 29 3b 61 3c 53 3b 61 2b 2b 29 76 2e 48 2e 70 75 73 68 28 55 28 75 29 29 3b 66 6f 72 28 76 2e 74 47 3d 5a 28 72 2c 75 29 2c 76 2e 6f 4e 3d 5a 28 79 2c 75 29 3b 53 2d 2d 3b 29 76 2e 48 5b 53 5d 3d 5a 28 76 2e 48 5b 53 5d 2c 75 29 3b 72 65 74 75 72 6e 20 76 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 29 7b 66 6f 72 28 53 3d 28 79 3d 28 76 7c 30 29 2d 31 2c 5b 5d 29 3b 30 3c 3d 79 3b 79 2d 2d 29 53 5b 28 76 7c 30 29 2d 31 2d 28 79 7c 30 29 5d 3d 75 3e 3e 38 2a 79 26 32 35 35 3b 72 65 74 75 72 6e 20 53 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 2c 61 2c 72 29 7b 69 66 28 76 2e 52 2e 6c 65 6e 67 74 68 29 7b 76 2e 69 3d 28 28 76 2e 69 26 26 30 28 29 2c 76 29 2e 65 70 3d 53 2c 74 Data Ascii: )\|0)-1:1),U(u)),0);a<S;a++)v.H.push(U(u));for(v.tG=Z(r,u),v.oN=Z(y,u);S--;)v.H[S]=Z(v.H[S],u);return v},k=function(u,v,S,y){for(S=(y=(v\|0)-1,[]);0<=y;y--)S[(v\|0)-1-(y\|0)]=u>>8*y&255;return S},z=function(u,v,S,y,a,r){if(v.R.length){v.i=((v.i&&0(),v).ep=S,t
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 2b 2b 5d 3d 79 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 76 7d 2c 51 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 5a 7a 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 2c 61 29 7b 69 66 28 28 79 3d 76 5b 30 5d 2c 79 29 3d 3d 44 29 75 2e 47 73 3d 32 35 2c 75 2e 4e 28 76 29 3b 65 6c 73 65 20 69 66 28 79 3d 3d 77 29 7b 53 3d 76 5b 31 5d 3b 74 72 79 7b 61 3d 75 2e 47 7c 7c 75 2e 4e 28 76 29 7d 63 61 74 63 68 28 72 29 7b 54 28 75 2c 72 29 2c 61 3d 75 2e 47 7d 53 28 61 29 7d 65 6c 73 65 20 69 66 28 79 3d 3d 6d 6c 29 75 2e 4e 28 76 29 3b 65 6c 73 65 20 69 66 28 79 3d 3d 66 77 29 75 2e 4e 28 76 29 3b 65 6c 73 65 20 69 66 28 79 3d 3d 4b 77 29 7b 74 72 79 7b 66 6f 72 28 61 3d 30 3b 61 3c 75 2e 55 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 74 72 79 7b 53 3d 75 2e 55 5b 61 Data Ascii: ++]=y&63\|128);return v},Q=this\|\|self,Zz=function(u,v,S,y,a){if((y=v[0],y)==D)u.Gs=25,u.N(v);else if(y==w){S=v[1];try{a=u.G\|\|u.N(v)}catch(r){T(u,r),a=u.G}S(a)}else if(y==ml)u.N(v);else if(y==fw)u.N(v);else if(y==Kw){try{for(a=0;a<u.U.length;a++)try{S=u.U[a
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 4f 3d 30 2c 79 2e 50 3d 30 2c 28 79 2e 59 3d 76 6f 69 64 20 30 2c 79 2e 52 4e 3d 28 79 2e 4a 47 3d 38 30 30 31 2c 76 6f 69 64 20 30 29 2c 79 2e 4a 3d 30 2c 79 29 2e 55 3d 5b 5d 2c 79 2e 44 3d 28 28 79 2e 58 77 3d 75 2c 79 29 2e 76 3d 30 2c 79 2e 6f 3d 76 6f 69 64 20 30 2c 79 2e 58 3d 28 28 79 2e 65 70 3d 28 79 2e 54 3d 76 6f 69 64 20 30 2c 66 61 6c 73 65 29 2c 79 29 2e 47 3d 28 79 2e 43 3d 30 2c 76 6f 69 64 20 30 29 2c 79 2e 53 70 3d 66 61 6c 73 65 2c 79 2e 5a 3d 28 79 2e 49 3d 6e 75 6c 6c 2c 31 29 2c 5b 5d 29 2c 79 2e 59 6d 3d 66 75 6e 63 74 69 6f 6e 28 58 29 7b 74 68 69 73 2e 57 3d 58 7d 2c 28 79 2e 56 3d 30 2c 79 2e 46 3d 76 6f 69 64 20 30 2c 79 2e 69 3d 66 61 6c 73 65 2c 79 29 2e 7a 73 3d 28 79 2e 67 3d 5b 5d 2c 30 29 2c 79 2e 73 3d 5b 5d 2c 76 6f 69 Data Ascii: O=0,y.P=0,(y.Y=void 0,y.RN=(y.JG=8001,void 0),y.J=0,y).U=[],y.D=((y.Xw=u,y).v=0,y.o=void 0,y.X=((y.ep=(y.T=void 0,false),y).G=(y.C=0,void 0),y.Sp=false,y.Z=(y.I=null,1),[]),y.Ym=function(X){this.W=X},(y.V=0,y.F=void 0,y.i=false,y).zs=(y.g=[],0),y.s=[],voi
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 29 29 2c 33 36 31 29 2c 79 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 5b 5d 29 29 2c 49 29 28 37 32 2c 79 2c 30 29 2c 79 29 2c 66 75 6e 63 74 69 6f 6e 28 58 2c 43 2c 67 29 7b 49 28 28 67 3d 55 28 58 29 2c 43 3d 55 28 58 29 2c 43 29 2c 58 2c 22 22 2b 5a 28 67 2c 58 29 29 7d 29 2c 79 29 2c 66 75 6e 63 74 69 6f 6e 28 58 2c 43 29 7b 50 6e 28 28 43 3d 5a 28 55 28 58 29 2c 58 29 2c 43 29 2c 58 2e 57 29 7d 29 2c 34 38 32 29 2c 79 2c 35 30 32 29 2c 49 28 36 38 2c 79 2c 32 30 34 38 29 2c 49 28 32 38 32 2c 79 2c 5b 31 36 30 2c 30 2c 30 5d 29 2c 79 29 2c 66 75 6e 63 74 69 6f 6e 28 58 2c 43 2c 67 2c 59 29 7b 49 28 28 67 3d 5a 28 28 59 3d 28 43 3d 28 59 3d 55 28 28 67 3d 55 28 58 29 2c 58 29 29 2c 55 28 58 29 29 2c 5a 28 59 2c 58 29 29 2c 67 29 2c 58 29 2c 43 29 2c Data Ascii: )),361),y,function(){}),[])),I)(72,y,0),y),function(X,C,g){I((g=U(X),C=U(X),C),X,""+Z(g,X))}),y),function(X,C){Pn((C=Z(U(X),X),C),X.W)}),482),y,502),I(68,y,2048),I(282,y,[160,0,0]),y),function(X,C,g,Y){I((g=Z((Y=(C=(Y=U((g=U(X),X)),U(X)),Z(Y,X)),g),X),C),
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 2e 74 47 2c 59 3d 43 2e 6f 4e 2c 58 2e 57 3d 3d 58 7c 7c 59 3d 3d 58 2e 59 6d 26 26 67 3d 3d 58 29 26 26 28 49 28 43 2e 61 4e 2c 58 2c 59 2e 61 70 70 6c 79 28 67 2c 43 2e 48 29 29 2c 58 2e 4f 3d 58 2e 4c 28 29 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 58 2c 43 2c 67 2c 59 2c 4e 2c 52 29 7b 69 66 28 21 57 28 58 2c 43 2c 74 72 75 65 2c 74 72 75 65 29 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 58 3d 5a 28 28 67 3d 28 4e 3d 28 43 3d 28 67 3d 55 28 28 52 3d 55 28 28 43 3d 55 28 58 29 2c 58 29 29 2c 4e 3d 55 28 58 29 2c 58 29 29 2c 5a 29 28 43 2c 58 29 2c 5a 29 28 4e 2c 58 29 2c 5a 29 28 67 2c 58 29 2c 52 29 2c 58 29 2c 53 68 29 28 43 29 29 7b 66 6f 72 28 59 20 69 6e 20 52 3d 5b 5d 2c 43 29 52 2e 70 75 73 68 28 59 29 3b 43 3d 52 7d 66 6f 72 28 52 3d 28 4e 3d Data Ascii: .tG,Y=C.oN,X.W==X\|\|Y==X.Ym&&g==X)&&(I(C.aN,X,Y.apply(g,C.H)),X.O=X.L())}),function(X,C,g,Y,N,R){if(!W(X,C,true,true)){if("object"==(X=Z((g=(N=(C=(g=U((R=U((C=U(X),X)),N=U(X),X)),Z)(C,X),Z)(N,X),Z)(g,X),R),X),Sh)(C)){for(Y in R=[],C)R.push(Y);C=R}for(R=(N=
2024-01-15 13:24:13 UTC	1252	IN	Data Raw: 3d 32 37 39 36 7d 2c 64 77 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 29 7b 66 6f 72 28 3b 76 2e 52 2e 6c 65 6e 67 74 68 3b 29 7b 79 3d 28 76 2e 49 3d 6e 75 6c 6c 2c 76 29 2e 52 2e 70 6f 70 28 29 3b 74 72 79 7b 53 3d 5a 7a 28 76 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 54 28 76 2c 61 29 7d 69 66 28 75 26 26 76 2e 49 29 7b 75 3d 76 2e 49 2c 75 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 28 74 72 75 65 2c 76 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 53 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 76 2c 53 2c 79 2c 61 2c 72 29 7b 69 66 28 21 53 2e 53 70 29 7b 69 66 28 75 3d 5a 28 36 38 2c 28 76 3d 28 30 3d 3d 28 72 3d 5a 28 28 61 3d 76 6f 69 64 20 30 2c 75 26 26 75 5b 30 5d 3d 3d 3d 78 26 26 28 61 3d 75 5b 32 5d 2c 76 3d 75 5b 31 Data Ascii: =2796},dw=function(u,v,S,y){for(;v.R.length;){y=(v.I=null,v).R.pop();try{S=Zz(v,y)}catch(a){T(v,a)}if(u&&v.I){u=v.I,u(function(){z(true,v,true)});break}}return S},V=function(u,v,S,y,a,r){if(!S.Sp){if(u=Z(68,(v=(0==(r=Z((a=void 0,u&&u[0]===x&&(a=u[2],v=u[1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	50019	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1886	OUT	GET /pagead/interaction/?ai=C3U5L7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgThAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrI_Qpl5IJLaD70gC1ASSWP2S9XJZ7DnKZETMMI5PEEO-ku0cOy-ZtUFe8AE9LCKhr0EiAXjsMmvTIAHwP_cZKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIH2xOi-34MDmgkjaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3SxCVxiRUO7Bm3SgAoByAsB4AsB2gwRCgsQwPfE48vW6YTkARICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=813_sqk_pbo&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=COyoxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	50021	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	852	OUT	GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:13 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:13 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EHagQolapaftGubbYwiU4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 37 63 36 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7c65if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4d 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.M),reject:g(this.o)}};e.prototype.M=function(g){if(g===this)this.o(new TypeErr
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 6c 28 77 28 7a 29 29 7d 63 61 74 63 68 28 47 29 7b 6e 28 47 29 7d 7d 3a 79 7d 76 61 72 20 6c 2c 6e 2c 72 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 29 7b 6c 3d 77 3b 6e 3d 79 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 Data Ascii: l(w(z))}catch(G){n(G)}}:y}var l,n,r=new e(function(w,y){l=w;n=y});this.kb(k(g,l),k(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.kb=function(g,h){function k(){switch(l.g){case 1:g(l.i);break;case 2:h(l.i);break;defa
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 66 28 21 71 61 28 6b 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 62 3b 63 61 28 6b 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 69 66 Data Ascii: ion c(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===l}function d(k){if(!qa(k,f)){var l=new b;ca(k,f,{value:l})}}function e(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return l(n)})}if
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 55 3f 6c 2e 55 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 55 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6d 61 3a 74 68 69 73 5b 31 5d 2e 6d 61 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 55 29 2c 74 68 69 73 5b 31 5d 2e 6d 61 2e 6e 65 78 74 3d 6c 2e 55 2c 74 68 69 73 5b 31 5d 2e 6d 61 3d 6c 2e 55 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: 0],k[1])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.U?l.U.value=k:(l.U={next:this[1],ma:this[1].ma,head:this[1],key:h,value:k},l.list.push(l.U),this[1].ma.next=l.U,this[1].ma=l.U,this.size++);return thi
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 70 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 Data Ascii: \|-Infinity===b\|\|0===b)return b;var c=Math.floor(Math.abs(b));return 0>b?-c:c}});p("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push(b[d]);return c}});p("Object.is",function(a){return a?a:function(b,c){return b===c?0
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 Data Ascii: pe[Symbol.iterator]=b.prototype.values;b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 6c 3d 3d 64 7c 7c 64 3e 65 29 64 3d 65 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: l==d\|\|d>e)d=e;d=Number(d);0>d&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fi
2024-01-15 13:24:13 UTC	1656	IN	Data Raw: 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 44 61 2c 48 61 2c 4d 61 2c 51 61 2c 54 61 2c 56 61 2c 57 61 2c 58 61 2c 24 61 2c 6d 62 2c 73 62 2c 72 62 2c 77 62 2c 79 62 2c 78 62 2c 7a 62 2c 41 62 2c 45 62 2c 57 62 2c 5a 62 2c 24 62 2c 62 63 2c 65 63 2c 63 63 2c 64 63 2c 66 63 2c 67 63 2c 6a 63 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 Data Ascii: 9*Math.random()>>>0);}catch(e){_._DumpException(e)}try{var Da,Ha,Ma,Qa,Ta,Va,Wa,Xa,$a,mb,sb,rb,wb,yb,xb,zb,Ab,Eb,Wb,Zb,$b,bc,ec,cc,dc,fc,gc,jc;_.ya=function(a){_.t.setTimeout(function(){throw a;},0)};_.za=function(){var a=_.t.navigator;return a&&(a=a.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	50022	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1839	OUT	GET /pagead/interaction/?ai=CWN0E7TGlZa7-Cqj3xtYP0o63IJ60_ql18LPZtfoRnODCi8EBEAEg7fipIGDJhqCKpKTgEaABm-fg3wPIAQmoAwHIAwKqBOoBT9B0AJJ7_vWHMXyXneecuyz0-DrFRDiMxcErND9OlleyxXhr0QY38J0q-XNOcVle91-ZhxO3m745ccJIf-WGdmCqCWJI7VTLKUekpgqTeAZhYcFfZQPY5dLxr88e_JEG3hsqkLY8WuyPkoH7jqMI3BeLcIFOGKiNUfUcIA32KJmJbAXOkOMk2Sx_9GaXkbai9HhtCMCDANlggbsdP1CL9nbJbmXBVBXaOFILbXIlqEPJ3f3EdPoVXRJ2ELq1sSQyE3aosKa9fxj40lSU42pUMafQVABH3-Y9S4FuYrqJNyeLhTWj8fs6pGLmwASXu7j7tgSIBbac2otLoAYRgAfDzfZ3qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOACgGYCwHICwGADAHaDBAKChDgvY-33dGT5RcSAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=auQhuJjp7qg&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=CO6oxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	50024	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1238	OUT	GET /ddm/trackimp/N727992.3159GOOGLE/B30198601.372262804;dc_pre=CMGTn_C-34MDFb4LaAgdgVcNdg;dc_trk_aid=562456318;dc_trk_cid=181024020;ord=886815866;dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;gdpr=;gdpr_consent=;ltd=;dc_tdv=1?https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:13 UTC	761	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://tps.doubleverify.com/visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	50026	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:13 UTC	1235	OUT	POST /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 8784 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=k1406jr6vejo Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVDeBoeX7Nwe1_B6Q2WIOVGUWUNoOWPdAC3R9weIg58i6QmbLIQ6Tt0FjwlPKMsIy1tMcoXq8WouD1pZT8; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:13 UTC	8784	OUT	Data Raw: 0a 18 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 12 a4 0f 30 33 41 46 63 57 65 41 35 52 4f 4e 31 44 58 6a 47 39 6a 35 46 79 33 4d 59 68 78 50 43 34 77 6a 45 32 46 6f 50 35 79 55 4f 6b 48 70 78 62 55 34 7a 44 6e 69 56 75 68 47 2d 69 63 41 71 4d 68 6c 37 52 71 33 68 75 4c 32 67 72 34 6f 53 5a 6f 4f 52 76 76 61 64 5f 6c 6d 56 67 32 36 4c 68 5a 7a 65 32 49 34 52 48 44 47 65 72 66 55 42 33 49 63 50 52 65 43 47 74 71 34 2d 76 41 34 46 4d 6d 68 61 31 4d 31 58 30 67 79 6e 70 6c 4a 6f 31 50 5a 6c 44 6d 44 7a 4c 58 71 79 43 56 41 36 4f 6a 4f 2d 39 30 63 37 42 77 7a 53 64 70 38 7a 4e 30 79 31 54 54 54 61 49 36 30 4d 74 33 2d 4c 70 64 4d 57 66 45 6e 50 6f 72 32 54 54 6b 76 6c 34 48 74 62 6c 34 6b 61 69 4d 4f 64 4f 49 42 71 79 4b 49 61 32 Data Ascii: Ya-Cd6PbRI5ktAHEhm9JuKEu03AFcWeA5RON1DXjG9j5Fy3MYhxPC4wjE2FoP5yUOkHpxbU4zDniVuhG-icAqMhl7Rq3huL2gr4oSZoORvvad_lmVg26LhZze2I4RHDGerfUB3IcPReCGtq4-vA4FMmha1M1X0gynplJo1PZlDmDzLXqyCVA6OjO-90c7BwzSdp8zN0y1TTTaI60Mt3-LpdMWfEnPor2TTkvl4Htbl4kaiMOdOIBqyKIa2
2024-01-15 13:24:14 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:14 GMT Expires: Mon, 15 Jan 2024 13:24:14 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE;Path=/recaptcha;Expires=Sat, 13-Jul-2024 13:24:14 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:14 UTC	556	IN	Data Raw: 61 37 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 4c 31 59 76 75 58 63 74 37 6a 41 57 4c 78 4d 58 65 78 45 56 4c 36 57 31 72 6f 2d 67 4e 59 67 54 59 64 4f 35 78 6f 46 48 35 73 55 77 59 69 47 7a 51 38 5a 6f 68 77 70 6c 66 73 67 6c 4e 38 38 41 72 74 4f 64 47 6e 4c 31 58 76 63 4e 68 36 67 75 47 54 57 5a 42 53 33 5f 5a 33 44 6f 48 4c 39 32 68 76 31 47 30 62 79 76 33 62 78 75 59 50 6c 75 42 51 33 51 74 6b 6b 42 66 54 53 69 5f 69 58 55 63 58 6a 36 4d 52 2d 4b 63 33 48 4e 71 54 36 7a 76 62 4e 7a 75 43 6e 75 78 75 74 6f 46 57 4e 6c 59 72 70 6a 70 66 34 63 71 5f 73 47 2d 63 78 65 34 7a 33 4e 38 42 48 66 64 31 6f 6f 68 33 48 75 56 59 67 59 5a 50 4c 6d 64 71 44 75 63 49 57 55 2d 6d 71 62 65 42 7a 45 74 51 45 72 4f 77 57 47 57 64 Data Ascii: a7a)]}'["rresp","03AFcWeA4L1YvuXct7jAWLxMXexEVL6W1ro-gNYgTYdO5xoFH5sUwYiGzQ8ZohwplfsglN88ArtOdGnL1XvcNh6guGTWZBS3_Z3DoHL92hv1G0byv3bxuYPluBQ3QtkkBfTSi_iXUcXj6MR-Kc3HNqT6zvbNzuCnuxutoFWNlYrpjpf4cq_sG-cxe4z3N8BHfd1ooh3HuVYgYZPLmdqDucIWU-mqbeBzEtQErOwWGWd
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 56 37 7a 79 7a 70 34 79 4f 4d 54 34 54 7a 4d 50 43 6b 37 59 33 58 37 57 5f 70 70 73 46 5a 4b 39 38 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 22 2c 22 22 2c 22 54 56 6c 35 5a 6c 45 77 4e 6c 70 36 54 6b 31 30 4d 56 49 7a 52 47 68 77 55 6c 64 77 4f 44 4e 48 61 45 46 6c 59 54 42 52 4e 30 46 32 64 6d 4e 47 4d 6b 45 7a 57 56 4a 4c 59 6a 5a 48 56 46 4d 33 5a 31 5a 47 51 6a 46 44 5a 58 70 79 55 33 42 47 4e 30 56 6b 63 6d 64 Data Ascii: V7zyzp4yOMT4TzMPCk7Y3X7W_ppsFZK98",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz","","TVl5ZlEwNlp6Tk10MVIzRGhwUldwODNHaEFlYTBRN0F2dmNGMkEzWVJLYjZHVFM3Z1ZGQjFDZXpyU3BGN0Vkcmd
2024-01-15 13:24:14 UTC	881	IN	Data Raw: 54 31 5a 58 51 55 51 77 52 45 5a 59 59 6c 4a 76 61 45 39 4d 4d 32 78 36 4d 45 30 33 52 31 52 4c 4d 33 5a 68 52 48 4a 4a 56 6d 52 6f 52 47 35 59 54 6e 45 33 52 48 64 51 4d 46 70 76 54 6c 52 58 57 6c 64 4e 4d 6c 6f 72 62 6a 42 71 52 48 59 72 53 47 68 75 52 58 56 73 62 6b 39 4e 59 32 6f 34 4e 47 6f 77 59 31 52 32 52 6b 31 76 4f 43 74 44 61 54 56 79 4c 33 5a 72 57 6b 5a 73 52 44 6b 76 63 56 49 31 56 32 39 56 57 6e 52 77 61 32 68 47 55 47 35 53 62 30 63 34 63 58 5a 44 65 6c 4e 47 54 44 4a 30 64 6e 64 69 54 56 52 53 55 7a 42 43 63 46 41 34 55 46 68 33 54 31 42 6f 56 44 5a 51 5a 30 6b 7a 5a 54 59 31 4e 31 42 50 4b 32 64 6e 51 54 68 32 62 6c 52 53 62 6a 68 48 62 55 70 52 5a 45 30 34 53 44 4e 58 63 47 67 79 63 44 64 46 51 6c 42 71 61 54 56 7a 4e 56 70 46 56 48 42 Data Ascii: T1ZXQUQwREZYYlJvaE9MM2x6ME03R1RLM3ZhRHJJVmRoRG5YTnE3RHdQMFpvTlRXWldNMlorbjBqRHYrSGhuRXVsbk9NY2o4NGowY1R2Rk1vOCtDaTVyL3ZrWkZsRDkvcVI1V29VWnRwa2hGUG5Sb0c4cXZDelNGTDJ0dndiTVRSUzBCcFA4UFh3T1BoVDZQZ0kzZTY1N1BPK2dnQTh2blRSbjhHbUpRZE04SDNXcGgycDdFQlBqaTVzNVpFVHB
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 31 36 37 35 0d 0a 59 4d 45 31 44 4d 6b 4a 6b 51 6a 46 59 55 48 4e 75 51 69 74 57 4e 33 64 61 61 6c 67 76 56 32 34 33 4d 57 31 56 52 31 52 46 59 30 35 5a 65 6a 4a 58 4e 57 52 4a 52 55 31 34 55 44 4e 6f 54 57 74 6c 64 7a 55 77 54 6e 68 32 54 45 52 46 56 48 45 77 4f 48 4e 50 55 56 4e 49 4c 32 77 31 59 6d 31 34 62 57 74 57 65 55 64 32 4f 48 49 7a 4d 31 4a 61 56 45 55 7a 57 6a 46 4c 4f 56 64 56 4d 48 56 78 55 6c 4e 56 65 6c 59 72 55 6b 39 6e 63 6e 4d 79 56 6d 52 36 61 45 35 4c 64 6c 63 77 65 6e 64 53 63 30 59 34 57 47 39 51 53 30 6b 77 62 32 56 73 5a 30 4e 36 61 6c 4a 6d 4d 46 42 57 57 6e 4e 32 55 32 73 76 56 6b 31 6a 61 30 39 77 61 54 46 44 61 31 56 7a 51 6c 42 7a 52 48 4a 57 4f 57 31 47 5a 55 78 55 63 30 46 6d 53 32 4d 33 65 6e 6c 7a 5a 6c 45 30 4c 31 6c 4c Data Ascii: 1675YME1DMkJkQjFYUHNuQitWN3daalgvV243MW1VR1RFY05ZejJXNWRJRU14UDNoTWtldzUwTnh2TERFVHEwOHNPUVNIL2w1Ym14bWtWeUd2OHIzM1JaVEUzWjFLOVdVMHVxUlNVelYrUk9ncnMyVmR6aE5LdlcwendSc0Y4WG9QS0kwb2VsZ0N6alJmMFBWWnN2U2svVk1ja09waTFDa1VzQlBzRHJWOW1GZUxUc0FmS2M3enlzZlE0L1lL
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 45 31 4c 62 6c 4a 53 4e 6c 6f 30 64 33 64 79 4e 48 68 6c 53 6d 35 4d 55 30 4d 35 4d 55 4e 36 54 6e 64 4a 54 7a 68 42 59 55 6c 6c 4b 31 70 47 61 32 5a 6a 53 30 35 4a 57 46 4a 33 56 6b 39 55 53 57 56 4d 57 56 56 6f 4f 45 52 76 4e 31 70 56 4d 55 56 72 5a 48 56 31 57 6c 52 49 4d 47 74 6e 4e 46 6f 32 64 58 4e 36 4d 6b 51 33 55 56 6c 54 64 47 56 56 55 57 73 34 52 56 6c 6b 53 31 4a 4a 5a 6d 34 77 54 57 78 6c 64 58 6f 78 53 6b 68 75 4d 45 31 56 55 32 55 32 54 6e 6b 79 57 6c 70 52 51 30 68 43 5a 6d 35 50 61 47 35 30 53 44 64 71 53 54 6c 6d 64 31 4e 52 59 6b 30 76 4e 7a 42 46 53 32 74 4f 4e 33 5a 36 62 32 31 74 62 55 39 6e 64 56 41 32 55 56 52 6c 62 54 64 6a 57 58 41 35 4e 55 64 32 59 6e 42 72 59 6b 68 76 62 43 39 4a 63 31 56 58 57 45 51 33 63 56 70 59 57 53 39 7a Data Ascii: E1LblJSNlo0d3dyNHhlSm5MU0M5MUN6TndJTzhBYUllK1pGa2ZjS05JWFJ3Vk9USWVMWVVoOERvN1pVMUVrZHV1WlRIMGtnNFo2dXN6MkQ3UVlTdGVVUWs4RVlkS1JJZm4wTWxldXoxSkhuME1VU2U2TnkyWlpRQ0hCZm5PaG50SDdqSTlmd1NRYk0vNzBFS2tON3Z6b21tbU9ndVA2UVRlbTdjWXA5NUd2YnBrYkhvbC9Jc1VXWEQ3cVpYWS9z
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 55 52 69 54 55 6c 44 63 6d 68 47 54 47 74 48 57 45 56 78 4e 7a 42 59 53 6e 4e 61 52 46 6c 4e 4e 7a 46 59 5a 31 70 32 61 6a 46 4b 54 6c 5a 72 55 6a 42 74 65 45 63 33 51 30 70 35 4d 32 4e 49 4b 32 52 56 4e 30 6b 7a 62 6b 52 44 4d 7a 64 35 5a 58 52 4d 55 30 46 70 55 6d 39 44 5a 48 51 32 54 6b 64 68 54 6a 6b 7a 59 6a 52 7a 65 58 41 76 4f 47 4a 75 64 58 6f 32 65 58 49 35 4e 54 6c 77 51 6b 46 35 4c 30 68 32 5a 6a 6c 6c 55 6e 64 31 56 58 67 77 4f 46 4a 43 63 45 78 32 4b 7a 4a 46 62 30 70 6e 5a 53 39 46 52 44 6c 36 64 45 52 46 51 33 6c 6a 62 32 77 72 53 33 70 4a 57 58 64 46 63 48 55 79 52 48 70 59 56 32 52 6d 54 33 4e 73 61 44 56 6a 52 6e 52 52 54 57 38 76 54 32 30 31 62 6d 74 55 56 7a 56 57 53 48 52 59 51 6c 4e 73 51 33 4a 4c 59 6e 64 52 53 55 4e 4c 4d 32 74 7a Data Ascii: URiTUlDcmhGTGtHWEVxNzBYSnNaRFlNNzFYZ1p2ajFKTlZrUjBteEc3Q0p5M2NIK2RVN0kzbkRDMzd5ZXRMU0FpUm9DZHQ2TkdhTjkzYjRzeXAvOGJudXo2eXI5NTlwQkF5L0h2ZjllUnd1VXgwOFJCcEx2KzJFb0pnZS9FRDl6dERFQ3ljb2wrS3pJWXdFcHUyRHpYV2RmT3NsaDVjRnRRTW8vT201bmtUVzVWSHRYQlNsQ3JLYndRSUNLM2tz
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 7a 4e 44 61 54 68 79 53 7a 67 7a 54 32 39 55 55 58 5a 75 4f 54 5a 70 52 46 56 69 64 45 31 68 64 6a 5a 47 64 57 74 70 64 6e 68 35 65 45 64 34 57 69 74 4d 53 6e 46 6b 51 57 74 75 63 32 52 4c 5a 48 4a 6c 5a 56 42 69 5a 6a 52 58 64 6b 6c 7a 56 45 6c 32 59 7a 64 31 52 6a 4a 35 51 7a 4a 48 5a 6e 68 57 57 56 51 76 4b 31 45 79 64 48 52 49 53 32 31 36 63 33 55 77 4e 57 78 4b 5a 58 68 72 51 6e 63 32 56 58 56 54 56 6b 4a 71 52 33 4a 4b 52 6e 5a 52 4b 79 39 69 61 6b 51 30 57 6c 46 58 55 56 70 48 4e 30 35 43 64 46 52 78 61 6d 4a 68 55 6b 39 78 55 6b 74 58 54 6c 6b 72 5a 48 41 77 52 7a 42 75 63 6b 56 76 56 6e 45 7a 56 47 38 78 54 54 42 52 64 6e 6c 32 5a 6b 35 71 65 47 74 42 59 6d 74 4a 53 6d 4e 54 56 54 46 79 51 54 56 46 52 6e 42 6d 4e 6e 5a 79 62 6e 70 30 4c 31 6c 35 Data Ascii: zNDaThySzgzT29UUXZuOTZpRFVidE1hdjZGdWtpdnh5eEd4WitMSnFkQWtuc2RLZHJlZVBiZjRXdklzVEl2Yzd1RjJ5QzJHZnhWWVQvK1EydHRIS216c3UwNWxKZXhrQnc2VXVTVkJqR3JKRnZRKy9iakQ0WlFXUVpHN05CdFRxamJhUk9xUktXTlkrZHAwRzBuckVvVnEzVG8xTTBRdnl2Zk5qeGtBYmtJSmNTVTFyQTVFRnBmNnZybnp0L1l5
2024-01-15 13:24:14 UTC	749	IN	Data Raw: 33 4e 51 61 45 6c 6c 51 6e 46 6a 57 55 39 68 55 54 5a 6d 5a 48 64 44 54 7a 6c 6e 63 58 64 4a 4b 30 5a 5a 56 58 56 32 62 56 4d 33 5a 30 55 33 59 6d 68 61 63 30 49 34 57 44 41 34 4e 45 52 6d 4e 45 5a 4a 4e 6b 6c 47 57 55 4e 46 59 6b 34 76 64 47 6c 4a 4d 46 59 35 51 33 45 72 56 31 63 78 65 6e 46 33 4e 6a 56 47 57 47 6c 54 63 7a 56 42 56 45 31 36 4d 30 78 68 61 58 42 4c 54 57 4a 51 64 57 4a 55 52 57 68 54 53 6b 49 77 4e 6a 5a 71 4f 54 5a 79 4f 58 68 6c 65 6b 52 33 54 6d 77 76 4b 31 49 34 54 46 59 72 4f 54 6c 68 4d 31 42 72 56 6c 51 34 62 6b 63 72 64 55 46 48 65 56 55 79 52 6a 68 77 4c 30 70 6f 61 58 70 68 54 30 4e 50 4f 55 51 77 5a 57 31 4a 54 6b 49 77 59 30 64 72 63 6e 6c 68 53 32 4a 55 52 47 6c 61 57 45 68 31 51 58 68 79 53 45 51 30 64 44 56 33 55 56 6c 31 Data Ascii: 3NQaEllQnFjWU9hUTZmZHdDTzlncXdJK0ZZVXV2bVM3Z0U3Ymhac0I4WDA4NERmNEZJNklGWUNFYk4vdGlJMFY5Q3ErV1cxenF3NjVGWGlTczVBVE16M0xhaXBLTWJQdWJURWhTSkIwNjZqOTZyOXhlekR3TmwvK1I4TFYrOTlhM1BrVlQ4bkcrdUFHeVUyRjhwL0poaXphT0NPOUQwZW1JTkIwY0drcnlhS2JURGlaWEh1QXhySEQ0dDV3UVl1
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 31 31 33 35 0d 0a 57 56 56 71 5a 6a 4e 45 63 58 70 58 61 32 4e 6f 56 47 70 5a 61 45 64 4d 55 6b 63 35 64 6b 46 75 61 57 64 45 4f 44 56 61 53 6c 45 79 4b 32 56 46 63 32 39 70 62 32 51 35 4c 30 5a 74 64 58 68 76 4d 57 64 30 53 30 39 45 61 7a 68 68 5a 55 78 52 52 6e 4e 76 61 53 74 71 59 57 4e 50 59 6e 46 57 63 6a 4a 51 5a 33 55 77 59 6d 78 42 53 6d 6c 69 4d 6d 30 34 5a 46 70 69 63 32 35 33 62 46 4e 59 52 32 46 68 4d 58 42 5a 4e 6b 56 72 53 33 68 4f 51 6d 52 73 61 6b 39 79 5a 31 6c 5a 53 6b 39 69 64 6b 38 7a 63 31 6c 74 4d 30 46 48 4d 6a 4e 59 56 6c 56 51 4b 32 51 34 4d 47 4e 58 63 56 4e 5a 65 45 5a 69 64 44 68 7a 4e 45 78 36 62 6e 4a 78 62 58 4e 61 61 44 51 32 5a 58 51 32 54 6d 39 4a 51 54 46 52 57 6c 42 57 55 56 46 74 4d 6d 31 51 54 6c 67 77 61 56 45 31 4e Data Ascii: 1135WVVqZjNEcXpXa2NoVGpZaEdMUkc5dkFuaWdEODVaSlEyK2VFc29pb2Q5L0ZtdXhvMWd0S09EazhhZUxRRnNvaStqYWNPYnFWcjJQZ3UwYmxBSmliMm04ZFpic253bFNYR2FhMXBZNkVrS3hOQmRsak9yZ1lZSk9idk8zc1ltM0FHMjNYVlVQK2Q4MGNXcVNZeEZidDhzNEx6bnJxbXNaaDQ2ZXQ2Tm9JQTFRWlBWUVFtMm1QTlgwaVE1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	50031	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaTCNXy51eAAgRD8cbPiUedVVWPLGtY7mkP5ITXBYDhZXRsvuESQ3dKuNb-uFeuvl7h7JrhX76A1WfUzZQPWxaBUbO03UA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:14 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:14 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	50035	34.117.228.201	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	715	OUT	GET /visit.jpg?ctx=31800672&cmp=30455423&sid=4322561&plc=373899623&adsrv=1&btreg=&btadsrv=&crt=&tagtype=&dvtagver=6.1.img&&cbvp=2 HTTP/1.1 Host: tps.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:14 UTC	302	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:14 GMT Content-Length: 0 Connection: close Cache-Control: max-age=0 Expires: 01/14/2024 13:24:14 Location: https://cdn.doubleverify.com/redirect/?host=tpsc-ue1&param=akipv6&impid=8a24cd3de094480bbccbf23135950c09&dup=&eoid=1000 Pragma: no-cache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	50037	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	2232	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:14 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:14 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:14 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 30 30 70 78 3b 68 65 69 67 68 74 3a 20 32 35 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;ma
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 ma
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 79 65 56 39 6a 62 32 52 6c 58 31 56 54 58 33 42 6c 63 6e 4e 76 62 6c 39 79 5a 57 64 70 62 32 35 66 59 32 39 6b 5a 56 38 30 5a 54 51 7a 4e 57 59 7a 4e 54 4d 32 4d 7a 63 75 61 6e 4e 76 62 68 49 61 51 31 42 49 62 44 56 66 51 79 30 7a 4e 45 31 45 52 6c 52 76 64 58 4e 33 51 57 52 32 65 48 64 50 63 32 63 59 41 53 49 66 43 4a 67 57 45 4b 69 6c 41 52 69 5f 71 44 34 67 6e 50 6d 6c 42 43 67 43 4d 41 49 34 41 56 32 61 6d 52 6b 2d 59 50 65 65 44 42 4c 67 41 77 72 56 41 32 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 4e 7a 4c 32 46 6a 64 47 6c 32 5a 58 5a 70 5a 58 63 5f 65 47 46 70 50 55 46 4c 51 55 39 71 63 33 5a 56 53 57 35 34 59 31 64 57 59 58 56 4b 64 58 Data Ascii: yeV9jb2RlX1VTX3BlcnNvbl9yZWdpb25fY29kZV80ZTQzNWYzNTM2MzcuanNvbhIaQ1BIbDVfQy0zNE1ERlRvdXN3QWR2eHdPc2cYASIfCJgWEKilARi_qD4gnPmlBCgCMAI4AV2amRk-YPeeDBLgAwrVA2h0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGNzL2FjdGl2ZXZpZXc_eGFpPUFLQU9qc3ZVSW54Y1dWYXVKdX
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 32 36 6c 74 3b 31 37 33 35 30 32 30 21 5c 78 33 64 6e 65 68 75 60 2f 21 33 36 34 5c 78 33 64 35 30 35 31 21 39 61 62 6b 7b 61 28 24 31 36 30 32 31 30 3a 33 5c 78 32 36 61 6d 70 3b 5c 78 32 36 6c 74 3b 63 62 6f 74 66 2b 2a 30 31 35 30 30 33 34 3a 25 32 62 65 6a 76 66 2f 25 37 32 3b 31 37 36 31 33 21 5c 78 33 64 65 66 64 77 61 2a 5c 78 32 36 23 33 39 3b 37 36 34 36 33 3b 32 31 24 3f 65 62 6b 70 62 24 5c 78 32 36 61 6d 70 3b 30 33 36 36 37 31 37 5c 78 32 36 67 74 3b 2a 5c 78 32 36 67 74 3b 62 67 69 70 66 2b 21 33 5c 78 33 64 37 31 32 33 36 33 25 39 61 69 68 77 63 29 21 37 32 30 32 5c 78 32 36 6c 74 3b 32 31 37 5c 78 32 36 23 33 39 3b 39 65 66 6f 74 6d 28 5c 78 32 36 61 6d 70 3b 32 30 30 36 31 3b 34 38 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f 70 Data Ascii: 26lt;1735020!\x3dnehu`/!364\x3d5051!9abk{a($160210:3\x26amp;\x26lt;cbotf+0150034:%2bejvf/%72;17613!\x3defdwa\x26#39;76463;21$?ebkpb$\x26amp;0366717\x26gt;*\x26gt;bgipf+!3\x3d712363%9aihwc)!7202\x26lt;217\x26#39;9efotm(\x26amp;20061;48\x26amp;\x26gt;`dop
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 5c 78 33 64 43 4d 4b 50 46 68 43 69 38 34 69 6c 42 42 69 43 35 62 4b 43 41 6a 41 42 5c 78 32 36 76 5c 78 33 64 41 50 45 75 63 4e 58 46 33 50 37 75 31 43 31 35 6f 39 4a 68 43 6a 76 72 71 53 68 59 33 61 52 76 58 59 52 33 50 6c 44 35 52 47 4d 50 74 32 79 69 49 33 58 63 41 72 5f 43 4c 71 35 48 49 6c 4b 63 73 78 67 42 4b 67 53 56 4d 36 53 71 57 57 4c 5f 66 64 6f 73 74 57 72 45 2d 33 34 49 61 58 36 55 33 46 75 59 57 32 6f 4c 68 46 76 34 48 6a 62 52 67 6d 7a 38 71 47 73 5c 78 32 32 20 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 78 33 64 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 61 Data Ascii: leclick.net/xbbe/pixel?d\x3dCMKPFhCi84ilBBiC5bKCAjAB\x26v\x3dAPEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs\x22 style\x3d\x22display:none\x22 aria-hidden\x3d\x22true\x22\x3e\x3c/ifra
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 64 65 5c 5c 78 32 32 2c 4c 3a 5c 5c 78 32 32 6d 74 66 52 65 6e 64 65 72 46 6c 6f 61 74 49 6e 70 6c 61 63 65 5c 5c 78 32 32 2c 73 3a 5c 5c 78 32 32 64 65 62 75 67 6a 73 5c 5c 78 32 32 2c 47 3a 5c 5c 78 32 32 64 63 61 70 70 5c 5c 78 32 32 2c 6d 3a 5c 5c 78 32 32 62 72 65 61 6b 6f 75 74 69 66 72 61 6d 65 5c 5c 78 32 32 2c 48 3a 5c 5c 78 32 32 69 6e 4d 6f 62 69 6c 65 41 64 53 64 6b 5c 5c 78 32 32 7d 2c 71 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 70 29 7b 76 61 72 20 65 5c 5c 78 33 64 70 5b 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3b 63 20 69 6e 20 61 5c 5c 78 32 36 5c 5c 78 32 36 64 65 6c 65 74 65 20 61 5b 63 5d 3b 61 5b 65 5d Data Ascii: de\\x22,L:\\x22mtfRenderFloatInplace\\x22,s:\\x22debugjs\\x22,G:\\x22dcapp\\x22,m:\\x22breakoutiframe\\x22,H:\\x22inMobileAdSdk\\x22},q\\x3dfunction(a){m(a,function(b,c){if(c.toLowerCase()in p){var e\\x3dp[c.toLowerCase()];c in a\\x26\\x26delete a[c];a[e]
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 7a 3b 76 61 72 20 41 5c 5c 78 33 64 7b 7d 2c 42 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 5c 5c 78 33 64 5c 5c 78 33 64 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 5c 78 32 32 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 5c 5c 78 32 32 29 3b 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 42 3b 76 61 72 20 43 5c 5c 78 33 64 7b 7d 2c 44 5c 5c 78 33 64 66 75 6e 63 74 Data Ascii: n(){return\\x22\\x22.toString()};new z;var A\\x3d{},B\\x3dfunction(){if(A!\\x3d\\x3dA)throw Error(\\x22SafeStyleSheet is not meant to be built directly\\x22);};B.prototype.toString\\x3dfunction(){return\\x22\\x22.toString()};new B;var C\\x3d{},D\\x3dfunct
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 7b 76 61 72 20 66 5c 5c 78 33 64 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 5b 64 5d 2e 65 78 70 61 6e 64 69 6e 67 44 69 73 70 6c 61 79 50 72 6f 70 65 72 74 69 65 73 3b 69 66 28 66 5c 5c 78 32 36 5c 5c 78 32 36 5c 5c 78 32 32 6c 69 67 68 74 62 6f 78 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 6c 28 66 2e 65 78 70 61 6e 73 69 6f 6e 4d 6f 64 65 29 29 7b 64 5c 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 7d 64 5c 5c 78 33 64 21 31 7d 64 5c 5c 78 33 64 21 64 5c 5c 78 32 36 5c 5c 78 32 36 6e 75 6c 6c 21 5c 5c 78 33 64 77 69 6e 64 6f 77 2e 6d 72 61 69 64 7d 65 6c 73 65 20 64 5c 5c 78 33 64 21 31 3b 64 5c 5c 78 32 36 5c 5c 78 32 36 28 65 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 47 2e 70 61 74 74 65 72 6e 2c 47 2e 69 29 29 3b 5c 5c 78 32 32 74 72 75 65 Data Ascii: {var f\\x3da.g.primaryFiles[d].expandingDisplayProperties;if(f\\x26\\x26\\x22lightbox\\x22\\x3d\\x3dl(f.expansionMode)){d\\x3d!0;break a}}d\\x3d!1}d\\x3d!d\\x26\\x26null!\\x3dwindow.mraid}else d\\x3d!1;d\\x26\\x26(e\\x3de.replace(G.pattern,G.i));\\x22true
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 6e 67 3a 21 30 2c 62 6f 6f 74 73 74 72 61 70 46 75 6e 63 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 29 7d 65 6c 73 65 20 63 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 46 2e 70 61 74 74 65 72 6e 2c 46 2e 69 29 2c 4b 28 63 2c 21 30 29 7d 2c 49 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5c 5c 78 33 64 4d 28 61 29 3b 62 5c 5c 78 33 64 4d 28 62 29 3b 66 6f 72 28 76 61 72 20 63 5c 5c 78 33 64 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 2c 62 2e 6c 65 6e 67 74 68 29 2c 65 5c 5c 78 33 64 30 3b 65 5c 5c 78 33 63 63 3b 65 2b 2b 29 69 66 28 61 5b 65 5d 21 5c 5c 78 33 64 62 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2d 62 5b 65 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 2d 62 2e 6c 65 6e 67 74 68 7d 2c 4d 5c 5c 78 33 64 66 75 6e 63 74 69 6f Data Ascii: ng:!0,bootstrapFunction:null}))}else c\\x3de.replace(F.pattern,F.i),K(c,!0)},I\\x3dfunction(a,b){a\\x3dM(a);b\\x3dM(b);for(var c\\x3dMath.min(a.length,b.length),e\\x3d0;e\\x3cc;e++)if(a[e]!\\x3db[e])return a[e]-b[e];return a.length-b.length},M\\x3dfunctio
2024-01-15 13:24:14 UTC	1252	IN	Data Raw: 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 68 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 33 64 5c 5c 78 32 32 4d 6f 64 65 72 6e 69 7a 72 2e 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 5c 5c 78 32 32 29 3b 21 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 32 36 5c 5c 78 32 36 4e 28 67 29 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 33 64 21 30 29 3b 61 5c 5c 78 33 64 6e 65 77 20 74 28 61 29 3b 62 5c 5c 78 33 64 4a 28 29 3b 62 2e 63 72 65 61 74 69 76 65 73 2e 70 75 73 68 28 61 2e 67 29 3b 76 61 72 20 63 5c 5c 78 33 64 61 2e 67 2e 63 72 65 61 74 69 76 65 50 61 72 61 6d 65 74 65 72 73 3b 63 2e 63 72 65 61 74 69 76 65 5f 75 6e 69 71 75 65 5f 69 64 5c 5c 78 33 64 63 2e 63 69 64 Data Ascii: tml5Features[b]\\x26\\x26(a.html5Features[b]\\x3d\\x22Modernizr.cssanimations\\x22);!a.previewMode\\x26\\x26N(g)\\x26\\x26(a.previewMode\\x3d!0);a\\x3dnew t(a);b\\x3dJ();b.creatives.push(a.g);var c\\x3da.g.creativeParameters;c.creative_unique_id\\x3dc.cid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	50039	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	2243	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:15 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:15 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 30 30 70 78 3b 68 65 69 67 68 74 3a 20 32 35 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;ma
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 ma
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 52 79 65 56 39 6a 62 32 52 6c 58 31 56 54 58 33 42 6c 63 6e 4e 76 62 6c 39 79 5a 57 64 70 62 32 35 66 59 32 39 6b 5a 56 38 30 5a 54 51 7a 4e 57 59 7a 4e 54 4d 32 4d 7a 63 75 61 6e 4e 76 62 68 49 61 51 30 74 70 54 32 64 6d 52 79 30 7a 4e 45 31 45 52 6c 6c 6e 61 48 4e 33 51 57 52 54 54 44 52 4a 55 45 45 59 41 53 49 66 43 4a 67 57 45 4b 69 6c 41 52 69 5f 71 44 34 67 6e 50 6d 6c 42 43 67 43 4d 41 49 34 41 56 32 61 6d 52 6b 2d 59 50 65 65 44 42 4c 67 41 77 72 56 41 32 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 4e 7a 4c 32 46 6a 64 47 6c 32 5a 58 5a 70 5a 58 63 5f 65 47 46 70 50 55 46 4c 51 55 39 71 63 33 4e 61 54 31 64 75 57 46 52 51 59 69 31 69 62 Data Ascii: RyeV9jb2RlX1VTX3BlcnNvbl9yZWdpb25fY29kZV80ZTQzNWYzNTM2MzcuanNvbhIaQ0tpT2dmRy0zNE1ERllnaHN3QWRTTDRJUEEYASIfCJgWEKilARi_qD4gnPmlBCgCMAI4AV2amRk-YPeeDBLgAwrVA2h0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGNzL2FjdGl2ZXZpZXc_eGFpPUFLQU9qc3NaT1duWFRQYi1ib
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 78 32 36 6c 74 3b 31 37 33 35 30 32 30 21 5c 78 33 64 6e 65 68 75 60 2f 21 33 36 34 5c 78 33 64 35 30 35 31 21 39 61 62 6b 7b 61 28 24 31 36 30 32 31 30 3a 33 5c 78 32 36 61 6d 70 3b 5c 78 32 36 6c 74 3b 63 62 6f 74 66 2b 2a 30 31 35 30 30 33 34 3a 25 32 62 65 6a 76 66 2f 25 37 32 3b 31 37 36 31 33 21 5c 78 33 64 65 66 64 77 61 2a 5c 78 32 36 23 33 39 3b 37 36 34 36 33 3b 32 31 24 3f 65 62 6b 70 62 24 5c 78 32 36 61 6d 70 3b 30 33 36 36 37 31 37 5c 78 32 36 67 74 3b 2a 5c 78 32 36 67 74 3b 62 67 69 70 66 2b 21 33 5c 78 33 64 37 31 32 33 36 33 25 39 61 69 68 77 63 29 21 37 32 30 32 5c 78 32 36 6c 74 3b 32 31 37 5c 78 32 36 23 33 39 3b 39 65 66 6f 74 6d 28 5c 78 32 36 61 6d 70 3b 32 30 30 36 31 3b 34 38 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f Data Ascii: x26lt;1735020!\x3dnehu`/!364\x3d5051!9abk{a($160210:3\x26amp;\x26lt;cbotf+0150034:%2bejvf/%72;17613!\x3defdwa\x26#39;76463;21$?ebkpb$\x26amp;0366717\x26gt;*\x26gt;bgipf+!3\x3d712363%9aihwc)!7202\x26lt;217\x26#39;9efotm(\x26amp;20061;48\x26amp;\x26gt;`do
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 5c 78 33 64 43 4d 4b 50 46 68 43 69 38 34 69 6c 42 42 69 43 35 62 4b 43 41 6a 41 42 5c 78 32 36 76 5c 78 33 64 41 50 45 75 63 4e 58 69 59 6d 31 59 58 72 66 6e 46 6a 55 76 4a 75 62 47 67 35 70 77 33 76 32 4f 34 37 6a 72 77 66 33 72 39 79 33 31 6b 49 4f 7a 4c 37 7a 47 42 34 6d 7a 5f 39 5a 57 61 73 35 49 43 77 61 77 47 51 46 41 55 32 67 50 44 79 50 49 4a 64 73 50 31 7a 58 67 32 35 73 50 63 35 54 38 70 49 63 59 4e 4c 58 37 39 6a 30 42 45 79 54 52 6c 34 57 64 31 6c 4d 5c 78 32 32 20 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 78 33 64 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 Data Ascii: bleclick.net/xbbe/pixel?d\x3dCMKPFhCi84ilBBiC5bKCAjAB\x26v\x3dAPEucNXiYm1YXrfnFjUvJubGg5pw3v2O47jrwf3r9y31kIOzL7zGB4mz_9ZWas5ICwawGQFAU2gPDyPIJdsP1zXg25sPc5T8pIcYNLX79j0BEyTRl4Wd1lM\x22 style\x3d\x22display:none\x22 aria-hidden\x3d\x22true\x22\x3e\x3c/ifr
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6f 64 65 5c 5c 78 32 32 2c 4c 3a 5c 5c 78 32 32 6d 74 66 52 65 6e 64 65 72 46 6c 6f 61 74 49 6e 70 6c 61 63 65 5c 5c 78 32 32 2c 73 3a 5c 5c 78 32 32 64 65 62 75 67 6a 73 5c 5c 78 32 32 2c 47 3a 5c 5c 78 32 32 64 63 61 70 70 5c 5c 78 32 32 2c 6d 3a 5c 5c 78 32 32 62 72 65 61 6b 6f 75 74 69 66 72 61 6d 65 5c 5c 78 32 32 2c 48 3a 5c 5c 78 32 32 69 6e 4d 6f 62 69 6c 65 41 64 53 64 6b 5c 5c 78 32 32 7d 2c 71 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 70 29 7b 76 61 72 20 65 5c 5c 78 33 64 70 5b 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3b 63 20 69 6e 20 61 5c 5c 78 32 36 5c 5c 78 32 36 64 65 6c 65 74 65 20 61 5b 63 5d 3b 61 5b 65 Data Ascii: ode\\x22,L:\\x22mtfRenderFloatInplace\\x22,s:\\x22debugjs\\x22,G:\\x22dcapp\\x22,m:\\x22breakoutiframe\\x22,H:\\x22inMobileAdSdk\\x22},q\\x3dfunction(a){m(a,function(b,c){if(c.toLowerCase()in p){var e\\x3dp[c.toLowerCase()];c in a\\x26\\x26delete a[c];a[e
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 7a 3b 76 61 72 20 41 5c 5c 78 33 64 7b 7d 2c 42 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 5c 5c 78 33 64 5c 5c 78 33 64 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 5c 78 32 32 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 5c 5c 78 32 32 29 3b 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 42 3b 76 61 72 20 43 5c 5c 78 33 64 7b 7d 2c 44 5c 5c 78 33 64 66 75 6e 63 Data Ascii: on(){return\\x22\\x22.toString()};new z;var A\\x3d{},B\\x3dfunction(){if(A!\\x3d\\x3dA)throw Error(\\x22SafeStyleSheet is not meant to be built directly\\x22);};B.prototype.toString\\x3dfunction(){return\\x22\\x22.toString()};new B;var C\\x3d{},D\\x3dfunc
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 29 7b 76 61 72 20 66 5c 5c 78 33 64 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 5b 64 5d 2e 65 78 70 61 6e 64 69 6e 67 44 69 73 70 6c 61 79 50 72 6f 70 65 72 74 69 65 73 3b 69 66 28 66 5c 5c 78 32 36 5c 5c 78 32 36 5c 5c 78 32 32 6c 69 67 68 74 62 6f 78 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 6c 28 66 2e 65 78 70 61 6e 73 69 6f 6e 4d 6f 64 65 29 29 7b 64 5c 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 7d 64 5c 5c 78 33 64 21 31 7d 64 5c 5c 78 33 64 21 64 5c 5c 78 32 36 5c 5c 78 32 36 6e 75 6c 6c 21 5c 5c 78 33 64 77 69 6e 64 6f 77 2e 6d 72 61 69 64 7d 65 6c 73 65 20 64 5c 5c 78 33 64 21 31 3b 64 5c 5c 78 32 36 5c 5c 78 32 36 28 65 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 47 2e 70 61 74 74 65 72 6e 2c 47 2e 69 29 29 3b 5c 5c 78 32 32 74 72 75 Data Ascii: ){var f\\x3da.g.primaryFiles[d].expandingDisplayProperties;if(f\\x26\\x26\\x22lightbox\\x22\\x3d\\x3dl(f.expansionMode)){d\\x3d!0;break a}}d\\x3d!1}d\\x3d!d\\x26\\x26null!\\x3dwindow.mraid}else d\\x3d!1;d\\x26\\x26(e\\x3de.replace(G.pattern,G.i));\\x22tru
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 69 6e 67 3a 21 30 2c 62 6f 6f 74 73 74 72 61 70 46 75 6e 63 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 29 7d 65 6c 73 65 20 63 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 46 2e 70 61 74 74 65 72 6e 2c 46 2e 69 29 2c 4b 28 63 2c 21 30 29 7d 2c 49 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5c 5c 78 33 64 4d 28 61 29 3b 62 5c 5c 78 33 64 4d 28 62 29 3b 66 6f 72 28 76 61 72 20 63 5c 5c 78 33 64 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 2c 62 2e 6c 65 6e 67 74 68 29 2c 65 5c 5c 78 33 64 30 3b 65 5c 5c 78 33 63 63 3b 65 2b 2b 29 69 66 28 61 5b 65 5d 21 5c 5c 78 33 64 62 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2d 62 5b 65 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 2d 62 2e 6c 65 6e 67 74 68 7d 2c 4d 5c 5c 78 33 64 66 75 6e 63 74 69 Data Ascii: ing:!0,bootstrapFunction:null}))}else c\\x3de.replace(F.pattern,F.i),K(c,!0)},I\\x3dfunction(a,b){a\\x3dM(a);b\\x3dM(b);for(var c\\x3dMath.min(a.length,b.length),e\\x3d0;e\\x3cc;e++)if(a[e]!\\x3db[e])return a[e]-b[e];return a.length-b.length},M\\x3dfuncti
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 68 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 68 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 33 64 5c 5c 78 32 32 4d 6f 64 65 72 6e 69 7a 72 2e 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 5c 5c 78 32 32 29 3b 21 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 32 36 5c 5c 78 32 36 4e 28 67 29 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 33 64 21 30 29 3b 61 5c 5c 78 33 64 6e 65 77 20 74 28 61 29 3b 62 5c 5c 78 33 64 4a 28 29 3b 62 2e 63 72 65 61 74 69 76 65 73 2e 70 75 73 68 28 61 2e 67 29 3b 76 61 72 20 63 5c 5c 78 33 64 61 2e 67 2e 63 72 65 61 74 69 76 65 50 61 72 61 6d 65 74 65 72 73 3b 63 2e 63 72 65 61 74 69 76 65 5f 75 6e 69 71 75 65 5f 69 64 5c 5c 78 33 64 63 2e 63 69 Data Ascii: html5Features[b]\\x26\\x26(a.html5Features[b]\\x3d\\x22Modernizr.cssanimations\\x22);!a.previewMode\\x26\\x26N(g)\\x26\\x26(a.previewMode\\x3d!0);a\\x3dnew t(a);b\\x3dJ();b.creatives.push(a.g);var c\\x3da.g.creativeParameters;c.creative_unique_id\\x3dc.ci

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	50038	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	2252	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:15 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:15 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 30 30 70 78 3b 68 65 69 67 68 74 3a 20 32 35 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;ma
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 ma
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 79 65 56 39 6a 62 32 52 6c 58 31 56 54 58 33 42 6c 63 6e 4e 76 62 6c 39 79 5a 57 64 70 62 32 35 66 59 32 39 6b 5a 56 38 30 5a 54 51 7a 4e 57 59 7a 4e 54 4d 32 4d 7a 63 75 61 6e 4e 76 62 68 49 61 51 30 38 7a 51 32 64 6d 52 79 30 7a 4e 45 31 45 52 6c 6c 7a 62 6e 4e 33 51 57 52 59 57 57 64 48 56 46 45 59 41 53 49 66 43 4a 67 57 45 4b 69 6c 41 52 69 5f 71 44 34 67 6e 50 6d 6c 42 43 67 43 4d 41 49 34 41 56 32 61 6d 52 6b 2d 59 50 65 65 44 42 4c 67 41 77 72 56 41 32 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 4e 7a 4c 32 46 6a 64 47 6c 32 5a 58 5a 70 5a 58 63 5f 65 47 46 70 50 55 46 4c 51 55 39 71 63 33 5a 74 58 31 4a 70 4c 57 31 31 61 47 35 75 52 6e Data Ascii: yeV9jb2RlX1VTX3BlcnNvbl9yZWdpb25fY29kZV80ZTQzNWYzNTM2MzcuanNvbhIaQ08zQ2dmRy0zNE1ERllzbnN3QWRYWWdHVFEYASIfCJgWEKilARi_qD4gnPmlBCgCMAI4AV2amRk-YPeeDBLgAwrVA2h0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGNzL2FjdGl2ZXZpZXc_eGFpPUFLQU9qc3ZtX1JpLW11aG5uRn
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 32 36 6c 74 3b 31 37 33 35 30 32 30 21 5c 78 33 64 6e 65 68 75 60 2f 21 33 36 34 5c 78 33 64 35 30 35 31 21 39 61 62 6b 7b 61 28 24 31 36 30 32 31 30 3a 33 5c 78 32 36 61 6d 70 3b 5c 78 32 36 6c 74 3b 63 62 6f 74 66 2b 2a 30 31 35 30 30 33 34 3a 25 32 62 65 6a 76 66 2f 25 37 32 3b 31 37 36 31 33 21 5c 78 33 64 65 66 64 77 61 2a 5c 78 32 36 23 33 39 3b 37 36 34 36 33 3b 32 31 24 3f 65 62 6b 70 62 24 5c 78 32 36 61 6d 70 3b 30 33 36 36 37 31 37 5c 78 32 36 67 74 3b 2a 5c 78 32 36 67 74 3b 62 67 69 70 66 2b 21 33 5c 78 33 64 37 31 32 33 36 33 25 39 61 69 68 77 63 29 21 37 32 30 32 5c 78 32 36 6c 74 3b 32 31 37 5c 78 32 36 23 33 39 3b 39 65 66 6f 74 6d 28 5c 78 32 36 61 6d 70 3b 32 30 30 36 31 3b 34 38 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f 70 Data Ascii: 26lt;1735020!\x3dnehu`/!364\x3d5051!9abk{a($160210:3\x26amp;\x26lt;cbotf+0150034:%2bejvf/%72;17613!\x3defdwa\x26#39;76463;21$?ebkpb$\x26amp;0366717\x26gt;*\x26gt;bgipf+!3\x3d712363%9aihwc)!7202\x26lt;217\x26#39;9efotm(\x26amp;20061;48\x26amp;\x26gt;`dop
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 5c 78 33 64 43 4d 4b 50 46 68 43 69 38 34 69 6c 42 42 69 43 35 62 4b 43 41 6a 41 42 5c 78 32 36 76 5c 78 33 64 41 50 45 75 63 4e 57 49 63 43 75 66 61 76 78 55 6b 5a 77 67 33 5f 5f 42 41 59 6d 50 36 70 43 53 53 52 62 34 76 57 4b 68 4d 53 6d 53 4a 39 50 59 78 44 48 78 65 51 58 54 34 52 41 2d 33 62 30 46 56 43 5f 75 35 6a 4c 70 5a 33 47 44 33 79 4b 79 41 50 51 59 75 73 67 68 6d 42 54 65 54 62 59 77 4d 4e 4f 48 5f 2d 4e 33 56 33 4d 55 45 51 36 52 62 72 74 79 4a 50 30 5c 78 32 32 20 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 78 33 64 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 61 Data Ascii: leclick.net/xbbe/pixel?d\x3dCMKPFhCi84ilBBiC5bKCAjAB\x26v\x3dAPEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0\x22 style\x3d\x22display:none\x22 aria-hidden\x3d\x22true\x22\x3e\x3c/ifra
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 64 65 5c 5c 78 32 32 2c 4c 3a 5c 5c 78 32 32 6d 74 66 52 65 6e 64 65 72 46 6c 6f 61 74 49 6e 70 6c 61 63 65 5c 5c 78 32 32 2c 73 3a 5c 5c 78 32 32 64 65 62 75 67 6a 73 5c 5c 78 32 32 2c 47 3a 5c 5c 78 32 32 64 63 61 70 70 5c 5c 78 32 32 2c 6d 3a 5c 5c 78 32 32 62 72 65 61 6b 6f 75 74 69 66 72 61 6d 65 5c 5c 78 32 32 2c 48 3a 5c 5c 78 32 32 69 6e 4d 6f 62 69 6c 65 41 64 53 64 6b 5c 5c 78 32 32 7d 2c 71 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 70 29 7b 76 61 72 20 65 5c 5c 78 33 64 70 5b 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3b 63 20 69 6e 20 61 5c 5c 78 32 36 5c 5c 78 32 36 64 65 6c 65 74 65 20 61 5b 63 5d 3b 61 5b 65 5d Data Ascii: de\\x22,L:\\x22mtfRenderFloatInplace\\x22,s:\\x22debugjs\\x22,G:\\x22dcapp\\x22,m:\\x22breakoutiframe\\x22,H:\\x22inMobileAdSdk\\x22},q\\x3dfunction(a){m(a,function(b,c){if(c.toLowerCase()in p){var e\\x3dp[c.toLowerCase()];c in a\\x26\\x26delete a[c];a[e]
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 7a 3b 76 61 72 20 41 5c 5c 78 33 64 7b 7d 2c 42 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 5c 5c 78 33 64 5c 5c 78 33 64 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 5c 78 32 32 53 61 66 65 53 74 79 6c 65 53 68 65 65 74 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 5c 5c 78 32 32 29 3b 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5c 5c 78 32 32 5c 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 42 3b 76 61 72 20 43 5c 5c 78 33 64 7b 7d 2c 44 5c 5c 78 33 64 66 75 6e 63 74 Data Ascii: n(){return\\x22\\x22.toString()};new z;var A\\x3d{},B\\x3dfunction(){if(A!\\x3d\\x3dA)throw Error(\\x22SafeStyleSheet is not meant to be built directly\\x22);};B.prototype.toString\\x3dfunction(){return\\x22\\x22.toString()};new B;var C\\x3d{},D\\x3dfunct
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 7b 76 61 72 20 66 5c 5c 78 33 64 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 5b 64 5d 2e 65 78 70 61 6e 64 69 6e 67 44 69 73 70 6c 61 79 50 72 6f 70 65 72 74 69 65 73 3b 69 66 28 66 5c 5c 78 32 36 5c 5c 78 32 36 5c 5c 78 32 32 6c 69 67 68 74 62 6f 78 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 6c 28 66 2e 65 78 70 61 6e 73 69 6f 6e 4d 6f 64 65 29 29 7b 64 5c 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 7d 64 5c 5c 78 33 64 21 31 7d 64 5c 5c 78 33 64 21 64 5c 5c 78 32 36 5c 5c 78 32 36 6e 75 6c 6c 21 5c 5c 78 33 64 77 69 6e 64 6f 77 2e 6d 72 61 69 64 7d 65 6c 73 65 20 64 5c 5c 78 33 64 21 31 3b 64 5c 5c 78 32 36 5c 5c 78 32 36 28 65 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 47 2e 70 61 74 74 65 72 6e 2c 47 2e 69 29 29 3b 5c 5c 78 32 32 74 72 75 65 Data Ascii: {var f\\x3da.g.primaryFiles[d].expandingDisplayProperties;if(f\\x26\\x26\\x22lightbox\\x22\\x3d\\x3dl(f.expansionMode)){d\\x3d!0;break a}}d\\x3d!1}d\\x3d!d\\x26\\x26null!\\x3dwindow.mraid}else d\\x3d!1;d\\x26\\x26(e\\x3de.replace(G.pattern,G.i));\\x22true
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6e 67 3a 21 30 2c 62 6f 6f 74 73 74 72 61 70 46 75 6e 63 74 69 6f 6e 3a 6e 75 6c 6c 7d 29 29 7d 65 6c 73 65 20 63 5c 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 46 2e 70 61 74 74 65 72 6e 2c 46 2e 69 29 2c 4b 28 63 2c 21 30 29 7d 2c 49 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5c 5c 78 33 64 4d 28 61 29 3b 62 5c 5c 78 33 64 4d 28 62 29 3b 66 6f 72 28 76 61 72 20 63 5c 5c 78 33 64 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 2c 62 2e 6c 65 6e 67 74 68 29 2c 65 5c 5c 78 33 64 30 3b 65 5c 5c 78 33 63 63 3b 65 2b 2b 29 69 66 28 61 5b 65 5d 21 5c 5c 78 33 64 62 5b 65 5d 29 72 65 74 75 72 6e 20 61 5b 65 5d 2d 62 5b 65 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 2d 62 2e 6c 65 6e 67 74 68 7d 2c 4d 5c 5c 78 33 64 66 75 6e 63 74 69 6f Data Ascii: ng:!0,bootstrapFunction:null}))}else c\\x3de.replace(F.pattern,F.i),K(c,!0)},I\\x3dfunction(a,b){a\\x3dM(a);b\\x3dM(b);for(var c\\x3dMath.min(a.length,b.length),e\\x3d0;e\\x3cc;e++)if(a[e]!\\x3db[e])return a[e]-b[e];return a.length-b.length},M\\x3dfunctio
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 68 74 6d 6c 35 46 65 61 74 75 72 65 73 5b 62 5d 5c 5c 78 33 64 5c 5c 78 32 32 4d 6f 64 65 72 6e 69 7a 72 2e 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 5c 5c 78 32 32 29 3b 21 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 32 36 5c 5c 78 32 36 4e 28 67 29 5c 5c 78 32 36 5c 5c 78 32 36 28 61 2e 70 72 65 76 69 65 77 4d 6f 64 65 5c 5c 78 33 64 21 30 29 3b 61 5c 5c 78 33 64 6e 65 77 20 74 28 61 29 3b 62 5c 5c 78 33 64 4a 28 29 3b 62 2e 63 72 65 61 74 69 76 65 73 2e 70 75 73 68 28 61 2e 67 29 3b 76 61 72 20 63 5c 5c 78 33 64 61 2e 67 2e 63 72 65 61 74 69 76 65 50 61 72 61 6d 65 74 65 72 73 3b 63 2e 63 72 65 61 74 69 76 65 5f 75 6e 69 71 75 65 5f 69 64 5c 5c 78 33 64 63 2e 63 69 64 Data Ascii: tml5Features[b]\\x26\\x26(a.html5Features[b]\\x3d\\x22Modernizr.cssanimations\\x22);!a.previewMode\\x26\\x26N(g)\\x26\\x26(a.previewMode\\x3d!0);a\\x3dnew t(a);b\\x3dJ();b.creatives.push(a.g);var c\\x3da.g.creativeParameters;c.creative_unique_id\\x3dc.cid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	50042	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaQA0RGCjQXcVoS_J9ruCY2LPE38H4fLBRJvF6R152jOvUgIgMVzHRO6ENVUwTD3QRw5fdCUyYS_VMiw6W1CBBBEVhc0IA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:14 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:14 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	50043	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	1435	OUT	GET /f/AGSKWxUT7Y_IrO6blBF0yXf3_2RUu0_VJbbriBbyYmNfCnbJZ9XhXBip-SPOwsq7nCSrIFHq0lv33oLR9X3pLBlqidRZdku4G_HcMg_Ib4MfJCgyV5I4npsTmyiYfRQyB0acU9aeyUGeGg==?fccs=W1siQUtzUm9sOC1ycmJKWkFhWGl6ZHp5OHNJS0VhZXZwSGJ6NFBOYVBRQ2tJVXJ0aWZyRXVVT3JWazYyMG9RYmIyNlNDV0Vka3RLMVpiOHlEOFRwVmhObUZwWWVTaFRhaGNsejVRcFVGYThLZXRINHAzdDBjOHIyMm9pMTZqa0dYM2RhSkZDQWpPd1Nydk93MGZZWU9Oa29CdnRRZ1FyeDJXcnFRPT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwNTMsNDM2MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:15 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:14 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-9XbtZjYhXMg9mrZ6gbPhTQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 32 39 34 31 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 68 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 2941if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Sn=function(a){for(var b=_.hc.apply(1,
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6a 6f 28 64 29 3b 74 68 69 73 2e 69 3d 6e 65 77 20 5f 2e 49 6e 28 64 2c 6e 65 77 20 5f 2e 4c 67 28 5f 2e 7a 6b 28 74 68 69 73 2e 67 29 29 29 7d 3b 0a 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 6b 6f 28 74 68 69 73 2e 68 2c 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 6b 6f 28 74 68 69 73 2e 68 2c 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 6f 28 74 68 69 73 2e 68 2c 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 63 3d 74 68 69 73 2e 69 3b 61 3d 5f 2e 44 28 74 68 69 73 2e 67 2c 5f 2e 70 65 2c 31 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 Data Ascii: .location.hostname;this.h=new jo(d);this.i=new _.In(d,new _.Lg(_.zk(this.g)))};mo.prototype.start=function(a,b){switch(a){case 1:ko(this.h,1);break;case 3:ko(this.h,3);break;case 2:ko(this.h,2);break;default:var c=this.i;a=_.D(this.g,_.pe,1);var d=this.g
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 6c 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6e 6f 7d 2c 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 73 6f 28 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 6f 28 61 2c 31 29 7d 2c 61 29 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 31 3d 3d 3d 66 3f 30 3d 3d 3d 65 3f 75 6f 28 61 2c 32 29 3a 75 6f 28 61 2c 33 29 3a 63 2e 6e 6f 74 69 66 79 28 65 29 7d 2c 61 29 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 3d 3d 3d 61 2e 67 26 26 28 61 2e 67 3d 62 2c 61 2e 68 2e 67 28 62 29 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: l;this.h=new no},vo=function(a,b){for(var c=new so(b.map(function(e){return e.g()}),function(){uo(a,1)},a),d=0;d<b.length;d++)b[d].addListener(function(e,f){1===f?0===e?uo(a,2):uo(a,3):c.notify(e)},a)},uo=function(a,b){null===a.g&&(a.g=b,a.h.g(b))},wo=fun
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 6f 28 61 2e 43 2c 61 2e 69 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 65 6c 73 65 20 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 3b 0a 4f 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 52 6f 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 31 29 7d 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 71 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 69 3d 61 3b 74 68 69 73 2e 6c 3d 62 3b 74 68 69 73 2e 41 3d 63 7d 3b 5f 2e 41 28 53 6f 2c 71 6f 29 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: o(a.C,a.i,b,c)}catch(d){Po(a,a.l,b,c)}else Po(a,a.l,b,c)};Oo.prototype.h=function(){var a=this;Ro(this,function(){ro(a,0)},function(){ro(a,1)})};var So=function(a,b,c,d,e){qo.call(this,d,e);this.i=a;this.l=b;this.A=c};_.A(So,qo);So.prototype.g=function()
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 3b 76 61 72 20 63 3d 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3b 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 61 2e 67 26 26 61 2e 68 2e 67 28 61 2e 67 2e 74 65 73 74 28 65 29 2c 65 2c 64 29 3b 63 26 26 63 28 64 2c 65 2c 66 29 7d 7d 2c 59 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 29 7d 3b 76 61 72 20 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 68 3d 6e 65 77 20 5f 2e 67 65 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 62 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 7c 7c 21 64 7c 7c 22 53 63 72 69 70 74 20 65 72 72 6f 72 22 21 3d 3d 65 26 Data Ascii: ;var c=_.t.onerror;_.t.onerror=function(d,e,f){a.g&&a.h.g(a.g.test(e),e,d);c&&c(d,e,f)}},Yo=function(a,b){a.h.addEventListener(b)};var Vo=function(){this.g=new Map;this.h=new _.ge(document)},bp=function(a,b){Yo(b,function(c,d,e){c\|\|!d\|\|"Script error"!==e&
2024-01-15 13:24:15 UTC	1629	IN	Data Raw: 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 46 6e 5a 57 46 6b 4c 33 4e 6f 62 33 64 66 59 32 39 74 63 47 46 75 61 57 39 75 58 32 46 6b 4c 6d 70 7a 50 32 5a 6a 5a 46 78 31 4d 44 41 7a 5a 48 52 79 64 57 55 69 58 53 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 61 57 4e 76 49 6c 30 73 4d 54 41 77 4c 44 55 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 6d 4c 30 46 48 55 30 Data Ascii: kaWNhdGlvbi5jb20vcGFnZWFkL3Nob3dfY29tcGFuaW9uX2FkLmpzP2ZjZFx1MDAzZHRydWUiXSxbbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL2Zhdmljb24uaWNvIl0sMTAwLDUsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9mL0FHU0
2024-01-15 13:24:15 UTC	795	IN	Data Raw: 56 7a 52 7a 51 6a 4e 4b 56 48 4a 69 57 47 74 35 55 6b 46 54 54 30 30 7a 54 6d 78 6a 52 46 49 74 55 54 52 42 62 6e 42 36 64 6a 68 47 58 31 52 51 62 47 73 79 5a 6b 46 63 64 54 41 77 4d 32 52 63 64 54 41 77 4d 32 51 69 58 53 78 62 62 6e 56 73 62 43 78 62 4e 31 31 64 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 5a 6d 51 77 4f 47 59 30 59 57 55 32 5a 6d 5a 69 4d 47 52 6b 4f 53 49 73 62 6e 56 73 62 43 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 5a 6e 56 75 5a 47 6c 75 5a 32 4e 6f 62 32 6c 6a 5a 58 4e 74 5a 58 4e 7a 59 57 64 6c 63 79 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 31 38 76 51 32 39 75 64 48 4a 70 59 6e 56 30 62 33 4a 54 5a 58 4a Data Ascii: VzRzQjNKVHJiWGt5UkFTT00zTmxjRFItUTRBbnB6djhGX1RQbGsyZkFcdTAwM2RcdTAwM2QiXSxbbnVsbCxbN11dLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwiZmQwOGY0YWU2ZmZiMGRkOSIsbnVsbCxbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vZnVuZGluZ2Nob2ljZXNtZXNzYWdlcy5nb29nbGUuY29tL18vQ29udHJpYnV0b3JTZXJ
2024-01-15 13:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	50044	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	1164	OUT	GET /xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNX4Exj-q2X1Lg9idKOL6uFr9t97MflTFaeqVz7mzqzF0FfgNqUyFFb9S1VsEdNaWK-cPGfL9m0WyIoBauYdfxBhnasaeQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:15 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:15 UTC	631	IN	Data Raw: 32 37 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 63 61 73 61 6c 65 5f 6d 65 64 69 61 32 5f 64 73 70 5f 73 65 63 75 72 65 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 72 75 6d 3f 69 78 69 3d 30 26 63 6d 5f 64 73 70 5f 69 64 3d 38 35 26 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 Data Ascii: 270<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_dbm" style="display:none;"/><img src="https://dsum-sec.casalemedia.com/rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclic
2024-01-15 13:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	50045	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	607	OUT	GET /879366/html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:15 UTC	775	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 176565 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 21:04:59 GMT Expires: Mon, 15 Jan 2024 21:04:59 GMT Cache-Control: public, max-age=86400 Age: 58756 Last-Modified: Tue, 14 Mar 2023 18:43:57 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:15 UTC	477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.define
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 68 61 3d 63 61 28 74 68 69 73 29 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 68 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 Data Ascii: bject"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ha=ca(this),ia=function(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 2c 6d 61 3d 22 66 75 Data Ascii: =typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},la=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},ma="fu
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 67 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 7b 76 61 72 20 6c 3d 67 5b 68 5d 3b 67 5b 68 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6d 29 7b 74 68 69 73 2e 41 28 6d 29 7d 7d 7d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 76 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 76 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6f 3d 5b 5d 3b 74 68 69 73 2e 44 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 41 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 Data Ascii: ;this.j=[];for(var h=0;h<g.length;++h){var l=g[h];g[h]=null;try{l()}catch(m){this.A(m)}}}this.j=null};b.prototype.A=function(g){this.v(function(){throw g;})};var e=function(g){this.j=0;this.v=void 0;this.o=[];this.D=!1;var h=this.A();try{g(h.resolve,h.re
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 2c 6c 3d 68 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 72 6e 21 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 67 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 68 3f 67 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 67 3d 68 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 Data Ascii: ,l=ha.dispatchEvent;if("undefined"===typeof l)return!0;"function"===typeof g?g=new g("unhandledrejection",{cancelable:!0}):"function"===typeof h?g=new h("unhandledrejection",{cancelable:!0}):(g=ha.document.createEvent("CustomEvent"),g.initCustomEvent("unh
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 6b 61 28 67 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 70 29 7b 66 75 6e 63 74 69 6f 6e 20 4a 28 74 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 59 29 7b 44 5b 74 61 5d 3d 59 3b 49 61 2d 2d 3b 30 3d 3d 49 61 26 26 6d 28 44 29 7d 7d 76 61 72 20 44 3d 5b 5d 2c 49 61 3d 30 3b 64 6f 20 44 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 49 61 2b 2b 2c 63 28 6c 2e 76 61 6c 75 65 29 2e 6b 62 28 4a 28 44 2e 6c 65 6e 67 74 68 2d 0a 31 29 2c 70 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 69 61 28 22 41 72 72 61 79 2e 70 72 6f 74 Data Ascii: ction(g){var h=ka(g),l=h.next();return l.done?c([]):new e(function(m,p){function J(ta){return function(Y){D[ta]=Y;Ia--;0==Ia&&m(D)}}var D=[],Ia=0;do D.push(void 0),Ia++,c(l.value).kb(J(D.length-1),p),l=h.next();while(!l.done)})};return e});ia("Array.prot
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 64 28 6c 29 3b 69 66 28 21 6c 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 6a 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 6c 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 6a 5d 3a 76 6f 69 64 20 30 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 6c 61 28 6c 2c 66 29 26 26 6c 61 28 6c 5b 66 5d 2c 0a 74 68 69 73 2e 6a 29 7d 3b 68 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c Data Ascii: nvalid WeakMap key");d(l);if(!la(l,f))throw Error("WeakMap key fail: "+l);l[f][this.j]=m;return this};h.prototype.get=function(l){return c(l)&&la(l,f)?l[f][this.j]:void 0};h.prototype.has=function(l){return c(l)&&la(l,f)&&la(l[f],this.j)};h.prototype.del
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 2e 6f 5b 68 2e 69 64 5d 2c 68 2e 59 2e 77 61 2e 6e 65 78 74 3d 68 2e 59 2e 6e 65 78 74 2c 68 2e 59 2e 6e 65 78 74 2e 77 61 3d 68 2e 59 2e 77 61 2c 68 2e 59 2e 68 65 61 64 3d 0a 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 74 68 69 73 2e 6a 2e 77 61 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 59 7d 3b 63 2e 70 72 6f 74 Data Ascii: plice(h.index,1),h.list.length\|\|delete this.o[h.id],h.Y.wa.next=h.Y.next,h.Y.next.wa=h.Y.wa,h.Y.head=null,this.size--,!0):!1};c.prototype.clear=function(){this.o={};this.j=this.j.wa=f();this.size=0};c.prototype.has=function(h){return!!d(this,h).Y};c.prot
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 69 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f Data Ascii: a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e};ia("Array.prototype.keys",function(a){return a?
2024-01-15 13:24:15 UTC	1252	IN	Data Raw: 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 2d 31 21 3d 3d 28 74 68 69 Data Ascii: c){if(null==this)throw new TypeError("The 'this' value for String.prototype.includes must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype.includes must not be a regular expression");return-1!==(thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	50049	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRcgp88P4SAQ-mSn8XD5w_uCzh-SIuMs1XDEwWxvfgYFbAP5B0Ybs-4v_Ndl4xkPlTF_s41RwOpfKlmbXAZDObT5Tydmw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:15 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	50050	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:14 UTC	1583	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325050386&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&_ee=1&tfd=3867 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:15 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50051	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:15 UTC	1164	OUT	GET /xbbe/pixel?d=CIP-3gIQvMTgAhjuktHfATAB&v=APEucNWVFmmYsV3u6gVaHonNMWgEEib1xMVcUmBc8ORWNWZDuk-TRhPMIQheD4Si9E96Sm_LjCegR_KqH35hk9vKdv0cWcMk-w HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:15 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:15 UTC	647	IN	Data Raw: 32 38 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6f 70 65 6e 78 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 39 63 61 31 36 35 61 39 2d 64 39 66 65 2d 32 66 66 36 2d 64 38 33 64 2d 64 31 34 35 61 38 30 62 30 64 33 37 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 Data Ascii: 280<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_dbm" style="display:none;"/><img src="https://us-u.openx.net/w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net
2024-01-15 13:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50053	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:15 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaTGnviUPlCZd2gJN4icOTEeSvQQpxr6UbUsgO575GBSKTA556undeX2Bqu2PhuYaZBVvYFWp8Ut5n3u46vIbMdLQv-FOw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:15 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:15 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	50091	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:15 UTC	2401	OUT	GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXF3P7u1C15o9JhCjvrqShY3aRvXYR3PlD5RGMPt2yiI3XcAr_CLq5HIlKcsxgBKgSVM6SqWWL_fdostWrE-34IaX6U3FuYW2oLhFv4HjbRgmz8qGs HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:16 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:16 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:16 UTC	510	IN	Data Raw: 31 66 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 74 72 65 6d 6f 72 5f 76 69 64 65 6f 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 70 6f 74 78 63 68 61 6e 67 65 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 Data Ascii: 1f7<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=tremor_video_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=spotxchange_dbm&google_cm&google_dbm&gdpr=0"
2024-01-15 13:24:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50086	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:15 UTC	2412	OUT	GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNXiYm1YXrfnFjUvJubGg5pw3v2O47jrwf3r9y31kIOzL7zGB4mz_9ZWas5ICwawGQFAU2gPDyPIJdsP1zXg25sPc5T8pIcYNLX79j0BEyTRl4Wd1lM HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:16 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:16 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:16 UTC	363	IN	Data Raw: 31 36 34 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 75 70 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 75 70 73 2f 35 38 32 36 39 2f 73 79 6e 63 3f 5f 6f 72 69 67 69 6e 3d 31 26 67 64 70 72 3d 30 26 72 65 64 69 72 3d 74 72 75 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 69 63 6b 79 78 63 68 61 6e 67 65 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 Data Ascii: 164<html><head></head><body><img src="https://ups.analytics.yahoo.com/ups/58269/sync?_origin=1&gdpr=0&redir=true" style="display:none;"/><img src="https://cm.g.doubleclick.net/pixel?google_nid=stickyxchange_dbm&google_cm&google_dbm&gdpr=0" style="displa
2024-01-15 13:24:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50089	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRTYEkSukm8alf172bokmTLBT1lRvEoxvaUZb6UIpYVd8YuyzDv2qVvZ_m5zCAXGlXC3wyWk1W6sunPzrFTQO8DjZkuYA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:17 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:17 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50087	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	615	OUT	GET /879366/express_html_inpage_rendering_lib_200_278.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	775	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 113329 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 15 Jan 2024 06:20:37 GMT Expires: Tue, 16 Jan 2024 06:20:37 GMT Cache-Control: public, max-age=86400 Age: 25420 Last-Modified: Tue, 14 Mar 2023 18:44:05 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:17 UTC	477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var h,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.define
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 65 61 3d 64 61 28 74 68 69 73 29 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 65 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 Data Ascii: bject"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ea=da(this),fa=function(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 6a 61 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 6a 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6a 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b Data Ascii: te?Object.create:function(a){var b=function(){};b.prototype=a;return new b},ja;if("function"==typeof Object.setPrototypeOf)ja=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}ja=ma?function(a,b){
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 2c 73 61 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 75 61 3d 30 2c 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2e 62 69 6e 64 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ar c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b},ra=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},sa="closure_uid_"+(1E9*Math.random()>>>0),ua=0,va=function(a,b,c){return a.call.apply(a.bind,arguments)},wa=function(
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 2c 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 41 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 Data Ascii: ents.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}},za=function(a){return a};function A(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,A);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 3d 2f 28 5c 64 2a 29 28 5c 44 2a 29 28 2e 2a 29 2f 2e 65 78 65 63 28 67 29 7c 7c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 5d 3b 69 66 28 30 3d 3d 66 5b 30 5d 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 67 5b 30 5d 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 63 3d 4f 61 28 30 3d 3d 66 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 4f 61 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 4f 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: =/(\d)(\D)(.*)/.exec(g)\|\|["","","",""];if(0==f[0].length&&0==g[0].length)break;c=Oa(0==f[1].length?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))\|\|Oa(0==f[2].length,0==g[2].length)\|\|Oa(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c},Oa=function(
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 67 3d 30 3b 67 3c 63 3b 67 2b 2b 29 69 66 28 67 20 69 6e 20 66 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 6b 2c 67 2c 61 29 26 26 28 64 5b 65 2b 2b 5d 3d 6b 29 7d 72 65 74 75 72 6e 20 64 7d 2c 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 0a 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d Data Ascii: ,b){for(var c=a.length,d=[],e=0,f="string"===typeof a?a.split(""):a,g=0;g<c;g++)if(g in f){var k=f[g];b.call(void 0,k,g,a)&&(d[e++]=k)}return d},gb=function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 29 2c 75 62 3d 43 28 22 45 64 67 65 22 29 2c 76 62 3d 43 28 22 47 65 63 6b 6f 22 29 26 26 21 28 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 29 26 26 21 28 43 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 43 28 22 4d 53 49 45 22 29 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 77 62 3d 2d 31 21 3d 55 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 43 28 22 45 64 67 65 22 29 2c 78 62 3d 51 61 26 26 56 61 26 26 56 61 2e 70 6c 61 74 66 6f 72 6d 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 56 61 2e 70 6c 61 74 66 6f 72 6d 3a 43 28 22 41 6e 64 72 6f 69 64 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: ),ub=C("Edge"),vb=C("Gecko")&&!(-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"))&&!(C("Trident")\|\|C("MSIE"))&&!C("Edge"),wb=-1!=Ua().toLowerCase().indexOf("webkit")&&!C("Edge"),xb=Qa&&Va&&Va.platform?"Android"===Va.platform:C("Android"),yb=function()
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 29 3f 53 79 6d 62 6f 6c 28 29 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 58 62 28 61 29 7b 76 61 72 20 62 3b 57 62 3f 62 3d 61 5b 57 62 5d 3a 62 3d 61 2e 6a 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 30 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 59 62 28 61 2c 62 29 7b 57 62 3f 61 5b 57 62 5d 3d 62 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6a 3f 61 2e 6a 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 6a 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 5a 62 3d 7b Data Ascii: ymbol&&"symbol"===typeof Symbol()?Symbol():void 0;function Xb(a){var b;Wb?b=a[Wb]:b=a.j;return null==b?0:b}function Yb(a,b){Wb?a[Wb]=b:void 0!==a.j?a.j=b:Object.defineProperties(a,{j:{value:b,configurable:!0,writable:!0,enumerable:!1}});return a};var Zb={
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 76 61 72 20 6b 3d 66 5b 67 5d 3b 76 6f 69 64 20 30 3d 3d 3d 54 62 5b 6b 5d 26 26 28 54 62 5b 6b 5d 3d 67 29 7d 7d 7d 62 3d 4f 62 5b 62 5d 3b 63 3d 41 72 72 61 79 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2e 6c 65 6e 67 74 68 2f 33 29 29 3b 64 3d 62 5b 36 34 5d 7c 7c 22 22 3b 66 6f 72 28 65 3d 66 3d 30 3b 66 3c 61 2e 6c 65 6e 67 74 68 2d 32 3b 66 2b 3d 33 29 7b 76 61 72 20 6e 3d 61 5b 66 5d 2c 72 3d 61 5b 66 2b 31 5d 3b 6b 3d 61 5b 66 2b 32 5d 3b 67 3d 62 5b 6e 3e 3e 32 5d 3b 6e 3d 62 5b 28 6e 26 33 29 3c 3c 34 7c 72 3e 3e 34 5d 3b 72 3d 62 5b 28 72 26 31 35 29 3c 3c 32 7c 6b 3e 3e 36 5d 3b 6b 3d 62 5b 6b 26 36 33 5d 3b 63 5b 65 2b 2b 5d 3d 22 22 2b 67 2b 6e 2b 72 2b 6b 7d 67 3d 30 3b 6b 3d 64 3b 73 77 69 74 63 68 Data Ascii: <f.length;g++){var k=f[g];void 0===Tb[k]&&(Tb[k]=g)}}}b=Ob[b];c=Array(Math.floor(a.length/3));d=b[64]\|\|"";for(e=f=0;f<a.length-2;f+=3){var n=a[f],r=a[f+1];k=a[f+2];g=b[n>>2];n=b[(n&3)<<4\|r>>4];r=b[(r&15)<<2\|k>>6];k=b[k&63];c[e++]=""+g+n+r+k}g=0;k=d;switch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50065	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	776	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1443	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:17 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgRCrhS-.yHWaQTUQ5R0ogQ2034uKVPL2yO2WAO0R6jXODIJdKj4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgRCrhS-.yHWaQTUQ5R0ogQ2034uKVPL2yO2WAO0R6jXODIJdKj4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 244 Connection: Close
2024-01-15 13:24:17 UTC	244	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 36 45 43 38 69 73 4a 69 33 55 53 6f 54 4a 71 2d 72 53 67 76 6e 78 6c 45 30 75 48 42 57 62 79 4c 6f 5f 77 39 63 58 31 6e 61 6e 32 44 5f 75 69 5f 6a 43 65 4a 75 50 72 4d 56 2d 67 5a 64 33 6c 4c 73 44 4b 69 55 74 73 68 53 6b 75 78 42 34 49 65 4e 69 6f 4d 56 46 53 47 48 68 2d 76 63 2d 67 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50076	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	833	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1504	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:17 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTm_lny.5DU%2FUJSQusHg1wIKRC72iFdMQt69SZmYwiX6kX5KkzE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTm_lny.5DU%2FUJSQusHg1wIKRC72iFdMQt69SZmYwiX6kX5KkzE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 301 Connection: Close
2024-01-15 13:24:17 UTC	301	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 56 71 57 43 5f 66 66 31 5a 4d 47 4d 2d 68 66 68 53 79 54 4a 63 4d 67 6b 6a 69 44 6d 41 4d 54 36 70 4e 34 4e 4e 4e 74 70 6e 55 55 2d 66 72 4b 35 70 52 76 71 48 4f 73 55 6c 72 73 4f 34 64 35 32 46 4e 67 33 52 76 53 61 2d 53 43 69 55 30 6f 35 6c 51 35 61 53 78 5f 36 4f 71 66 4e 38 48 71 6f 6c 57 65 71 51 34 59 54 4e 6c 7a 67 49 71 4e 7a 41 64 51 33 61 48 46 78 Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50070	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	832	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1503	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:17 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgSCqGBg.aNJcwvFWBQoTUNNsxDeX1saVji2Yqc4E%2FFasc2hQ93o; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgSCqGBg.aNJcwvFWBQoTUNNsxDeX1saVji2Yqc4E%2FFasc2hQ93o; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 300 Connection: Close
2024-01-15 13:24:17 UTC	300	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 76 47 48 41 42 58 51 71 46 58 52 6b 47 67 6a 77 4d 67 44 51 63 43 62 4a 52 55 64 63 45 62 41 31 45 54 6d 5a 45 36 4e 69 78 30 32 68 6e 4f 4d 66 34 43 75 42 4f 77 70 59 66 4f 72 72 50 69 41 73 75 6c 33 41 69 4b 53 78 71 4f 6d 32 43 77 4b 63 58 51 53 66 57 6c 49 38 75 43 37 70 69 48 68 79 45 2d 73 33 43 55 74 65 35 45 70 48 6f 63 70 2d 56 4a 77 6b 56 39 59 58 Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50082	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	778	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1457	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:17 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 246 Connection: Close
2024-01-15 13:24:17 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 6f 43 68 69 6b 5a 4d 32 39 42 67 54 4b 30 50 61 65 51 39 34 71 73 39 32 5a 37 76 43 5a 55 4c 48 4c 4e 6a 37 45 34 64 67 75 76 5a 43 56 74 64 34 74 77 46 6b 42 74 41 54 33 32 59 73 65 6b 74 71 64 4b 58 6f 4a 75 76 6f 57 6d 37 57 79 67 46 6b 67 58 66 4b 57 56 2d 6a 44 47 6e 72 56 35 32 70 4b 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50064	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	768	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	992	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA&google_hm=eS1hT0RVTjZSRTJwRjIxTWdOMDNzMjI0Q3NXN19QaWxaNn5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEPBobnu-e_zRL_qBgZjGtgwFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAl0OFNgXsigBaO2WtszQMYg; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50080	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	825	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1049	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4&google_hm=eS1BRjguYnZCRTJwR0NTYVBjLkJ6Qkk5T1pkRm9JOGJYRH5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEPajUsqwC_qh6zWdnsKXAcIFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAnLcHp5VlAv1UXZKyLV7MqQ; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50068	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	825	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1049	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50074	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	770	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	994	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT&google_hm=eS00MjdSZGpwRTJwSHk4Mm1aMUYuR29YZ1pOYUtxUDlGNX5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEMgk2Y8pOm9tuaxQcZjT9YsFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAiHeOg1c9GVy-Tlxz2lwPQc; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50097	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	858	OUT	POST /el/AGSKWxVm3fuAjz2YZDx82YH-FR46mquAP6WxMqBvmpFQYMsOYi1br9F6p_CZB1C1F1X8ssni1J5JfdBSo5bJDT9e4dX02S3uAiVFwFxjdqEjDfA8jIqgAGj7UYM3i-N5NYGft9fnjiG_ng== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 35 35 31 33 32 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325055132,null,null,[[1,1]]]
2024-01-15 13:24:17 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:17 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Zx4lfuDBHr1Gqrqtnw00cw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50066	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	777	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	642	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=xdmXEDM5sk22n9PM2iy-bQ&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I Set-Cookie: UID=1097d9c5-3933-4db2-b69f-d3ccda2cbe6d; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=pEFZ1uZ69TrCt4BFb%2BNsCl%2FzD07JOy1pbvd%2FHaRQTwag7GDqF2ahi1RbYddxPyi%2BCV57QTwNTmGGw%2FbXYN40XQ%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50077	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	834	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	691	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=qXJB9OnwRUuAk11aba0hXA&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8 Set-Cookie: UID=f44172a9-f0e9-4b45-8093-5d5a6dad215c; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=ssmGrWQGJvOEmEw7iJ0Es6MkjULwVxwo7XtUnAP9Jy4mzxLpbAUL%2FfOx6ztlpZFkiTv0yrVuDoC40ZO3EAbn0A%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50083	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	834	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	697	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=eYNxQOhAVEaQ0WOGha3j5g&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0 Set-Cookie: UID=40718379-40e8-4654-90d1-638685ade3e6; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=IqEAnigmDh0htMARlKDy9ZXNIyogDp%2B9slJVk%2FC2izZJbg0KNWwW%2BRPbYfxJc7%2Ff0Q7HYR1HKkES5pgMx9jb7A%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50071	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	780	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	639	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=2YMK5WIJZnFiW7DiQKmTbBKzvSN%2FAsgszG5QLf5yw65u30yxbxdzO9EY0AUu2Z6GeiVGsvRYBeDQmnDbx%2BZLkA%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50099	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	1083	OUT	GET /f/AGSKWxVQ-6KnTG1LWOHtfhZHoh5-q4uuUeq6zYR3CmLO4NgkfBX5JXCTy2GbOovsFK9k0YimhWN2bsEftDriD8Gaj4044wDz1T4wYhhvVgqdxpACT55p1GAcCcYNr755tIKF5WThntBF4D1SpDNvSBVgfhRVmxtmHPK3mu0JL-Inl6YPen8NeJKgEAGbpX-C/_/ads_leaderboard_/admarubanners./advert?/scrpads./adsrotate1right. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:17 UTC	1605	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-eQS3G_eLq8-lNr_EwJbGow' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:17 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 32 36 34 39 61 65 30 39 2d 36 38 34 30 2d 34 31 35 34 2d 38 63 33 31 2d 63 38 39 35 31 39 39 38 31 35 33 36 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['2649ae09-6840-4154-8c31-c89519981536'] = true;
2024-01-15 13:24:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	50103	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	2421	OUT	GET /xbbe/pixel?d=CMKPFhCi84ilBBiC5bKCAjAB&v=APEucNWIcCufavxUkZwg3__BAYmP6pCSSRb4vWKhMSmSJ9PYxDHxeQXT4RA-3b0FVC_u5jLpZ3GD3yKyAPQYusghmBTeTbYwMNOH_-N3V3MUEQ6RbrtyJP0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:17 UTC	570	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:17 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:17 UTC	419	IN	Data Raw: 31 39 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 6d 61 72 74 72 74 62 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 26 67 6f 6f 67 6c 65 5f 64 62 6d 26 67 64 70 72 3d 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 72 74 62 2d 63 73 79 6e 63 2e 73 6d 61 72 74 61 64 73 65 72 76 65 72 2e 63 6f 6d 2f 72 65 64 69 72 2f 3f 70 61 72 74 6e 65 72 69 64 3d 37 36 26 70 61 72 74 6e 65 72 75 73 65 72 69 64 3d 47 4f 4f 47 4c 45 5f 48 4f 53 54 45 44 5f 50 49 26 67 64 70 72 3d 30 26 Data Ascii: 19c<html><head></head><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_dbm&gdpr=0" style="display:none;"/><img src="https://rtb-csync.smartadserver.com/redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&
2024-01-15 13:24:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50104	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	2664	OUT	OPTIONS /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1775&cbvp=1&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50105	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	2668	OUT	OPTIONS /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1682&cbvp=1&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50101	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	731	OUT	GET /rrum?ixi=0&cm_dsp_id=85&cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1244	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 CF-Ray: 845e7029ae9b1ff1-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:17 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:17 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:17 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gWDmBy716uAvIMfcPmP7oNvh3nAKDT7bwZT4XFNwMV73kNUn465IW0X8MBNcbmYzMsONOXUzCwE460Ve9QKX2u8BPC1cCj94yt2VUsW8XoI29VZtsnzTJ0tBDe7kNlhLYU10z4hgOCU%2Bcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50106	35.244.159.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	737	OUT	GET /w/1.0/cm?id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	599	IN	HTTP/1.1 302 Found Set-Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057; Version=1; Expires=Tue, 14-Jan-2025 13:24:17 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50102	68.67.179.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	672	OUT	GET /getuid?https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=${BASE64_UID_ENC} HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	1307	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=UFt35e8Ivo_K8buKvRmifluBnVchvrnqhq9WsbsnENFSJeHadDL1y1X6nHuNcPoHuIFjjSY03yo1sOul6qHBdNiueE_hrEVEkAmVRwPxD6c.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D AN-X-Request-Uuid: 9bb928bc-22a6-436f-ad09-3b59c170664e Set-Cookie: uuid2=9132236969289213074; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50107	35.244.159.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	652	OUT	GET /w/1.0/sd?id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	514	IN	HTTP/1.1 302 Found Set-Cookie: i=66dc06ec-fd4b-410c-a331-23680e638e4c\|1705325057; Version=1; Expires=Tue, 14-Jan-2025 13:24:17 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50112	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	799	OUT	GET /sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 92156 Date: Mon, 15 Jan 2024 13:24:17 GMT Expires: Tue, 14 Jan 2025 13:24:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 26 Dec 2023 19:35:39 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:17 UTC	420	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 43 44 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6b 33 4f 44 51 33 5a 57 5a 68 4e 32 49 34 4e 7a 5a 6d 4d 7a 42 6b 4e 54 45 77 59 6a 4a 6c 61 38 65 33 39 36 37 30 36 39 36 65 31 63 36 36 33 63 34 66 34 61 32 62 39 63 37 61 65 35 34 62 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 6f 6f 67 6c 65 20 57 65 62 20 44 65 73 69 67 6e 65 72 20 31 35 2e 33 2e 30 2e 30 38 32 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 61 6e 6e 65 72 Data Ascii: <!DOCTYPE html><html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJla8e39670696e1c663c4f4a2b9c7ae54b" /> <meta charset="utf-8"> <meta name="generator" content="Google Web Designer 15.3.0.0828"> <meta name="template" content="Banner
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 64 2d 69 6e 61 63 74 69 76 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 2e 74 72 61 6e 73 70 61 72 65 6e 74 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 3b 2d 6d 6f 7a 2d 74 72 Data Ascii: d-inactive{visibility:hidden}</style> <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-tr
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 67 77 64 2d 61 74 74 61 63 68 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 6c 69 67 68 74 62 6f 78 2d 73 74 79 6c 65 22 3e 2e 67 77 64 2d 6c 69 67 68 74 62 6f 78 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 74 65 78 74 2d 73 74 79 6c 65 22 3e 70 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 31 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 32 7b 6d 61 72 67 69 6e 3a Data Ascii: one;-moz-user-select:none;-ms-user-select:none;user-select:none}</style> <style>gwd-attached{display:none}</style> <style id="gwd-lightbox-style">.gwd-lightbox{overflow:hidden}</style> <style id="gwd-text-style">p{margin:0px}h1{margin:0px}h2{margin:
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 38 35 2c 20 2e 38 35 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 37 70 78 2c 20 2d 31 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 38 35 2c 20 2e 38 35 2c 20 2e 38 35 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 37 70 78 2c 20 2d 31 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 38 35 2c 20 2e 38 35 2c 20 2e 38 35 29 3b 74 6f 70 3a 34 35 70 78 7d 2e 69 6d 61 67 65 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 34 33 39 70 78 3b 74 6f 70 3a 33 30 32 70 78 3b 6c 65 66 74 3a 2d 36 39 70 78 3b 68 65 69 67 68 74 3a 32 39 38 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 74 Data Ascii: 85, .85);-webkit-transform:translate3d(-7px, -11px, 0) scale3d(.85, .85, .85);-moz-transform:translate3d(-7px, -11px, 0) scale3d(.85, .85, .85);top:45px}.image1{position:absolute;width:439px;top:302px;left:-69px;height:298px;opacity:0;visibility:inherit;t
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 33 35 70 78 3b 74 6f 70 3a 34 30 38 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 74 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 23 35 30 35 30 35 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 32 30 70 78 3b 66 6f 6e 74 2d 73 Data Ascii: ight:auto;left:35px;top:408px;opacity:1}.cta{position:absolute;font-family:Montserrat;font-weight:bold;color:#505050;text-align:center;height:auto;background-image:none;background-color:#fff;width:auto;margin:0px;border-radius:50px;padding:8px 20px;font-s
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 39 39 2e 38 34 36 34 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 7d 23 70 61 67 65 31 2e 67 77 64 2d 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 67 77 64 2d 67 65 6e 2d 31 79 70 6a 67 77 64 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 79 70 6a 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 73 20 6c 69 Data Ascii: 99.8464%{opacity:1;-moz-animation-timing-function:linear}100%{opacity:1;visibility:inherit}}#page1.gwd-play-animation .gwd-gen-1ypjgwdanimation{animation:1.302s linear 0s 1 normal forwards gwd-gen-1ypjgwdanimation_gwd-keyframes;-webkit-animation:1.302s li
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 73 74 65 70 2d 65 6e 64 7d 35 33 2e 37 36 33 34 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 39 39 2e 38 34 36 34 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 7d 23 70 61 67 65 31 2e 67 77 64 2d 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 67 77 64 2d 67 65 6e 2d 39 62 78 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 Data Ascii: moz-animation-timing-function:step-end}53.7634%{opacity:0;-moz-animation-timing-function:linear}99.8464%{opacity:1;-moz-animation-timing-function:linear}100%{opacity:1;visibility:inherit}}#page1.gwd-play-animation .gwd-gen-9bxfgwdanimation{animation:1.302
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 71 72 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 2e 37 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 71 72 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 2e 37 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 71 72 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 7d 2e 67 77 64 2d 74 61 70 61 72 65 61 2d 31 39 79 37 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b Data Ascii: ards gwd-gen-1qrfgwdanimation_gwd-keyframes;-webkit-animation:.7s linear 0s 1 normal forwards gwd-gen-1qrfgwdanimation_gwd-keyframes;-moz-animation:.7s linear 0s 1 normal forwards gwd-gen-1qrfgwdanimation_gwd-keyframes}.gwd-taparea-19y7{position:absolute;
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 5b 5d 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 3b 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7d 7d 29 28 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a Data Ascii: ement=function(){return Reflect.construct(BuiltInHTMLElement,[],this.constructor)};HTMLElement.prototype=BuiltInHTMLElement.prototype;HTMLElement.prototype.constructor=HTMLElement;Object.setPrototypeOf(HTMLElement,BuiltInHTMLElement)}})();(function(){/*
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 4e 6f 64 65 2c 75 3d 77 69 6e 64 6f 77 2e 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 2c 76 3d 77 69 6e 64 6f 77 2e 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 2c 77 3d 77 69 6e 64 6f 77 2e 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 2c 78 3d 77 69 6e 64 6f 77 2e 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 77 69 6e 64 6f 77 2e 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 0a 22 74 65 78 74 43 6f 6e 74 65 6e 74 22 29 2c 41 3d 77 69 6e 64 6f 77 2e 45 6c 65 6d 65 Data Ascii: de.prototype.cloneNode,u=window.Node.prototype.appendChild,v=window.Node.prototype.insertBefore,w=window.Node.prototype.removeChild,x=window.Node.prototype.replaceChild,z=Object.getOwnPropertyDescriptor(window.Node.prototype,"textContent"),A=window.Eleme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50110	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	799	OUT	GET /sadbundle/18127164690797268602/index.html?e=69&leftOffset=0&topOffset=0&c=6tzP82y5wS&t=1&renderingType=2&ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 92954 Date: Mon, 15 Jan 2024 13:24:17 GMT Expires: Tue, 14 Jan 2025 13:24:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 26 Dec 2023 19:35:27 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:17 UTC	420	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 43 44 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6b 33 4f 44 51 33 5a 57 5a 68 4e 32 49 34 4e 7a 5a 6d 4d 7a 42 6b 4e 54 45 77 59 6a 4a 6c 35 37 34 35 63 65 37 61 32 38 39 65 62 32 65 39 37 62 39 66 61 62 64 30 38 31 33 39 39 65 66 30 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 6f 6f 67 6c 65 20 57 65 62 20 44 65 73 69 67 6e 65 72 20 31 35 2e 33 2e 30 2e 30 38 32 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 61 6e 6e 65 72 Data Ascii: <!DOCTYPE html><html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJl5745ce7a289eb2e97b9fabd081399ef0" /> <meta charset="utf-8"> <meta name="generator" content="Google Web Designer 15.3.0.0828"> <meta name="template" content="Banner
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 64 2d 69 6e 61 63 74 69 76 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 2e 74 72 61 6e 73 70 61 72 65 6e 74 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 3b 2d 6d 6f 7a 2d 74 72 Data Ascii: d-inactive{visibility:hidden}</style> <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-tr
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 67 77 64 2d 61 74 74 61 63 68 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 6c 69 67 68 74 62 6f 78 2d 73 74 79 6c 65 22 3e 2e 67 77 64 2d 6c 69 67 68 74 62 6f 78 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 74 65 78 74 2d 73 74 79 6c 65 22 3e 70 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 31 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 32 7b 6d 61 72 67 69 6e 3a Data Ascii: one;-moz-user-select:none;-ms-user-select:none;user-select:none}</style> <style>gwd-attached{display:none}</style> <style id="gwd-lightbox-style">.gwd-lightbox{overflow:hidden}</style> <style id="gwd-text-style">p{margin:0px}h1{margin:0px}h2{margin:
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 33 70 78 2c 20 2d 31 36 35 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 38 35 2c 20 2e 38 35 2c 20 2e 38 35 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 33 70 78 2c 20 2d 31 36 35 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 38 35 2c 20 2e 38 35 2c 20 2e 38 35 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 33 70 78 2c 20 2d 31 36 35 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 38 35 2c 20 2e 38 35 2c 20 2e 38 35 29 7d 2e 69 6d 61 67 65 31 Data Ascii: -origin:50% 50%;-moz-transform-origin:50% 50%;transform:translate3d(-13px, -165px, 0) scale3d(.85, .85, .85);-webkit-transform:translate3d(-13px, -165px, 0) scale3d(.85, .85, .85);-moz-transform:translate3d(-13px, -165px, 0) scale3d(.85, .85, .85)}.image1
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 68 3a 32 33 36 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 65 66 74 3a 33 36 70 78 3b 74 6f 70 3a 33 37 30 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 68 65 61 64 6c 69 6e 65 32 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 32 33 39 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 33 35 70 78 3b 74 6f 70 3a 34 30 38 70 78 3b 6f Data Ascii: h:236px;height:30px;font-family:Montserrat;color:#fff;font-weight:500;font-size:20px;left:36px;top:370px;opacity:1}.headline2{position:absolute;width:239px;font-size:25px;color:#fff;font-family:Montserrat;font-weight:bold;height:auto;left:35px;top:408px;o
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 73 74 65 70 2d 65 6e 64 7d 33 38 2e 34 30 32 35 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 39 39 2e 38 34 36 34 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 67 77 64 2d 67 65 6e 2d 31 79 70 6a 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 7b 30 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 Data Ascii: on-timing-function:step-end}38.4025%{opacity:0;-webkit-animation-timing-function:linear}99.8464%{opacity:1;-webkit-animation-timing-function:linear}100%{opacity:1;visibility:inherit}}@-moz-keyframes gwd-gen-1ypjgwdanimation_gwd-keyframes{0%{visibility:inh
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 67 77 64 2d 67 65 6e 2d 39 62 78 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 7b 30 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 73 74 65 70 2d 65 6e 64 7d 35 33 2e 37 36 33 34 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 39 39 2e 38 34 36 34 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 Data Ascii: }@-webkit-keyframes gwd-gen-9bxfgwdanimation_gwd-keyframes{0%{visibility:inherit;-webkit-animation-timing-function:step-end}53.7634%{opacity:0;-webkit-animation-timing-function:linear}99.8464%{opacity:1;-webkit-animation-timing-function:linear}100%{opacit
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 6e 3a 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 67 77 64 2d 67 65 6e 2d 67 6d 68 65 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 38 35 2e 37 33 31 38 25 7b 6f 70 61 63 69 74 79 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 2d 77 65 62 6b Data Ascii: n:linear;-webkit-animation-timing-function:linear;-moz-animation-timing-function:linear}}@-webkit-keyframes gwd-gen-gmhegwdanimation_gwd-keyframes{0%{opacity:0;font-size:24px;-webkit-animation-timing-function:linear}85.7318%{opacity:1;font-size:24px;-webk
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 62 63 6f 6d 70 6f 6e 65 6e 74 73 5f 76 31 5f 6d 69 6e 2e 6a 73 22 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 22 32 22 20 64 61 74 61 2d 65 78 70 6f 72 74 73 2d 74 79 70 65 3d 22 67 77 64 5f 77 65 62 63 6f 6d 70 6f 6e 65 6e 74 73 5f 76 31 22 3e 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 Data Ascii: bcomponents_v1_min.js" data-version="2" data-exports-type="gwd_webcomponents_v1">/* Copyright (c) 2016 The Polymer Project Authors. All rights reserved. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.t
2024-01-15 13:24:17 UTC	1252	IN	Data Raw: 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 0a 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 0a 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 41 55 54 48 4f 52 53 2e 74 78 74 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 6d 61 79 0a 20 62 65 20 66 6f 75 6e 64 20 61 Data Ascii: All rights reserved. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt The complete set of contributors may be found a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50117	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	778	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	635	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=JA0jvjkdJEyhrXrvc-004A&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm Set-Cookie: UID=be230d24-1d39-4c24-a1ad-7aef73ed34e0; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=3QIVtLTlZT%2BubfjNitphHZzUT1GSyqfXWiJ0xTnqETEOnGJDsjiKsmQ8OCqWNDRmWUiU2vanh3fsYKRCarLN8w%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50124	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	834	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:17 UTC	699	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=2AGeIjQlUEOPwEHomUdE7g&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp Set-Cookie: UID=229e01d8-2534-4350-8fc0-41e8994744ee; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none Set-Cookie: ss=e8d6LXzQ9nyVKut5UNoEWDfUU6j3WCZWHrIu%2F%2B7xLyUtV%2BdP2C%2F1R29F%2BF5idUu5I8f8IoQ6LqQUEZrU8GtSWg%3D%3D; expires=Wed, 15 Jan 2025 13:24:17 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50121	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	769	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	993	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE&google_hm=eS1CZ2hVUFh4RTJwR05uemUwNUxzZE4zSTA3Sm0xSDg5T35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEKq5pPqXwpH9-3eARGGdAXUFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAoqGic_0gysFMKpDvLfBNyo; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50114	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	824	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1048	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:17 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA&google_hm=eS1iLk5QRDRsRTJwRlNUdjhZdllmTnFQOU5JSV9pdTh0RH5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEDy72MKpzwIx6jFSNZ1m_2UFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAhNrlyu3hUd9TavKN8ztGUQ; Expires=Tue, 14 Jan 2025 19:24:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50141	68.67.179.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	647	OUT	GET /setuid?entity=101&code=CAESEENhzENs7RoM0eP8WaAzBvI&google_cver=1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1197	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=WC9wj9LUU2YV2RjDNdg5Vs5kA9YY-7pMNLdffFmOl4iR1Pub_G041AC9eB5Tu5dAyZIvvASgyNXiwlrDphZJwoLoFQXE6sY5mvFn6SMUooc.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ib.adnxs.com/bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEENhzENs7RoM0eP8WaAzBvI%26google_cver%3D1 AN-X-Request-Uuid: f310e64b-befc-4bd5-a61f-a4dab2704630 Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50116	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	777	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8 HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1444	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:17 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8 Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgRvzpV3.5tEoqcaUM8IKei8zeX7Mqxo7ZRLcziuj4l3ALeKVlGw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgRvzpV3.5tEoqcaUM8IKei8zeX7Mqxo7ZRLcziuj4l3ALeKVlGw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 245 Connection: Close
2024-01-15 13:24:18 UTC	245	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 53 50 50 43 48 59 76 4c 6a 41 63 76 73 32 32 48 38 4f 45 67 73 32 36 70 47 47 44 32 34 57 61 4c 59 4c 59 47 42 39 6f 6d 79 6b 53 30 70 67 4b 6f 52 74 51 4d 71 30 67 6b 45 75 43 4f 67 51 76 56 6f 52 67 7a 6c 6e 72 4f 70 52 72 6e 7a 74 4d 49 73 75 57 59 67 4a 6e 44 66 30 50 79 38 6e 7a 64 38 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50126	99.84.208.113	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	701	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=265092338&col=29305905,5876516,358438444,549485209,207486733 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	789	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:17 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 a4d8112508e8450a57296bb3736a5136.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: hNN2YRadgWeXRGXdO9oQcfKSAQP92C3QX4zhyhxZf3t4UvwPesPHmg==
2024-01-15 13:24:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50118	99.84.208.113	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	702	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	791	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:17 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3ANji0MHeu%2BA37NjnfsqE1qwkcbS9ERyl4;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF4HNQAAAAAgwHqZAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 4c3936cc7f5f36d3966cb34ebcbf91a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: DyqzCSr0EBVha8SdPvKowfcrN0SG9O-YrivW0EviRnjn9kWy6pnK3Q==
2024-01-15 13:24:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50130	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:17 UTC	780	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	645	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=42F6C9VsIUWMcvSy0Mjpyg&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg Set-Cookie: UID=0b7a61e3-6cd5-4521-8c72-f4b2d0c8e9ca; expires=Wed, 15 Jan 2025 13:24:18 GMT; path=/; secure; samesite=none Set-Cookie: ss=R8xQLdiP99WxwzY%2BbxnsoTAL%2FxW2JF%2FLxhTbEI2iWf6jTG%2BFZMwTisM%2BqgYODPrNiyIh5GyqipZku9IV86haOA%3D%3D; expires=Wed, 15 Jan 2025 13:24:18 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50128	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	833	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1508	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:18 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQ2Njm4.zvlH4yH%2BldRsKYB7ZlA0nuctdqOtsrGqv%2FKeAYJHhwI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQ2Njm4.zvlH4yH%2BldRsKYB7ZlA0nuctdqOtsrGqv%2FKeAYJHhwI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 301 Connection: Close
2024-01-15 13:24:18 UTC	301	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 51 59 38 44 76 5f 6f 62 64 2d 70 6b 5f 7a 6f 39 6a 45 79 77 75 32 49 62 54 4b 57 52 53 6b 7a 78 4a 6b 4b 49 77 54 74 42 53 55 62 68 4d 62 57 78 36 50 73 56 78 73 2d 34 6e 63 78 42 58 69 76 6e 6f 61 64 59 51 7a 42 34 79 41 69 64 34 5f 44 4f 6a 75 79 41 5f 6c 55 43 37 42 46 45 67 67 43 72 2d 61 53 77 71 73 6f 4c 74 53 65 4e 6a 64 34 61 43 75 42 38 6f 34 2d 72 Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50123	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	778	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1453	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:18 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 246 Connection: Close
2024-01-15 13:24:18 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 73 75 4a 51 30 4f 34 41 48 2d 66 6b 43 4c 70 71 73 66 6a 33 7a 74 2d 30 43 4a 36 6f 71 31 57 73 38 70 55 4f 36 64 2d 4a 79 6c 4c 79 70 6c 39 38 74 4c 75 69 77 74 47 43 64 33 47 73 59 32 65 56 69 43 4d 30 42 79 4d 42 71 78 59 78 48 33 4b 50 67 42 52 7a 38 69 4f 6f 72 37 73 63 34 77 34 51 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50131	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	769	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	993	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk&google_hm=eS1pTktXdFp4RTJwSG1WQVlvUE9RdW9EYUpJU0ZvRC5acX5B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAIypWUCEDSjjgXHUywvUjOduZ9_un4FEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAi1OQkX50mNSwNTyjGjpzks; Expires=Tue, 14 Jan 2025 19:24:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50139	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	670	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	1191	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1 CF-Ray: 845e702e6c701753-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAk5iMnx646zg.de8aQAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=369; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:18 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=369; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mjLzAkAEYbm%2F5Cb7%2Biuk1Rl6RmgG7TF69zdOLMGXORr4irWsJdSIgGJn7C0QHBMpS81AAdTHOwisZ7jNspQ3mvpPUbZctX8gR%2BGzt5gtNZMc4PK%2BIa%2B%2BB4fqda83wi8Sq7C1ronio8FXmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50147	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	928	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=2YMK5WIJZnFiW7DiQKmTbBKzvSN%2FAsgszG5QLf5yw65u30yxbxdzO9EY0AUu2Z6GeiVGsvRYBeDQmnDbx%2BZLkA%3D%3D
2024-01-15 13:24:18 UTC	634	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8 Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:18 GMT; path=/; secure; samesite=none Set-Cookie: ss=ctdQweTKqSOSmMiZKg2Yl40gsP94JXU8K8nzXWGMH55glgStuSJWx%2FvAAUomCJrkv98Rg2pkQpKGgVV2IRO0DA%3D%3D; expires=Wed, 15 Jan 2025 13:24:18 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50155	35.244.159.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	801	OUT	GET /w/1.0/cm?cc=1&id=9ca165a9-d9fe-2ff6-d83d-d145a80b0d37&r=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dopenx%26google_hm%3D%7Bopenx_uuid_base64%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057
2024-01-15 13:24:18 UTC	585	IN	HTTP/1.1 302 Found Vary: Accept, Accept-Encoding Set-Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057; Version=1; Expires=Tue, 14-Jan-2025 13:24:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=YzkxNmVlYTItNWExMS0yNjBkLWUxNTctMzFlNjk5MGQ4ZDk3 Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50160	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3031	OUT	GET /pagead/adview?ai=CXrZH_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBN8BT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSNoZ3L2esqXG_zQKvzQQxA59OzcvsrukQ3kT1e1uFrvjr_WFkmZMAEzpi-9-UDiAXSj6CwBpIFBAgEGAGSBQQIBRgEoAZmgAfPx9hqqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJRGh0dHBzOi8vaGVsaS5saWZlL2ZpbHRlcj9rZXl3b3JkPWtpdGUlMjAlMjYlMjBzdGF5JTIwcGFja2FnZXMmcGFnZT0xgAoByAsBogwIKgYKBKy6sQLaDBEKCxDA9uPy9PqJivYBEgIBA9gTDIgUAdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=sUoeI3bWvso&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x51630f55b9fa615d0000000000000000","2":"0x13475edac693a8440000000000000000","3":"0x6494477efb290bb20000000000000000","4":"0x2a7903177bea863e0000000000000000","5":"0xb0145bac6028fd340000000000000000"},"debug_key":"14520831919827443067","debug_reporting":true,"destination":"https://heli.life","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["849992729"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"13354464950002370193"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50144	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	876	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:18 UTC	993	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50154	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	797	OUT	GET /rrum?cb=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcasale_media2_dsp_secure%26google_cm%26google_hm%3D&cm_dsp_id=85&ixi=0&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPS=5601; CMPRO=5601
2024-01-15 13:24:18 UTC	1092	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=casale_media2_dsp_secure&google_cm&google_hm=ZaUyAeVXlmqV3OvhltnSpwAA CF-Ray: 845e702f3be30664-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:18 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:18 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x%2B2XPpg88cFIDPUV4kNWigNPOCYNPIEfbOwgdx85WboRJcQbKlHUna2G%2Fu6XUClhNy7CP3espty5kkUr37n%2F42GYTix%2FqylIHuwp5M9YSA%2BbkNFXG2YRfGuXmCN8JzbLzz2SpT7eWlGaSQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50163	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3080	OUT	GET /pagead/adview?ai=CO9c1_DGlZdiJOsWlj-8PkPqH6AjUnfD5XO_GsfWkC9CQgOyQAhACIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOEBT9BUNaRMd_0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vQfgvP64vQq6eEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLVcNkxKieVU0A077A-WQ83uBA3j8nFWZk4oWjmRMEu40fIVe9knotqvhBKfI_9JsCJrj3YK4NdzwATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQ0P3um4S75aPFARICAQPYEw2IFATQFQGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=gkPONP881k8&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1227	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x77cb9221bb873f380000000000000000","2":"0xf7537ab5dbbd8ad20000000000000000","3":"0xd18ff16b6714e77e0000000000000000","4":"0xabd9a90cd8b6c9ac0000000000000000","5":"0x1d9277f4458f2d890000000000000000"},"debug_key":"10569048664604275446","debug_reporting":true,"destination":"https://overheaddoorhighcountry.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["744339661"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"4171097226768086513"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50152	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	858	OUT	POST /el/AGSKWxVm3fuAjz2YZDx82YH-FR46mquAP6WxMqBvmpFQYMsOYi1br9F6p_CZB1C1F1X8ssni1J5JfdBSo5bJDT9e4dX02S3uAiVFwFxjdqEjDfA8jIqgAGj7UYM3i-N5NYGft9fnjiG_ng== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 35 36 37 39 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325056794,null,null,[[3,1]]]
2024-01-15 13:24:18 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-njbG60LcervqzCUyCLK2OA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50149	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	858	OUT	POST /el/AGSKWxVm3fuAjz2YZDx82YH-FR46mquAP6WxMqBvmpFQYMsOYi1br9F6p_CZB1C1F1X8ssni1J5JfdBSo5bJDT9e4dX02S3uAiVFwFxjdqEjDfA8jIqgAGj7UYM3i-N5NYGft9fnjiG_ng== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	76	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 35 36 38 39 37 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325056897,null,null,[null,[1]]]
2024-01-15 13:24:18 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:18 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-3BkiOx4Ce4OeVZl401MjaA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50137	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3000	OUT	GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1775&cbvp=1&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1694	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x6f01b8b04a0738760000000000000000","15":"0x487ad988b04656070000000000000000"},"debug_key":"18114282226450018818","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"2022785642299389576"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50146	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	1477	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCB5JStBjABOgT87-jmQgTHlsB7.s7v%2BPDW0g3kS8qFBpan3I%2FF44EI7y7qBXK%2BzUDrsgpc
2024-01-15 13:24:18 UTC	365	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:18 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM Content-Length: 245 Connection: Close
2024-01-15 13:24:18 UTC	245	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 30 42 6e 62 70 39 57 45 77 6d 6c 48 78 59 56 36 2d 4d 72 69 30 73 53 47 63 75 77 46 4e 31 48 49 57 35 44 37 31 4f 68 77 46 59 48 46 36 64 6c 32 71 6a 6d 6c 51 59 4d 39 7a 50 33 58 56 70 63 34 58 74 4d 71 2d 58 34 79 44 56 54 39 52 31 75 69 6f 55 2d 42 4d 4f 5a 41 6c 4b 50 4c 47 62 74 4d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50148	3.225.218.10	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	743	OUT	GET /ups/58269/sync?_origin=1&gdpr=0&redir=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:18 UTC	754	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=18yl~2g71;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Tue, 14-Jan-2025 13:24:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://cm.g.doubleclick.net/pixel?google_nid=oath_dbm&google_hm=eS1lMHdNdnpaRTJ1RTV1QVBoaFlTOTZRblZoZ042NllQSH5B&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.94 Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50138	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3004	OUT	GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1682&cbvp=1&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1693	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x6f01b8b04a0738760000000000000000","15":"0x487ad988b04656070000000000000000"},"debug_key":"4603839734096450003","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"8287252203910559787"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50151	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	858	OUT	POST /el/AGSKWxVm3fuAjz2YZDx82YH-FR46mquAP6WxMqBvmpFQYMsOYi1br9F6p_CZB1C1F1X8ssni1J5JfdBSo5bJDT9e4dX02S3uAiVFwFxjdqEjDfA8jIqgAGj7UYM3i-N5NYGft9fnjiG_ng== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 35 36 39 30 36 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325056906,null,null,[[2,1]]]
2024-01-15 13:24:18 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:18 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-Fr8YKoV-GQNKrqh1bvkSYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50156	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2657	OUT	OPTIONS /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2183&cbvp=1&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50158	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2657	OUT	OPTIONS /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2357&cbvp=1&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50157	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2657	OUT	OPTIONS /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1812&cbvp=1&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50165	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3031	OUT	GET /pagead/adview?ai=C1dy6_DGlZdiJOsWlj-8PkPqH6AjBtMyqdc-AkIHKDdex9I-wARADIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9BWF5xMdv0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDovDGLVCFtdvJ-w70a1ND9Ua-Z14yP8ovFh16hAUP9EgX80VNFk_HpmgrAyFv0LrjyIvnfvV54W4H5aDWtsgeU-_reKcOQUb8QAJ3-1cQgDlMGLRThIgQNcLO7Cu1qH7qWAza4NBkantO6lO0_7-Pn6-Vih6bZqKWoGSwuXdOjq_S3ZphpMzedDw1Hl8WiU52unRvtwASl_-jGwgOIBdPRofkvkgUECAQYAZIFBAgFGASgBjeAB-e0lMUBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJOGh0dHBzOi8vYmVzdHNlYXJjaGVzLm5ldC9pbmRleC5waHA_cmdpZD0xMjIyNTYmc3ViPWdjbGlkgAoByAsBogwIKgYKBKy6sQLaDBEKCxCw1vzXhLPUt9ABEgIBA9gTDIgUA9AVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=TxhwSspVjc4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1216	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xa7dcc8f1697a0d5d0000000000000000","2":"0xf71b6e1dfbf5544d0000000000000000","3":"0x42d9e7fff2b71c380000000000000000","4":"0x392ff4eaccfd05da0000000000000000","5":"0xd4321ae33412a9610000000000000000"},"debug_key":"17964944434789174506","debug_reporting":true,"destination":"https://bestsearches.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["972914409"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"7222014620969852337"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50167	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	1487	OUT	GET /f/AGSKWxXizyx5OMgikPNKlZgmKiP6KCl9CRYr7w7a2bMhd5U3e7mW-sRomh82FNPX-VL1Wos_MioOn3oMxMI9MZwFZM3ESfSeKJj8Y5ypbcnO76lkkecLJqGjNqHs0SXIDgZUMwMSB3rnfA==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:18 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:18 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-iUyYdvphbDmqYD6EVp45GQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:18 UTC	1629	IN	Data Raw: 62 38 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 50 41 2c 5f 2e Data Ascii: b8dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var PA=function(a){this.j=_.v(a)};_.A(PA,_.
2024-01-15 13:24:18 UTC	1335	IN	Data Raw: 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 65 6c 5c 2f 41 47 53 4b 57 78 55 73 4b 35 76 2d 49 5a 56 68 58 74 51 77 47 46 58 6c 77 54 35 30 4c 77 62 43 45 7a 48 37 44 30 6c 4c 6d 46 47 50 69 54 57 75 77 52 38 31 68 6c 62 72 75 79 42 76 6d 4d 38 4a 6b 57 55 73 35 4f 59 2d 56 6f 76 78 45 66 48 72 4b 66 4c 44 54 64 4e 6e 47 6b 58 5a 6b 4b 4e 36 2d 49 6e 6c 64 46 49 4d 65 38 66 66 71 77 6c 79 77 55 61 30 4a 41 61 70 50 4b 57 6f 79 2d 61 53 49 73 4d 73 4b 45 53 31 53 6a 4b 72 59 67 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 3f 64 6d 69 64 5c 5c 5c 5c 75 30 30 33 64 35 33 Data Ascii: null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/el\/AGSKWxUsK5v-IZVhXtQwGFXlwT50LwbCEzH7D0lLmFGPiTWuwR81hlbruyBvmM8JkWUs5OY-VovxEfHrKfLDTdNnGkXZkKN6-InldFIMe8ffqwlywUa0JAapPKWoy-aSIsMsKES1SjKrYg\\\\u003d\\\\u003d?dmid\\\\u003d53
2024-01-15 13:24:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50171	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	736	OUT	GET /sadbundle/12128317773909862788/index.html?ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 11260 Date: Mon, 15 Jan 2024 13:24:18 GMT Expires: Tue, 14 Jan 2025 13:24:18 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:18 UTC	420	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 20 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 64 2e 73 69 7a 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 33 30 30 2c 68 65 69 67 68 74 3d 32 35 30 22 3e 09 09 09 0a 3c 74 69 74 6c 65 3e 45 78 70 6c 6f 72 61 20 33 30 30 78 32 35 30 3c 2f 74 69 74 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 Data Ascii: <!doctype html><html><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no"> <meta name="ad.size" content="width=300,height=250"><title>Explora 300x250</title><link rel="stylesheet" hr
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 6c 61 79 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 75 73 2d 65 6e 2d 74 68 65 2d 74 6f 74 61 6c 2d 6c 75 78 75 72 79 2d 6f 66 66 65 72 2d 64 65 63 32 30 32 33 2d 61 6e 69 6d 61 74 65 64 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a Data Ascii: lay&utm_campaign=us-en-the-total-luxury-offer-dec2023-animated";</script><script type="text/javascript" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script><script type="text/javascript" src="https://cdnjs.cloudflare.com/aj
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 6f 73 6f 66 74 2e 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 29 22 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 29 3b 0a 20 20 2d 6d 6f 7a 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 2d 6b 68 74 6d 6c 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 09 0a 09 7d 0a 23 68 65 61 64 6c 69 6e 65 31 20 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 Data Ascii: osoft.Alpha(Opacity=1)"; filter: alpha(opacity=1); -moz-opacity: 1; -khtml-opacity: 1; opacity: 1; width: 100%; height: 100%;background-size: cover; background-position: center;}#headline1 {-ms-filter: "progid:DXImageTransform.Microsoft.Alp
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 3a 20 74 6f 70 3b 09 0a 09 7d 0a 0a 0a 20 20 20 20 0a 23 62 6f 72 64 65 72 2d 74 6f 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 70 78 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 23 30 30 30 30 30 30 20 73 6f 6c 69 64 3b 20 74 6f 70 3a 20 30 3b 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b 0a 7d 0a 23 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 23 30 30 30 30 30 30 20 73 6f 6c 69 64 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 7a 2d 69 6e 64 65 78 3a 20 39 39 39 3b Data Ascii: : top;} #border-top {position:absolute;width:100%;height:1px;border-top: 1px #000000 solid; top: 0; z-index: 999;}#border-bottom {position:absolute;width:100%;height:1px;border-bottom: 1px #000000 solid; bottom: 0;z-index: 999;
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 75 72 6c 50 61 72 61 6d 4d 61 70 5b 43 52 45 41 54 49 56 45 5f 44 49 4d 45 4e 53 49 4f 4e 53 5f 4b 45 59 5d 20 3d 20 6e 75 6c 6c 3b 0a 0a 20 20 20 20 76 61 72 20 68 61 6e 64 6c 65 43 6c 69 63 6b 54 61 67 4d 65 73 73 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 76 65 6e 74 44 61 74 61 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 64 61 74 61 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 44 61 74 61 2e 69 73 49 6e 69 74 43 6c 69 63 6b 54 61 67 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 Data Ascii: = null; urlParamMap[CREATIVE_DIMENSIONS_KEY] = null; var handleClickTagMessage = function(e) { try { var eventData = JSON.parse(e.data); } catch (err) { return; } if (eventData.isInitClickTag) { if
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6f 72 69 67 69 6e 54 72 69 61 6c 54 6f 6b 65 6e 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 2f 43 68 72 6f 6d 65 2f 2e 74 65 73 74 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 65 74 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 0a 20 20 20 20 20 20 20 20 6d 65 74 61 2e 68 74 74 70 45 71 75 69 76 20 3d 20 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 0a 20 20 20 20 20 20 20 20 6d 65 74 61 2e 63 6f 6e 74 65 6e 74 20 3d 20 53 74 72 69 6e 67 28 6f 72 69 67 69 6e 54 72 69 61 6c 54 6f 6b 65 6e 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: function(originTrialToken) { if (/Chrome/.test(window.navigator.userAgent)) { var meta = document.createElement('meta'); meta.httpEquiv = 'origin-trial'; meta.content = String(originTrialToken); document.getElementsBy
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 6e 64 65 78 29 20 2b 20 70 61 72 61 6d 73 54 6f 42 65 41 64 64 65 64 20 2b 0a 20 20 20 20 20 20 20 20 20 20 75 72 6c 2e 73 75 62 73 74 72 28 61 64 55 72 6c 49 6e 64 65 78 29 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 72 6c 3b 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 69 66 20 28 6f 70 65 6e 2e 63 61 6c 6c 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 65 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 75 72 6c 2c 20 6e 61 6d 65 2c 20 66 65 61 74 75 72 65 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 54 75 72 74 6c 65 58 41 64 43 6c 69 63 6b 20 26 26 20 21 21 72 65 70 6f 72 74 69 6e 67 49 64 73 5b 75 72 6c 5d 29 20 Data Ascii: ndex) + paramsToBeAdded + url.substr(adUrlIndex); }; return url; }; if (open.call) { window.open = function(open) { return function(url, name, features) { if (isTurtleXAdClick && !!reportingIds[url])
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 20 21 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 67 73 2e 70 75 73 68 28 77 69 6e 64 6f 77 46 65 61 74 75 72 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 65 6e 2e 61 70 70 6c 79 28 77 69 6e 64 6f 77 2c 61 72 67 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 28 77 69 6e 64 6f 77 2e 6f 70 65 6e 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 0a 20 20 20 20 20 20 20 20 20 Data Ascii: if (windowFeatures !== '') { args.push(windowFeatures); } open.apply(window,args); } }; }(window.open); } if (window.addEventListener) { window.addEventListener(
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 76 20 69 64 3d 22 62 6f 72 64 65 72 2d 72 69 67 68 74 22 3e 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 21 2d 2d 20 65 6e 64 20 6f 66 20 6d 61 69 6e 20 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0a 3c 2f 61 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 0a 09 66 75 6e 63 74 69 6f 6e 20 64 65 74 65 63 74 49 45 28 29 20 7b 0a 20 20 76 61 72 20 75 61 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 0a 20 20 2f 2f 20 54 65 73 74 20 76 61 6c 75 65 73 3b 20 55 6e 63 6f 6d 6d 65 6e 74 20 74 6f 20 63 68 65 63 6b 20 72 65 73 75 6c 74 20 0a 20 20 2f 2f 20 49 45 20 31 30 0a 20 20 2f 2f 20 75 61 20 3d 20 27 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 63 Data Ascii: v id="border-right"></div> </div> ... end of main container --></a><script type="text/javascript">function detectIE() { var ua = window.navigator.userAgent; // Test values; Uncomment to check result // IE 10 // ua = 'Mozilla/5.0 (c
2024-01-15 13:24:18 UTC	824	IN	Data Raw: 20 20 7d 0a 20 20 2f 2f 20 6f 74 68 65 72 20 62 72 6f 77 73 65 72 0a 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 7d 0a 09 0a 76 61 72 20 69 3d 30 3b 09 0a 0a 76 61 72 20 74 77 65 65 6e 20 3d 20 6e 65 77 20 54 69 6d 65 6c 69 6e 65 4d 61 78 28 7b 70 61 75 73 65 64 3a 74 72 75 65 2c 20 72 65 70 65 61 74 3a 30 2c 20 72 65 70 65 61 74 44 65 6c 61 79 3a 20 32 7d 29 3b 09 09 09 09 0a 09 0a 66 75 6e 63 74 69 6f 6e 20 61 6e 69 6d 61 74 65 28 29 7b 0a 20 20 20 20 74 77 65 65 6e 2e 74 6f 28 22 23 66 72 61 6d 65 31 5f 69 6d 61 67 65 22 2c 20 33 30 30 2f 32 35 2c 20 7b 20 73 63 61 6c 65 3a 31 2e 31 2c 20 64 65 6c 61 79 3a 31 2f 32 35 2c 20 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3a 27 35 30 25 20 35 30 25 27 7d 2c 27 74 6f 67 65 74 68 65 72 27 29 3b 0a 20 20 Data Ascii: } // other browser return false;}var i=0;var tween = new TimelineMax({paused:true, repeat:0, repeatDelay: 2});function animate(){ tween.to("#frame1_image", 300/25, { scale:1.1, delay:1/25, transformOrigin:'50% 50%'},'together');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50159	216.22.16.57	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	779	OUT	GET /redir/?partnerid=76&partneruserid=GOOGLE_HOSTED_PI&gdpr=0&redirurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dsmartrtb_dbm%26google_cm%26google_hm%3DSMART_USER_ID_B64 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	738	IN	HTTP/1.1 302 Found content-length: 0 date: Mon, 15 Jan 2024 13:24:17 GMT cache-control: no-cache,no-store location: https://cm.g.doubleclick.net/pixel?google_nid=smartrtb_dbm&google_cm&google_hm=NjYzNDI4MzU2NzE3MDcxNjY5Nw==&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: pid=6634283567170716697; expires=Fri, 14 Feb 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Fri, 14 Feb 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=76:GOOGLE_HOSTED_PI; expires=Wed, 15 Jan 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50169	35.244.159.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	716	OUT	GET /w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=66dc06ec-fd4b-410c-a331-23680e638e4c\|1705325057
2024-01-15 13:24:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50162	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3036	OUT	GET /pagead/adview?ai=CXDyI_DGlZdiJOsWlj-8PkPqH6AjvlqWmdc7_sL2dEmQQBCDt-KkgKAhgyYagiqSk4BGgAajr2_ACyAEGqAMByAMCqgTkAU_QPSmlTHD9Hw0qN1McjWF2FVxqrP_58VkhCYygm6ALRhi11yUUfgNlTP8YJz_-8TWMnU9ALyObzwLwBsEaG3MhOM-KO8NDEketMdn0970A6Lw7i1RpInevfcO9GtTQ_VGvmdeMj_KLxYdeoQFD_RIF_NFTRZPx6ZoKwMhb9C648iL5371eeFuB-Wg1rbIHlPv63inDkFG_EACd_tXEIA5TBi0U4SIEDXCzuwrtCm7G3AM2uDQZGp7TujuX6ZHj5-vlZJizxqylyX4dKl3To6v0t2aYaVJQrAsNR5fFolObsYgE6cAEscmXwtUEiAWgmbv6TZIFBAgEGAGSBQQIBRgEoAY3gAfAlKSPAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4b2AcB8gcEEPafINIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY3MOH8L7fgwOaCTtodHRwczovL3d3dy5maWVsZHNjamRyYXNoZXZpbGxlLmNvbS9uZXctaW52ZW50b3J5L2luZGV4Lmh0bYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQwNzFxt_g35OXARICAQPYEw3QFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=kQ6_B_EJUoQ&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1223	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xfb7e6203aba538cd0000000000000000","2":"0xddf85c61a46f70bc0000000000000000","3":"0xfb6eaaacc28326a90000000000000000","4":"0x62cab4c62b459efe0000000000000000","5":"0x4d09533a61bf159d0000000000000000"},"debug_key":"8735870035874772097","debug_reporting":true,"destination":"https://fieldscjdrasheville.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["773256616"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"12146690601769660273"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50168	68.67.179.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	863	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dappnexus%26google_hm%3D%24%7BBASE64_UID_ENC%7D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=UFt35e8Ivo_K8buKvRmifluBnVchvrnqhq9WsbsnENFSJeHadDL1y1X6nHuNcPoHuIFjjSY03yo1sOul6qHBdNiueE_hrEVEkAmVRwPxD6c.; uuid2=9132236969289213074
2024-01-15 13:24:18 UTC	1254	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=SNxccjxCSjNFh0h9E2L0DF4ZWQ_1SCcnS1oDIVxRVuXR5EvIjKScE-Ls1-NY-AR6PmA7Vv1zL4LDoxJHZjbyNIdBgpy6G-vX2clUcIvgMgI.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://cm.g.doubleclick.net/pixel?google_nid=appnexus&google_hm=OTEzMjIzNjk2OTI4OTIxMzA3NA%3D%3D AN-X-Request-Uuid: a5332b90-114c-4c0d-9f4c-998ffc45345c Set-Cookie: uuid2=9132236969289213074; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50161	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3354	OUT	GET /pagead/adview?ai=CM_CC_DGlZdiJOsWlj-8PkPqH6AiarfGydNPs3sTFEdvZHhAFIO34qSAoCGDJhqCKpKTgEaABj_H8_gLIAQaoAwHIAwKqBOQBT9AAKaNMcf0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDovDuLVC4HVJRkw70a1ND9Ua-Z14yP8ovFh16hAUP9EgX80VNFk_HpmgrAyFv0LrjyIvnfvV54W4H5aDWtsgeU-_reKcOQUb8QAJ3-1cQgDlMGLRThIgQNcLO7Cu1kOpbXAza4NBkantO6D71c7uPn6-USg4LTpaWxewxPXNOjq_S3ZphpKlW9bgxHl8WiU-2quRHgwATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBjeAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-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&sigh=qSuMAz94178&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xce75f8629f85660e0000000000000000","2":"0x4427632a5f783a7d0000000000000000","3":"0x1f9bf1cd1995cc340000000000000000","4":"0xfd3abb05a8d8c95b0000000000000000","5":"0x9d9f34b1fdb72450000000000000000"},"debug_key":"13657755048770777107","debug_reporting":true,"destination":"https://getapp.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["803158159"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"15570412478074409745"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50166	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	645	OUT	GET /879366/Enabler_01_250.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	775	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 122888 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 20:34:14 GMT Expires: Mon, 15 Jan 2024 20:34:14 GMT Cache-Control: public, max-age=86400 Age: 60604 Last-Modified: Tue, 14 Mar 2023 21:28:42 GMT Content-Type: text/javascript Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:18 UTC	477	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 45 50 53 5f 47 52 41 50 48 3d 7b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 3a 5b 5d 2c 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 6d 6f 64 75 6c 65 27 3a 5b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 5d 2c 27 67 64 6e 6d 6f 64 75 6c 65 27 3a 5b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 5d 2c 27 6c 61 79 6f 75 74 73 6d 6f 64 75 6c 65 27 3a 5b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 5d 2c 27 76 69 64 65 6f 6d 6f 64 75 6c 65 27 3a 5b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 5d 2c 27 6c 61 79 6f 75 74 73 66 69 6c 6c 65 72 6d 6f 64 75 6c 65 27 3a 5b 27 65 6e 61 62 6c 65 72 6d 6f 64 75 6c 65 27 2c 27 6c 61 79 6f 75 74 73 6d 6f 64 75 6c 65 27 5d 2c 27 72 61 64 5f 75 69 5f 76 69 64 65 6f 6d 6f 64 75 Data Ascii: (function(){var DEPS_GRAPH={'enablermodule':[],'configurablemodule':['enablermodule'],'gdnmodule':['enablermodule'],'layoutsmodule':['enablermodule'],'videomodule':['enablermodule'],'layoutsfillermodule':['enablermodule','layoutsmodule'],'rad_ui_videomodu
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 68 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 Data Ascii: ry Authors. SPDX-License-Identifier: Apache-2.0*/var h,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototy
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 Data Ascii: Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:!0,writa
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 3d 21 31 3b 74 68 69 73 2e 6a 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 76 3d 30 3b 74 68 69 73 2e 6c 3d 6e 75 6c 6c 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 6f 3d 21 30 7d 3b 6f 61 2e 70 72 6f 74 6f 74 Data Ascii: riptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.M=b.prototype},oa=function(){this.o=!1;this.j=null;this.s=void 0;this.h=1;this.B=this.v=0;this.l=null},pa=function(a){if(a.o)throw new TypeError("Generator is already running");a.o=!0};oa.protot
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 61 28 61 2c 61 2e 68 2e 6a 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 41 29 3a 28 71 61 28 61 2e 68 2c 62 29 2c 62 3d 74 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 75 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 Data Ascii: a(a,a.h.j["throw"],b,a.h.A):(qa(a.h,b),b=ta(a));return b};this.return=function(b){return ua(a,b)};this[Symbol.iterator]=function(){return this}},wa=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 76 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 49 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 6c 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 6c 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 6c 3d 0a 21 31 7d 6c 3f 74 68 69 73 2e 58 28 67 29 3a 74 68 69 73 2e 73 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 3d 66 75 6e 63 74 69 6f Data Ascii: ){if(g===this)this.v(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof e)this.I(g);else{a:switch(typeof g){case "object":var l=null!=g;break a;case "function":l=!0;break a;default:l=!1}l?this.X(g):this.s(g)}};e.prototype.X=functio
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6f 28 29 3b 67 2e 6c 62 28 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6c 29 7b 76 61 72 20 6d 3d 74 68 69 73 2e 6f 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 6c 2c 6d 2e 72 65 73 6f 6c 76 65 2c 6d 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6e 29 7b 6d 2e 72 65 6a 65 63 74 28 6e 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 49 2c 52 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 49 3f 66 75 6e 63 74 69 6f 6e 28 53 29 7b 74 72 79 7b 6e 28 49 28 53 29 Data Ascii: type.I=function(g){var l=this.o();g.lb(l.resolve,l.reject)};e.prototype.J=function(g,l){var m=this.o();try{g.call(l,m.resolve,m.reject)}catch(n){m.reject(n)}};e.prototype.then=function(g,l){function m(I,R){return"function"==typeof I?function(S){try{n(I(S)
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 72 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 72 29 26 26 64 28 72 29 3b 72 65 74 75 72 6e 20 6e 28 72 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 72 3d 6e 65 77 20 61 28 5b 5b 6d 2c 32 5d 2c 5b 6e 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 72 2e 67 65 74 28 6d 29 7c 7c 33 21 3d 72 2e 67 65 74 28 6e 29 29 72 65 74 75 72 6e 21 31 3b 72 2e 64 65 6c 65 74 65 28 6d 29 3b 72 2e 73 65 74 28 6e 2c 34 29 3b 72 65 74 75 Data Ascii: unction(r){if(r instanceof b)return r;Object.isExtensible(r)&&d(r);return n(r)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var m=Object.seal({}),n=Object.seal({}),r=new a([[m,2],[n,3]]);if(2!=r.get(m)\|\|3!=r.get(n))return!1;r.delete(m);r.set(n,4);retu
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 76 61 6c 75 65 5b 31 5d 29 72 65 74 75 72 6e 21 31 3b 72 3d 6e 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 72 2e 64 6f 6e 65 7c 7c 34 21 3d 72 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 72 2e 76 61 6c 75 65 5b 31 5d 7c 7c 21 6e 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 45 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 6a 3d 7b 7d 3b 74 68 69 73 2e 68 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6c 29 7b 6c 3d 66 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e Data Ascii: value[1])return!1;r=n.next();return r.done\|\|4!=r.value[0].x\|\|"t"!=r.value[1]\|\|!n.next().done?!1:!0}catch(E){return!1}}())return a;var b=new WeakMap,c=function(l){this.j={};this.h=f();this.size=0;if(l){l=fa(l);for(var m;!(m=l.next()).done;)m=m.value,this.
2024-01-15 13:24:18 UTC	1252	IN	Data Raw: 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 76 61 72 20 6e 3d 6d 26 26 74 79 70 65 6f 66 20 6d 3b 22 6f 62 6a 65 63 74 22 3d 3d 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6e 3f 62 2e 68 61 73 28 6d 29 3f 6e 3d 62 2e 67 65 74 28 6d 29 3a 28 6e 3d 22 22 2b 20 2b 2b 67 2c 62 2e 73 65 74 28 6d 2c 6e 29 29 3a 6e 3d 22 70 5f 22 2b 6d 3b 76 61 72 20 72 3d 6c 2e 6a 5b 6e 5d 3b 69 66 28 72 26 26 68 61 28 6c 2e 6a 2c 6e 29 29 66 6f 72 28 6c 3d 30 3b 6c 3c 72 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 45 3d 72 5b 6c 5d 3b 69 66 28 6d 21 3d 3d 6d 26 26 45 2e 6b 65 79 21 3d 3d 45 2e 6b 65 79 7c 7c 6d 3d 3d 3d 45 2e 6b 65 79 29 72 65 74 75 72 Data Ascii: bol.iterator]=c.prototype.entries;var d=function(l,m){var n=m&&typeof m;"object"==n\|\|"function"==n?b.has(m)?n=b.get(m):(n=""+ ++g,b.set(m,n)):n="p_"+m;var r=l.j[n];if(r&&ha(l.j,n))for(l=0;l<r.length;l++){var E=r[l];if(m!==m&&E.key!==E.key\|\|m===E.key)retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50153	34.117.228.201	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	667	OUT	GET /event.png?impid=8a24cd3de094480bbccbf23135950c09&akipv6=&dup=&eoid=1000 HTTP/1.1 Host: tpsc-ue1.doubleverify.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	157	IN	HTTP/1.1 204 No Content Date: Mon, 15 Jan 2024 13:24:18 GMT Connection: close Expires: 2024-01-14T13:24:18 Pragma: no-cache Cache-Control: max-age=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50164	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2999	OUT	GET /pagead/adview?ai=Ch-H6_DGlZdiJOsWlj-8PkPqH6Ajy87fucqTc4ajAD9vmzPifPxAGIO34qSAoCGDJhqCKpKTgEaAB5dTY-wPIAQaoAwHIAwKqBN4BT9AWXpBMc_0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vRPgvIiRr80Ly73Hvjnkhx6JV6-Z6KyP8oDFh162J0P9MAPh0aFCZrYcmYqEPViBLbgy1_sqfl55roIMazWtRwRh-Pje3MBnUr8Q9Z4L1sQg-1DzLhXh1wfsdhx2DO43j9eIhtxy7sKelF4oMbXhBp4PVf7cuvP9DIhHmviRcvc_WBw53LlT9OFlqP2KfVC3wAS4ybz77wOIBYvwn9o7kgUECAQYAZIFBAgFGASgBjeAB4OrpwSoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBD2nyDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDmgkhaHR0cHM6Ly9oaWdocG9pbnRwaG90b2dyYXBoeS5jb20vgAoByAsBogwIKgYKBKy6sQLaDBEKCxCw4ZuMi5-j86IBEgIBA9gTDYgUDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=-PfHAdEoRRI&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:18 UTC	1226	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xd8d2f41be385a0b20000000000000000","2":"0x902a5ddddaa35cd10000000000000000","3":"0x6c0cc81741e1053e0000000000000000","4":"0xb6d8252b3011f7dd0000000000000000","5":"0x174b6b40c7736bbc0000000000000000"},"debug_key":"14855095204386053496","debug_reporting":true,"destination":"https://highpointphotography.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1064708709"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"16521174755492042129"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50180	216.22.16.57	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	680	OUT	GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&google_cver=1 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:18 UTC	640	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:18 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: pid=1670843343563392175; expires=Fri, 14 Feb 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Fri, 14 Feb 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ; expires=Wed, 15 Jan 2025 13:24:18 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-01-15 13:24:18 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50189	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2993	OUT	GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2183&cbvp=1&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:19 UTC	1771	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"15177235879202839552","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"11265555848586463974"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:18 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50178	68.67.179.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	825	OUT	GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEENhzENs7RoM0eP8WaAzBvI%26google_cver%3D1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=WC9wj9LUU2YV2RjDNdg5Vs5kA9YY-7pMNLdffFmOl4iR1Pub_G041AC9eB5Tu5dAyZIvvASgyNXiwlrDphZJwoLoFQXE6sY5mvFn6SMUooc.; uuid2=727555877560728591
2024-01-15 13:24:18 UTC	1371	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=Gg9z13ZdGa1bTmn_Ejy2PbuMjw3CNlj1HnaCT2MC4n3wMe3bJhVcc7HMN6Wb7iemA9XoRSotxq4NJZNf2OHxiCN30z9ztQB8OM3gUyT-ud8.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: def88a50-506d-407e-bff6-1120fd15916e Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!@wnfH8K6pQK`!5=E<*L5?%M33?LaC^Ppwhmv(z1cepsl_0)(n?p[FxTiT@C%nugO%v4VB%nmfp)xrwD; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:18 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 579.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-15 13:24:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50193	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	614	OUT	GET /sadbundle/12128317773909862788/ld-core.css HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:19 UTC	828	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 90 Date: Mon, 15 Jan 2024 13:24:19 GMT Expires: Tue, 14 Jan 2025 13:24:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:19 UTC	90	IN	Data Raw: 23 6d 61 69 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 77 69 64 74 68 3a 33 30 30 70 78 3b 09 68 65 69 67 68 74 3a 32 35 30 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 62 32 33 33 66 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 0a Data Ascii: #main-container {width:300px;height:250px; background-color: #0b233f; overflow: hidden;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50188	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	2993	OUT	GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1812&cbvp=1&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:19 UTC	1770	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"12649315195404199746","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"5962777225488373883"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50194	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:18 UTC	3008	OUT	GET /pagead/adview?ai=C7tqn_DGlZdiJOsWlj-8PkPqH6Ai_r5TQba-LrbawEbCQHxAHIO34qSAoCGDJhqCKpKTgEaABnfbRmgLIAQaoAwHIAwKqBPABT9BeHK5Mcv0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR61J2vS3vQfgvMyp1X-jeEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUkC2leiuVU0A077A-W5sFoBQ3j43EDckYqXzmDSkvH5tpc4w29iP7iRJRx_fmmIdT_veesSy9x8k0dyW8ypvgt7jn8JynhwASGo6-CkwSIBdnk6vlGkgUECAQYAZIFBAgFGASgBjeAB8uJruUBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQ9p8g0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljcw4fwvt-DA5oJFmh0dHBzOi8vZ29zcXVlZXplLmNvbS-ACgHICwGiDAgqBgoErLqxAtoMEAoKEKD8qanCqqjEdBICAQPYEw2IFAHQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=AR2eXj2C7_E&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:19 UTC	1214	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xd050ad239917bd240000000000000000","2":"0x477541ac67aaed9a0000000000000000","3":"0x84c3e42bb9a1c6dd0000000000000000","4":"0xeafba4775d5168cf0000000000000000","5":"0x2397c09bc88fbd4d0000000000000000"},"debug_key":"13547684079689512777","debug_reporting":true,"destination":"https://gosqueeze.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["592739101"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"16032040322781762769"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50182	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	734	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZaUyAk5iMnx646zg.de8aQAA; CMPS=369; CMPRO=369
2024-01-15 13:24:19 UTC	995	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 845e70333f5d5767-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAk5iMnx646zg.de8aQAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=369; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VeAre16WPA79w1oOV2nc5MdfBF5BvcXlBW%2BI8Tfg2wWIrP7Eu%2B%2F%2BfF2PyfJIzhTYDQ%2Bl1X88oPr%2Bp1r7q%2FMMUuPGXI%2FxoCizMDQAsaII3VE9uGKW5IMS0GGroRoVzndTLoBJDM0chqIK%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50184	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	3020	OUT	GET /pagead/adview?ai=CfC68_DGlZdiJOsWlj-8PkPqH6AiAuoODdaTp-c3_EGQQCCDt-KkgKAhgyYagiqSk4BGgAbj0s_wDyAEGqAMByAMCqgTjAU_QYBqvTH39Hw0qN1McjWF2FVxqrP_58VkhCYygm6ALRhi11yUUfgNlTP8YJz_-8TWMnU9ALyObzwLwBsEaG3MhOM-KO8NDEketMdn0970A6Lw7i1Recw6JZsO9GtTQ_VGvmdeMj_KLxYdeoQFD_RIF_NFTRZPx6ZoKwMhb9C648iL5371eeFuB-Wg1rbIHlPv63inDkFG_EACd_tXEIA5TBi0U4SIEDXCzuwrtXx3zV-LRbT1GlFkWgDHd1ktzzsBwEvrIXbYVtHdEvlp_LoDWt2qMwS9Z9Z8AZZfLtN7t0_OfwASukt2enQSIBanvpNJHkgUECAQYAZIFBAgFGASgBjeAB7CLzAOoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBD2nyDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDmgk0aHR0cHM6Ly9pbmZvLmNhbGxtYy5jb20vY3AtaGVhbHRoY2FyZS1zYWZlLWhvc3BpdGFsc4AKAcgLAaIMCCoGCgSsurEC2gwRCgsQwMfWnbCok9LnARICAQPYEw2IFAfQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=R4VOS0oYfgo&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7XkGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:19 UTC	1211	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x1745ec5366dfdb5c0000000000000000","2":"0xc3f2d7866f7592f00000000000000000","3":"0x18b6e986885f4b3e0000000000000000","4":"0xb00180a9b18204420000000000000000","5":"0x7e05d67bd0ca4d2a0000000000000000"},"debug_key":"7787684041680729410","debug_reporting":true,"destination":"https://callmc.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1066203704"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"11041007190835832945"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50183	52.73.89.2	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	651	OUT	GET /sync?UIGL=CAESEIrOqdmzFji86NQUvTm_VXw&google_cver=1&gdpr=0 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:19 UTC	218	IN	HTTP/1.1 200 Date: Mon, 15 Jan 2024 13:24:19 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
2024-01-15 13:24:19 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-01-15 13:24:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50190	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	2993	OUT	GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2357&cbvp=1&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:19 UTC	1771	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"16285856648928822194","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"12327669463425187503"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:19 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50191	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	671	OUT	GET /sadbundle/12128317773909862788/background_300x250.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:19 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 146119 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Jan 2024 20:40:32 GMT Expires: Sat, 11 Jan 2025 20:40:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT Content-Type: image/png Age: 233027 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:19 UTC	429	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 06 00 00 00 1b 6d 7a f3 00 00 2c 6b 63 61 42 58 00 00 2c 6b 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 45 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 62 65 66 65 62 34 35 33 2d 36 34 37 66 2d 34 66 63 65 2d 61 35 66 35 2d 64 36 36 64 33 33 61 38 37 66 32 62 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDR,mz,kcaBX,kjumbjumdc2pa8qc2pa,EjumbGjumdc2ma8qurn:uuid:befeb453-647f-4fce-a5f5-d66d33a87f2bjumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 62 00 00 00 28 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 68 61 73 68 2e 64 61 74 61 00 00 00 00 7b 63 62 6f 72 a5 6a 65 78 63 6c 75 73 69 6f 6e 73 81 a2 65 73 74 61 72 74 18 21 66 6c 65 6e 67 74 68 19 2c 77 64 6e 61 6d 65 6e 6a 75 6d 62 66 20 6d 61 6e 69 66 65 73 74 63 61 6c 67 66 73 68 61 32 35 36 64 68 61 73 68 58 20 0e 49 2f f7 31 41 46 79 a1 8b e6 c9 22 45 7f 4d ca 62 18 7c c6 21 41 e6 e5 d8 54 46 13 fc 1e b2 63 70 61 64 48 00 00 00 00 00 00 00 00 00 00 02 03 6a 75 6d 62 00 00 00 24 6a 75 6d 64 63 32 63 6c 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 63 6c 61 69 6d 00 00 00 01 d7 63 62 6f 72 a8 68 64 63 3a 74 69 74 6c 65 6f 47 65 6e 65 72 61 74 65 64 20 69 6d 61 67 65 69 64 63 3a 66 6f 72 6d 61 74 69 69 6d Data Ascii: b(jumdcbor8qc2pa.hash.data{cborjexclusionsestart!flength,wdnamenjumbf manifestcalgfsha256dhashX I/1AFy"EMb\|!ATFcpadHjumb$jumdc2cl8qc2pa.claimcborhdc:titleoGenerated imageidc:formatiim
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 42 00 04 4d 2c ae 51 f9 03 ff b5 e7 f3 05 97 56 ac 36 1f 10 f1 3b 9b 3a c1 15 7e ed 2a 94 9a c5 d2 c9 a3 b7 02 f5 21 e1 d9 fc 00 7b 27 9f 6e d5 3a e9 86 8d 41 0c df 39 95 f4 d8 df 4a cd 06 c7 d3 fa 6c a3 82 01 8b 30 82 01 87 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 16 06 03 55 1d 25 01 01 ff 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 20 06 03 55 1d 20 04 19 30 17 30 08 06 06 67 81 0c 01 04 02 30 0b 06 09 60 86 48 01 86 fd 6c 07 01 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1d 06 03 55 1d 0e 04 16 04 14 b0 35 aa 56 c3 21 a9 8b ce d3 b8 bc 8b 16 25 57 9d ef 34 e1 30 5a 06 03 55 1d 1f 04 53 30 51 30 4f a0 4d a0 4b 86 49 68 74 74 70 3a 2f 2f 63 72 Data Ascii: BM,QV6;:~*!{'n:A9Jl00U0U00U%0+0 U 00g0`Hl0U#0mM/s)v/uj o0U5V!%W40ZUS0Q0OMKIhttp://cr
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 39 36 20 53 48 41 32 35 36 20 54 69 6d 65 53 74 61 6d 70 69 6e 67 20 43 41 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 c6 86 35 06 49 b3 c1 3d 72 49 51 55 c7 25 03 c4 f2 91 37 a9 97 51 a1 d6 d2 83 d1 9e 4c a2 6d a0 b0 cc 83 f9 5a f6 11 a1 44 15 42 5f a4 88 f3 68 fa 7d f3 9c 89 0b 7f 9d 1f 9e 0f 33 1f 50 13 0b 26 73 96 6d f8 57 a8 02 7d fd 43 b4 84 da 11 f1 73 b1 b3 ee 2b 80 84 8a 22 18 df eb da 3d c4 17 7f ab 19 2b 3e 42 dc 67 8e ea 51 3d f0 d6 56 d4 e7 28 2d eb d3 b1 b5 75 e7 1f 06 65 8d 94 29 d3 d9 ec 69 df d9 90 87 46 00 7b db 44 41 89 dc 7c 6a 57 7a f0 37 79 9f 5d ac cb e8 84 64 b4 52 f2 76 47 f7 61 83 19 dd 5f b4 54 0b 21 68 6e 37 21 bb 40 ac 5f b2 de 4a 7d ce f5 39 12 67 ef 0e a5 63 6c e4 a6 c5 Data Ascii: 96 SHA256 TimeStamping CA0"0*H05I=rIQU%7QLmZDB_h}3P&smW}Cs+"=+>BgQ=V(-ue)iF{DA\|jWz7y]dRvGa_T!hn7!@_J}9gcl
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 92 d7 26 6b e4 38 73 ab a6 01 4f bd 3f 3b 78 ad 4c ad fb c4 95 7b ed 0a 5f 33 39 87 41 78 7a 38 e9 9c e1 dd 23 fd 1d 28 d3 c7 f9 e8 f1 98 5f fb 2b d8 7e f2 46 9d 75 2c 1e 27 2c 26 db 6f 15 7b 1e 19 8b 36 b8 93 d4 e6 f2 17 99 59 ca 70 f0 37 bf 98 00 df 20 16 4f 27 fb 60 67 16 a1 66 ba dd 55 c0 3a 29 86 b0 98 a0 2b ed 95 41 b7 3a d5 15 98 31 b4 62 09 0f 0a bd 81 d9 13 fe bf a4 d1 f3 57 d9 bc 04 fa 82 de 32 df 04 89 f0 00 cd 5d c2 f9 d0 23 7f 00 0b e4 76 02 26 d9 f0 65 76 42 a6 29 87 09 47 2b e6 7f 1a a4 85 0f fc 98 96 f6 55 54 2b 1f 80 fa c0 f2 0e 2b e5 d6 fb a9 2f 44 15 4a e7 13 0e 1d db 37 38 1a a1 2b f6 ed d6 7c fc 31 82 01 b9 30 82 01 b5 02 01 01 30 77 30 63 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 17 30 15 06 03 55 04 0a 13 0e 44 69 67 69 43 65 72 74 Data Ascii: &k8sO?;xL{_39Axz8#(_+~Fu,',&o{6Yp7 O'`gfU:)+A:1bW2]#v&evB)G+UT++/DJ78+\|100w0c10UUS10UDigiCert
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 9a 57 9e b3 e3 57 51 8d ff 64 1e 31 1f e3 6c 66 29 6c ee 6d 5b 2f 6b f6 85 29 c7 88 ba 2a 65 e5 0a 92 56 c7 52 64 f8 66 98 eb 64 27 6d b8 8b 16 9b 98 f6 3c f5 ca af b1 ca 52 e0 9b 65 25 c1 02 03 01 00 05 a3 82 01 8c 30 82 01 88 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 1e 06 03 55 1d 25 04 17 30 15 06 09 2a 86 48 86 f7 2f 01 01 0c 06 08 2b 06 01 05 05 07 03 04 30 81 8e 06 03 55 1d 20 04 81 86 30 81 83 30 81 80 06 09 2a 86 48 86 f7 2f 01 02 03 30 73 30 71 06 08 2b 06 01 05 05 07 02 02 30 65 0c 63 59 6f 75 20 61 72 65 20 6e 6f 74 20 70 65 72 6d 69 74 74 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 4c 69 63 65 6e 73 65 20 43 65 72 74 69 66 69 63 61 74 65 20 65 78 63 65 70 74 20 61 73 20 70 65 72 6d 69 74 74 Data Ascii: WWQd1lf)lm[/k)eVRdfd'm<Re%00U00U0U%0H/+0U 00*H/0s0q+0ecYou are not permitted to use this License Certificate except as permitt
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 b7 1f 2e bd bd 09 b3 5c 48 6c fe 0c 83 ae 6c 01 ea 51 78 25 a4 80 3e 89 a7 b1 b2 88 64 da f6 89 76 81 f9 f9 1d f3 95 fc 78 98 8d 98 8e cf e4 ee 1c 55 3e 0d 73 5a 77 ce b1 12 a8 15 78 65 4c 96 f2 07 19 ef c4 1d c2 81 c6 f1 03 5d d9 53 5c 1e 73 20 49 1f 97 4f d2 1a 7e c9 ea f4 d7 f0 c3 72 6d f4 a2 f7 97 90 0d 43 99 f5 f8 c2 6a af 8f 04 58 d2 e5 97 de 36 6c e2 ff 24 7e 32 c0 34 8c a2 a8 59 aa d2 44 21 45 14 1a 54 15 05 9f 02 02 f2 5c ec b1 3a 75 d0 39 0b 9d 8f 13 63 e9 6b b4 5f 42 01 d7 7f Data Ascii: Adobe Trust Services1"0 UAdobe Product Services G30"0*H0.\HllQx%>dvxU>sZwxeL]S\s IO~rmCjX6l$~24YD!ET\:u9ck_B
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 2b 26 42 4b b2 f8 13 49 82 95 bc 7e 05 14 8c 1f 77 95 a3 a8 e0 bd ee 35 fd f2 b7 15 03 38 40 23 48 92 91 ac ec 58 e3 2f 2f a9 b4 2f 89 cb 25 aa 71 fb ce 46 b1 55 fc 63 a0 07 98 43 f8 6e 60 84 97 08 a5 e8 a0 0f f9 47 b0 24 58 b0 e6 b9 b0 57 6a 44 48 70 21 62 e6 49 6b 4d c1 f2 d9 74 9d dd 90 27 3b c9 1a 66 de 06 a5 ea a4 5f 4e 46 29 c5 33 71 c4 ac af 29 b9 1a 24 3a 31 47 db ed 5a b0 b7 88 da d0 77 d5 6f c4 2d d3 5e db b3 a0 76 ea ba 67 aa 81 c0 2a 79 f5 85 f6 ee ac 9d 0e 10 f4 59 17 cd eb 89 02 b3 6e 4a f3 c8 86 00 63 56 d8 20 1f 4c 34 be 6f e5 98 24 18 88 2f d8 d7 61 9e 0b 17 e0 62 52 f7 dd bb 63 70 61 64 59 0b bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +&BKI~w58@#HX///%qFUcCn`G$XWjDHp!bIkMt';f_NF)3q)$:1GZwo-^vg*yYnJcV L4o$/abRcpadY
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50192	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	673	OUT	GET /sadbundle/12128317773909862788/Border_image_300x250.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:19 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 35678 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Jan 2024 20:40:32 GMT Expires: Sat, 11 Jan 2025 20:40:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT Content-Type: image/png Age: 233027 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:19 UTC	430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 06 00 00 00 1b 6d 7a f3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 e1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR,mzpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rd
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 31 32 2d 31 31 54 31 30 3a 31 32 3a 33 32 5a 22 20 78 Data Ascii: /" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.2 (Macintosh)" xmp:CreateDate="2023-12-11T10:12:32Z" x
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 3e 9d 01 70 56 01 28 db 1d 53 47 fc f4 44 db d7 f1 67 69 a6 d5 8c 55 10 71 98 35 2c 67 ac 75 c4 75 28 4a 3a ff 44 fb f2 3b c5 05 5c 38 c1 fb 1b 6d bb 81 1a 72 79 1e 5f 67 2f 58 ed 34 d9 91 d3 8c 4c 11 ab 95 f0 a7 cf b4 f7 af b4 eb 1d 80 10 ce 54 75 a4 e5 89 ed cb 17 74 4a 88 0f b4 75 23 d0 a8 56 09 31 91 ef 2b fa 74 21 06 c7 f6 f5 77 e8 20 73 02 55 ec eb 95 f8 e9 27 ca 5e f0 6a 48 70 e8 94 c8 79 a3 3f 56 24 06 6c 7d 8c 7f 6f 3e 43 6b 94 b7 2b e1 f9 42 c9 99 f0 f4 4c f9 7a 23 44 4f fe 7a 25 3d bd b0 ef 2b e2 3b b3 4b d4 b5 50 ee 05 9e 4f 88 8b c8 7d bc 56 f2 f2 44 5f 37 ec f5 8d 69 8a ac 4e f0 5e 90 ee e8 ff f4 05 fb 34 93 7e 3a 63 9b b1 fd f6 8f c8 29 c0 12 20 04 3c 33 da 14 eb 99 62 19 9a 91 52 22 af 37 2c 2a e1 e9 13 b6 66 2a 19 4a 81 70 c2 11 c6 6b d1 Data Ascii: >pV(SGDgiUq5,guu(J:D;\8mry_g/X4LTutJu#V1+t!w sU'^jHpy?V$l}o>Ck+BLz#DOz%=+;KPO}VD_7iN^4~:c) <3bR"7,fJpk
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 69 41 96 00 08 de 07 8a 19 e2 0c 9d 27 ea fd 4a 7d ac b8 65 21 cd 91 ed eb 17 e6 f9 04 71 a2 bc bd 43 fd b8 8c 7c a4 37 a3 e7 06 85 f1 d4 0a 1e 51 45 4a 07 05 15 c5 ee db 78 82 4f 4a ef 15 ac d3 ef 37 50 c1 a5 48 bb 3e e8 6d 47 4e 11 05 5c f2 64 df 31 6d c8 92 e8 b9 62 7f fd 0a a7 84 88 c7 34 80 29 ea 27 4a de 70 a7 44 59 57 44 0d 72 a1 95 0c 53 1a 0f 00 11 7a 6b f4 9e d1 29 e2 0d 72 de 69 b9 11 44 c6 d3 58 1c b8 80 77 33 66 e3 0d d2 f7 0d 7b 6c a0 40 2f a0 1e 3f 9d 68 fb 46 88 13 bd 55 4c 04 99 27 ea db 15 4b 09 4e 11 b7 36 a4 0a 96 02 a4 88 6d 37 1c 1d dd 56 7a 37 dc 34 53 1e 1b 56 0c f1 11 33 c3 4a 21 e4 06 79 c7 a9 61 db 8a 35 88 e7 19 9b 3c 3d 4e b0 43 6f 46 4b 11 09 11 a7 4a 4a 13 e2 13 76 3a 43 0a 58 e9 70 7b e0 10 7c 9a a8 29 81 06 14 f0 06 c5 0c Data Ascii: iA'J}e!qC\|7QEJxOJ7PH>mGN\d1mb4)'JpDYWDrSzk)riDXw3f{l@/?hFUL'KN6m7Vz74SV3J!ya5<=NCoFKJJv:CXp{\|)
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 9e 72 7d 85 94 d0 18 90 d6 b0 34 22 23 bb 6e 4c cf 67 74 89 54 eb e8 79 a4 46 6d db 90 bf a5 78 a5 22 80 01 ea 26 bc 53 ea 6d 07 33 44 23 56 3a 71 7e c2 57 d8 df 6f f8 69 a2 a9 00 c2 74 be 50 f7 02 06 32 7b 7a cd e8 25 21 e2 e8 ef 6f b8 18 69 39 43 b5 8f 5f 3a 3f 24 01 11 2c 97 0f a1 33 80 53 fa 63 c5 72 65 9a 22 6a 32 de 3c 22 10 15 4d 7e 5c 36 eb 4a 10 25 97 0c ad a1 53 a0 ab d0 f7 0c eb 75 bc 01 11 d4 1a ad 56 5c 9a b1 bc d3 73 1f e9 5d 6d 60 86 73 0e 57 46 04 da 95 91 62 d5 8a 84 00 c5 68 d7 95 d6 3b 36 05 ec 79 66 0a 89 f6 9f fe 19 ef 03 4e 1d e5 76 43 3a 43 93 23 90 4e 0b 6d db e9 41 a1 17 5a 5e f1 ce d3 b7 1d 3d 25 dc 1c 47 ea 2e 80 54 10 28 7f 93 14 72 03 94 30 cf b4 7d a7 e1 d0 10 d0 79 a1 6e 95 5e f7 11 85 a4 40 70 42 df 0a b5 37 46 42 d1 d1 34 Data Ascii: r}4"#nLgtTyFmx"&Sm3D#V:q~WoitP2{z%!oi9C_:?$,3Scre"j2<"M~\6J%SuV\s]m`sWFbh;6yfNvC:C#NmAZ^=%G.T(r0}yn^@pB7FB4
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 7d 68 42 d6 fb 47 15 ca 61 1f 17 4f db 37 c2 69 a6 8b 62 fb 46 eb 15 ef 0c 4d 91 96 1f 68 69 90 12 61 9e 10 84 56 0a b2 44 a4 75 ac 66 c2 72 22 b7 8c 46 8f 17 4f 7b 7d c5 e6 84 5b 12 86 21 62 d4 bd d2 4a 21 2e 67 dc 32 d1 0d 6c db 08 5e e8 ce 61 2a d0 2a 96 0b 22 42 08 11 7f ba a0 53 a2 e5 0d ac 53 d7 8d d6 3a 71 3e 51 1b 94 2d 43 08 43 cf 78 ac 74 3a ee bc 10 cf 67 6a ad f4 32 22 42 3f 4f 94 eb 3b fe 74 a2 79 87 78 1d 6f 9a f7 3b 9c ce b8 de 09 b5 23 4d a1 74 c4 8f 34 bd 5a 06 af 84 18 e9 0d ce d3 99 fa fe 3b 1d 86 84 21 23 ea 31 2b 90 3b dd fa 48 a9 f6 8e d1 e9 aa 68 ed 54 2a f6 fe 4e f4 0b 52 2a cd cb 88 50 d5 13 4f 33 75 5b 71 aa 04 ef e9 f9 41 af 1f df 9b 17 a6 f3 19 2f 42 f9 ed 57 a6 5f fe 01 8b 0e eb 05 f2 4e c7 30 81 98 66 54 3d f5 fd 1d e9 8d e0 Data Ascii: }hBGaO7ibFMhiaVDufr"FO{}[!bJ!.g2l^a*"BSS:q>Q-CCxt:gj2"B?O;tyxo;#Mt4Z;!#1+;HhTNR*PO3u[qA/BW_N0fT=
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 80 be 6d e8 f9 34 f4 a3 de 10 75 b4 7d c3 30 5c 9a c0 2b b6 ef 58 6d d8 96 09 31 a2 5b 45 9d d2 6c 7c 5f d1 8d 9f 8f 2d 91 b8 9c e9 25 ff fd 41 17 e7 05 2b 99 5a 1b ad da 10 8c c3 48 d1 e2 3c d3 7a c6 96 84 f3 4a bb ef 4c 6e 26 04 8f 76 a5 5e 1f a4 0f 21 be e7 9d f9 3c 5e bf 92 77 9a 75 c4 3a 16 d2 78 48 ae 15 9f a6 21 e0 d7 42 10 4f 0b 0e ed 85 fa 78 10 77 41 6f 3b 16 16 d4 0d 9d cc 85 40 0c 81 2a 3b e1 e7 4f 38 12 e5 eb ef 54 15 96 e7 17 7a 6d e3 f7 35 7c 44 c8 53 1a 15 c1 6b 81 eb 8a 5e a6 51 6c 30 88 2f 97 a1 bf b5 4e 4b 1e 13 b0 35 23 61 c2 82 a3 87 80 f6 4e df 37 fa 9e 09 1f a9 5d 4f 13 ea 85 7c db f0 f3 42 eb 9d e9 74 a6 dc af b4 96 f1 cb 89 5e 1a da 0a b8 80 9b 02 3d 8f 08 09 af 60 6d 64 08 e7 89 18 13 da 3a 9d 86 2e 33 22 82 2b 75 e8 99 d1 8f a8 Data Ascii: m4u}0\+Xm1[El\|_-%A+ZH<zJLn&v^!<^wu:xH!BOxwAo;@*;O8Tzm5\|DSk^Ql0/NK5#aN7]O\|Bt^=`md:.3"+u
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 7d 54 7c 64 a4 14 e2 15 5b 1f c3 bc 5a db a8 08 ff f4 09 c4 b0 9a 51 19 df 4b bb 5f e1 b6 12 f0 ec b7 c7 10 e7 f3 83 ba 6d cc 2f 2f f4 d3 04 db 8e dd 1e 23 52 ab 0d d7 95 4e 87 2e 88 0c ad a3 19 78 ef f1 51 e8 6d 67 fe fc 89 f6 b8 0d 89 60 3e 91 e6 38 cc 8e 1d ec cb 83 69 59 b0 e6 68 be 0f 1f db 34 aa 75 ae 0f 29 c2 17 23 ff e3 5f a1 75 e2 e9 19 e7 03 e5 ed 0e 4e 87 a4 d1 a1 3d 76 ba df 87 0b db db 78 53 77 e3 34 9f d9 5b 43 a2 27 24 47 55 87 9b 9f e8 ad d1 7a 66 78 23 86 f1 d3 fb 44 df 76 78 cf 48 30 c2 9c 20 39 ca ed 2b 94 a1 47 b9 18 11 e9 54 0a 7e 39 e3 ac d1 4b 85 79 1a 0f 58 e7 68 22 e0 18 91 be 07 cc 08 61 c1 4f 89 d0 15 67 46 15 a3 5a 1f bf 4f 61 bc 96 6d bd 11 4f 67 82 3a 6a 2d 1f 05 18 a1 3b f9 bb 54 a3 65 88 d9 fa 32 53 ef 6f b0 0f b1 9d bd 11 Data Ascii: }T\|d[ZQK_m//#RN.xQmg`>8iYh4u)#_uN=vxSw4[C'$GUzfx#DvxH0 9+GT~9KyXh"aOgFZOamOg:j-;Te2So
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: 5d 0a 35 38 58 96 71 11 e2 41 3d 2d 77 24 77 fc 34 61 73 02 73 c8 2f 2f f4 d6 b1 92 61 dd 71 e3 0e a7 fb 0e 36 f4 af b6 57 54 1d cc cb 88 d0 65 08 b7 f6 be 41 ae e8 2f 4f 48 cb 34 69 d8 75 e5 79 be f0 f8 bb 1e 54 f1 aa 38 9f 68 dd a8 7d e7 f4 72 21 f7 86 de 37 7c f2 78 a7 b4 6e f8 79 a2 cd 82 44 85 47 81 a2 4c bf fc 8c fb d3 0b 75 dd e8 af ef 88 af a4 e7 13 5d 1b 04 25 a4 89 a8 09 5b ce 14 04 f7 f2 42 fc e9 67 32 9d 5a 3b da 84 f4 e9 33 ae 8e 8a 28 69 62 bf df 09 e7 0b f1 f4 79 78 90 14 10 a5 d6 82 b6 86 5a 25 5d 9e d1 6e 50 d7 91 9a e6 4a 5d 33 cb 72 c1 9a 62 53 42 5c 1a 2d 73 b7 8d 5e 36 34 40 77 46 b7 ce fc 7c 1e fa aa 36 64 72 b4 fb 03 5a 45 16 8f 5e 22 78 c3 ae 05 b1 38 ec 2a e7 d3 d0 9e f6 0a 6e 64 26 ee a3 63 40 1f c3 d2 20 06 3e 0e 9d d3 1e 95 e6 Data Ascii: ]58XqA=-w$w4ass//aq6WTeA/OH4iuyT8h}r!7\|xnyDGLu]%[Bg2Z;3(ibyxZ%]nPJ]3rbSB\-s^64@wF\|6drZE^"x8*nd&c@ >
2024-01-15 13:24:19 UTC	1252	IN	Data Raw: d3 4c 74 a3 34 1f e6 19 e7 1d 9a 02 fb 76 a3 dd 57 f4 34 23 ea 70 c1 11 9e 2f e4 bc 0e d1 77 df e9 39 d3 7a 1b 51 50 6f 58 0a 98 75 70 82 38 a1 be df 86 0d a3 8e af 6d 79 c7 ee 0f f4 91 c9 52 46 b1 e0 bc e0 2f 0b 7b 19 9a 95 ed 23 c2 f6 9f 5e a8 79 23 f8 48 cf 46 f3 46 69 05 49 8a 48 c7 b4 42 2b 48 77 23 ba 53 87 bd bd e1 83 a3 79 a5 77 1b 93 28 96 05 82 22 d3 4c cb 1b f2 74 22 e8 28 28 c4 94 c8 fb 36 2a 71 31 40 f0 d8 ed 8a 44 45 e7 99 2e 36 32 89 3c fa 04 9d 13 ea f5 8a 5b 66 8a 95 61 aa 6c 46 79 bf 52 5b a5 93 91 e8 e9 d6 09 38 ba 55 58 a6 21 93 ac 3b 72 59 90 56 69 14 2c 17 da ed 46 2b 0d 7a e0 b4 3c e1 c4 d8 5e 7f 45 e6 30 a6 3c d4 0c 61 54 0c a9 7d 34 67 5b 41 c2 18 20 10 53 18 f6 09 d5 11 30 a4 30 bc 7c ad e1 04 ca 36 a2 c2 18 a7 a1 83 96 d1 88 dd Data Ascii: Lt4vW4#p/w9zQPoXup8myRF/{#^y#HFFiIHB+Hw#Syw("Lt"((6*q1@DE.62<[falFyR[8UX!;rYVi,F+z<^E0<aT}4g[A S00\|6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50199	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	1499	OUT	GET /f/AGSKWxW1f8RMqRFHUIwPAQAftKwhy6Pb-VHBpVM0G0GMOCkzBkTlpsPmiVQtYZ_QtEitTLMJ6AM4mNAYrEhQHfedioJuqHEGOUXMjcHoynag6JqvdGJIyDCIoiVoSbqrlqqUUu0bKDJIgA==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:19 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:19 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-0wrvNpND7d8ZJ3I7KHI7EA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:19 UTC	1629	IN	Data Raw: 64 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 4d 6e 2c 5f 2e Data Ascii: d16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Mn=function(a){this.j=_.v(a)};_.A(Mn,_.
2024-01-15 13:24:19 UTC	1629	IN	Data Raw: 71 77 2f 6d 3d 63 6f 6f 6b 69 65 5f 72 65 66 72 65 73 68 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 37 2c 5c 78 32 32 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 5c 5c 5c 78 32 32 2c 5c 5c 5c 78 32 32 41 4b 73 52 6f 6c 5f 77 72 61 68 73 76 48 59 34 64 47 66 4d 7a 78 6f 4a 52 47 57 4e 48 53 5f 4e 6b 6d 79 63 4f 78 46 68 41 53 69 74 58 6a 47 38 66 35 43 43 6a 41 79 64 7a 30 48 59 63 79 4b 68 5f 33 53 66 4f 49 58 7a 72 6b 35 56 47 54 59 79 5f 69 58 36 5a 63 4e 41 37 43 6c 65 70 6f 36 58 41 67 4d 73 52 38 61 46 31 6e 68 54 32 4a 32 71 72 50 6a 5f 33 42 31 72 55 72 64 Data Ascii: qw/m=cookie_refresh_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b7,\x22\x5b\x5bnull,\\\x22mylovelybluesky.com\\\x22,\\\x22AKsRol_wrahsvHY4dGfMzxoJRGWNHS_NkmycOxFhASitXjG8f5CCjAydz0HYcyKh_3SfOIXzrk5VGTYy_iX6ZcNA7Clepo6XAgMsR8aF1nhT2J2qrPj_3B1rUrd
2024-01-15 13:24:19 UTC	99	IN	Data Raw: 33 4c 44 75 67 6b 6f 45 66 65 43 35 78 6f 72 6f 5f 61 4d 46 59 54 31 70 78 30 50 50 37 6d 33 48 51 66 5a 44 6e 56 44 57 6f 67 32 41 73 48 44 46 30 72 42 63 33 4e 78 71 42 70 64 4e 7a 58 6c 48 77 4b 41 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 27 29 3b 7d 0d 0a Data Ascii: 3LDugkoEfeC5xoro_aMFYT1px0PP7m3HQfZDnVDWog2AsHDF0rBc3NxqBpdNzXlHwKA\\u003d\\u003d\x22\x5d\x5d');}
2024-01-15 13:24:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50205	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	731	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
2024-01-15 13:24:19 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 845e7036fc6f172d-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CDD1h8%2FnIPWwNMnC8zvXYyQJvs7qSu%2FpcIuOdScCJpFq2EQkzJmBk%2BX2XcJTZhlSWUVBwuq0jwyblc01ItqUXKlX0hwdpqt5eaNPn99Re1h%2BddcEw4vMLMBla3I9SP7Izz%2FKQlRmMY6EWQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50209	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	2680	OUT	OPTIONS /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4632&vt=11&dtpt=2857&dett=3&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:19 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50210	172.253.62.106	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:20 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Mon, 15 Jan 2024 13:24:20 GMT Expires: Mon, 15 Jan 2024 13:24:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:20 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-01-15 13:24:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50201	104.17.24.14	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	551	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:19 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2209858 Expires: Sat, 04 Jan 2025 13:24:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=udJ7%2BE%2FlVxJ6HcfjtzIrdXFYhWB7iDQKdIygpu8cmOsgYbUw41w4kP1GgNmJx69VbdYYUHjUS1RtwhuV1hBAiOL76i%2B0Zsag%2FeNzM9Y24hgrZjTbxm4xU5kdSQTec7AToTn45kQC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 845e7038eeda5b53-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:20 UTC	407	IN	Data Raw: 33 39 62 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 39b3/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 Data Ascii: bject.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={ty
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 Data Ascii: ngth,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e Data Ascii: new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:n
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 Data Ascii: des.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=type
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 Data Ascii: rentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibli
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 Data Ascii: ("onunload",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getE
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 Data Ascii: function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><opt
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 52 65 67 45 78 70 28 76 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 Data Ascii: RegExp(v.join("\|")),s=s.length&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50200	104.17.24.14	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	552	OUT	GET /ajax/libs/gsap/latest/TweenMax.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s0.2mdn.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	966	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:20 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e71-1a5b9" Last-Modified: Mon, 04 May 2020 16:10:25 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 4145382 Expires: Sat, 04 Jan 2025 13:24:19 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fT4u3LIT00xkPQY1%2BJz8uu%2B54%2BgmbYqmvBHJmjx6sJuRP7UpuszS5lKulg7ZhbPWaUj1%2FVur75kYIrqb671GEixJTNgkdtDaOx3zlNT7qgxbbfyWvLZO9NcPe0NScJukYidMr%2B%2Ba"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 845e7038ee7d2412-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:20 UTC	403	IN	Data Raw: 37 62 65 62 0d 0a 2f 2a 21 0a 20 2a 20 56 45 52 53 49 4f 4e 3a 20 31 2e 31 38 2e 30 0a 20 2a 20 44 41 54 45 3a 20 32 30 31 35 2d 30 39 2d 30 35 0a 20 2a 20 55 50 44 41 54 45 53 20 41 4e 44 20 44 4f 43 53 20 41 54 3a 20 68 74 74 70 3a 2f 2f 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 20 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 61 6c 6c 20 6f 66 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 3a 20 54 77 65 65 6e 4c 69 74 65 2c 20 54 77 65 65 6e 4d 61 78 2c 20 54 69 6d 65 6c 69 6e 65 4c 69 74 65 2c 20 54 69 6d 65 6c 69 6e 65 4d 61 78 2c 20 45 61 73 65 50 61 63 6b 2c 20 43 53 53 50 6c 75 67 69 6e 2c 20 52 6f 75 6e 64 50 72 6f 70 73 50 6c 75 67 69 6e 2c 20 42 65 7a 69 65 72 50 6c 75 67 69 6e 2c 20 41 74 74 72 50 6c 75 67 69 6e 2c 20 44 69 72 65 63 74 69 6f 6e 61 Data Ascii: 7beb/! VERSION: 1.18.0 * DATE: 2015-09-05 * UPDATES AND DOCS AT: http://greensock.com * * Includes all of the following: TweenLite, TweenMax, TimelineLite, TimelineMax, EasePack, CSSPlugin, RoundPropsPlugin, BezierPlugin, AttrPlugin, Directiona
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 2f 73 74 61 6e 64 61 72 64 2d 6c 69 63 65 6e 73 65 20 6f 72 20 66 6f 72 0a 20 2a 20 43 6c 75 62 20 47 72 65 65 6e 53 6f 63 6b 20 6d 65 6d 62 65 72 73 2c 20 74 68 65 20 73 6f 66 74 77 61 72 65 20 61 67 72 65 65 6d 65 6e 74 20 74 68 61 74 20 77 61 73 20 69 73 73 75 65 64 20 77 69 74 68 20 79 6f 75 72 20 6d 65 6d 62 65 72 73 68 69 70 2e 0a 20 2a 20 0a 20 2a 20 40 61 75 74 68 6f 72 3a 20 4a 61 63 6b 20 44 6f 79 6c 65 2c 20 6a 61 63 6b 40 67 72 65 65 6e 73 6f 63 6b 2e 63 6f 6d 0a 20 2a 2a 2f 0a 76 61 72 20 5f 67 73 53 63 6f 70 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c Data Ascii: /standard-license or for * Club GreenSock members, the software agreement that was issued with your membership. * * @author: Jack Doyle, jack@greensock.com **/var _gsScope="undefined"!=typeof module&&module.exports&&"undefined"!=typeof global?global
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 68 69 73 2e 76 61 72 73 2e 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 7c 7c 74 2e 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 3b 65 26 26 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 3c 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 5f 74 69 6d 65 26 26 28 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 3d 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 5f 74 69 6d 65 2c 74 68 69 73 2e 5f 75 6e 63 61 63 68 65 28 21 31 29 2c 74 68 69 73 2e 5f 67 63 3f 74 68 69 73 2e 5f 65 6e 61 62 6c 65 64 28 21 30 2c 21 31 29 3a 74 68 69 73 2e 5f 74 69 6d 65 6c 69 6e 65 2e 69 6e 73 65 72 74 28 74 68 69 73 2c 74 68 69 73 2e 5f 73 74 61 72 74 54 69 6d 65 2d 74 68 69 73 2e 5f 64 65 6c 61 79 29 29 3b 66 6f 72 28 73 20 69 6e 20 74 29 74 68 69 73 2e 76 61 72 73 5b 73 5d 3d 74 5b 73 Data Ascii: his.vars.immediateRender\|\|t.immediateRender;e&&this._startTime<this._timeline._time&&(this._startTime=this._timeline._time,this._uncache(!1),this._gc?this._enabled(!0,!1):this._timeline.insert(this,this._startTime-this._delay));for(s in t)this.vars[s]=t[s
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 3d 3d 74 26 26 28 69 3d 21 30 2c 76 3e 61 26 26 28 72 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 65 22 29 29 2c 74 68 69 73 2e 5f 72 61 77 50 72 65 76 54 69 6d 65 3d 63 3d 21 65 7c 7c 74 7c 7c 76 3d 3d 3d 74 3f 74 3a 61 29 29 3a 31 65 2d 37 3e 74 3f 28 74 68 69 73 2e 5f 74 6f 74 61 6c 54 69 6d 65 3d 74 68 69 73 2e 5f 74 69 6d 65 3d 74 68 69 73 2e 5f 63 79 63 6c 65 3d 30 2c 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 5f 63 61 6c 63 45 6e 64 3f 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 30 29 3a 30 2c 28 30 21 3d 3d 6d 7c 7c 30 3d 3d 3d 67 26 26 76 3e 30 29 26 26 28 72 3d 22 6f 6e 52 65 76 65 72 73 65 43 6f 6d 70 6c 65 74 65 22 2c 73 3d 74 68 69 73 2e 5f 72 65 76 65 72 73 65 64 29 2c 30 3e 74 26 26 28 74 68 Data Ascii: ==t&&(i=!0,v>a&&(r="onReverseComplete")),this._rawPrevTime=c=!e\|\|t\|\|v===t?t:a)):1e-7>t?(this._totalTime=this._time=this._cycle=0,this.ratio=this._ease._calcEnd?this._ease.getRatio(0):0,(0!==m\|\|0===g&&v>0)&&(r="onReverseComplete",s=this._reversed),0>t&&(th
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 79 3d 5b 74 2c 65 5d 2c 76 6f 69 64 20 30 3b 74 68 69 73 2e 5f 74 69 6d 65 26 26 21 73 3f 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 74 68 69 73 2e 5f 74 69 6d 65 2f 67 29 3a 73 26 26 74 68 69 73 2e 5f 65 61 73 65 2e 5f 63 61 6c 63 45 6e 64 26 26 28 74 68 69 73 2e 72 61 74 69 6f 3d 74 68 69 73 2e 5f 65 61 73 65 2e 67 65 74 52 61 74 69 6f 28 30 3d 3d 3d 74 68 69 73 2e 5f 74 69 6d 65 3f 30 3a 31 29 29 7d 66 6f 72 28 74 68 69 73 2e 5f 6c 61 7a 79 21 3d 3d 21 31 26 26 28 74 68 69 73 2e 5f 6c 61 7a 79 3d 21 31 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 7c 7c 21 74 68 69 73 2e 5f 70 61 75 73 65 64 26 26 74 68 69 73 2e 5f 74 69 6d 65 21 3d 3d 70 26 26 74 3e 3d 30 26 26 28 74 68 69 73 2e 5f 61 63 74 69 76 65 3d 21 Data Ascii: y=[t,e],void 0;this._time&&!s?this.ratio=this._ease.getRatio(this._time/g):s&&this._ease._calcEnd&&(this.ratio=this._ease.getRatio(0===this._time?0:1))}for(this._lazy!==!1&&(this._lazy=!1),this._active\|\|!this._paused&&this._time!==p&&t>=0&&(this._active=!
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 6c 61 79 7c 7c 30 2c 79 3d 5b 5d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 6e 43 6f 6d 70 6c 65 74 65 26 26 61 2e 6f 6e 43 6f 6d 70 6c 65 74 65 2e 61 70 70 6c 79 28 61 2e 6f 6e 43 6f 6d 70 6c 65 74 65 53 63 6f 70 65 7c 7c 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 5f 2e 61 70 70 6c 79 28 66 7c 7c 61 2e 63 61 6c 6c 62 61 63 6b 53 63 6f 70 65 7c 7c 74 68 69 73 2c 63 7c 7c 75 29 7d 2c 78 3d 61 2e 63 79 63 6c 65 2c 77 3d 61 2e 73 74 61 72 74 41 74 26 26 61 2e 73 74 61 72 74 41 74 2e 63 79 63 6c 65 3b 66 6f 72 28 68 28 74 29 7c 7c 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 69 2e 73 65 6c 65 63 74 6f 72 28 74 29 7c 7c 74 29 2c 6c 28 74 29 26 26 28 74 3d 73 28 74 29 29 29 2c 74 3d 74 7c 7c 5b 5d 2c 30 3e 6f 26 26 28 74 Data Ascii: lay\|\|0,y=[],T=function(){a.onComplete&&a.onComplete.apply(a.onCompleteScope\|\|this,arguments),_.apply(f\|\|a.callbackScope\|\|this,c\|\|u)},x=a.cycle,w=a.startAt&&a.startAt.cycle;for(h(t)\|\|("string"==typeof t&&(t=i.selector(t)\|\|t),l(t)&&(t=s(t))),t=t\|\|[],0>o&&(t
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 28 69 3d 21 30 29 2c 6e 75 6c 6c 3d 3d 73 26 26 28 73 3d 21 30 29 3b 76 61 72 20 6e 2c 61 2c 6f 2c 6c 3d 66 28 30 21 3d 72 29 2c 68 3d 6c 2e 6c 65 6e 67 74 68 2c 5f 3d 69 26 26 73 26 26 72 3b 66 6f 72 28 6f 3d 30 3b 68 3e 6f 3b 6f 2b 2b 29 61 3d 6c 5b 6f 5d 2c 28 5f 7c 7c 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 7c 7c 28 6e 3d 61 2e 74 61 72 67 65 74 3d 3d 3d 61 2e 76 61 72 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 29 26 26 73 7c 7c 69 26 26 21 6e 29 26 26 28 74 3f 61 2e 74 6f 74 61 6c 54 69 6d 65 28 61 2e 5f 72 65 76 65 72 73 65 64 3f 30 3a 61 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 29 3a 61 2e 5f 65 6e 61 62 6c 65 64 28 21 31 2c 21 31 29 29 7d 2c 6e 2e 6b 69 6c 6c 43 68 69 6c 64 54 77 65 65 6e 73 4f 66 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 Data Ascii: (i=!0),null==s&&(s=!0);var n,a,o,l=f(0!=r),h=l.length,_=i&&s&&r;for(o=0;h>o;o++)a=l[o],(_\|\|a instanceof e\|\|(n=a.target===a.vars.onComplete)&&s\|\|i&&!n)&&(t?a.totalTime(a._reversed?0:a.totalDuration()):a._enabled(!1,!1))},n.killChildTweensOf=function(t,e){i
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 6f 74 61 6c 50 72 6f 67 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 74 6f 74 61 6c 54 69 6d 65 28 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2a 74 2c 21 31 29 3a 74 68 69 73 2e 5f 74 6f 74 61 6c 54 69 6d 65 2f 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 7d 2c 5f 2e 74 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 74 68 69 73 2e 5f 64 69 72 74 79 26 26 74 68 69 73 2e 74 6f 74 61 6c 44 75 72 61 74 69 6f 6e 28 29 2c 74 3e 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 26 26 28 74 3d 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 5f 79 6f 79 Data Ascii: otalProgress=function(t){return arguments.length?this.totalTime(this.totalDuration()*t,!1):this._totalTime/this.totalDuration()},_.time=function(t,e){return arguments.length?(this._dirty&&this.totalDuration(),t>this._duration&&(t=this._duration),this._yoy
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 67 3d 74 68 69 73 2e 76 61 72 73 2e 73 6d 6f 6f 74 68 43 68 69 6c 64 54 69 6d 69 6e 67 3d 3d 3d 21 30 2c 74 68 69 73 2e 5f 73 6f 72 74 43 68 69 6c 64 72 65 6e 3d 21 30 2c 74 68 69 73 2e 5f 6f 6e 55 70 64 61 74 65 3d 74 68 69 73 2e 76 61 72 73 2e 6f 6e 55 70 64 61 74 65 3b 76 61 72 20 69 2c 73 2c 72 3d 74 68 69 73 2e 76 61 72 73 3b 66 6f 72 28 73 20 69 6e 20 72 29 69 3d 72 5b 73 5d 2c 6c 28 69 29 26 26 2d 31 21 3d 3d 69 2e 6a 6f 69 6e 28 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 7b 73 65 6c 66 7d 22 29 26 26 28 72 5b 73 5d 3d 74 68 69 73 2e 5f 73 77 61 70 53 65 6c 66 49 6e 50 61 72 61 6d 73 28 69 29 29 3b 6c 28 72 2e 74 77 65 65 6e 73 29 26 26 74 68 69 73 2e 61 64 64 28 72 2e 74 77 65 65 6e 73 2c 30 2c 72 2e 61 6c 69 67 6e 2c 72 2e 73 74 61 67 67 65 72 29 7d Data Ascii: g=this.vars.smoothChildTiming===!0,this._sortChildren=!0,this._onUpdate=this.vars.onUpdate;var i,s,r=this.vars;for(s in r)i=r[s],l(i)&&-1!==i.join("").indexOf("{self}")&&(r[s]=this._swapSelfInParams(i));l(r.tweens)&&this.add(r.tweens,0,r.align,r.stagger)}
2024-01-15 13:24:20 UTC	1369	IN	Data Raw: 29 2c 75 2e 73 74 61 72 74 41 74 26 26 28 75 2e 73 74 61 72 74 41 74 3d 63 28 75 2e 73 74 61 72 74 41 74 29 2c 75 2e 73 74 61 72 74 41 74 2e 63 79 63 6c 65 26 26 66 28 75 2e 73 74 61 72 74 41 74 2c 74 2c 70 29 29 2c 67 26 26 66 28 75 2c 74 2c 70 29 2c 64 2e 74 6f 28 74 5b 70 5d 2c 65 2c 75 2c 70 2a 6e 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 64 2c 61 29 7d 2c 64 2e 73 74 61 67 67 65 72 46 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 2c 72 2c 6e 2c 61 2c 6f 29 7b 72 65 74 75 72 6e 20 69 2e 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 3d 30 21 3d 69 2e 69 6d 6d 65 64 69 61 74 65 52 65 6e 64 65 72 2c 69 2e 72 75 6e 42 61 63 6b 77 61 72 64 73 3d 21 30 2c 74 68 69 73 2e 73 74 61 67 67 65 72 54 6f 28 74 2c 65 2c 69 2c 73 2c 72 2c 6e Data Ascii: ),u.startAt&&(u.startAt=c(u.startAt),u.startAt.cycle&&f(u.startAt,t,p)),g&&f(u,t,p),d.to(t[p],e,u,p*n);return this.add(d,a)},d.staggerFrom=function(t,e,i,s,r,n,a,o){return i.immediateRender=0!=i.immediateRender,i.runBackwards=!0,this.staggerTo(t,e,i,s,r,n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50227	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:19 UTC	800	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTaqq_6BNWrHV0bzlfZWXs5xp7LgvlQYGTewww6ndS78t2ywN2EEBPyetlTd3UaXvff-dGCYyFTwNK9oGfHtdcgIbIRWZVzag HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50230	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2727	OUT	GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1775&cbvp=1&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50229	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2731	OUT	GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1682&cbvp=1&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50233	18.164.116.51	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	620	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=1140625293&col=29305905,5876516,358438444,549485209,207488821 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
2024-01-15 13:24:20 UTC	789	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:19 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfuhAAAAAABAgAsAQfogAQAAC0BB-gYBAABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF4HNQAAAAAgwHqZAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 08307cdad31639e360e0351e9156d6ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: tUKe_FFBsBBGVRi9qsyXDYRcg88Nzs1LnaeQXO_7cUTFI0tcg-9uSg==
2024-01-15 13:24:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50232	18.164.116.51	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	619	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=265092338&col=29305905,5876516,358438444,549485209,207486733 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuggAAAAAAAgAsAQfogAIAAC0BB-gYAgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
2024-01-15 13:24:20 UTC	789	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:19 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfuhAAAAAABAgAsAQfogAQAAC0BB-gYBAABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 7c55514b62254664b7255cfc5da6dc92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 4OwpMDCN1SCQhCHUVc1H5cPUFaMC8hT1PzcH3bpCBYDNDb11_OWLvw==
2024-01-15 13:24:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50231	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	695	OUT	GET /pixel?google_nid=teadstv_dbm&google_hm=OTI0ZGY1YjAtNzEyMS00N2E1LWFmYjgtMzhkZTNmYzhmMTM1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50234	35.244.159.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	469	OUT	GET /w/1.0/sd?cc=1&id=537072991&val=CAESEDVjxVOCHObArUwfEMB8x0I&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057
2024-01-15 13:24:20 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Mon, 15 Jan 2024 13:24:20 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50246	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50250	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50244	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50247	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50249	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50254	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	859	OUT	POST /el/AGSKWxX0v6aVQGFBMICjnJj7fZDS5OjVSpLKf1vAPjiAuk90T7J5JW7l9j26jw-3VvB6ynuGGPfxVPcYxk70J6LsWEsBlMoBjUtINsEBFCoOonNOaaTuU5slD5ha9JaALhDaJOc1OrMRtg== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	166	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 35 38 39 35 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 38 36 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325058954,null,null,null,null,null,null,null,null,null,null,null,[[1,186,"mylovelybluesky.com","mylovelybluesky.com",3]]]
2024-01-15 13:24:20 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:20 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-UMLUjtIhyv44bLc_7kAbcA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50245	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	1618	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325050386&gcd=11l1l1l1l1&dma=0&tcfd=10000&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=2&tfd=8877 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 462 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:20 UTC	462	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4a 79 37 7a 75 2d 2d 33 34 4d 44 46 62 5f 70 6c 41 6b 64 30 32 59 47 57 41 26 5f 65 74 3d 37 36 39 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4a 32 37 7a 75 2d 2d 33 34 4d 44 46 62 5f 70 6c 41 6b 64 30 32 59 47 57 41 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4a 71 37 7a 75 2d 2d 33 34 4d 44 46 62 5f 70 6c 41 6b 64 30 32 59 47 57 41 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4e 6a 33 68 5f 43 2d 33 34 4d 44 46 63 58 53 34 77 63 64 45 50 30 42 6a 51 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 Data Ascii: en=ad_impression&ep.query_id=CJy7zu--34MDFb_plAkd02YGWA&_et=769en=ad_impression&ep.query_id=CJ27zu--34MDFb_plAkd02YGWAen=ad_impression&ep.query_id=CJq7zu--34MDFb_plAkd02YGWAen=ad_impression&ep.query_id=CNj3h_C-34MDFcXS4wcdEP0BjQen=ad_impression&ep
2024-01-15 13:24:20 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50258	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	689	OUT	GET /pixel?google_nid=openx&google_hm=YzkxNmVlYTItNWExMS0yNjBkLWUxNTctMzFlNjk5MGQ4ZDk3 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50257	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	718	OUT	GET /pixel?google_nid=stickyxchange_dbm&google_hm=MjYxNjEzYTk0YmVlODlmOWMwOGI5YTY5ODUzNjE2MmM=&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50248	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50253	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2684	OUT	OPTIONS /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5296&vt=11&dtpt=3614&dett=3&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50266	216.22.16.41	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	522	OUT	GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&google_cver=1 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
2024-01-15 13:24:20 UTC	381	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:19 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ; expires=Wed, 15 Jan 2025 13:24:20 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-01-15 13:24:20 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50259	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	699	OUT	GET /pixel?google_nid=oath_dbm&google_hm=eS1lMHdNdnpaRTJ1RTV1QVBoaFlTOTZRblZoZ042NllQSH5B&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50256	216.22.16.57	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	783	OUT	GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
2024-01-15 13:24:20 UTC	381	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:20 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ; expires=Wed, 15 Jan 2025 13:24:20 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-01-15 13:24:20 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50262	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	657	OUT	GET /sadbundle/12128317773909862788/logo.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	836	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 14575 Date: Mon, 15 Jan 2024 13:24:20 GMT Expires: Tue, 14 Jan 2025 13:24:20 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	416	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 35 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.5.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 30 30 30 30 31 32 36 33 31 35 38 36 33 35 34 39 30 34 32 35 36 34 39 33 30 30 30 30 30 31 34 37 30 31 32 35 34 33 36 30 31 32 39 30 32 39 35 34 39 5f 22 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 31 36 2e 38 2c 36 30 2e 38 4c 32 31 33 2c 35 30 2e 37 63 2d 30 2e 36 2d 31 2e 37 2d 32 2e 32 2d 32 2e 38 2d 34 2d 33 2e 31 63 2d 32 2e 36 2d 30 2e 34 2d 33 2e 39 2c 30 2e 39 2d 35 2e 39 2c 32 2e 31 63 2d 30 2e 35 2c 30 2e 33 2d 31 2c 30 2e 35 2d 31 2e 33 2c 30 2e 33 0a 09 09 63 2d 30 2e 37 2d 30 2e 35 2d 32 2d 32 2e 35 2d 33 2e 31 2d 32 2e 35 63 2d 30 2e 38 2c 30 2e 31 2d 33 2e 33 2c 31 2e 37 2d 34 2c 32 2e 37 76 2d 32 2e 35 68 2d 32 2e 31 76 31 33 68 32 2e 31 76 2d 39 2e 33 63 30 2d 30 2e 39 2c 32 2e 33 2d 32 2e 35 2c 33 2e 31 Data Ascii: 0000126315863549042564930000014701254360129029549_"><path class="st0" d="M216.8,60.8L213,50.7c-0.6-1.7-2.2-2.8-4-3.1c-2.6-0.4-3.9,0.9-5.9,2.1c-0.5,0.3-1,0.5-1.3,0.3c-0.7-0.5-2-2.5-3.1-2.5c-0.8,0.1-3.3,1.7-4,2.7v-2.5h-2.1v13h2.1v-9.3c0-0.9,2.3-2.5,3.1
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 30 2e 32 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 63 30 2e 33 2d 30 2e 34 2c 30 2e 37 2d 30 2e 36 2c 31 2e 33 2d 30 2e 36 63 30 2e 34 2c 30 2c 30 2e 38 2c 30 2e 31 2c 31 2e 31 2c 30 2e 32 63 30 2e 34 2c 30 2e 31 2c 30 2e 37 2c 30 2e 33 2c 31 2e 31 2c 30 2e 34 63 30 2e 34 2c 30 2e 32 2c 30 2e 37 2c 30 2e 33 2c 31 2e 31 2c 30 2e 34 0a 09 09 63 30 2e 34 2c 30 2e 31 2c 30 2e 37 2c 30 2e 32 2c 31 2e 31 2c 30 2e 32 63 30 2e 35 2c 30 2c 31 2d 30 2e 31 2c 31 2e 35 2d 30 2e 34 63 30 2e 35 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 31 2e 37 2d 31 2e 35 6c 2d 30 2e 32 2d 30 2e 33 63 2d 30 2e 34 2c 30 2e 33 2d 30 2e 37 2c 30 2e 35 2d 31 2c 30 2e 36 63 2d 30 2e 33 2c 30 2e 31 2d 30 2e 36 2c 30 2e 32 2d 30 2e 39 2c 30 2e 32 0a 09 09 63 2d 30 2e 33 2c 30 2d 30 2e 37 2d 30 2e 31 Data Ascii: 0.2-0.3,0.4-0.5c0.3-0.4,0.7-0.6,1.3-0.6c0.4,0,0.8,0.1,1.1,0.2c0.4,0.1,0.7,0.3,1.1,0.4c0.4,0.2,0.7,0.3,1.1,0.4c0.4,0.1,0.7,0.2,1.1,0.2c0.5,0,1-0.1,1.5-0.4c0.5-0.3,1.1-0.7,1.7-1.5l-0.2-0.3c-0.4,0.3-0.7,0.5-1,0.6c-0.3,0.1-0.6,0.2-0.9,0.2c-0.3,0-0.7-0.1
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 2d 30 2e 31 2c 30 2e 34 2d 30 2e 31 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 34 63 2d 30 2e 33 2c 31 2e 32 2c 30 2e 39 2c 33 2e 31 2c 31 2e 33 2c 34 2e 36 63 31 2e 35 2d 30 2e 34 2c 33 2e 37 2d 30 2e 33 2c 34 2e 36 2d 31 2e 31 63 30 2e 31 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 33 0a 09 09 63 30 2c 30 2e 31 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 63 30 2e 34 2c 31 2e 32 2c 32 2e 33 2c 32 2e 32 2c 33 2e 34 2c 33 2e 33 63 31 2e 31 2d 31 2e 31 2c 33 2d 32 2e 31 2c 33 2e 34 2d 33 2e 33 63 30 2d 30 2e 31 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 2d 30 2e 34 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 33 0a 09 09 63 31 2c 30 2e 38 2c 33 2e 31 2c 30 2e 38 2c 34 2e 36 2c 31 2e 31 63 30 2e 34 2d 31 Data Ascii: -0.1,0.4-0.1c0,0.1-0.1,0.2-0.1,0.4c-0.3,1.2,0.9,3.1,1.3,4.6c1.5-0.4,3.7-0.3,4.6-1.1c0.1-0.1,0.2-0.2,0.3-0.3c0,0.1,0.1,0.3,0.1,0.4c0.4,1.2,2.3,2.2,3.4,3.3c1.1-1.1,3-2.1,3.4-3.3c0-0.1,0.1-0.3,0.1-0.4c0.1,0.1,0.2,0.2,0.3,0.3c1,0.8,3.1,0.8,4.6,1.1c0.4-1
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 2e 33 2d 30 2e 36 2d 30 2e 38 2d 30 2e 36 2d 31 2e 31 2d 30 2e 36 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 32 2c 30 0a 09 09 63 30 2c 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 31 63 30 2e 31 2d 30 2e 31 2c 30 2e 35 2d 30 2e 33 2c 30 2e 38 2d 30 2e 33 63 30 2e 32 2c 30 2c 30 2e 34 2c 30 2c 30 2e 36 2c 30 2e 31 6c 30 2e 32 2c 30 2e 31 6c 2d 30 2e 31 2d 30 2e 32 63 2d 30 2e 32 2d 30 2e 35 2d 30 2e 31 2d 31 2e 32 2c 30 2e 35 2d 31 2e 37 63 30 2e 36 2c 30 2e 34 2c 30 2e 37 2c 31 2e 32 2c 30 2e 35 2c 31 2e 37 0a 09 09 6c 2d 30 2e 31 2c 30 2e 32 6c 30 2e 32 2d 30 2e 31 63 30 2e 32 2d 30 2e 31 2c 30 2e 34 2d 30 2e 31 2c 30 2e 36 2d 30 2e 31 43 31 30 31 2e 36 2c 34 34 2e 32 2c 31 30 32 2c 34 34 2e 34 2c 31 30 32 2e 31 2c 34 34 2e 35 20 4d 39 37 2e 38 2c 34 34 2e Data Ascii: .3-0.6-0.8-0.6-1.1-0.6c-0.1,0-0.2,0-0.2,0c0,0,0-0.1,0-0.1c0.1-0.1,0.5-0.3,0.8-0.3c0.2,0,0.4,0,0.6,0.1l0.2,0.1l-0.1-0.2c-0.2-0.5-0.1-1.2,0.5-1.7c0.6,0.4,0.7,1.2,0.5,1.7l-0.1,0.2l0.2-0.1c0.2-0.1,0.4-0.1,0.6-0.1C101.6,44.2,102,44.4,102.1,44.5 M97.8,44.
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 30 2d 30 2e 34 2c 30 2d 30 2e 36 2d 30 2e 31 6c 2d 30 2e 32 2d 30 2e 31 6c 30 2e 31 2c 30 2e 32 63 30 2e 32 2c 30 2e 35 2c 30 2e 31 2c 31 2e 32 2d 30 2e 35 2c 31 2e 37 63 2d 30 2e 36 2d 30 2e 34 2d 30 2e 37 2d 31 2e 32 2d 30 2e 35 2d 31 2e 37 6c 30 2e 31 2d 30 2e 32 6c 2d 30 2e 32 2c 30 2e 31 0a 09 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 2d 30 2e 36 2c 30 2e 31 43 39 38 2e 36 2c 35 37 2e 39 2c 39 38 2e 32 2c 35 37 2e 38 2c 39 38 2e 31 2c 35 37 2e 36 20 4d 31 30 32 2e 34 2c 35 37 2e 34 63 2d 30 2e 31 2d 30 2e 32 2d 30 2e 33 2d 30 2e 32 2d 30 2e 35 2d 30 2e 32 63 2d 30 2e 32 2c 30 2d 30 2e 36 2c 30 2d 30 2e 38 2d 30 2e 34 0a 09 09 63 2d 30 2e 31 2d 30 2e 32 2d 30 2e 32 2d 30 2e 34 2d 30 2e 33 2d 30 2e 36 63 30 2e 38 2d 30 2e 31 2c 31 2e 36 2d Data Ascii: 0-0.4,0-0.6-0.1l-0.2-0.1l0.1,0.2c0.2,0.5,0.1,1.2-0.5,1.7c-0.6-0.4-0.7-1.2-0.5-1.7l0.1-0.2l-0.2,0.1c-0.2,0.1-0.4,0.1-0.6,0.1C98.6,57.9,98.2,57.8,98.1,57.6 M102.4,57.4c-0.1-0.2-0.3-0.2-0.5-0.2c-0.2,0-0.6,0-0.8-0.4c-0.1-0.2-0.2-0.4-0.3-0.6c0.8-0.1,1.6-
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2e 32 2d 32 2e 34 2c 32 2e 32 2d 34 2e 33 2c 34 2e 37 2d 34 2e 33 0a 09 09 63 30 2e 31 2c 30 2c 30 2e 33 2c 30 2c 30 2e 34 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 43 31 30 32 2e 38 2c 34 36 2e 36 2c 31 30 34 2e 36 2c 34 38 2e 34 2c 31 30 34 2e 38 2c 35 30 2e 36 20 4d 31 30 33 2e 34 2c 34 37 2e 31 0a 09 09 63 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 2d 30 2e 36 63 30 2e 31 2d 30 2e 36 2c 30 2e 34 2d 31 2c 30 2e 38 2d 31 2e 31 63 30 2e 36 2d 30 2e 32 2c 31 2e 31 2d 30 2e 31 2c 31 2e 34 2d 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 63 30 2c 30 2c 30 Data Ascii: c0,0,0,0,0,0c0,0,0,0,0,0c0.2-2.4,2.2-4.3,4.7-4.3c0.1,0,0.3,0,0.4,0c0,0,0,0,0,0c0,0,0,0,0,0c0,0,0,0,0,0c0,0,0,0,0,0C102.8,46.6,104.6,48.4,104.8,50.6 M103.4,47.1c0-0.2,0-0.4,0.1-0.6c0.1-0.6,0.4-1,0.8-1.1c0.6-0.2,1.1-0.1,1.4-0.1c0.1,0,0.1,0,0.1,0c0,0,0
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 30 2e 31 2c 30 2d 30 2e 31 63 30 2c 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 32 63 30 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 6c 30 2e 35 2c 30 2e 31 43 31 30 37 2e 31 2c 35 37 2e 35 2c 31 30 37 2e 34 2c 35 38 2e 32 2c 31 30 37 2e 38 2c 35 38 2e 37 20 4d 31 30 34 2e 33 2c 35 36 2e 37 0a 09 09 63 2d 30 2e 37 2d 30 2e 32 2d 30 2e 39 2d 31 2e 31 2d 30 2e 39 2d 31 2e 37 63 30 2e 33 2d 30 2e 32 2c 30 2e 35 2d 30 2e 35 2c 30 2e 37 2d 30 2e 37 63 30 2e 32 2c 30 2c 30 2e 34 2c 30 2c 30 2e 36 2c 30 2e 31 63 30 2e 36 2c 30 2e 31 2c 31 2c 30 2e 34 2c 31 2e 31 2c 30 2e 38 63 30 2e 32 2c 30 2e 36 2c 30 2e 31 2c 31 2e 31 2c 30 2e 31 2c 31 2e 34 0a 09 09 63 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 63 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 31 2c 30 43 31 30 35 Data Ascii: 0.1,0-0.1c0,0,0-0.1,0-0.2c0-0.1,0-0.2,0-0.4l0.5,0.1C107.1,57.5,107.4,58.2,107.8,58.7 M104.3,56.7c-0.7-0.2-0.9-1.1-0.9-1.7c0.3-0.2,0.5-0.5,0.7-0.7c0.2,0,0.4,0,0.6,0.1c0.6,0.1,1,0.4,1.1,0.8c0.2,0.6,0.1,1.1,0.1,1.4c0,0.1,0,0.1,0,0.1c0,0-0.1,0-0.1,0C105
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 30 2e 31 2d 31 2c 30 2d 31 2e 33 63 30 2e 31 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 32 2d 30 2e 32 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 0a 09 09 63 30 2c 30 2c 30 2c 30 2e 31 2c 30 2c 30 2e 32 63 30 2c 30 2e 33 2c 30 2c 30 2e 37 2c 30 2e 36 2c 31 63 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 37 2c 30 2e 33 43 39 34 2e 39 2c 35 30 2e 37 2c 39 34 2e 39 2c 35 30 2e 39 2c 39 34 2e 39 2c 35 31 2e 31 20 4d 39 32 2e 31 2c 35 34 2e 31 63 2d 31 2e 31 2d 30 2e 32 2d 31 2e 38 2d 30 2e 32 2d 32 2e 35 2d 30 2e 32 0a 09 09 63 30 2e 35 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 31 2e 39 2d 31 2e 33 6c 31 2e 35 2c 30 2e 34 4c 39 32 2e 31 2c 35 34 2e 31 7a 20 4d 38 37 2e 33 2c 35 31 6c 33 2e 39 2d 31 6c 30 2e 35 2d 30 2e 31 6c 31 2e 34 2d 30 2e 34 63 2d 30 2e Data Ascii: 0.1-1,0-1.3c0.1-0.1,0.1-0.2,0.2-0.2c0,0,0,0,0,0c0,0,0,0.1,0,0.2c0,0.3,0,0.7,0.6,1c0.2,0.1,0.4,0.2,0.7,0.3C94.9,50.7,94.9,50.9,94.9,51.1 M92.1,54.1c-1.1-0.2-1.8-0.2-2.5-0.2c0.5-0.3,1.1-0.7,1.9-1.3l1.5,0.4L92.1,54.1z M87.3,51l3.9-1l0.5-0.1l1.4-0.4c-0.
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 0a 09 09 63 30 2c 30 2e 32 2c 30 2c 30 2e 36 2d 30 2e 34 2c 30 2e 38 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 36 2c 30 2e 33 63 2d 30 2e 31 2d 30 2e 38 2d 30 2e 34 2d 31 2e 35 2d 30 2e 39 2d 32 2e 32 63 30 2e 31 2c 30 2c 30 2e 33 2c 30 2c 30 2e 34 2d 30 2e 31 63 30 2e 37 2d 30 2e 32 2c 31 2e 32 2d 30 2e 35 2c 31 2e 33 2d 31 0a 09 09 63 30 2e 31 2d 30 2e 33 2c 30 2e 31 2d 30 2e 36 2c 30 2e 31 2d 30 2e 39 6c 30 2e 34 2c 30 4c 31 30 37 2e 32 2c 34 35 2e 39 7a 20 4d 31 30 38 2c 34 38 63 31 2e 31 2c 30 2e 32 2c 31 2e 39 2c 30 2e 33 2c 32 2e 36 2c 30 2e 32 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 37 2d 31 2e 38 2c 31 2e 32 6c 2d 31 2e 36 2d 30 2e 34 4c 31 30 38 2c 34 38 7a 20 4d 31 30 39 2e 31 2c Data Ascii: 2,0.3-0.2,0.4c0,0.2,0,0.6-0.4,0.8c-0.2,0.1-0.4,0.2-0.6,0.3c-0.1-0.8-0.4-1.5-0.9-2.2c0.1,0,0.3,0,0.4-0.1c0.7-0.2,1.2-0.5,1.3-1c0.1-0.3,0.1-0.6,0.1-0.9l0.4,0L107.2,45.9z M108,48c1.1,0.2,1.9,0.3,2.6,0.2c-0.5,0.3-1.1,0.7-1.8,1.2l-1.6-0.4L108,48z M109.1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50255	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	858	OUT	POST /el/AGSKWxVm3fuAjz2YZDx82YH-FR46mquAP6WxMqBvmpFQYMsOYi1br9F6p_CZB1C1F1X8ssni1J5JfdBSo5bJDT9e4dX02S3uAiVFwFxjdqEjDfA8jIqgAGj7UYM3i-N5NYGft9fnjiG_ng== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	63	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 30 2c 6e 75 6c 6c 2c 31 5d 5d 2c 31 37 30 35 33 32 35 30 35 38 39 35 36 5d Data Ascii: [null,null,null,null,null,null,null,[[0,null,1]],1705325058956]
2024-01-15 13:24:20 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:20 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-GDhkaRnAmdep0SW2Wa6pew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50267	68.67.179.153	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	572	OUT	GET /bounce?%2Fsetuid%3Fentity%3D101%26code%3DCAESEENhzENs7RoM0eP8WaAzBvI%26google_cver%3D1 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!@wnfH8K6pQK`!5=E<*L5?%M33?LaC^Ppwhmv(z1cepsl_0)(n?p[FxTiT@C%nugO%v4VB%nmfp)xrwD; uuid2=727555877560728591
2024-01-15 13:24:20 UTC	1371	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=6VE-vV-DyD0Bgm83LAgwXPsLj6abjlMZT9N7FeKEiHLkpHUUo_QHEOitb1AEx7cqsDzYqgMCBBUtU4GlZxpav9SSufp-9yRgLEsBzC5W5dY.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 120c24d9-3426-4535-8f7e-fb4d01d3e46b Set-Cookie: anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-01-15 13:24:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50261	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	662	OUT	GET /sadbundle/12128317773909862788/headline1.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 9923 Date: Mon, 15 Jan 2024 13:24:20 GMT Expires: Tue, 14 Jan 2025 13:24:20 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 36 35 32 63 31 2e 32 34 31 2c 31 2e 34 34 39 2c 32 2e 39 34 33 2c 32 2e 36 39 2c 34 2e 39 32 31 2c 32 2e 36 39 63 32 2e 30 32 33 2c 30 2c 33 2e 36 35 36 2d 31 2e 33 31 31 2c 33 2e 36 35 36 2d 33 2e 32 34 32 0a 09 09 63 30 2d 34 2e 35 33 2d 39 2e 30 31 35 2d 34 2e 36 39 31 2d 39 2e 30 31 35 2d 39 2e 37 35 63 30 2d 32 2e 36 39 2c 32 2e 36 34 35 2d 34 2e 31 31 36 2c 35 2e 32 34 33 2d 34 2e 31 31 36 63 31 2e 38 34 2c 30 2c 33 2e 36 35 36 2c 30 2e 34 31 34 2c 35 2e 31 39 37 2c 31 2e 34 34 39 6c 2d 31 2e 33 35 37 2c 31 2e 34 39 35 0a 09 09 63 2d 31 2e 31 32 36 2d 31 2e 33 31 31 2d 32 2e 34 38 33 2d 32 2e 31 36 32 2d 34 2e 31 38 35 2d 32 2e 31 36 32 63 2d 31 2e 37 32 35 2c 30 2d 33 2e 33 33 34 2c 30 2e 38 37 34 2d 33 2e 33 33 34 2c 32 2e 36 36 37 63 30 2c 34 2e Data Ascii: 652c1.241,1.449,2.943,2.69,4.921,2.69c2.023,0,3.656-1.311,3.656-3.242c0-4.53-9.015-4.691-9.015-9.75c0-2.69,2.645-4.116,5.243-4.116c1.84,0,3.656,0.414,5.197,1.449l-1.357,1.495c-1.126-1.311-2.483-2.162-4.185-2.162c-1.725,0-3.334,0.874-3.334,2.667c0,4.
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 64 3d 22 4d 31 38 33 2e 31 32 37 2c 31 31 38 2e 31 32 35 76 2d 38 2e 38 35 33 63 30 2d 30 2e 35 30 36 2d 30 2e 33 39 31 2d 30 2e 36 36 37 2d 30 2e 38 37 33 2d 30 2e 36 36 37 63 2d 31 2e 38 38 36 2c 30 2d 35 2e 37 37 32 2c 32 2e 33 2d 37 2e 36 33 35 2c 32 2e 33 0a 09 09 63 2d 30 2e 37 38 32 2c 30 2d 31 2e 31 37 33 2d 30 2e 33 39 31 2d 31 2e 34 32 36 2d 30 2e 36 36 37 68 2d 30 2e 30 34 36 76 37 2e 38 38 37 68 2d 31 2e 38 34 76 2d 31 37 2e 36 36 68 31 2e 38 34 76 38 2e 38 35 33 63 30 2c 30 2e 33 34 35 2c 30 2e 31 38 34 2c 30 2e 35 30 36 2c 30 2e 35 39 38 2c 30 2e 35 30 36 0a 09 09 63 31 2e 35 38 37 2c 30 2c 35 2e 34 32 37 2d 32 2e 32 35 33 2c 37 2e 35 38 39 2d 32 2e 32 35 33 63 30 2e 38 30 35 2c 30 2c 31 2e 33 37 39 2c 30 2e 33 32 32 2c 31 2e 37 34 37 2c 30 Data Ascii: d="M183.127,118.125v-8.853c0-0.506-0.391-0.667-0.873-0.667c-1.886,0-5.772,2.3-7.635,2.3c-0.782,0-1.173-0.391-1.426-0.667h-0.046v7.887h-1.84v-17.66h1.84v8.853c0,0.345,0.184,0.506,0.598,0.506c1.587,0,5.427-2.253,7.589-2.253c0.805,0,1.379,0.322,1.747,0
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 39 6c 37 2e 36 38 2d 31 37 2e 36 36 68 30 2e 35 30 36 6c 37 2e 37 32 37 2c 31 37 2e 36 36 68 2d 32 2e 30 32 33 0a 09 09 4c 31 31 30 2e 35 37 38 2c 31 34 31 2e 38 38 32 7a 20 4d 31 30 39 2e 38 38 38 2c 31 34 30 2e 34 35 36 6c 30 2e 30 36 39 2d 30 2e 30 34 36 6c 2d 33 2e 35 34 31 2d 38 2e 31 31 37 68 2d 30 2e 30 39 32 63 2d 30 2e 36 34 35 2c 31 2e 34 32 36 2d 33 2e 36 31 2c 38 2e 33 32 34 2d 33 2e 36 31 2c 39 2e 31 32 39 0a 09 09 63 30 2c 30 2e 32 33 2c 30 2e 30 39 32 2c 30 2e 32 39 39 2c 30 2e 32 37 35 2c 30 2e 32 39 39 63 31 2e 30 33 35 2c 30 2c 33 2e 37 30 32 2d 32 2e 30 32 33 2c 35 2e 32 36 37 2d 32 2e 30 32 33 43 31 30 38 2e 38 39 39 2c 31 33 39 2e 36 39 37 2c 31 30 39 2e 34 37 35 2c 31 34 30 2e 30 34 32 2c 31 30 39 2e 38 38 38 2c 31 34 30 2e 34 35 36 Data Ascii: 9l7.68-17.66h0.506l7.727,17.66h-2.023L110.578,141.882z M109.888,140.456l0.069-0.046l-3.541-8.117h-0.092c-0.645,1.426-3.61,8.324-3.61,9.129c0,0.23,0.092,0.299,0.275,0.299c1.035,0,3.702-2.023,5.267-2.023C108.899,139.697,109.475,140.042,109.888,140.456
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 38 32 2c 31 34 34 2e 30 36 35 2c 31 34 36 2e 31 38 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 36 37 2e 35 39 39 2c 31 34 31 2e 37 32 31 63 30 2c 32 2e 38 32 38 2d 32 2e 32 35 33 2c 35 2e 34 30 34 2d 37 2e 36 31 31 2c 35 2e 34 30 34 68 2d 34 2e 38 37 35 76 2d 31 37 2e 36 36 68 34 2e 37 36 0a 09 09 63 33 2e 39 30 39 2c 30 2c 35 2e 39 33 34 2c 31 2e 32 31 39 2c 35 2e 39 33 34 2c 33 2e 35 36 34 63 30 2c 32 2e 33 34 35 2d 32 2e 30 32 34 2c 33 2e 35 31 38 2d 33 2e 39 35 36 2c 33 2e 39 30 38 76 30 2e 30 34 37 43 31 36 34 2e 37 37 31 2c 31 33 36 2e 39 33 38 2c 31 36 37 2e 35 39 39 2c 31 33 38 2e 35 34 37 2c 31 36 37 2e 35 39 39 2c 31 34 31 2e 37 32 31 7a 0a 09 09 20 4d 31 35 39 2e 35 30 Data Ascii: 82,144.065,146.182z"/><path style="fill:#FFFFFF;" d="M167.599,141.721c0,2.828-2.253,5.404-7.611,5.404h-4.875v-17.66h4.76c3.909,0,5.934,1.219,5.934,3.564c0,2.345-2.024,3.518-3.956,3.908v0.047C164.771,136.938,167.599,138.547,167.599,141.721z M159.50
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 6c 2d 33 2e 35 34 31 2d 38 2e 31 31 37 68 2d 30 2e 30 39 32 63 2d 30 2e 36 34 35 2c 31 2e 34 32 36 2d 33 2e 36 31 2c 38 2e 33 32 34 2d 33 2e 36 31 2c 39 2e 31 32 39 0a 09 09 63 30 2c 30 2e 32 33 2c 30 2e 30 39 32 2c 30 2e 32 39 39 2c 30 2e 32 37 35 2c 30 2e 32 39 39 63 31 2e 30 33 35 2c 30 2c 33 2e 37 30 32 2d 32 2e 30 32 33 2c 35 2e 32 36 37 2d 32 2e 30 32 33 43 31 39 34 2e 30 32 2c 31 33 39 2e 36 39 37 2c 31 39 34 2e 35 39 35 2c 31 34 30 2e 30 34 32 2c 31 39 35 2e 30 30 38 2c 31 34 30 2e 34 35 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 32 30 32 2e 33 38 31 2c 31 34 37 2e 31 32 35 76 2d 31 37 2e 30 33 39 63 30 2e 34 38 33 2d 30 2e 34 31 34 2c 31 2e 33 35 36 2d 30 2e 38 35 32 2c 32 Data Ascii: l-3.541-8.117h-0.092c-0.645,1.426-3.61,8.324-3.61,9.129c0,0.23,0.092,0.299,0.275,0.299c1.035,0,3.702-2.023,5.267-2.023C194.02,139.697,194.595,140.042,195.008,140.456z"/><path style="fill:#FFFFFF;" d="M202.381,147.125v-17.039c0.483-0.414,1.356-0.852,2
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 39 2e 34 35 33 2c 38 37 2e 30 37 34 2c 31 35 39 2e 32 34 36 2c 38 35 2e 34 36 35 2c 31 35 39 2e 32 34 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 30 31 2e 31 33 32 2c 31 35 38 2e 32 33 34 63 34 2e 38 39 38 2c 30 2c 38 2e 30 32 35 2c 33 2e 38 36 33 2c 38 2e 30 32 35 2c 38 2e 35 37 37 63 30 2c 35 2e 34 32 37 2d 34 2e 30 37 2c 39 2e 35 34 32 2d 39 2e 34 39 37 2c 39 2e 35 34 32 0a 09 09 63 2d 34 2e 38 39 37 2c 30 2d 38 2e 30 32 35 2d 33 2e 38 36 32 2d 38 2e 30 32 35 2d 38 2e 35 37 37 43 39 31 2e 36 33 35 2c 31 36 32 2e 33 35 2c 39 35 2e 37 30 35 2c 31 35 38 2e 32 33 34 2c 31 30 31 2e 31 33 32 2c 31 35 38 2e 32 33 34 7a 20 4d 31 30 37 2e 33 34 31 2c 31 36 37 2e 35 39 33 63 30 2d 34 2e Data Ascii: 9.453,87.074,159.246,85.465,159.246z"/><path style="fill:#FFFFFF;" d="M101.132,158.234c4.898,0,8.025,3.863,8.025,8.577c0,5.427-4.07,9.542-9.497,9.542c-4.897,0-8.025-3.862-8.025-8.577C91.635,162.35,95.705,158.234,101.132,158.234z M107.341,167.593c0-4.
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 43 31 36 36 2e 37 34 33 2c 31 37 35 2e 34 33 35 2c 31 36 38 2e 34 36 38 2c 31 37 35 2e 30 38 39 2c 31 37 32 2e 31 39 32 2c 31 37 34 2e 31 37 7a 0a 09 09 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 37 34 2e 30 33 32 2c 31 36 39 2e 31 35 36 76 2d 31 30 2e 37 31 35 68 31 2e 38 34 76 31 30 2e 36 39 32 63 30 2c 34 2e 31 33 39 2c 31 2e 39 37 38 2c 36 2e 30 32 34 2c 35 2e 34 35 2c 36 2e 30 32 34 0a 09 09 63 33 2e 35 31 38 2c 30 2c 35 2e 36 31 2d 31 2e 39 33 32 2c 35 2e 36 31 2d 35 2e 38 38 37 63 30 2d 33 2e 36 35 36 2d 30 2e 31 33 38 2d 37 2e 31 39 37 2d 30 2e 33 39 31 2d 31 30 2e 38 33 68 31 2e 36 30 39 76 31 30 2e 37 31 35 63 30 2c 34 2e 38 35 33 2d 32 2e 35 35 33 2c 37 2e 31 39 37 2d 37 2e Data Ascii: C166.743,175.435,168.468,175.089,172.192,174.17z"/><path style="fill:#FFFFFF;" d="M174.032,169.156v-10.715h1.84v10.692c0,4.139,1.978,6.024,5.45,6.024c3.518,0,5.61-1.932,5.61-5.887c0-3.656-0.138-7.197-0.391-10.83h1.609v10.715c0,4.853-2.553,7.197-7.
2024-01-15 13:24:20 UTC	742	IN	Data Raw: 36 37 2e 34 35 35 68 30 2e 30 34 36 63 31 2e 39 30 38 2d 32 2e 38 32 38 2c 33 2e 33 38 2d 35 2e 37 34 39 2c 34 2e 36 34 36 2d 38 2e 39 39 31 68 32 2e 31 31 35 6c 2d 36 2e 35 33 2c 39 2e 38 36 35 76 37 2e 37 39 35 68 2d 31 2e 38 34 76 2d 37 2e 37 30 33 0a 09 09 6c 2d 36 2e 35 35 34 2d 39 2e 39 35 37 68 32 2e 32 33 4c 32 34 35 2e 38 37 33 2c 31 36 37 2e 34 35 35 7a 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 20 69 64 3d 22 42 75 74 74 6f 6e 5f 30 30 30 30 30 30 34 32 37 33 34 38 31 38 35 33 36 38 32 31 32 39 33 34 33 30 30 30 30 30 30 30 36 31 37 38 31 31 39 38 34 36 38 36 34 32 30 31 31 33 5f 22 3e 0a 09 3c 70 61 74 68 20 69 64 3d 22 42 6f 78 5f 30 30 30 30 30 31 31 34 37 39 34 36 34 31 31 34 32 36 30 30 32 34 32 37 31 30 30 30 30 30 31 34 38 31 37 33 35 35 33 33 39 Data Ascii: 67.455h0.046c1.908-2.828,3.38-5.749,4.646-8.991h2.115l-6.53,9.865v7.795h-1.84v-7.703l-6.554-9.957h2.23L245.873,167.455z"/></g><g id="Button_00000042734818536821293430000000617811984686420113_"><path id="Box_00000114794641142600242710000014817355339

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50260	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2720	OUT	GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2183&cbvp=1&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:20 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50269	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3016	OUT	GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4632&vt=11&dtpt=2857&dett=3&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:20 UTC	1631	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x6f01b8b04a0738760000000000000000","15":"0x487ad988b04656070000000000000000"},"debug_key":"3912139888330446029","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"16910863213463817642"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:20 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:20 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50275	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	662	OUT	GET /sadbundle/12128317773909862788/headline2.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:20 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 7743 Date: Mon, 15 Jan 2024 13:24:20 GMT Expires: Tue, 14 Jan 2025 13:24:20 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:20 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 38 32 63 30 2c 32 2e 36 32 32 2d 31 2e 38 34 35 2c 33 2e 39 30 38 2d 34 2e 32 37 2c 33 2e 39 30 38 63 2d 32 2e 34 32 36 2c 30 2d 34 2e 32 37 31 2d 31 2e 32 38 36 2d 34 2e 32 37 31 2d 33 2e 39 30 38 76 2d 36 2e 33 31 37 68 32 2e 31 30 32 0a 09 09 76 36 2e 31 31 39 63 30 2c 31 2e 36 38 39 2c 30 2e 37 37 33 2c 32 2e 33 38 38 2c 32 2e 31 36 39 2c 32 2e 33 38 38 73 32 2e 31 36 38 2d 30 2e 36 39 38 2c 32 2e 31 36 38 2d 32 2e 33 38 38 76 2d 36 2e 31 31 39 68 32 2e 31 30 32 56 31 31 36 2e 36 38 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 36 37 2e 36 38 38 2c 31 31 33 2e 34 36 37 63 30 2c 31 2e 39 32 2d 31 2e 32 34 37 2c 33 2e 31 31 35 2d 33 2e 34 37 33 2c 33 2e 31 31 35 68 2d 32 2e 36 36 37 Data Ascii: 82c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102v6.119c0,1.689,0.773,2.388,2.169,2.388s2.168-0.698,2.168-2.388v-6.119h2.102V116.682z"/><path style="fill:#FFFFFF;" d="M67.688,113.467c0,1.92-1.247,3.115-3.473,3.115h-2.667
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 33 2e 30 35 36 2d 30 2e 39 34 31 2d 33 2e 35 38 37 2d 31 2e 38 39 36 2d 33 2e 35 38 37 73 2d 31 2e 38 39 36 2c 30 2e 35 33 31 2d 31 2e 38 39 36 2c 33 2e 35 38 37 63 30 2c 33 2e 30 34 37 2c 30 2e 39 34 31 2c 33 2e 35 37 38 2c 31 2e 38 39 36 2c 33 2e 35 37 38 53 31 31 32 2e 32 37 31 2c 31 31 38 2e 35 31 2c 31 31 32 2e 32 37 31 2c 31 31 35 2e 34 36 33 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 32 30 2e 36 37 35 2c 31 31 33 2e 32 30 35 63 30 2c 31 2e 39 30 34 2d 30 2e 38 39 2c 32 2e 38 34 39 2d 32 2e 34 30 36 2c 32 2e 38 34 39 73 2d 32 2e 34 30 35 2d 30 2e 39 34 34 2d 32 2e 34 30 35 2d 32 2e 38 34 39 0a 09 09 63 30 2d 31 2e 39 30 35 2c 30 2e 38 38 39 2d 32 2e 38 35 2c 32 2e 34 30 35 2d Data Ascii: 3.056-0.941-3.587-1.896-3.587s-1.896,0.531-1.896,3.587c0,3.047,0.941,3.578,1.896,3.578S112.271,118.51,112.271,115.463z"/><path style="fill:#FFFFFF;" d="M120.675,113.205c0,1.904-0.89,2.849-2.406,2.849s-2.405-0.944-2.405-2.849c0-1.905,0.889-2.85,2.405-
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 35 34 2e 31 32 33 2c 31 32 30 2e 33 36 36 76 2d 31 30 2e 30 30 32 68 32 2e 31 30 36 76 38 2e 32 33 34 68 35 2e 32 36 36 76 31 2e 37 36 38 48 31 35 34 2e 31 32 33 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 37 31 2e 34 38 2c 31 31 36 2e 36 38 32 63 30 2c 32 2e 36 32 32 2d 31 2e 38 34 35 2c 33 2e 39 30 38 2d 34 2e 32 37 2c 33 2e 39 30 38 63 2d 32 2e 34 32 36 2c 30 2d 34 2e 32 37 31 2d 31 2e 32 38 36 2d 34 2e 32 37 31 2d 33 2e 39 30 38 76 2d 36 2e 33 31 37 68 32 2e 31 30 32 0a 09 09 76 36 2e 31 31 39 63 30 2c 31 2e 36 38 39 2c 30 2e 37 37 33 2c 32 2e 33 38 38 2c 32 2e 31 36 39 Data Ascii: /><path style="fill:#FFFFFF;" d="M154.123,120.366v-10.002h2.106v8.234h5.266v1.768H154.123z"/><path style="fill:#FFFFFF;" d="M171.48,116.682c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102v6.119c0,1.689,0.773,2.388,2.169
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 31 30 2e 33 36 34 6c 2d 33 2e 38 30 31 2c 31 30 2e 30 30 32 68 2d 32 2e 31 34 37 6c 2d 33 2e 37 38 36 2d 31 30 2e 30 30 32 68 32 2e 32 36 31 6c 31 2e 39 37 34 2c 35 2e 36 34 36 0a 09 09 63 30 2e 33 32 31 2c 30 2e 39 32 35 2c 30 2e 36 31 34 2c 32 2e 30 30 36 2c 30 2e 36 31 34 2c 32 2e 30 30 36 68 30 2e 30 35 37 63 30 2c 30 2c 30 2e 32 38 38 2d 31 2e 30 38 31 2c 30 2e 36 30 39 2d 32 2e 30 30 36 6c 31 2e 39 38 32 2d 35 2e 36 34 36 48 32 31 35 2e 32 36 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 32 31 36 2e 37 34 32 2c 31 32 30 2e 33 36 36 76 2d 31 30 2e 30 30 32 68 32 2e 31 30 32 76 31 30 2e 30 30 32 48 32 31 36 2e 37 34 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 Data Ascii: 10.364l-3.801,10.002h-2.147l-3.786-10.002h2.261l1.974,5.646c0.321,0.925,0.614,2.006,0.614,2.006h0.057c0,0,0.288-1.081,0.609-2.006l1.982-5.646H215.262z"/><path style="fill:#FFFFFF;" d="M216.742,120.366v-10.002h2.102v10.002H216.742z"/><path style="fi
2024-01-15 13:24:20 UTC	1252	IN	Data Raw: 33 31 38 4c 32 34 39 2e 31 34 2c 31 31 33 2e 33 31 38 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 32 39 2e 30 33 2c 31 33 37 2e 33 36 36 6c 2d 30 2e 39 31 31 2d 30 2e 39 36 33 63 2d 30 2e 38 31 35 2c 30 2e 37 33 33 2d 31 2e 38 36 32 2c 31 2e 31 33 36 2d 33 2e 30 30 31 2c 31 2e 31 33 36 0a 09 09 63 2d 31 2e 39 38 35 2c 30 2d 33 2e 37 39 37 2d 30 2e 39 34 33 2d 33 2e 37 39 37 2d 32 2e 39 31 33 63 30 2d 31 2e 33 33 35 2c 30 2e 37 35 33 2d 32 2e 31 38 35 2c 32 2e 30 33 35 2d 32 2e 38 6c 30 2e 33 30 39 2d 30 2e 31 34 39 63 2d 30 2e 38 32 35 2d 30 2e 39 34 39 2d 31 2e 30 37 38 2d 31 2e 35 32 31 2d 31 2e 30 37 38 2d 32 2e 32 30 31 0a 09 09 63 30 2d 31 2e 33 32 31 2c 31 2e 32 31 37 2d 32 2e Data Ascii: 318L249.14,113.318z"/><path style="fill:#FFFFFF;" d="M129.03,137.366l-0.911-0.963c-0.815,0.733-1.862,1.136-3.001,1.136c-1.985,0-3.797-0.943-3.797-2.913c0-1.335,0.753-2.185,2.035-2.8l0.309-0.149c-0.825-0.949-1.078-1.521-1.078-2.201c0-1.321,1.217-2.
2024-01-15 13:24:20 UTC	1066	IN	Data Raw: 33 34 2e 38 30 37 2c 31 35 36 2e 36 32 33 2c 31 33 32 2e 33 36 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 36 37 2e 30 30 31 2c 31 33 37 2e 33 36 36 6c 2d 32 2e 32 39 39 2d 33 2e 39 30 34 68 2d 31 2e 38 38 31 76 33 2e 39 30 34 68 2d 32 2e 31 30 32 76 2d 31 30 2e 30 30 32 68 35 2e 30 31 39 63 32 2e 32 31 32 2c 30 2c 33 2e 34 38 31 2c 31 2e 31 35 39 2c 33 2e 34 38 31 2c 33 2e 30 34 32 0a 09 09 63 30 2c 31 2e 34 39 38 2d 30 2e 38 30 35 2c 32 2e 35 34 38 2d 32 2e 32 36 39 2c 32 2e 38 39 36 6c 32 2e 34 39 35 2c 34 2e 30 36 33 48 31 36 37 2e 30 30 31 7a 20 4d 31 36 32 2e 38 32 31 2c 31 33 31 2e 37 39 36 68 32 2e 36 32 63 31 2e 30 39 34 2c 30 2c 31 2e 36 35 37 2d 30 2e 35 32 33 2c 31 2e Data Ascii: 34.807,156.623,132.365z"/><path style="fill:#FFFFFF;" d="M167.001,137.366l-2.299-3.904h-1.881v3.904h-2.102v-10.002h5.019c2.212,0,3.481,1.159,3.481,3.042c0,1.498-0.805,2.548-2.269,2.896l2.495,4.063H167.001z M162.821,131.796h2.62c1.094,0,1.657-0.523,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50274	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	656	OUT	GET /sadbundle/12128317773909862788/Cta.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/12128317773909862788/index.html?ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3129 Date: Mon, 15 Jan 2024 13:24:20 GMT Expires: Tue, 14 Jan 2025 13:24:20 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 5f 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 39 31 2e 35 32 31 2c 32 30 36 2e 36 38 39 68 2d 38 33 2e 30 34 31 0a 09 63 2d 35 2e 33 31 2c 30 2d 39 2e 36 31 34 2d 34 2e 33 30 34 2d 39 2e 36 31 34 2d 39 2e 36 31 34 76 2d 37 2e 30 39 36 63 30 2d 35 2e 33 31 2c 34 2e 33 30 34 2d 39 2e 36 31 34 2c 39 2e 36 31 34 2d 39 2e 36 31 34 68 38 33 2e 30 34 31 63 35 2e 33 31 2c 30 2c 39 2e 36 31 34 2c 34 2e 33 30 34 2c 39 2e 36 31 34 2c 39 2e 36 31 34 76 37 2e 30 39 36 0a 09 43 32 30 31 2e 31 33 35 2c 32 30 32 2e 33 38 35 2c 31 39 36 2e 38 33 2c 32 30 36 2e 36 38 39 2c 31 39 31 2e 35 32 31 2c 32 30 36 2e 36 38 39 7a 22 2f 3e 0a 3c 67 20 69 64 3d 22 43 74 61 2e 33 22 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c Data Ascii: _" style="fill:#FFFFFF;" d="M191.521,206.689h-83.041c-5.31,0-9.614-4.304-9.614-9.614v-7.096c0-5.31,4.304-9.614,9.614-9.614h83.041c5.31,0,9.614,4.304,9.614,9.614v7.096C201.135,202.385,196.83,206.689,191.521,206.689z"/><g id="Cta.3"><path style="fill
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 31 2e 37 38 35 2d 32 2e 32 36 35 0a 09 09 63 2d 31 2e 30 33 36 2c 30 2d 31 2e 37 38 34 2c 30 2e 36 39 35 2d 31 2e 37 38 34 2c 32 2e 32 36 35 63 30 2c 31 2e 35 36 38 2c 30 2e 37 34 38 2c 32 2e 32 36 35 2c 31 2e 37 38 34 2c 32 2e 32 36 35 43 31 34 31 2e 34 37 36 2c 31 39 35 2e 34 36 39 2c 31 34 32 2e 32 32 34 2c 31 39 34 2e 37 37 33 2c 31 34 32 2e 32 32 34 2c 31 39 33 2e 32 30 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 43 32 33 34 30 3b 22 20 64 3d 22 4d 31 34 37 2e 33 35 37 2c 31 39 33 2e 33 39 31 4c 31 34 36 2e 36 2c 31 39 34 2e 32 76 32 2e 32 31 39 68 2d 31 2e 33 35 31 76 2d 36 2e 34 32 38 68 31 2e 33 35 31 76 32 2e 36 35 38 6c 32 2e 34 31 31 2d 32 2e 36 35 38 68 31 2e 35 36 37 6c 2d 32 2e 32 37 32 2c 32 2e 34 34 39 Data Ascii: 1.785-2.265c-1.036,0-1.784,0.695-1.784,2.265c0,1.568,0.748,2.265,1.784,2.265C141.476,195.469,142.224,194.773,142.224,193.205z"/><path style="fill:#0C2340;" d="M147.357,193.391L146.6,194.2v2.219h-1.351v-6.428h1.351v2.658l2.411-2.658h1.567l-2.272,2.449
2024-01-15 13:24:21 UTC	208	IN	Data Raw: 6e 6f 6e 65 3b 22 20 77 69 64 74 68 3d 22 31 35 30 38 2e 37 30 33 22 20 68 65 69 67 68 74 3d 22 38 33 22 2f 3e 0a 3c 74 65 78 74 20 69 64 3d 22 43 6f 64 65 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 20 30 20 30 20 31 20 2d 38 2e 39 33 34 32 20 2d 37 30 33 2e 36 39 38 37 29 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 57 54 4d 6f 6e 61 72 63 68 4e 6f 76 61 2d 52 6f 6d 61 6e 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 33 70 78 3b 22 3e 43 6f 6e 76 65 72 73 69 6f 6e 5f 43 61 72 69 62 62 65 61 6e 3c 2f 74 65 78 74 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: none;" width="1508.703" height="83"/><text id="Code" transform="matrix(1 0 0 1 -8.9342 -703.6987)" style="fill:#FFFFFF; font-family:'WTMonarchNova-Roman'; font-size:23px;">Conversion_Caribbean</text></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50279	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50280	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50281	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2613	OUT	GET /pagead/interaction/?ai=CfoeI8TGlZfGJJpv2xtYPm-K0gAe-laSvbPfa0tOsDMCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNkBT9De_440wfSmummBkl9TTC6Dosgqyqv-GPc7f7TnQWRkQlzEBpJyaMX4W_BJqTX5SCAgIbSxaXTiwtM0Az21E1G-X2mTrzlhL4IXXIbwFlegAre8ewQUeMnSZCRh__AwHLfHLGu4wfTT6wEGiHsDLY9NVRzDw1DIwtnST3gmPRj-Tzl9k-6qp1RTbkHGX2H3ORuUJWAR4zOjgXotkpWURcWpNe8psT7l7b2W0a1XPnRQl_y_jMcJdMahzrpw9khcON9GUqgpJ0OP8yl5PQQtkcW3p8gqkQAfvoAGpL2w7afd_bX7AaAGIagHpr4bqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB0IgGEQATICigI6BIBAgEBIvf3BOljEjtTqvt-DA_oLAggBgAwB0BUBgBcB&sigh=-6qpob8JjVc&cid=CAQSPAAvHhf_JuvCMFlWlphTq2hu_wrXmbQYD55dU3v8vI5RvP3LfvbwHHVyV93XEVmykesjsERCHT_XxgTC6Q&label=window_focus&gqid=8TGlZZ7tJOS4oPMPgom2eA&qqid=CLHG1Oq-34MDFRu70QQdGzENcA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=4&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0&nras=2&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=2613 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50283	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	3020	OUT	GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5296&vt=11&dtpt=3614&dett=3&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	1632	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x6f01b8b04a0738760000000000000000","15":"0x487ad988b04656070000000000000000"},"debug_key":"17483694064002639616","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"17171600526941069614"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:21 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:21 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50282	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2783	OUT	GET /pagead/interaction/?ai=CMMpC8TGlZaeiJ9SH3rsPnLOu2AjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QeDz4I6GHGVqh_7nGb6V4eUn0T4fK8x6afH_o4F8fXM4bFG1UW9hJsVxab77c5iUqJQu_1aXyfrMqk3pQos-D_pSnZfExop7a4PRg01avk5cNgdRI0ZAj9dXZsBntCiTHfq_cY4X0WGHc2ReOPCVPj0pPpy8XH-A4JlbiaCvqR-QXZvOi9ZbMzgNejtfFGeoFKlicZ2t0w19Wmr9pBU5dS29CexWRBe9Qa-x_eprCIxZWKGSOheG5ik7kcIetWcxjkv8TbugT_ZCytzmTPLQpxDIqseQ_A2knfxVEsBX4M20DdHH2Hl1xwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-anV6r7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKELD50Zvt59SdERICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=4_7hs0noD5Q&cid=CAQSPAAvHhf_QF4j9g6-gZ7HBle7A6vgvwr7gAOsEKt_cuJ0zczxl3sNaKO5g-Y4jQPCfef9L_o4r3-ykaeBYA&label=window_focus&gqid=8TGlZfnHJuucoPMPmYiswAc&qqid=COfe1eq-34MDFdSDdwEdnJkLiw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280&nras=3&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=2723 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50284	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:20 UTC	2776	OUT	GET /pagead/interaction/?ai=CfBKv8TGlZcPmKM6VxtYPjPuVmAjPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QzcDH1jII0UgNxJQrdEwIasE1ijGzNU0BjYQTwZN1ivJDkEJjxMyNce9TGY9wSdCugF8UPXsnMGotxH6ji4UPBVKwvWFVJ1Vp5_-HVGpZFWmITRFBi5mrOcA6TtUNshtvgmmP1LMLO9aVrB6HR4bqNBr69iDjVrloCCqKnBzLL9-1r5nCIcQe3veSz1cCQLBhE6GgpD2JmpTyCP7V3fOR8vqniGrIVX-dC4U1rjbUEPWoXNufUGijyA6Ivjbfcrxovbnb2KwgnxgYQYwxZaubfZwgV1A7yokuVyb_PYfkFZ3J3vwxnohFwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYvODW6r7fgwOACgGYCwHICwGADAHaDBAKChDw4oTS_8y1pmASAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=tIWHopABmJQ&cid=CAQSPAAvHhf_TjlpxRsnTj3dURL7AZUIfxrof7FL6i1FuHpziKUc8X8Ir9fmNa9_pG6Nrk1KdtsIAQEo0o3-xg&label=window_focus&gqid=8TGlZY7wJ9_NoPMP2e6UmAk&qqid=CIOj1-q-34MDFc6K0QQdjH0Fgw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325040&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325037466&bpp=1&bdt=6873&idt=1&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&prev_fmts=0x0%2C360x280%2C360x280&nras=4&correlator=4342792276688&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325036&ga_hid=578521191&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080260%2C95320870%2C95321627%2C95322166%2C31078668%2C31078670&oid=2&pvsid=3154604613822141&tmod=1320123715&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=2742 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50285	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	1886	OUT	GET /pagead/interaction/?ai=C3U5L7TGlZaz-Cqj3xtYP0o63IPGA9qd18f2o9qUS4efhg-svEAEg7fipIGDJhqCKpKTgEaAB3r_aigPIAQGoAwHIA8sEqgThAU_Q49q_4oFjiz1g8LE6_w_bqK7-0RJDha_nTLTSdmsHJRvq7k0dbeb5IFcSykSLHarDiJQOJ5NRZmDEPRavDSp4NtNCU6oGrT36YjYhO1KOZmkID5U7meobKjBC7l1IA_sMFwFrTWefBLQ3mknv0aCjrItlErXAyPhYqLM6QpXh8oHQT1BY0HB2ieKmQvGFIC-vEY2bkYAT6TBAVnYJHN1Uo-_Yqt8kO-5yuRv88cg78FyFBGopWrI_Qpl5IJLaD70gC1ASSWP2S9XJZ7DnKZETMMI5PEEO-ku0cOy-ZtUFe8AE9LCKhr0EiAXjsMmvTIAHwP_cZKgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIH2xOi-34MDmgkjaHR0cHM6Ly93d3cuc3BlY3RydW0uY29tL21jbS9zZWxlY3SxCVxiRUO7Bm3SgAoByAsB4AsB2gwRCgsQwPfE48vW6YTkARICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=813_sqk_pbo&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=COyoxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50286	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	676	OUT	GET /pixel?google_nid=appnexus&google_hm=OTEzMjIzNjk2OTI4OTIxMzA3NA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50287	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	2720	OUT	GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1812&cbvp=1&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:21 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50298	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	2673	OUT	OPTIONS /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5452&vt=11&dtpt=3269&dett=3&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50299	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	2673	OUT	OPTIONS /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5641&vt=11&dtpt=3284&dett=3&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50297	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	2673	OUT	OPTIONS /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5096&vt=11&dtpt=3284&dett=3&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50300	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	1839	OUT	GET /pagead/interaction/?ai=CWN0E7TGlZa7-Cqj3xtYP0o63IJ60_ql18LPZtfoRnODCi8EBEAEg7fipIGDJhqCKpKTgEaABm-fg3wPIAQmoAwHIAwKqBOoBT9B0AJJ7_vWHMXyXneecuyz0-DrFRDiMxcErND9OlleyxXhr0QY38J0q-XNOcVle91-ZhxO3m745ccJIf-WGdmCqCWJI7VTLKUekpgqTeAZhYcFfZQPY5dLxr88e_JEG3hsqkLY8WuyPkoH7jqMI3BeLcIFOGKiNUfUcIA32KJmJbAXOkOMk2Sx_9GaXkbai9HhtCMCDANlggbsdP1CL9nbJbmXBVBXaOFILbXIlqEPJ3f3EdPoVXRJ2ELq1sSQyE3aosKa9fxj40lSU42pUMafQVABH3-Y9S4FuYrqJNyeLhTWj8fs6pGLmwASXu7j7tgSIBbac2otLoAYRgAfDzfZ3qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYgfbE6L7fgwOACgGYCwHICwGADAHaDBAKChDgvY-33dGT5RcSAgEDqg0CVVPIDQHYEw3QFQH4FgGAFwE&sigh=auQhuJjp7qg&cid=CAQSTgAvHhf_DOF89aP9nuWNh8IgVSpjRP_Qu6pMiXXQDzzEjzbMPfAXUUlpifWvpULrUQfJGhD6ZNBNoMPY7qNwObtEiN6j04TviXYnbDMObA&label=window_focus&gqid=7TGlZYOaCuO0oPMPouOLsA4&qqid=CO6oxei-34MDFai70QQdUscNBA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:21 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50302	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	769	OUT	GET /ads/richmedia/studio/60024164/60024164_20231221092021363_Hero-Image_Cat_Consumables2.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	745	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 54447 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 19:34:23 GMT Expires: Mon, 15 Jan 2024 19:34:23 GMT Cache-Control: public, max-age=86400 Age: 64198 Last-Modified: Thu, 21 Dec 2023 17:20:21 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 01 2a 08 03 00 00 00 a1 b1 ee 44 00 00 02 fa 50 4c 54 45 00 00 00 cd ca c8 d2 d1 d1 dd dd dd dd dc dc de de de de de de de de de dc dc dc d4 d1 cf c5 c0 bd c2 be bc c2 c2 c2 c9 c9 c9 c8 c8 c8 de de de 36 33 2a c3 c3 c3 1f 22 1a 1c 20 18 b9 b9 b9 bc bc bc 12 18 10 d6 a7 8b 20 23 1c 65 59 4d 8d 6e 5c c1 c1 c1 e0 e0 e0 d8 d8 d8 c9 c9 c9 de de de da da da e2 e2 e2 cc cc cc c4 c4 c4 bf bf bf cf cf cf bb bb bb d5 d4 d4 f6 f6 f6 59 6c 75 5a 6e 7a ef ee ee 5e 6e 75 f2 f2 f2 55 6c 78 55 69 74 5e 71 79 5e 73 7e 62 75 7d 5a 6a 70 4e 62 6d b8 b7 b7 ec eb eb 55 67 6f 11 15 0e 65 78 82 15 19 12 e8 e8 e7 50 65 72 d2 e1 ef 1a 1d 16 4c 5f 69 c2 d5 e6 53 64 6c ec d1 c6 ef d9 d0 1f 21 1a cc de ee 52 61 68 6a Data Ascii: PNGIHDRDPLTE63" #eYMn\YluZnz^nuUlxUit^qy^s~bu}ZjpNbmUgoexPerL_iSdl!Rahj
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 7b 79 c0 b8 b2 69 76 7c 9c 90 88 a8 9e 97 c3 bd b7 c0 8b 6d 5d 41 2d 2a 2e 26 da d5 d2 69 61 5e 69 45 31 7e 58 43 53 4d 4a 76 4f 3a 02 06 02 94 88 80 b0 a5 9d b5 ab a4 ac bc c9 a3 97 8f 60 80 96 5a 54 52 62 5b 59 68 89 a1 b5 c4 d2 5d 51 48 68 4c 3a a7 7c 65 82 ae d0 79 9e b9 c0 cc d9 23 70 9c 7e 8c 91 e3 cb c2 ca d4 df b7 82 65 7a 98 ad 40 3e 3a 66 59 4f 73 a6 ca 47 63 75 9b 73 5e 6d 92 ac 76 60 54 89 94 9a 58 49 3f 64 9a c0 54 39 27 b5 88 6f a6 85 74 55 77 8e e1 ec f5 9a 7c 6c 4c 6c 83 8d 5f 45 af 8e 7c 35 7d a7 8a 70 62 35 67 89 4c 83 a9 a9 b4 be 55 90 b7 09 6b 9d 9f 68 4b c3 9e 8b 7d 6a 5e 70 55 46 cb a7 94 1c 62 8a 92 69 55 85 63 51 d4 dc e3 1a 80 b3 b9 97 85 a8 73 55 97 a1 a8 40 73 97 20 33 3e 8b 7b 71 bf c5 ce 9f a9 b3 b2 7b 5c 47 2f 1f 2c 56 72 e9 Data Ascii: {yiv\|m]A-*.&ia^iE1~XCSMJvO:`ZTRb[Yh]QHhL:\|ey#p~ez@>:fYOsGcus^mv`TXI?dT9'otUw\|lLl_E\|5}pb5gLUkhK}j^pUFbiUcQsU@s 3>{q{\G/,Vr
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 2c 15 a0 0a 56 71 9b 30 37 68 4f 34 22 eb ca 51 71 65 5a 4b 93 2f 81 8c dc 90 25 85 e8 3b 71 57 d9 1a 34 a2 68 19 04 81 47 b7 01 5c e8 2c 6e 16 26 86 ee b6 31 19 8f 75 db 06 38 5d 55 55 45 56 34 4d 1b 81 1c 98 15 85 18 d5 2a f2 b6 4d 79 73 51 7b fb 78 b3 f2 ee ff 78 6d 7c 03 37 e1 b7 26 b8 9d 9e e2 65 d4 60 a5 4b 7a d1 32 0a 82 c8 5f 79 31 4c e7 f9 7e 18 7e bb 30 cf d9 4d c2 6f ed b6 8d ba 86 4e 12 8d e4 48 96 55 04 32 fc 06 66 c5 42 a5 82 45 76 1f 6e 4d f7 ab 56 3b 3e 7e f6 ec 8d 66 a3 d6 1c 47 80 54 06 ce 4a b9 d5 21 60 a3 f5 e8 37 ac 66 2f 49 c0 2d 8e 7d 37 8c fd 30 08 42 1f ba c1 c5 f2 97 5f 2d 26 fa 58 47 96 1c c9 1d f8 4d 51 46 0a 68 c9 3c a5 c2 d9 59 ad 50 a9 11 5b ad 56 2b a0 4b d9 9a ee ae 72 ab 3d c3 f3 9b ca 67 b7 6c e7 79 5b de a0 94 18 ed 56 Data Ascii: ,Vq07hO4"QqeZK/%;qW4hG\,n&1u8]UUEV4M*MysQ{xxm\|7&e`Kz2_y1L~~0MoNHU2fBEvnMV;>~fGTJ!`7f/I-}70B_-&XGMQFh<YP[V+Kr=gly[V
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 6b d2 91 46 aa 5c 4c 67 01 59 f4 91 dc 2a 22 4f d6 ce 5e bf 3e 13 a3 40 16 d4 78 25 76 9f 6f bf 0e d8 8e e4 ca 27 ed 34 e6 b1 a6 cd fc d2 f3 73 0b aa 96 09 0e c6 cb b8 41 55 ab 4a db 95 9b 49 bd 1e c5 e0 16 83 5b 1c df 0e 71 0e b8 e9 6d bd dd 36 54 85 d0 c4 cc 0d b7 d9 36 9a 49 05 96 a3 9b 2a ac 70 38 10 66 d4 58 d9 f0 2f 0c 90 2a 71 f9 75 7f 1b 14 16 36 b2 c9 95 51 cb bf 03 dc 86 9b 99 ad 4d 73 9f e2 4b cd b2 d7 38 05 38 28 c7 06 6e 16 6c 57 ad 5a 0d 0e 03 09 99 2d 97 e9 47 d4 1b 4e de 8e 09 6a 2a 2f 4c 3a 2c 6f 60 87 b7 a3 4d 00 8f d5 0d 02 33 89 9f 73 d0 f7 9f bd 06 a6 9a 48 94 c0 28 4c 27 08 12 5d e1 7e 96 b9 34 45 72 cb d2 22 95 97 b7 7c df 44 6e ed 63 1c b1 7d e6 79 d3 d9 bc 3f 68 60 0a 60 a5 bb e5 86 83 71 15 6a 34 ab 49 9c 20 53 c6 cb 08 27 6f 97 Data Ascii: kF\LgY"O^>@x%vo'4sAUJI[qm6T6Ip8fX/qu6QMsK88(nlWZ-GNj/L:,o`M3sH(L']~4Er"\|Dnc}y?h``qj4I S'o
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 13 63 83 99 dc 44 6e 9c 08 24 8a d3 6b 86 ca 4c 02 ec 74 41 65 9c 9d 6a 9c dd 40 48 dc cc 83 90 20 ba 10 0d 05 1c c4 67 8f 05 84 9e 46 ed 91 a7 ce ed 06 b4 cd f0 7e 16 db 27 af bc d9 44 ad 1d b3 d6 72 73 b5 2f ec 84 9b 60 03 32 9b 99 a5 38 9c 23 36 82 93 d0 86 e5 65 b6 28 ab 55 19 c2 6d 21 2f c1 81 a4 32 15 90 d4 c4 48 a5 b8 1b 94 83 c4 58 7a 23 78 11 8a 9a 73 b3 c8 66 40 63 f9 5d 70 c3 00 8f 14 35 1f 1b 28 12 e2 a8 52 c3 ef f1 1b 5a ee ec a5 27 ec 6b 35 53 93 bc af 35 3e f5 6c 2f 48 57 b3 e4 84 5b 84 e0 6c 27 e9 28 8e df bd e4 e6 c5 f2 39 1a cb 2c bd c9 ed d1 d2 fd fb 22 39 fa c9 62 d2 60 62 c2 ce 32 d4 e6 a7 d2 fc 32 08 a0 87 64 64 23 37 b7 e4 24 8c 66 02 09 26 8d 66 1f 1d 26 3e 61 7b 81 3f ae 49 52 89 ea 2f 67 9c b5 f4 e4 2d d7 31 6b f4 69 3d f2 da 2a Data Ascii: cDn$kLtAej@H gF~'Drs/`28#6e(Um!/2HXz#xsf@c]p5(RZ'k5S5>l/HW[l'(9,"9b`b22dd#7$f&f&>a{?IR/g-1ki=*
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 6c 8e de 8e d5 62 5d d3 89 b5 64 3e 8f c5 29 5c 51 1d 48 dc b4 4a 81 b6 8a 6b 20 e4 fc 5b 68 a2 46 6c 03 cf 1e 6d 55 96 66 52 81 ad ec 41 3d 1a 13 6e 94 99 fd 01 dc 22 d4 db 60 3a bd 5e 85 29 b5 61 c3 84 d9 a4 69 82 1b 67 6f 29 8d a1 cc 97 7a b0 9d a9 43 ba 07 fb 8f 17 d1 fc 50 d7 2a c2 17 fa e9 24 09 cf 9e 9e a2 df 15 a2 20 ad 65 2f 7c 96 92 db a3 05 72 28 0b d8 76 c1 17 fa cf 91 be 77 ce 9d 4a fb c0 e6 d5 5c 02 b8 fa ce 5f 30 b9 33 05 b5 4d e7 a7 9f a4 52 0f c7 5c 88 6e 34 52 6b 6b 8a d7 89 b5 4b d7 31 ba 03 cf c2 b5 f5 f1 d2 56 6a 6b 92 d8 22 5e c1 25 5a 13 bd 59 17 ed 47 33 99 6c 65 a9 52 bd 2f 76 f7 e1 7d 66 25 49 ec 72 49 67 92 0d 65 aa 6d 71 9b 0d 96 e8 60 fd e0 70 7f 72 27 a1 4b 29 2e b9 07 3e 08 3a 1f d1 11 97 0c dc 0a aa 2a e0 9b 0f 9e 91 6a 03 Data Ascii: lb]d>)\QHJk [hFlmUfRA=n"`:^)aigo)zCP$ e/\|r(vwJ\_03MR\n4RkkK1Vjk"^%ZYG3leR/v}f%IrIgemq`pr'K).>:j
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: cf 21 38 76 42 42 21 d0 02 03 14 69 3a 32 12 3b f7 57 97 eb b8 73 79 60 83 c4 80 ac e0 d3 42 1a bb 5c 9c ea 40 99 1e bf 36 7d b1 ab a7 fb ab ee ae 8e d3 01 ee 55 19 db f0 68 2e dd 14 b7 6f 86 ce 0f f1 df f4 da 08 ca db d1 27 58 99 4a 9a a9 f2 84 70 b3 a4 66 7d f8 db 11 41 2b fb ed 96 97 98 24 90 85 91 8e a8 ab 39 2c 70 56 36 69 dd 28 0f 10 06 85 db 2a 22 dc 12 a2 9b cd 2d 41 4f b9 58 ab 55 d2 d9 f1 f1 ab 57 0f 7f 3d 9a 7d f1 eb 46 3a 38 dc 8f 51 6b ec e0 39 6c 23 b0 9b d2 d8 f0 67 47 24 e0 41 6e 8f 9d 12 65 52 73 03 8d b9 82 64 94 32 c4 57 2d ee f6 4b c5 c0 b1 0e c3 9b be 70 b9 b7 a7 b7 b7 0b f6 d9 29 00 f7 3a fe 87 b6 d6 1b fb 92 ae 0b a3 97 be 07 37 03 db 89 f9 d1 91 91 62 62 fa 89 19 30 ef b8 5c b6 de 9c 87 1c 78 9e 84 c6 38 d6 12 1b 03 1a 4c 1a 22 a4 Data Ascii: !8vBB!i:2;Wsy`B\@6}Uh.o'XJpf}A+$9,pV6i(*"-AOXUW=}F:8Qk9l#gG$AneRsd2W-Kp):7bb0\x8L"
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 04 38 38 da 97 1b 4e 65 cf fe 10 7e 89 48 05 7c 98 68 0b 36 a0 94 b3 86 c2 5d 56 6c 00 d9 e5 be d1 7e 32 0b ed 7f 02 c7 e2 56 4f 4f 27 b2 4e 76 61 7e a0 da 5e de 4e 4d d8 3a c6 6e aa 4e 2a 57 75 53 49 34 4c ee e1 47 d5 72 5c 67 c3 df a8 3d 74 dc 4a a5 3c c1 95 ae cd 8e d8 fe 6b 81 03 b6 f0 72 45 09 4d 84 1b fe 4f 43 6a 1d dc a4 56 22 e0 86 e5 d6 15 dc 79 ba 85 e5 0d 70 04 1c ee 83 c3 3a f7 60 6f ff b0 be b5 35 3b 3e 7b 5c 3f c4 b7 87 87 db 8f 1f ef 8c 9c be 0f ad 1d 1f bd 77 84 b8 64 f9 d1 e6 e2 fa 7a 3a 0e 70 5f 0f b1 1e 32 08 26 32 af 8c 58 72 69 09 15 49 0e 2b 7f b8 74 0f 05 2f 9e 89 0e f9 41 71 60 4b 80 38 f2 2b 17 eb 57 49 8d cc 42 c5 fd 1f 95 13 62 a3 75 b4 4a 2f 85 94 5d 13 25 db 2c 95 ec 84 61 a1 95 1c d8 c5 c0 56 35 4b 89 2b 9c 10 55 50 f9 aa f9 Data Ascii: 88Ne~H\|h6]Vl~2VOO'Nva~^NM:nN*WuSI4LGr\g=tJ<krEMOCjV"yp:`o5;>{\?wdz:p_2&2XriI+t/Aq`K8+WIBbuJ/]%,aV5K+UP
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 32 19 24 35 4a 7a 4a 72 63 c0 82 3a 25 d9 71 36 8f d9 39 f6 31 a6 6d 23 d6 4d 68 d4 59 eb 25 f6 c2 13 b7 66 4f 5f c6 d6 49 2d 4c b6 ba b5 a0 ea 78 49 cf 2f 39 73 5e e6 eb f8 94 89 d9 12 05 dd 8d 8c 42 6a bc 6e 21 83 ef 2d aa 2e a3 d4 6a 1c 5f 48 03 5e 13 5b ae 2b af bd d2 3e 61 3e a4 16 3e 6d 6e 77 7f 9f 19 27 38 91 db 2c c1 8d 7c 14 51 93 2c a0 d5 79 83 b5 b0 c9 65 b5 e4 36 b9 95 65 8a 4d 47 29 5a e3 bd ec 93 33 f8 31 60 3d ec e4 e2 f1 63 51 1b c0 ed 7c 71 7a 74 7e 31 7e 7a 72 b1 8d 68 12 dc 7e de 5c 4c 2b 08 39 b0 62 bd 23 ad d2 cf f8 39 c4 be 37 fa 73 9c c2 a3 0c 05 db 87 83 1c 40 bf b7 84 c8 52 81 57 71 e7 7a c1 ad af a5 b5 16 3f da 6d 95 2a 59 26 89 a0 c9 47 7b 46 a1 8d 8d 72 2b 78 9e 1d 04 39 33 f0 5c 53 b3 de ae 96 03 de 1f ca 40 12 d9 8c 92 ae a5 Data Ascii: 2$5JzJrc:%q691m#MhY%fO_I-LxI/9s^Bjn!-.j_H^[+>a>>mnw'8,\|Q,ye6eMG)Z31`=cQ\|qzt~1~zrh~\L+9b#97s@RWqz?m*Y&G{Fr+x93\S@
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: 16 bb 8b b3 37 90 74 b3 c2 c5 34 60 15 dc 36 e9 11 80 8d 43 79 43 28 3f 32 2e 61 fe 2d 23 e8 32 cb 85 29 3d ee cf f9 1a 33 78 9f a1 72 c9 c3 63 03 b5 0f 69 40 d8 0e 68 3d 1d 76 c3 b1 09 63 92 cb d6 99 79 93 df cb f3 6b 25 d7 f6 0a 9e 82 b9 04 d7 f5 7d 57 33 1d 5f 6f 58 be e9 0c 61 c9 8e 57 f1 0f 35 d7 4c 96 6c bb e0 3a 15 b3 94 f7 75 1c 01 99 7e b8 9b 7f b8 fe ab 6e 7b bb 0f 91 0f dc ed e9 c4 76 a9 ad fe ea 77 f3 bf 7d 8b 96 cc 21 52 2d 70 7b 2f da 22 2c 81 09 bf 30 9a 14 0b a3 12 3c d0 1c b9 89 9f 04 b8 2c 3e 84 1b 7e 89 d0 72 e7 31 dc e4 d8 eb ef 0f 8f 1f e1 88 ed 61 f4 01 3e ff 5c 6a 5c 8b e0 b6 42 bd fd dc 4c cb 61 50 6f 87 55 49 98 9c 93 4d 17 c9 df 62 42 3e 20 d8 d0 cd 19 a4 cb c4 62 18 b7 92 c6 3c 42 c9 18 45 d6 2e 96 b4 ed a6 7b 03 cf 5e 09 ad bd Data Ascii: 7t4`6CyC(?2.a-#2)=3xrci@h=vcyk%}W3_oXaW5Ll:u~n{vw}!R-p{/",0<,>~r1a>\j\BLaPoUIMbB> b<BE.{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50301	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	768	OUT	GET /ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s0.2mdn.net/sadbundle/15731790504837385821/index.html?e=69&leftOffset=0&topOffset=0&c=Yn2DA4XP4P&t=1&renderingType=2&ev=01_250 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:21 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1901 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 19:31:36 GMT Expires: Mon, 15 Jan 2024 19:31:36 GMT Cache-Control: public, max-age=86400 Age: 64365 Last-Modified: Thu, 14 Dec 2023 15:01:47 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	508	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 84 00 00 00 32 08 03 00 00 00 aa 09 83 fd 00 00 00 a2 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 04 2e 76 82 00 00 00 35 74 52 4e 53 00 80 40 90 70 1f 60 f1 e1 30 10 b0 4f f7 09 06 e7 a0 48 19 fa a6 d0 22 ca 68 15 b7 7a 39 eb d5 63 0d 5c 8d 55 34 29 dc Data Ascii: PNGIHDR2PLTE.v5tRNS@p`0OH"hz9c\U4)
2024-01-15 13:24:21 UTC	1252	IN	Data Raw: b6 62 8c 5d e5 cd 63 0c 5b 4b 4f cf 63 7c 13 8b 9f f0 61 12 c5 f8 21 a9 0b 04 36 19 df 8f d6 f1 32 9e cf c6 10 6c a9 64 04 08 77 c1 cc 5d 86 00 c2 e0 45 42 f6 de 8c 11 3e e6 70 c7 b0 e9 30 d2 b3 95 38 a9 09 15 0c e4 85 43 82 0c 05 43 7a 72 6e 03 3a 25 9d f9 b8 7b cc 74 13 9c 84 6a fc 3d 00 e7 83 13 c9 30 58 01 f1 70 7c b6 ec 01 d3 c1 31 c5 26 ca a9 c4 03 d3 c1 bb 65 45 60 0c 52 b0 de a0 2b ab f6 ba 20 95 15 60 fb db 5d ca 26 c3 75 34 6d 63 61 8e 9c 82 91 79 cf f5 29 16 f1 20 0c 8f 16 49 b6 1b 54 b3 69 00 72 51 4c e4 bd 5e ad b1 68 48 d0 ad 96 10 80 de 31 45 47 a9 39 13 b5 6f 07 ac ef a3 81 ac c9 f9 97 d2 07 c0 8a 94 2c 08 6b d5 75 53 82 de a2 8f 24 be c0 52 6a a1 f6 22 d1 0f 7a 4a 43 17 c0 55 96 75 d4 fa 1b 00 ca 56 d3 a7 44 da 1f cb 44 f1 be 25 b1 90 7b Data Ascii: b]c[KOc\|a!62ldw]EB>p08CCzrn:%{tj=0Xp\|1&eE`R+ `]&u4mcay) ITirQL^hH1EG9o,kuS$Rj"zJCUuVDD%{
2024-01-15 13:24:21 UTC	141	IN	Data Raw: f5 2b 89 45 ea f5 f9 b4 27 58 c5 3e 7c 72 cd 42 02 1e 8f 89 fc d4 c7 12 58 3d 9f 8e 31 04 7c c4 42 fe ff a8 ab 4a 98 29 f9 a1 f2 53 de a8 24 64 3d c3 83 e9 c0 f2 b4 0a 1c c6 b8 a2 77 c8 8b e9 18 13 a1 e4 27 0e 4e f1 84 f4 19 8b 11 31 56 f6 16 d1 4a 1d e0 ed cb 69 3c 0c 21 b8 26 85 ce e6 8b 9b f2 a6 8c 79 a8 b8 ba 6b 51 88 56 8c a3 03 10 a7 e2 b9 f3 b9 1b e1 2b df fa ce e1 ee 13 88 8a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: +E'X>\|rBX=1\|BJ)S$d=w'N1VJi<!&ykQV+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50303	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	2720	OUT	GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2357&cbvp=1&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:21 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:21 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50310	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	856	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmS-r2i0KuoDE5VH6MhY0yxiuBi9DoHx5-BnW89CwUbGL8wjR4BwvZHCGpemoHRISzA3AojOxrcVOqyDiYjcrvF2S8z_iUGwwX0Ytz1HramZpxARoSjI5uP1Y9KigxhiWIoX7XLkTLZ_isKnu2mdgKlwdQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50308	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTwgIEN1LQK4KZCH0XtrVcRtsuq2iH3k-hQ-KJZNB5p_u2XmHIyypSS8zqmgNzSkYLWifF7P5x6gJAoSTXkNQu9Z3_NsV9sop4 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50305	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:21 UTC	390	OUT	GET /sadbundle/12128317773909862788/Border_image_300x250.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	822	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 35678 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 00:00:56 GMT Expires: Sun, 12 Jan 2025 00:00:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT Content-Type: image/png Age: 221006 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	430	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 06 00 00 00 1b 6d 7a f3 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 04 e1 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 34 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 Data Ascii: PNGIHDR,mzpHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rd
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 2f 22 20 78 6d 6c 6e 73 3a 70 68 6f 74 6f 73 68 6f 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 70 68 6f 74 6f 73 68 6f 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 45 76 74 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 45 76 65 6e 74 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 32 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3d 22 32 30 32 33 2d 31 32 2d 31 31 54 31 30 3a 31 32 3a 33 32 5a 22 20 78 Data Ascii: /" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 25.2 (Macintosh)" xmp:CreateDate="2023-12-11T10:12:32Z" x
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 3e 9d 01 70 56 01 28 db 1d 53 47 fc f4 44 db d7 f1 67 69 a6 d5 8c 55 10 71 98 35 2c 67 ac 75 c4 75 28 4a 3a ff 44 fb f2 3b c5 05 5c 38 c1 fb 1b 6d bb 81 1a 72 79 1e 5f 67 2f 58 ed 34 d9 91 d3 8c 4c 11 ab 95 f0 a7 cf b4 f7 af b4 eb 1d 80 10 ce 54 75 a4 e5 89 ed cb 17 74 4a 88 0f b4 75 23 d0 a8 56 09 31 91 ef 2b fa 74 21 06 c7 f6 f5 77 e8 20 73 02 55 ec eb 95 f8 e9 27 ca 5e f0 6a 48 70 e8 94 c8 79 a3 3f 56 24 06 6c 7d 8c 7f 6f 3e 43 6b 94 b7 2b e1 f9 42 c9 99 f0 f4 4c f9 7a 23 44 4f fe 7a 25 3d bd b0 ef 2b e2 3b b3 4b d4 b5 50 ee 05 9e 4f 88 8b c8 7d bc 56 f2 f2 44 5f 37 ec f5 8d 69 8a ac 4e f0 5e 90 ee e8 ff f4 05 fb 34 93 7e 3a 63 9b b1 fd f6 8f c8 29 c0 12 20 04 3c 33 da 14 eb 99 62 19 9a 91 52 22 af 37 2c 2a e1 e9 13 b6 66 2a 19 4a 81 70 c2 11 c6 6b d1 Data Ascii: >pV(SGDgiUq5,guu(J:D;\8mry_g/X4LTutJu#V1+t!w sU'^jHpy?V$l}o>Ck+BLz#DOz%=+;KPO}VD_7iN^4~:c) <3bR"7,fJpk
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 69 41 96 00 08 de 07 8a 19 e2 0c 9d 27 ea fd 4a 7d ac b8 65 21 cd 91 ed eb 17 e6 f9 04 71 a2 bc bd 43 fd b8 8c 7c a4 37 a3 e7 06 85 f1 d4 0a 1e 51 45 4a 07 05 15 c5 ee db 78 82 4f 4a ef 15 ac d3 ef 37 50 c1 a5 48 bb 3e e8 6d 47 4e 11 05 5c f2 64 df 31 6d c8 92 e8 b9 62 7f fd 0a a7 84 88 c7 34 80 29 ea 27 4a de 70 a7 44 59 57 44 0d 72 a1 95 0c 53 1a 0f 00 11 7a 6b f4 9e d1 29 e2 0d 72 de 69 b9 11 44 c6 d3 58 1c b8 80 77 33 66 e3 0d d2 f7 0d 7b 6c a0 40 2f a0 1e 3f 9d 68 fb 46 88 13 bd 55 4c 04 99 27 ea db 15 4b 09 4e 11 b7 36 a4 0a 96 02 a4 88 6d 37 1c 1d dd 56 7a 37 dc 34 53 1e 1b 56 0c f1 11 33 c3 4a 21 e4 06 79 c7 a9 61 db 8a 35 88 e7 19 9b 3c 3d 4e b0 43 6f 46 4b 11 09 11 a7 4a 4a 13 e2 13 76 3a 43 0a 58 e9 70 7b e0 10 7c 9a a8 29 81 06 14 f0 06 c5 0c Data Ascii: iA'J}e!qC\|7QEJxOJ7PH>mGN\d1mb4)'JpDYWDrSzk)riDXw3f{l@/?hFUL'KN6m7Vz74SV3J!ya5<=NCoFKJJv:CXp{\|)
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 9e 72 7d 85 94 d0 18 90 d6 b0 34 22 23 bb 6e 4c cf 67 74 89 54 eb e8 79 a4 46 6d db 90 bf a5 78 a5 22 80 01 ea 26 bc 53 ea 6d 07 33 44 23 56 3a 71 7e c2 57 d8 df 6f f8 69 a2 a9 00 c2 74 be 50 f7 02 06 32 7b 7a cd e8 25 21 e2 e8 ef 6f b8 18 69 39 43 b5 8f 5f 3a 3f 24 01 11 2c 97 0f a1 33 80 53 fa 63 c5 72 65 9a 22 6a 32 de 3c 22 10 15 4d 7e 5c 36 eb 4a 10 25 97 0c ad a1 53 a0 ab d0 f7 0c eb 75 bc 01 11 d4 1a ad 56 5c 9a b1 bc d3 73 1f e9 5d 6d 60 86 73 0e 57 46 04 da 95 91 62 d5 8a 84 00 c5 68 d7 95 d6 3b 36 05 ec 79 66 0a 89 f6 9f fe 19 ef 03 4e 1d e5 76 43 3a 43 93 23 90 4e 0b 6d db e9 41 a1 17 5a 5e f1 ce d3 b7 1d 3d 25 dc 1c 47 ea 2e 80 54 10 28 7f 93 14 72 03 94 30 cf b4 7d a7 e1 d0 10 d0 79 a1 6e 95 5e f7 11 85 a4 40 70 42 df 0a b5 37 46 42 d1 d1 34 Data Ascii: r}4"#nLgtTyFmx"&Sm3D#V:q~WoitP2{z%!oi9C_:?$,3Scre"j2<"M~\6J%SuV\s]m`sWFbh;6yfNvC:C#NmAZ^=%G.T(r0}yn^@pB7FB4
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 7d 68 42 d6 fb 47 15 ca 61 1f 17 4f db 37 c2 69 a6 8b 62 fb 46 eb 15 ef 0c 4d 91 96 1f 68 69 90 12 61 9e 10 84 56 0a b2 44 a4 75 ac 66 c2 72 22 b7 8c 46 8f 17 4f 7b 7d c5 e6 84 5b 12 86 21 62 d4 bd d2 4a 21 2e 67 dc 32 d1 0d 6c db 08 5e e8 ce 61 2a d0 2a 96 0b 22 42 08 11 7f ba a0 53 a2 e5 0d ac 53 d7 8d d6 3a 71 3e 51 1b 94 2d 43 08 43 cf 78 ac 74 3a ee bc 10 cf 67 6a ad f4 32 22 42 3f 4f 94 eb 3b fe 74 a2 79 87 78 1d 6f 9a f7 3b 9c ce b8 de 09 b5 23 4d a1 74 c4 8f 34 bd 5a 06 af 84 18 e9 0d ce d3 99 fa fe 3b 1d 86 84 21 23 ea 31 2b 90 3b dd fa 48 a9 f6 8e d1 e9 aa 68 ed 54 2a f6 fe 4e f4 0b 52 2a cd cb 88 50 d5 13 4f 33 75 5b 71 aa 04 ef e9 f9 41 af 1f df 9b 17 a6 f3 19 2f 42 f9 ed 57 a6 5f fe 01 8b 0e eb 05 f2 4e c7 30 81 98 66 54 3d f5 fd 1d e9 8d e0 Data Ascii: }hBGaO7ibFMhiaVDufr"FO{}[!bJ!.g2l^a*"BSS:q>Q-CCxt:gj2"B?O;tyxo;#Mt4Z;!#1+;HhTNR*PO3u[qA/BW_N0fT=
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 80 be 6d e8 f9 34 f4 a3 de 10 75 b4 7d c3 30 5c 9a c0 2b b6 ef 58 6d d8 96 09 31 a2 5b 45 9d d2 6c 7c 5f d1 8d 9f 8f 2d 91 b8 9c e9 25 ff fd 41 17 e7 05 2b 99 5a 1b ad da 10 8c c3 48 d1 e2 3c d3 7a c6 96 84 f3 4a bb ef 4c 6e 26 04 8f 76 a5 5e 1f a4 0f 21 be e7 9d f9 3c 5e bf 92 77 9a 75 c4 3a 16 d2 78 48 ae 15 9f a6 21 e0 d7 42 10 4f 0b 0e ed 85 fa 78 10 77 41 6f 3b 16 16 d4 0d 9d cc 85 40 0c 81 2a 3b e1 e7 4f 38 12 e5 eb ef 54 15 96 e7 17 7a 6d e3 f7 35 7c 44 c8 53 1a 15 c1 6b 81 eb 8a 5e a6 51 6c 30 88 2f 97 a1 bf b5 4e 4b 1e 13 b0 35 23 61 c2 82 a3 87 80 f6 4e df 37 fa 9e 09 1f a9 5d 4f 13 ea 85 7c db f0 f3 42 eb 9d e9 74 a6 dc af b4 96 f1 cb 89 5e 1a da 0a b8 80 9b 02 3d 8f 08 09 af 60 6d 64 08 e7 89 18 13 da 3a 9d 86 2e 33 22 82 2b 75 e8 99 d1 8f a8 Data Ascii: m4u}0\+Xm1[El\|_-%A+ZH<zJLn&v^!<^wu:xH!BOxwAo;@*;O8Tzm5\|DSk^Ql0/NK5#aN7]O\|Bt^=`md:.3"+u
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 7d 54 7c 64 a4 14 e2 15 5b 1f c3 bc 5a db a8 08 ff f4 09 c4 b0 9a 51 19 df 4b bb 5f e1 b6 12 f0 ec b7 c7 10 e7 f3 83 ba 6d cc 2f 2f f4 d3 04 db 8e dd 1e 23 52 ab 0d d7 95 4e 87 2e 88 0c ad a3 19 78 ef f1 51 e8 6d 67 fe fc 89 f6 b8 0d 89 60 3e 91 e6 38 cc 8e 1d ec cb 83 69 59 b0 e6 68 be 0f 1f db 34 aa 75 ae 0f 29 c2 17 23 ff e3 5f a1 75 e2 e9 19 e7 03 e5 ed 0e 4e 87 a4 d1 a1 3d 76 ba df 87 0b db db 78 53 77 e3 34 9f d9 5b 43 a2 27 24 47 55 87 9b 9f e8 ad d1 7a 66 78 23 86 f1 d3 fb 44 df 76 78 cf 48 30 c2 9c 20 39 ca ed 2b 94 a1 47 b9 18 11 e9 54 0a 7e 39 e3 ac d1 4b 85 79 1a 0f 58 e7 68 22 e0 18 91 be 07 cc 08 61 c1 4f 89 d0 15 67 46 15 a3 5a 1f bf 4f 61 bc 96 6d bd 11 4f 67 82 3a 6a 2d 1f 05 18 a1 3b f9 bb 54 a3 65 88 d9 fa 32 53 ef 6f b0 0f b1 9d bd 11 Data Ascii: }T\|d[ZQK_m//#RN.xQmg`>8iYh4u)#_uN=vxSw4[C'$GUzfx#DvxH0 9+GT~9KyXh"aOgFZOamOg:j-;Te2So
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 5d 0a 35 38 58 96 71 11 e2 41 3d 2d 77 24 77 fc 34 61 73 02 73 c8 2f 2f f4 d6 b1 92 61 dd 71 e3 0e a7 fb 0e 36 f4 af b6 57 54 1d cc cb 88 d0 65 08 b7 f6 be 41 ae e8 2f 4f 48 cb 34 69 d8 75 e5 79 be f0 f8 bb 1e 54 f1 aa 38 9f 68 dd a8 7d e7 f4 72 21 f7 86 de 37 7c f2 78 a7 b4 6e f8 79 a2 cd 82 44 85 47 81 a2 4c bf fc 8c fb d3 0b 75 dd e8 af ef 88 af a4 e7 13 5d 1b 04 25 a4 89 a8 09 5b ce 14 04 f7 f2 42 fc e9 67 32 9d 5a 3b da 84 f4 e9 33 ae 8e 8a 28 69 62 bf df 09 e7 0b f1 f4 79 78 90 14 10 a5 d6 82 b6 86 5a 25 5d 9e d1 6e 50 d7 91 9a e6 4a 5d 33 cb 72 c1 9a 62 53 42 5c 1a 2d 73 b7 8d 5e 36 34 40 77 46 b7 ce fc 7c 1e fa aa 36 64 72 b4 fb 03 5a 45 16 8f 5e 22 78 c3 ae 05 b1 38 ec 2a e7 d3 d0 9e f6 0a 6e 64 26 ee a3 63 40 1f c3 d2 20 06 3e 0e 9d d3 1e 95 e6 Data Ascii: ]58XqA=-w$w4ass//aq6WTeA/OH4iuyT8h}r!7\|xnyDGLu]%[Bg2Z;3(ibyxZ%]nPJ]3rbSB\-s^64@wF\|6drZE^"x8*nd&c@ >
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: d3 4c 74 a3 34 1f e6 19 e7 1d 9a 02 fb 76 a3 dd 57 f4 34 23 ea 70 c1 11 9e 2f e4 bc 0e d1 77 df e9 39 d3 7a 1b 51 50 6f 58 0a 98 75 70 82 38 a1 be df 86 0d a3 8e af 6d 79 c7 ee 0f f4 91 c9 52 46 b1 e0 bc e0 2f 0b 7b 19 9a 95 ed 23 c2 f6 9f 5e a8 79 23 f8 48 cf 46 f3 46 69 05 49 8a 48 c7 b4 42 2b 48 77 23 ba 53 87 bd bd e1 83 a3 79 a5 77 1b 93 28 96 05 82 22 d3 4c cb 1b f2 74 22 e8 28 28 c4 94 c8 fb 36 2a 71 31 40 f0 d8 ed 8a 44 45 e7 99 2e 36 32 89 3c fa 04 9d 13 ea f5 8a 5b 66 8a 95 61 aa 6c 46 79 bf 52 5b a5 93 91 e8 e9 d6 09 38 ba 55 58 a6 21 93 ac 3b 72 59 90 56 69 14 2c 17 da ed 46 2b 0d 7a e0 b4 3c e1 c4 d8 5e 7f 45 e6 30 a6 3c d4 0c 61 54 0c a9 7d 34 67 5b 41 c2 18 20 10 53 18 f6 09 d5 11 30 a4 30 bc 7c ad e1 04 ca 36 a2 c2 18 a7 a1 83 96 d1 88 dd Data Ascii: Lt4vW4#p/w9zQPoXup8myRF/{#^y#HFFiIHB+Hw#Syw("Lt"((6*q1@DE.62<[falFyR[8UX!;rYVi,F+z<^E0<aT}4g[A S00\|6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50332	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	388	OUT	GET /sadbundle/12128317773909862788/background_300x250.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 146119 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Sat, 13 Jan 2024 17:58:45 GMT Expires: Sun, 12 Jan 2025 17:58:45 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT Content-Type: image/png Age: 156337 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	429	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 00 fa 08 06 00 00 00 1b 6d 7a f3 00 00 2c 6b 63 61 42 58 00 00 2c 6b 6a 75 6d 62 00 00 00 1e 6a 75 6d 64 63 32 70 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 00 00 00 2c 45 6a 75 6d 62 00 00 00 47 6a 75 6d 64 63 32 6d 61 00 11 00 10 80 00 00 aa 00 38 9b 71 03 75 72 6e 3a 75 75 69 64 3a 62 65 66 65 62 34 35 33 2d 36 34 37 66 2d 34 66 63 65 2d 61 35 66 35 2d 64 36 36 64 33 33 61 38 37 66 32 62 00 00 00 01 b3 6a 75 6d 62 00 00 00 29 6a 75 6d 64 63 32 61 73 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 73 73 65 72 74 69 6f 6e 73 00 00 00 00 d7 6a 75 6d 62 00 00 00 26 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 61 63 74 69 6f 6e 73 00 00 00 Data Ascii: PNGIHDR,mz,kcaBX,kjumbjumdc2pa8qc2pa,EjumbGjumdc2ma8qurn:uuid:befeb453-647f-4fce-a5f5-d66d33a87f2bjumb)jumdc2as8qc2pa.assertionsjumb&jumdcbor8qc2pa.actions
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 62 00 00 00 28 6a 75 6d 64 63 62 6f 72 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 68 61 73 68 2e 64 61 74 61 00 00 00 00 7b 63 62 6f 72 a5 6a 65 78 63 6c 75 73 69 6f 6e 73 81 a2 65 73 74 61 72 74 18 21 66 6c 65 6e 67 74 68 19 2c 77 64 6e 61 6d 65 6e 6a 75 6d 62 66 20 6d 61 6e 69 66 65 73 74 63 61 6c 67 66 73 68 61 32 35 36 64 68 61 73 68 58 20 0e 49 2f f7 31 41 46 79 a1 8b e6 c9 22 45 7f 4d ca 62 18 7c c6 21 41 e6 e5 d8 54 46 13 fc 1e b2 63 70 61 64 48 00 00 00 00 00 00 00 00 00 00 02 03 6a 75 6d 62 00 00 00 24 6a 75 6d 64 63 32 63 6c 00 11 00 10 80 00 00 aa 00 38 9b 71 03 63 32 70 61 2e 63 6c 61 69 6d 00 00 00 01 d7 63 62 6f 72 a8 68 64 63 3a 74 69 74 6c 65 6f 47 65 6e 65 72 61 74 65 64 20 69 6d 61 67 65 69 64 63 3a 66 6f 72 6d 61 74 69 69 6d Data Ascii: b(jumdcbor8qc2pa.hash.data{cborjexclusionsestart!flength,wdnamenjumbf manifestcalgfsha256dhashX I/1AFy"EMb\|!ATFcpadHjumb$jumdc2cl8qc2pa.claimcborhdc:titleoGenerated imageidc:formatiim
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 42 00 04 4d 2c ae 51 f9 03 ff b5 e7 f3 05 97 56 ac 36 1f 10 f1 3b 9b 3a c1 15 7e ed 2a 94 9a c5 d2 c9 a3 b7 02 f5 21 e1 d9 fc 00 7b 27 9f 6e d5 3a e9 86 8d 41 0c df 39 95 f4 d8 df 4a cd 06 c7 d3 fa 6c a3 82 01 8b 30 82 01 87 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 16 06 03 55 1d 25 01 01 ff 04 0c 30 0a 06 08 2b 06 01 05 05 07 03 08 30 20 06 03 55 1d 20 04 19 30 17 30 08 06 06 67 81 0c 01 04 02 30 0b 06 09 60 86 48 01 86 fd 6c 07 01 30 1f 06 03 55 1d 23 04 18 30 16 80 14 ba 16 d9 6d 4d 85 2f 73 29 76 9a 2f 75 8c 6a 20 8f 9e c8 6f 30 1d 06 03 55 1d 0e 04 16 04 14 b0 35 aa 56 c3 21 a9 8b ce d3 b8 bc 8b 16 25 57 9d ef 34 e1 30 5a 06 03 55 1d 1f 04 53 30 51 30 4f a0 4d a0 4b 86 49 68 74 74 70 3a 2f 2f 63 72 Data Ascii: BM,QV6;:~*!{'n:A9Jl00U0U00U%0+0 U 00g0`Hl0U#0mM/s)v/uj o0U5V!%W40ZUS0Q0OMKIhttp://cr
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 39 36 20 53 48 41 32 35 36 20 54 69 6d 65 53 74 61 6d 70 69 6e 67 20 43 41 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 c6 86 35 06 49 b3 c1 3d 72 49 51 55 c7 25 03 c4 f2 91 37 a9 97 51 a1 d6 d2 83 d1 9e 4c a2 6d a0 b0 cc 83 f9 5a f6 11 a1 44 15 42 5f a4 88 f3 68 fa 7d f3 9c 89 0b 7f 9d 1f 9e 0f 33 1f 50 13 0b 26 73 96 6d f8 57 a8 02 7d fd 43 b4 84 da 11 f1 73 b1 b3 ee 2b 80 84 8a 22 18 df eb da 3d c4 17 7f ab 19 2b 3e 42 dc 67 8e ea 51 3d f0 d6 56 d4 e7 28 2d eb d3 b1 b5 75 e7 1f 06 65 8d 94 29 d3 d9 ec 69 df d9 90 87 46 00 7b db 44 41 89 dc 7c 6a 57 7a f0 37 79 9f 5d ac cb e8 84 64 b4 52 f2 76 47 f7 61 83 19 dd 5f b4 54 0b 21 68 6e 37 21 bb 40 ac 5f b2 de 4a 7d ce f5 39 12 67 ef 0e a5 63 6c e4 a6 c5 Data Ascii: 96 SHA256 TimeStamping CA0"0*H05I=rIQU%7QLmZDB_h}3P&smW}Cs+"=+>BgQ=V(-ue)iF{DA\|jWz7y]dRvGa_T!hn7!@_J}9gcl
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 92 d7 26 6b e4 38 73 ab a6 01 4f bd 3f 3b 78 ad 4c ad fb c4 95 7b ed 0a 5f 33 39 87 41 78 7a 38 e9 9c e1 dd 23 fd 1d 28 d3 c7 f9 e8 f1 98 5f fb 2b d8 7e f2 46 9d 75 2c 1e 27 2c 26 db 6f 15 7b 1e 19 8b 36 b8 93 d4 e6 f2 17 99 59 ca 70 f0 37 bf 98 00 df 20 16 4f 27 fb 60 67 16 a1 66 ba dd 55 c0 3a 29 86 b0 98 a0 2b ed 95 41 b7 3a d5 15 98 31 b4 62 09 0f 0a bd 81 d9 13 fe bf a4 d1 f3 57 d9 bc 04 fa 82 de 32 df 04 89 f0 00 cd 5d c2 f9 d0 23 7f 00 0b e4 76 02 26 d9 f0 65 76 42 a6 29 87 09 47 2b e6 7f 1a a4 85 0f fc 98 96 f6 55 54 2b 1f 80 fa c0 f2 0e 2b e5 d6 fb a9 2f 44 15 4a e7 13 0e 1d db 37 38 1a a1 2b f6 ed d6 7c fc 31 82 01 b9 30 82 01 b5 02 01 01 30 77 30 63 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 17 30 15 06 03 55 04 0a 13 0e 44 69 67 69 43 65 72 74 Data Ascii: &k8sO?;xL{_39Axz8#(_+~Fu,',&o{6Yp7 O'`gfU:)+A:1bW2]#v&evB)G+UT++/DJ78+\|100w0c10UUS10UDigiCert
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 9a 57 9e b3 e3 57 51 8d ff 64 1e 31 1f e3 6c 66 29 6c ee 6d 5b 2f 6b f6 85 29 c7 88 ba 2a 65 e5 0a 92 56 c7 52 64 f8 66 98 eb 64 27 6d b8 8b 16 9b 98 f6 3c f5 ca af b1 ca 52 e0 9b 65 25 c1 02 03 01 00 05 a3 82 01 8c 30 82 01 88 30 0c 06 03 55 1d 13 01 01 ff 04 02 30 00 30 0e 06 03 55 1d 0f 01 01 ff 04 04 03 02 07 80 30 1e 06 03 55 1d 25 04 17 30 15 06 09 2a 86 48 86 f7 2f 01 01 0c 06 08 2b 06 01 05 05 07 03 04 30 81 8e 06 03 55 1d 20 04 81 86 30 81 83 30 81 80 06 09 2a 86 48 86 f7 2f 01 02 03 30 73 30 71 06 08 2b 06 01 05 05 07 02 02 30 65 0c 63 59 6f 75 20 61 72 65 20 6e 6f 74 20 70 65 72 6d 69 74 74 65 64 20 74 6f 20 75 73 65 20 74 68 69 73 20 4c 69 63 65 6e 73 65 20 43 65 72 74 69 66 69 63 61 74 65 20 65 78 63 65 70 74 20 61 73 20 70 65 72 6d 69 74 74 Data Ascii: WWQd1lf)lm[/k)eVRdfd'm<Re%00U00U0U%0H/+0U 00*H/0s0q+0ecYou are not permitted to use this License Certificate except as permitt
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 13 14 41 64 6f 62 65 20 54 72 75 73 74 20 53 65 72 76 69 63 65 73 31 22 30 20 06 03 55 04 03 13 19 41 64 6f 62 65 20 50 72 6f 64 75 63 74 20 53 65 72 76 69 63 65 73 20 47 33 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 b7 1f 2e bd bd 09 b3 5c 48 6c fe 0c 83 ae 6c 01 ea 51 78 25 a4 80 3e 89 a7 b1 b2 88 64 da f6 89 76 81 f9 f9 1d f3 95 fc 78 98 8d 98 8e cf e4 ee 1c 55 3e 0d 73 5a 77 ce b1 12 a8 15 78 65 4c 96 f2 07 19 ef c4 1d c2 81 c6 f1 03 5d d9 53 5c 1e 73 20 49 1f 97 4f d2 1a 7e c9 ea f4 d7 f0 c3 72 6d f4 a2 f7 97 90 0d 43 99 f5 f8 c2 6a af 8f 04 58 d2 e5 97 de 36 6c e2 ff 24 7e 32 c0 34 8c a2 a8 59 aa d2 44 21 45 14 1a 54 15 05 9f 02 02 f2 5c ec b1 3a 75 d0 39 0b 9d 8f 13 63 e9 6b b4 5f 42 01 d7 7f Data Ascii: Adobe Trust Services1"0 UAdobe Product Services G30"0*H0.\HllQx%>dvxU>sZwxeL]S\s IO~rmCjX6l$~24YD!ET\:u9ck_B
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 2b 26 42 4b b2 f8 13 49 82 95 bc 7e 05 14 8c 1f 77 95 a3 a8 e0 bd ee 35 fd f2 b7 15 03 38 40 23 48 92 91 ac ec 58 e3 2f 2f a9 b4 2f 89 cb 25 aa 71 fb ce 46 b1 55 fc 63 a0 07 98 43 f8 6e 60 84 97 08 a5 e8 a0 0f f9 47 b0 24 58 b0 e6 b9 b0 57 6a 44 48 70 21 62 e6 49 6b 4d c1 f2 d9 74 9d dd 90 27 3b c9 1a 66 de 06 a5 ea a4 5f 4e 46 29 c5 33 71 c4 ac af 29 b9 1a 24 3a 31 47 db ed 5a b0 b7 88 da d0 77 d5 6f c4 2d d3 5e db b3 a0 76 ea ba 67 aa 81 c0 2a 79 f5 85 f6 ee ac 9d 0e 10 f4 59 17 cd eb 89 02 b3 6e 4a f3 c8 86 00 63 56 d8 20 1f 4c 34 be 6f e5 98 24 18 88 2f d8 d7 61 9e 0b 17 e0 62 52 f7 dd bb 63 70 61 64 59 0b bc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: +&BKI~w58@#HX///%qFUcCn`G$XWjDHp!bIkMt';f_NF)3q)$:1GZwo-^vg*yYnJcV L4o$/abRcpadY
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50337	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	2743	OUT	GET /pcs/view?xai=AKAOjsufDMTWwpb3fU4pk80hrIizYVgvhdeogahIn4hkKcCvx7ls9z-q9Kht3uueVCOxQ6HTiETOtW-VgFyFMuXQR5EGpbPvigXatT3LM3vQCdDVs_g1__hckNGfih4Cvz7FIA0o9aHRRnhlXkLMCST5g3OcmUhBW1zhuC2k-lW5FP2PgccFQV8mcXXK1sJmcmmCcbDfYmcnnCKcxzy3AsYmQZnvICZKGDT70ZdJzUBo88BvVUeM_vovbhbrSN7GhI93jbM7lrxDQ7B9DH59BU5by5W4m5Gmmg8eQkuNb7uLUP7cw_lnMoH2u-DRPl_fCZp025_gnO8qN1Zxt8qjEaaLa7fxU60QGuXVKv3-1_JnHkKWQOTFm3zrFUg5brJzALVoteoI2eYtEx0zl3v8xBi9EsodiQ-zTWZ3L-dyfxE1nXn_D4ljpat5q0BSCTgl89EpZ2Z5G2mpKFHTZcu21pLD4p-h6ctWjm6qzd9Ma7PCnOj3ndrEt-SOOCIF8vFVxdyIo9DcXH1h6t1rnIb-lqjB8qwCiP41kyU9oQ9P_0T2AaLP-X-qEsBxhtD1obfn1FH62hqdT7Dd7MhlMn8ZDpjAVGY1RMzvCAOs6l1LZQlG0WacuzvAviCpyrnqTNj1XblXtDSBhLekOcOjYCeZjMoMY-8EMUdN3T1wAJQ5Xag5S5xXx_fjlpxiNHI7AvZHZmO8ilryJrdkwnTHnX0qgknKib5tv8f3JTFbkn0B0hJllVrHeQ-Ebkh0drpk8lKVDQR3cC17HKfKpr_i5v6jixIbeRRFEPX0kVZTHeKbia8iSfW3ITUVgr_vWlY5QnTCpW5xanR4w73weIxDNGMlDJ4ubBITAXWBquGPDHDuEvoxpk6dI4W14D7sY4JVZ7TOBX9D96px0NHb6kmK7K0mEveDrCnkcHdY9xm1fjScAiXXxNGLa_ylahoYFaA2QVxo2JPyJGIYfP5MzZAkOt5J0wthYl2BnDDF6WM0CiUkn66S7EGsrEYRIbDasLbBQcLO00_gxwu0OTo3TcsH348-k67uh6yJ0nPfl5JCTjjcq7ey4yJiQLRcVNQe9x_fh9IWvV-MSRhOz5FTJobJhrzKxYX3D_JQd3KOtrnlqpts8F5g0uhcemAbjT53xB6eASsi5BLaQiYebEVunISv08aXoDrn3PNyKRs3wECfdelqWimOwnXof9m1u21KATQV1BVlKNWwsMnvh8rWhxtURtx8usshUXaDTOaOb17kGuhH7Uhbcth42h6vaUfotkO4LD3FJVl2uk47nt7Zai-49bngqUFkBR1NJYzlHwwNesa2dgIm0ZaJ2oJFaR1v4RM01pCV_cLGOOk3Ws6OgD1sXKUP7M9DyXLdpkUXDoqhNHS7h7R5O653aRU8e-W56Jnuwy89I_hvC1NnF6g&sai=AMfl-YSwxOBCp1MpmSyJSxJjL7dQjXxUmJGmfOfBGCji1Yq9LYRyXe_0gj9ZTVTX5-h_se6gCk5U6TTcGT0wN2Y_wBDuI3yllfijWRBlzvNp9DtPpRa85Hwm-dQgpsXij-0FdSM0hbIBbtmltKpw3bXDzobzajOJnBUb0kNcTlOVPB7CGLtiX0qce02PygCZoIAEU8C_meZFWPtGHop3t32zg4jPl6cgbBeVywba7_eET6rBcbmi3dGPUL986H2O7IxxYBxBKTfpKgYEfxNpve_b5XmNAYCReGAjnHdqVbGQfaDW09LuczP2n7-KuP-dPtclA4l-nwWrohe04jnC39G4POTp3G2QWMuGPc99NoD8eig8EIAYa6QNNJ5irCmm7_w9RFenzmAqX6gaVF6gyEoQt6jloP6F9F8bBYu9anN_ji5CVLyMvA&sig=Cg0ArKJSzC00jSxjX56kEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=4632&vt=11&dtpt=2857&dett=3&cstd=1758&cisv=r20240109.07864&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50307	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	857	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRndEC44ZGVhEOFo7-wPeJLUuKApy9O0c21KgE_ao33A_V6pNEosSbBB0AwicewbcVdhV2RJPwYhdEY6nwq7Vy90LctSvYjTJk1PudnvsNmLoMKXVQymj2UOfX6yGmajQADCSxXfAH960AIknXKAXlXbJk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50324	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	488	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
2024-01-15 13:24:22 UTC	990	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 845e7046abe882bd-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HJRiX8RBjn44oo3yD5J4eGayu8DM6%2BXAozlMdglQD09kDZH4TmKojKVeAkomazW%2BJcvvX3fFu%2BYPs%2B%2FrhTfCtZ3Te0erW0BNm%2BkF8N0YuuKjJzUWDPWGOHQFo4hVEWShAkupF2vilxClaQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50309	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	792	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT6EC8isJi3USoTJq-rSgvnxlE0uHBWbyLo_w9cX1nan2D_ui_jCeJuPrMV-gZd3lLsDKiUtshSkuxB4IeNioMVFSGHh-vc-g HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50334	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	374	OUT	GET /sadbundle/12128317773909862788/logo.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	836	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 14575 Date: Mon, 15 Jan 2024 13:24:22 GMT Expires: Tue, 14 Jan 2025 13:24:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	416	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 36 2e 35 2e 33 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 26.5.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 30 30 30 30 31 32 36 33 31 35 38 36 33 35 34 39 30 34 32 35 36 34 39 33 30 30 30 30 30 31 34 37 30 31 32 35 34 33 36 30 31 32 39 30 32 39 35 34 39 5f 22 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 31 36 2e 38 2c 36 30 2e 38 4c 32 31 33 2c 35 30 2e 37 63 2d 30 2e 36 2d 31 2e 37 2d 32 2e 32 2d 32 2e 38 2d 34 2d 33 2e 31 63 2d 32 2e 36 2d 30 2e 34 2d 33 2e 39 2c 30 2e 39 2d 35 2e 39 2c 32 2e 31 63 2d 30 2e 35 2c 30 2e 33 2d 31 2c 30 2e 35 2d 31 2e 33 2c 30 2e 33 0a 09 09 63 2d 30 2e 37 2d 30 2e 35 2d 32 2d 32 2e 35 2d 33 2e 31 2d 32 2e 35 63 2d 30 2e 38 2c 30 2e 31 2d 33 2e 33 2c 31 2e 37 2d 34 2c 32 2e 37 76 2d 32 2e 35 68 2d 32 2e 31 76 31 33 68 32 2e 31 76 2d 39 2e 33 63 30 2d 30 2e 39 2c 32 2e 33 2d 32 2e 35 2c 33 2e 31 Data Ascii: 0000126315863549042564930000014701254360129029549_"><path class="st0" d="M216.8,60.8L213,50.7c-0.6-1.7-2.2-2.8-4-3.1c-2.6-0.4-3.9,0.9-5.9,2.1c-0.5,0.3-1,0.5-1.3,0.3c-0.7-0.5-2-2.5-3.1-2.5c-0.8,0.1-3.3,1.7-4,2.7v-2.5h-2.1v13h2.1v-9.3c0-0.9,2.3-2.5,3.1
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 30 2e 32 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 63 30 2e 33 2d 30 2e 34 2c 30 2e 37 2d 30 2e 36 2c 31 2e 33 2d 30 2e 36 63 30 2e 34 2c 30 2c 30 2e 38 2c 30 2e 31 2c 31 2e 31 2c 30 2e 32 63 30 2e 34 2c 30 2e 31 2c 30 2e 37 2c 30 2e 33 2c 31 2e 31 2c 30 2e 34 63 30 2e 34 2c 30 2e 32 2c 30 2e 37 2c 30 2e 33 2c 31 2e 31 2c 30 2e 34 0a 09 09 63 30 2e 34 2c 30 2e 31 2c 30 2e 37 2c 30 2e 32 2c 31 2e 31 2c 30 2e 32 63 30 2e 35 2c 30 2c 31 2d 30 2e 31 2c 31 2e 35 2d 30 2e 34 63 30 2e 35 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 31 2e 37 2d 31 2e 35 6c 2d 30 2e 32 2d 30 2e 33 63 2d 30 2e 34 2c 30 2e 33 2d 30 2e 37 2c 30 2e 35 2d 31 2c 30 2e 36 63 2d 30 2e 33 2c 30 2e 31 2d 30 2e 36 2c 30 2e 32 2d 30 2e 39 2c 30 2e 32 0a 09 09 63 2d 30 2e 33 2c 30 2d 30 2e 37 2d 30 2e 31 Data Ascii: 0.2-0.3,0.4-0.5c0.3-0.4,0.7-0.6,1.3-0.6c0.4,0,0.8,0.1,1.1,0.2c0.4,0.1,0.7,0.3,1.1,0.4c0.4,0.2,0.7,0.3,1.1,0.4c0.4,0.1,0.7,0.2,1.1,0.2c0.5,0,1-0.1,1.5-0.4c0.5-0.3,1.1-0.7,1.7-1.5l-0.2-0.3c-0.4,0.3-0.7,0.5-1,0.6c-0.3,0.1-0.6,0.2-0.9,0.2c-0.3,0-0.7-0.1
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 2d 30 2e 31 2c 30 2e 34 2d 30 2e 31 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 34 63 2d 30 2e 33 2c 31 2e 32 2c 30 2e 39 2c 33 2e 31 2c 31 2e 33 2c 34 2e 36 63 31 2e 35 2d 30 2e 34 2c 33 2e 37 2d 30 2e 33 2c 34 2e 36 2d 31 2e 31 63 30 2e 31 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 33 0a 09 09 63 30 2c 30 2e 31 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 63 30 2e 34 2c 31 2e 32 2c 32 2e 33 2c 32 2e 32 2c 33 2e 34 2c 33 2e 33 63 31 2e 31 2d 31 2e 31 2c 33 2d 32 2e 31 2c 33 2e 34 2d 33 2e 33 63 30 2d 30 2e 31 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 2d 30 2e 34 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 33 0a 09 09 63 31 2c 30 2e 38 2c 33 2e 31 2c 30 2e 38 2c 34 2e 36 2c 31 2e 31 63 30 2e 34 2d 31 Data Ascii: -0.1,0.4-0.1c0,0.1-0.1,0.2-0.1,0.4c-0.3,1.2,0.9,3.1,1.3,4.6c1.5-0.4,3.7-0.3,4.6-1.1c0.1-0.1,0.2-0.2,0.3-0.3c0,0.1,0.1,0.3,0.1,0.4c0.4,1.2,2.3,2.2,3.4,3.3c1.1-1.1,3-2.1,3.4-3.3c0-0.1,0.1-0.3,0.1-0.4c0.1,0.1,0.2,0.2,0.3,0.3c1,0.8,3.1,0.8,4.6,1.1c0.4-1
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 2e 33 2d 30 2e 36 2d 30 2e 38 2d 30 2e 36 2d 31 2e 31 2d 30 2e 36 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 32 2c 30 0a 09 09 63 30 2c 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 31 63 30 2e 31 2d 30 2e 31 2c 30 2e 35 2d 30 2e 33 2c 30 2e 38 2d 30 2e 33 63 30 2e 32 2c 30 2c 30 2e 34 2c 30 2c 30 2e 36 2c 30 2e 31 6c 30 2e 32 2c 30 2e 31 6c 2d 30 2e 31 2d 30 2e 32 63 2d 30 2e 32 2d 30 2e 35 2d 30 2e 31 2d 31 2e 32 2c 30 2e 35 2d 31 2e 37 63 30 2e 36 2c 30 2e 34 2c 30 2e 37 2c 31 2e 32 2c 30 2e 35 2c 31 2e 37 0a 09 09 6c 2d 30 2e 31 2c 30 2e 32 6c 30 2e 32 2d 30 2e 31 63 30 2e 32 2d 30 2e 31 2c 30 2e 34 2d 30 2e 31 2c 30 2e 36 2d 30 2e 31 43 31 30 31 2e 36 2c 34 34 2e 32 2c 31 30 32 2c 34 34 2e 34 2c 31 30 32 2e 31 2c 34 34 2e 35 20 4d 39 37 2e 38 2c 34 34 2e Data Ascii: .3-0.6-0.8-0.6-1.1-0.6c-0.1,0-0.2,0-0.2,0c0,0,0-0.1,0-0.1c0.1-0.1,0.5-0.3,0.8-0.3c0.2,0,0.4,0,0.6,0.1l0.2,0.1l-0.1-0.2c-0.2-0.5-0.1-1.2,0.5-1.7c0.6,0.4,0.7,1.2,0.5,1.7l-0.1,0.2l0.2-0.1c0.2-0.1,0.4-0.1,0.6-0.1C101.6,44.2,102,44.4,102.1,44.5 M97.8,44.
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 30 2d 30 2e 34 2c 30 2d 30 2e 36 2d 30 2e 31 6c 2d 30 2e 32 2d 30 2e 31 6c 30 2e 31 2c 30 2e 32 63 30 2e 32 2c 30 2e 35 2c 30 2e 31 2c 31 2e 32 2d 30 2e 35 2c 31 2e 37 63 2d 30 2e 36 2d 30 2e 34 2d 30 2e 37 2d 31 2e 32 2d 30 2e 35 2d 31 2e 37 6c 30 2e 31 2d 30 2e 32 6c 2d 30 2e 32 2c 30 2e 31 0a 09 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 2d 30 2e 36 2c 30 2e 31 43 39 38 2e 36 2c 35 37 2e 39 2c 39 38 2e 32 2c 35 37 2e 38 2c 39 38 2e 31 2c 35 37 2e 36 20 4d 31 30 32 2e 34 2c 35 37 2e 34 63 2d 30 2e 31 2d 30 2e 32 2d 30 2e 33 2d 30 2e 32 2d 30 2e 35 2d 30 2e 32 63 2d 30 2e 32 2c 30 2d 30 2e 36 2c 30 2d 30 2e 38 2d 30 2e 34 0a 09 09 63 2d 30 2e 31 2d 30 2e 32 2d 30 2e 32 2d 30 2e 34 2d 30 2e 33 2d 30 2e 36 63 30 2e 38 2d 30 2e 31 2c 31 2e 36 2d Data Ascii: 0-0.4,0-0.6-0.1l-0.2-0.1l0.1,0.2c0.2,0.5,0.1,1.2-0.5,1.7c-0.6-0.4-0.7-1.2-0.5-1.7l0.1-0.2l-0.2,0.1c-0.2,0.1-0.4,0.1-0.6,0.1C98.6,57.9,98.2,57.8,98.1,57.6 M102.4,57.4c-0.1-0.2-0.3-0.2-0.5-0.2c-0.2,0-0.6,0-0.8-0.4c-0.1-0.2-0.2-0.4-0.3-0.6c0.8-0.1,1.6-
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2e 32 2d 32 2e 34 2c 32 2e 32 2d 34 2e 33 2c 34 2e 37 2d 34 2e 33 0a 09 09 63 30 2e 31 2c 30 2c 30 2e 33 2c 30 2c 30 2e 34 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 43 31 30 32 2e 38 2c 34 36 2e 36 2c 31 30 34 2e 36 2c 34 38 2e 34 2c 31 30 34 2e 38 2c 35 30 2e 36 20 4d 31 30 33 2e 34 2c 34 37 2e 31 0a 09 09 63 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 2d 30 2e 36 63 30 2e 31 2d 30 2e 36 2c 30 2e 34 2d 31 2c 30 2e 38 2d 31 2e 31 63 30 2e 36 2d 30 2e 32 2c 31 2e 31 2d 30 2e 31 2c 31 2e 34 2d 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 63 30 2c 30 2c 30 Data Ascii: c0,0,0,0,0,0c0,0,0,0,0,0c0.2-2.4,2.2-4.3,4.7-4.3c0.1,0,0.3,0,0.4,0c0,0,0,0,0,0c0,0,0,0,0,0c0,0,0,0,0,0c0,0,0,0,0,0C102.8,46.6,104.6,48.4,104.8,50.6 M103.4,47.1c0-0.2,0-0.4,0.1-0.6c0.1-0.6,0.4-1,0.8-1.1c0.6-0.2,1.1-0.1,1.4-0.1c0.1,0,0.1,0,0.1,0c0,0,0
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 30 2e 31 2c 30 2d 30 2e 31 63 30 2c 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 32 63 30 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 6c 30 2e 35 2c 30 2e 31 43 31 30 37 2e 31 2c 35 37 2e 35 2c 31 30 37 2e 34 2c 35 38 2e 32 2c 31 30 37 2e 38 2c 35 38 2e 37 20 4d 31 30 34 2e 33 2c 35 36 2e 37 0a 09 09 63 2d 30 2e 37 2d 30 2e 32 2d 30 2e 39 2d 31 2e 31 2d 30 2e 39 2d 31 2e 37 63 30 2e 33 2d 30 2e 32 2c 30 2e 35 2d 30 2e 35 2c 30 2e 37 2d 30 2e 37 63 30 2e 32 2c 30 2c 30 2e 34 2c 30 2c 30 2e 36 2c 30 2e 31 63 30 2e 36 2c 30 2e 31 2c 31 2c 30 2e 34 2c 31 2e 31 2c 30 2e 38 63 30 2e 32 2c 30 2e 36 2c 30 2e 31 2c 31 2e 31 2c 30 2e 31 2c 31 2e 34 0a 09 09 63 30 2c 30 2e 31 2c 30 2c 30 2e 31 2c 30 2c 30 2e 31 63 30 2c 30 2d 30 2e 31 2c 30 2d 30 2e 31 2c 30 43 31 30 35 Data Ascii: 0.1,0-0.1c0,0,0-0.1,0-0.2c0-0.1,0-0.2,0-0.4l0.5,0.1C107.1,57.5,107.4,58.2,107.8,58.7 M104.3,56.7c-0.7-0.2-0.9-1.1-0.9-1.7c0.3-0.2,0.5-0.5,0.7-0.7c0.2,0,0.4,0,0.6,0.1c0.6,0.1,1,0.4,1.1,0.8c0.2,0.6,0.1,1.1,0.1,1.4c0,0.1,0,0.1,0,0.1c0,0-0.1,0-0.1,0C105
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 30 2e 31 2d 31 2c 30 2d 31 2e 33 63 30 2e 31 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 32 2d 30 2e 32 63 30 2c 30 2c 30 2c 30 2c 30 2c 30 0a 09 09 63 30 2c 30 2c 30 2c 30 2e 31 2c 30 2c 30 2e 32 63 30 2c 30 2e 33 2c 30 2c 30 2e 37 2c 30 2e 36 2c 31 63 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 37 2c 30 2e 33 43 39 34 2e 39 2c 35 30 2e 37 2c 39 34 2e 39 2c 35 30 2e 39 2c 39 34 2e 39 2c 35 31 2e 31 20 4d 39 32 2e 31 2c 35 34 2e 31 63 2d 31 2e 31 2d 30 2e 32 2d 31 2e 38 2d 30 2e 32 2d 32 2e 35 2d 30 2e 32 0a 09 09 63 30 2e 35 2d 30 2e 33 2c 31 2e 31 2d 30 2e 37 2c 31 2e 39 2d 31 2e 33 6c 31 2e 35 2c 30 2e 34 4c 39 32 2e 31 2c 35 34 2e 31 7a 20 4d 38 37 2e 33 2c 35 31 6c 33 2e 39 2d 31 6c 30 2e 35 2d 30 2e 31 6c 31 2e 34 2d 30 2e 34 63 2d 30 2e Data Ascii: 0.1-1,0-1.3c0.1-0.1,0.1-0.2,0.2-0.2c0,0,0,0,0,0c0,0,0,0.1,0,0.2c0,0.3,0,0.7,0.6,1c0.2,0.1,0.4,0.2,0.7,0.3C94.9,50.7,94.9,50.9,94.9,51.1 M92.1,54.1c-1.1-0.2-1.8-0.2-2.5-0.2c0.5-0.3,1.1-0.7,1.9-1.3l1.5,0.4L92.1,54.1z M87.3,51l3.9-1l0.5-0.1l1.4-0.4c-0.
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 0a 09 09 63 30 2c 30 2e 32 2c 30 2c 30 2e 36 2d 30 2e 34 2c 30 2e 38 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 36 2c 30 2e 33 63 2d 30 2e 31 2d 30 2e 38 2d 30 2e 34 2d 31 2e 35 2d 30 2e 39 2d 32 2e 32 63 30 2e 31 2c 30 2c 30 2e 33 2c 30 2c 30 2e 34 2d 30 2e 31 63 30 2e 37 2d 30 2e 32 2c 31 2e 32 2d 30 2e 35 2c 31 2e 33 2d 31 0a 09 09 63 30 2e 31 2d 30 2e 33 2c 30 2e 31 2d 30 2e 36 2c 30 2e 31 2d 30 2e 39 6c 30 2e 34 2c 30 4c 31 30 37 2e 32 2c 34 35 2e 39 7a 20 4d 31 30 38 2c 34 38 63 31 2e 31 2c 30 2e 32 2c 31 2e 39 2c 30 2e 33 2c 32 2e 36 2c 30 2e 32 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 37 2d 31 2e 38 2c 31 2e 32 6c 2d 31 2e 36 2d 30 2e 34 4c 31 30 38 2c 34 38 7a 20 4d 31 30 39 2e 31 2c Data Ascii: 2,0.3-0.2,0.4c0,0.2,0,0.6-0.4,0.8c-0.2,0.1-0.4,0.2-0.6,0.3c-0.1-0.8-0.4-1.5-0.9-2.2c0.1,0,0.3,0,0.4-0.1c0.7-0.2,1.2-0.5,1.3-1c0.1-0.3,0.1-0.6,0.1-0.9l0.4,0L107.2,45.9z M108,48c1.1,0.2,1.9,0.3,2.6,0.2c-0.5,0.3-1.1,0.7-1.8,1.2l-1.6-0.4L108,48z M109.1,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50323	104.18.36.155	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	484	OUT	GET /rum?cm_dsp_id=45&external_user_id=CAESEKJ9b7tF3-dQK586AsV_pGE&google_cver=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMPS=369; CMID=ZaUyAeVXlmqV3OvhltnSpwAA; CMPRO=5601
2024-01-15 13:24:22 UTC	988	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 845e7046cdbc0832-IAD CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZaUyAeVXlmqV3OvhltnSpwAA; Path=/; Domain=casalemedia.com; Expires=Tue, 14 Jan 2025 13:24:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=5601; Path=/; Domain=casalemedia.com; Expires=Sun, 14 Apr 2024 13:24:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZRjXzCCqiYfTHHXoqprAnpj1Dqw6k%2BFtxgZsu%2B8NNOsAcb7oMOyrRNmN7HA7YL%2BYjuv%2FpY3tIk9YVdQtcKsPd3ILDcAJhac3Zo78aeRyQ%2F3NSWETUUG8c1BY2Gy0ziY7emMAYf7He81c9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50322	216.22.16.41	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	536	OUT	GET /redir/?partnerid=76&partneruserid=CAESEFUSBU6wTIKFqCelmXmLFNQ&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pid=1670843343563392175; csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ
2024-01-15 13:24:22 UTC	381	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:21 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: csync=76:CAESEFUSBU6wTIKFqCelmXmLFNQ; expires=Wed, 15 Jan 2025 13:24:22 GMT; domain=smartadserver.com; path=/; SameSite=None; secure transfer-encoding: chunked p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close
2024-01-15 13:24:22 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50304	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	379	OUT	GET /sadbundle/12128317773909862788/headline1.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 9923 Date: Mon, 15 Jan 2024 13:24:22 GMT Expires: Tue, 14 Jan 2025 13:24:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 36 35 32 63 31 2e 32 34 31 2c 31 2e 34 34 39 2c 32 2e 39 34 33 2c 32 2e 36 39 2c 34 2e 39 32 31 2c 32 2e 36 39 63 32 2e 30 32 33 2c 30 2c 33 2e 36 35 36 2d 31 2e 33 31 31 2c 33 2e 36 35 36 2d 33 2e 32 34 32 0a 09 09 63 30 2d 34 2e 35 33 2d 39 2e 30 31 35 2d 34 2e 36 39 31 2d 39 2e 30 31 35 2d 39 2e 37 35 63 30 2d 32 2e 36 39 2c 32 2e 36 34 35 2d 34 2e 31 31 36 2c 35 2e 32 34 33 2d 34 2e 31 31 36 63 31 2e 38 34 2c 30 2c 33 2e 36 35 36 2c 30 2e 34 31 34 2c 35 2e 31 39 37 2c 31 2e 34 34 39 6c 2d 31 2e 33 35 37 2c 31 2e 34 39 35 0a 09 09 63 2d 31 2e 31 32 36 2d 31 2e 33 31 31 2d 32 2e 34 38 33 2d 32 2e 31 36 32 2d 34 2e 31 38 35 2d 32 2e 31 36 32 63 2d 31 2e 37 32 35 2c 30 2d 33 2e 33 33 34 2c 30 2e 38 37 34 2d 33 2e 33 33 34 2c 32 2e 36 36 37 63 30 2c 34 2e Data Ascii: 652c1.241,1.449,2.943,2.69,4.921,2.69c2.023,0,3.656-1.311,3.656-3.242c0-4.53-9.015-4.691-9.015-9.75c0-2.69,2.645-4.116,5.243-4.116c1.84,0,3.656,0.414,5.197,1.449l-1.357,1.495c-1.126-1.311-2.483-2.162-4.185-2.162c-1.725,0-3.334,0.874-3.334,2.667c0,4.
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 64 3d 22 4d 31 38 33 2e 31 32 37 2c 31 31 38 2e 31 32 35 76 2d 38 2e 38 35 33 63 30 2d 30 2e 35 30 36 2d 30 2e 33 39 31 2d 30 2e 36 36 37 2d 30 2e 38 37 33 2d 30 2e 36 36 37 63 2d 31 2e 38 38 36 2c 30 2d 35 2e 37 37 32 2c 32 2e 33 2d 37 2e 36 33 35 2c 32 2e 33 0a 09 09 63 2d 30 2e 37 38 32 2c 30 2d 31 2e 31 37 33 2d 30 2e 33 39 31 2d 31 2e 34 32 36 2d 30 2e 36 36 37 68 2d 30 2e 30 34 36 76 37 2e 38 38 37 68 2d 31 2e 38 34 76 2d 31 37 2e 36 36 68 31 2e 38 34 76 38 2e 38 35 33 63 30 2c 30 2e 33 34 35 2c 30 2e 31 38 34 2c 30 2e 35 30 36 2c 30 2e 35 39 38 2c 30 2e 35 30 36 0a 09 09 63 31 2e 35 38 37 2c 30 2c 35 2e 34 32 37 2d 32 2e 32 35 33 2c 37 2e 35 38 39 2d 32 2e 32 35 33 63 30 2e 38 30 35 2c 30 2c 31 2e 33 37 39 2c 30 2e 33 32 32 2c 31 2e 37 34 37 2c 30 Data Ascii: d="M183.127,118.125v-8.853c0-0.506-0.391-0.667-0.873-0.667c-1.886,0-5.772,2.3-7.635,2.3c-0.782,0-1.173-0.391-1.426-0.667h-0.046v7.887h-1.84v-17.66h1.84v8.853c0,0.345,0.184,0.506,0.598,0.506c1.587,0,5.427-2.253,7.589-2.253c0.805,0,1.379,0.322,1.747,0
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 39 6c 37 2e 36 38 2d 31 37 2e 36 36 68 30 2e 35 30 36 6c 37 2e 37 32 37 2c 31 37 2e 36 36 68 2d 32 2e 30 32 33 0a 09 09 4c 31 31 30 2e 35 37 38 2c 31 34 31 2e 38 38 32 7a 20 4d 31 30 39 2e 38 38 38 2c 31 34 30 2e 34 35 36 6c 30 2e 30 36 39 2d 30 2e 30 34 36 6c 2d 33 2e 35 34 31 2d 38 2e 31 31 37 68 2d 30 2e 30 39 32 63 2d 30 2e 36 34 35 2c 31 2e 34 32 36 2d 33 2e 36 31 2c 38 2e 33 32 34 2d 33 2e 36 31 2c 39 2e 31 32 39 0a 09 09 63 30 2c 30 2e 32 33 2c 30 2e 30 39 32 2c 30 2e 32 39 39 2c 30 2e 32 37 35 2c 30 2e 32 39 39 63 31 2e 30 33 35 2c 30 2c 33 2e 37 30 32 2d 32 2e 30 32 33 2c 35 2e 32 36 37 2d 32 2e 30 32 33 43 31 30 38 2e 38 39 39 2c 31 33 39 2e 36 39 37 2c 31 30 39 2e 34 37 35 2c 31 34 30 2e 30 34 32 2c 31 30 39 2e 38 38 38 2c 31 34 30 2e 34 35 36 Data Ascii: 9l7.68-17.66h0.506l7.727,17.66h-2.023L110.578,141.882z M109.888,140.456l0.069-0.046l-3.541-8.117h-0.092c-0.645,1.426-3.61,8.324-3.61,9.129c0,0.23,0.092,0.299,0.275,0.299c1.035,0,3.702-2.023,5.267-2.023C108.899,139.697,109.475,140.042,109.888,140.456
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 38 32 2c 31 34 34 2e 30 36 35 2c 31 34 36 2e 31 38 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 36 37 2e 35 39 39 2c 31 34 31 2e 37 32 31 63 30 2c 32 2e 38 32 38 2d 32 2e 32 35 33 2c 35 2e 34 30 34 2d 37 2e 36 31 31 2c 35 2e 34 30 34 68 2d 34 2e 38 37 35 76 2d 31 37 2e 36 36 68 34 2e 37 36 0a 09 09 63 33 2e 39 30 39 2c 30 2c 35 2e 39 33 34 2c 31 2e 32 31 39 2c 35 2e 39 33 34 2c 33 2e 35 36 34 63 30 2c 32 2e 33 34 35 2d 32 2e 30 32 34 2c 33 2e 35 31 38 2d 33 2e 39 35 36 2c 33 2e 39 30 38 76 30 2e 30 34 37 43 31 36 34 2e 37 37 31 2c 31 33 36 2e 39 33 38 2c 31 36 37 2e 35 39 39 2c 31 33 38 2e 35 34 37 2c 31 36 37 2e 35 39 39 2c 31 34 31 2e 37 32 31 7a 0a 09 09 20 4d 31 35 39 2e 35 30 Data Ascii: 82,144.065,146.182z"/><path style="fill:#FFFFFF;" d="M167.599,141.721c0,2.828-2.253,5.404-7.611,5.404h-4.875v-17.66h4.76c3.909,0,5.934,1.219,5.934,3.564c0,2.345-2.024,3.518-3.956,3.908v0.047C164.771,136.938,167.599,138.547,167.599,141.721z M159.50
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 6c 2d 33 2e 35 34 31 2d 38 2e 31 31 37 68 2d 30 2e 30 39 32 63 2d 30 2e 36 34 35 2c 31 2e 34 32 36 2d 33 2e 36 31 2c 38 2e 33 32 34 2d 33 2e 36 31 2c 39 2e 31 32 39 0a 09 09 63 30 2c 30 2e 32 33 2c 30 2e 30 39 32 2c 30 2e 32 39 39 2c 30 2e 32 37 35 2c 30 2e 32 39 39 63 31 2e 30 33 35 2c 30 2c 33 2e 37 30 32 2d 32 2e 30 32 33 2c 35 2e 32 36 37 2d 32 2e 30 32 33 43 31 39 34 2e 30 32 2c 31 33 39 2e 36 39 37 2c 31 39 34 2e 35 39 35 2c 31 34 30 2e 30 34 32 2c 31 39 35 2e 30 30 38 2c 31 34 30 2e 34 35 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 32 30 32 2e 33 38 31 2c 31 34 37 2e 31 32 35 76 2d 31 37 2e 30 33 39 63 30 2e 34 38 33 2d 30 2e 34 31 34 2c 31 2e 33 35 36 2d 30 2e 38 35 32 2c 32 Data Ascii: l-3.541-8.117h-0.092c-0.645,1.426-3.61,8.324-3.61,9.129c0,0.23,0.092,0.299,0.275,0.299c1.035,0,3.702-2.023,5.267-2.023C194.02,139.697,194.595,140.042,195.008,140.456z"/><path style="fill:#FFFFFF;" d="M202.381,147.125v-17.039c0.483-0.414,1.356-0.852,2
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 39 2e 34 35 33 2c 38 37 2e 30 37 34 2c 31 35 39 2e 32 34 36 2c 38 35 2e 34 36 35 2c 31 35 39 2e 32 34 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 30 31 2e 31 33 32 2c 31 35 38 2e 32 33 34 63 34 2e 38 39 38 2c 30 2c 38 2e 30 32 35 2c 33 2e 38 36 33 2c 38 2e 30 32 35 2c 38 2e 35 37 37 63 30 2c 35 2e 34 32 37 2d 34 2e 30 37 2c 39 2e 35 34 32 2d 39 2e 34 39 37 2c 39 2e 35 34 32 0a 09 09 63 2d 34 2e 38 39 37 2c 30 2d 38 2e 30 32 35 2d 33 2e 38 36 32 2d 38 2e 30 32 35 2d 38 2e 35 37 37 43 39 31 2e 36 33 35 2c 31 36 32 2e 33 35 2c 39 35 2e 37 30 35 2c 31 35 38 2e 32 33 34 2c 31 30 31 2e 31 33 32 2c 31 35 38 2e 32 33 34 7a 20 4d 31 30 37 2e 33 34 31 2c 31 36 37 2e 35 39 33 63 30 2d 34 2e Data Ascii: 9.453,87.074,159.246,85.465,159.246z"/><path style="fill:#FFFFFF;" d="M101.132,158.234c4.898,0,8.025,3.863,8.025,8.577c0,5.427-4.07,9.542-9.497,9.542c-4.897,0-8.025-3.862-8.025-8.577C91.635,162.35,95.705,158.234,101.132,158.234z M107.341,167.593c0-4.
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 43 31 36 36 2e 37 34 33 2c 31 37 35 2e 34 33 35 2c 31 36 38 2e 34 36 38 2c 31 37 35 2e 30 38 39 2c 31 37 32 2e 31 39 32 2c 31 37 34 2e 31 37 7a 0a 09 09 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 37 34 2e 30 33 32 2c 31 36 39 2e 31 35 36 76 2d 31 30 2e 37 31 35 68 31 2e 38 34 76 31 30 2e 36 39 32 63 30 2c 34 2e 31 33 39 2c 31 2e 39 37 38 2c 36 2e 30 32 34 2c 35 2e 34 35 2c 36 2e 30 32 34 0a 09 09 63 33 2e 35 31 38 2c 30 2c 35 2e 36 31 2d 31 2e 39 33 32 2c 35 2e 36 31 2d 35 2e 38 38 37 63 30 2d 33 2e 36 35 36 2d 30 2e 31 33 38 2d 37 2e 31 39 37 2d 30 2e 33 39 31 2d 31 30 2e 38 33 68 31 2e 36 30 39 76 31 30 2e 37 31 35 63 30 2c 34 2e 38 35 33 2d 32 2e 35 35 33 2c 37 2e 31 39 37 2d 37 2e Data Ascii: C166.743,175.435,168.468,175.089,172.192,174.17z"/><path style="fill:#FFFFFF;" d="M174.032,169.156v-10.715h1.84v10.692c0,4.139,1.978,6.024,5.45,6.024c3.518,0,5.61-1.932,5.61-5.887c0-3.656-0.138-7.197-0.391-10.83h1.609v10.715c0,4.853-2.553,7.197-7.
2024-01-15 13:24:22 UTC	742	IN	Data Raw: 36 37 2e 34 35 35 68 30 2e 30 34 36 63 31 2e 39 30 38 2d 32 2e 38 32 38 2c 33 2e 33 38 2d 35 2e 37 34 39 2c 34 2e 36 34 36 2d 38 2e 39 39 31 68 32 2e 31 31 35 6c 2d 36 2e 35 33 2c 39 2e 38 36 35 76 37 2e 37 39 35 68 2d 31 2e 38 34 76 2d 37 2e 37 30 33 0a 09 09 6c 2d 36 2e 35 35 34 2d 39 2e 39 35 37 68 32 2e 32 33 4c 32 34 35 2e 38 37 33 2c 31 36 37 2e 34 35 35 7a 22 2f 3e 0a 3c 2f 67 3e 0a 3c 67 20 69 64 3d 22 42 75 74 74 6f 6e 5f 30 30 30 30 30 30 34 32 37 33 34 38 31 38 35 33 36 38 32 31 32 39 33 34 33 30 30 30 30 30 30 30 36 31 37 38 31 31 39 38 34 36 38 36 34 32 30 31 31 33 5f 22 3e 0a 09 3c 70 61 74 68 20 69 64 3d 22 42 6f 78 5f 30 30 30 30 30 31 31 34 37 39 34 36 34 31 31 34 32 36 30 30 32 34 32 37 31 30 30 30 30 30 31 34 38 31 37 33 35 35 33 33 39 Data Ascii: 67.455h0.046c1.908-2.828,3.38-5.749,4.646-8.991h2.115l-6.53,9.865v7.795h-1.84v-7.703l-6.554-9.957h2.23L245.873,167.455z"/></g><g id="Button_00000042734818536821293430000000617811984686420113_"><path id="Box_00000114794641142600242710000014817355339

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50314	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	848	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmTvGHABXQqFXRkGgjwMgDQcCbJRUdcEbA1ETmZE6Nix02hnOMf4CuBOwpYfOrrPiAsul3AiKSxqOm2CwKcXQSfWlI8uC7piHhyE-s3CUte5EpHocp-VJwkV9YXmUU_DO75brfffgCDWWkjKYkXkpTsvBA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50330	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	373	OUT	GET /sadbundle/12128317773909862788/Cta.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 3129 Date: Mon, 15 Jan 2024 13:24:22 GMT Expires: Tue, 14 Jan 2025 13:24:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 5f 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 39 31 2e 35 32 31 2c 32 30 36 2e 36 38 39 68 2d 38 33 2e 30 34 31 0a 09 63 2d 35 2e 33 31 2c 30 2d 39 2e 36 31 34 2d 34 2e 33 30 34 2d 39 2e 36 31 34 2d 39 2e 36 31 34 76 2d 37 2e 30 39 36 63 30 2d 35 2e 33 31 2c 34 2e 33 30 34 2d 39 2e 36 31 34 2c 39 2e 36 31 34 2d 39 2e 36 31 34 68 38 33 2e 30 34 31 63 35 2e 33 31 2c 30 2c 39 2e 36 31 34 2c 34 2e 33 30 34 2c 39 2e 36 31 34 2c 39 2e 36 31 34 76 37 2e 30 39 36 0a 09 43 32 30 31 2e 31 33 35 2c 32 30 32 2e 33 38 35 2c 31 39 36 2e 38 33 2c 32 30 36 2e 36 38 39 2c 31 39 31 2e 35 32 31 2c 32 30 36 2e 36 38 39 7a 22 2f 3e 0a 3c 67 20 69 64 3d 22 43 74 61 2e 33 22 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c Data Ascii: _" style="fill:#FFFFFF;" d="M191.521,206.689h-83.041c-5.31,0-9.614-4.304-9.614-9.614v-7.096c0-5.31,4.304-9.614,9.614-9.614h83.041c5.31,0,9.614,4.304,9.614,9.614v7.096C201.135,202.385,196.83,206.689,191.521,206.689z"/><g id="Cta.3"><path style="fill
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 31 2e 37 38 35 2d 32 2e 32 36 35 0a 09 09 63 2d 31 2e 30 33 36 2c 30 2d 31 2e 37 38 34 2c 30 2e 36 39 35 2d 31 2e 37 38 34 2c 32 2e 32 36 35 63 30 2c 31 2e 35 36 38 2c 30 2e 37 34 38 2c 32 2e 32 36 35 2c 31 2e 37 38 34 2c 32 2e 32 36 35 43 31 34 31 2e 34 37 36 2c 31 39 35 2e 34 36 39 2c 31 34 32 2e 32 32 34 2c 31 39 34 2e 37 37 33 2c 31 34 32 2e 32 32 34 2c 31 39 33 2e 32 30 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 30 43 32 33 34 30 3b 22 20 64 3d 22 4d 31 34 37 2e 33 35 37 2c 31 39 33 2e 33 39 31 4c 31 34 36 2e 36 2c 31 39 34 2e 32 76 32 2e 32 31 39 68 2d 31 2e 33 35 31 76 2d 36 2e 34 32 38 68 31 2e 33 35 31 76 32 2e 36 35 38 6c 32 2e 34 31 31 2d 32 2e 36 35 38 68 31 2e 35 36 37 6c 2d 32 2e 32 37 32 2c 32 2e 34 34 39 Data Ascii: 1.785-2.265c-1.036,0-1.784,0.695-1.784,2.265c0,1.568,0.748,2.265,1.784,2.265C141.476,195.469,142.224,194.773,142.224,193.205z"/><path style="fill:#0C2340;" d="M147.357,193.391L146.6,194.2v2.219h-1.351v-6.428h1.351v2.658l2.411-2.658h1.567l-2.272,2.449
2024-01-15 13:24:22 UTC	208	IN	Data Raw: 6e 6f 6e 65 3b 22 20 77 69 64 74 68 3d 22 31 35 30 38 2e 37 30 33 22 20 68 65 69 67 68 74 3d 22 38 33 22 2f 3e 0a 3c 74 65 78 74 20 69 64 3d 22 43 6f 64 65 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 6d 61 74 72 69 78 28 31 20 30 20 30 20 31 20 2d 38 2e 39 33 34 32 20 2d 37 30 33 2e 36 39 38 37 29 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 57 54 4d 6f 6e 61 72 63 68 4e 6f 76 61 2d 52 6f 6d 61 6e 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 32 33 70 78 3b 22 3e 43 6f 6e 76 65 72 73 69 6f 6e 5f 43 61 72 69 62 62 65 61 6e 3c 2f 74 65 78 74 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: none;" width="1508.703" height="83"/><text id="Code" transform="matrix(1 0 0 1 -8.9342 -703.6987)" style="fill:#FFFFFF; font-family:'WTMonarchNova-Roman'; font-size:23px;">Conversion_Caribbean</text></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50339	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	3009	OUT	GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5452&vt=11&dtpt=3269&dett=3&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:22 UTC	1707	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"11479305217178356402","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"5609461561973266190"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50325	3.81.176.252	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	404	OUT	GET /sync?UIGL=CAESEIrOqdmzFji86NQUvTm_VXw&google_cver=1&gdpr=0 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	218	IN	HTTP/1.1 200 Date: Mon, 15 Jan 2024 13:24:22 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/'
2024-01-15 13:24:22 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-01-15 13:24:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50311	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	849	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQVqWC_ff1ZMGM-hfhSyTJcMgkjiDmAMT6pN4NNNtpnUU-frK5pRvqHOsUlrsO4d52FNg3RvSa-SCiU0o5lQ5aSx_6OqfN8HqolWeqQ4YTNlzgIqNzAdQ3aHFxscZhpgalEXcrsOL3hvR5R_4VqoHBlc9Y HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50335	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	379	OUT	GET /sadbundle/12128317773909862788/headline2.svg HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:22 UTC	835	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: image/svg+xml Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 7743 Date: Mon, 15 Jan 2024 13:24:22 GMT Expires: Tue, 14 Jan 2025 13:24:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 21 Dec 2023 14:47:43 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	417	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 37 2e 35 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 74 65 78 74 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?>... Generator: Adobe Illustrator 27.5.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="text" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 38 32 63 30 2c 32 2e 36 32 32 2d 31 2e 38 34 35 2c 33 2e 39 30 38 2d 34 2e 32 37 2c 33 2e 39 30 38 63 2d 32 2e 34 32 36 2c 30 2d 34 2e 32 37 31 2d 31 2e 32 38 36 2d 34 2e 32 37 31 2d 33 2e 39 30 38 76 2d 36 2e 33 31 37 68 32 2e 31 30 32 0a 09 09 76 36 2e 31 31 39 63 30 2c 31 2e 36 38 39 2c 30 2e 37 37 33 2c 32 2e 33 38 38 2c 32 2e 31 36 39 2c 32 2e 33 38 38 73 32 2e 31 36 38 2d 30 2e 36 39 38 2c 32 2e 31 36 38 2d 32 2e 33 38 38 76 2d 36 2e 31 31 39 68 32 2e 31 30 32 56 31 31 36 2e 36 38 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 36 37 2e 36 38 38 2c 31 31 33 2e 34 36 37 63 30 2c 31 2e 39 32 2d 31 2e 32 34 37 2c 33 2e 31 31 35 2d 33 2e 34 37 33 2c 33 2e 31 31 35 68 2d 32 2e 36 36 37 Data Ascii: 82c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102v6.119c0,1.689,0.773,2.388,2.169,2.388s2.168-0.698,2.168-2.388v-6.119h2.102V116.682z"/><path style="fill:#FFFFFF;" d="M67.688,113.467c0,1.92-1.247,3.115-3.473,3.115h-2.667
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 33 2e 30 35 36 2d 30 2e 39 34 31 2d 33 2e 35 38 37 2d 31 2e 38 39 36 2d 33 2e 35 38 37 73 2d 31 2e 38 39 36 2c 30 2e 35 33 31 2d 31 2e 38 39 36 2c 33 2e 35 38 37 63 30 2c 33 2e 30 34 37 2c 30 2e 39 34 31 2c 33 2e 35 37 38 2c 31 2e 38 39 36 2c 33 2e 35 37 38 53 31 31 32 2e 32 37 31 2c 31 31 38 2e 35 31 2c 31 31 32 2e 32 37 31 2c 31 31 35 2e 34 36 33 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 32 30 2e 36 37 35 2c 31 31 33 2e 32 30 35 63 30 2c 31 2e 39 30 34 2d 30 2e 38 39 2c 32 2e 38 34 39 2d 32 2e 34 30 36 2c 32 2e 38 34 39 73 2d 32 2e 34 30 35 2d 30 2e 39 34 34 2d 32 2e 34 30 35 2d 32 2e 38 34 39 0a 09 09 63 30 2d 31 2e 39 30 35 2c 30 2e 38 38 39 2d 32 2e 38 35 2c 32 2e 34 30 35 2d Data Ascii: 3.056-0.941-3.587-1.896-3.587s-1.896,0.531-1.896,3.587c0,3.047,0.941,3.578,1.896,3.578S112.271,118.51,112.271,115.463z"/><path style="fill:#FFFFFF;" d="M120.675,113.205c0,1.904-0.89,2.849-2.406,2.849s-2.405-0.944-2.405-2.849c0-1.905,0.889-2.85,2.405-
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 35 34 2e 31 32 33 2c 31 32 30 2e 33 36 36 76 2d 31 30 2e 30 30 32 68 32 2e 31 30 36 76 38 2e 32 33 34 68 35 2e 32 36 36 76 31 2e 37 36 38 48 31 35 34 2e 31 32 33 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 37 31 2e 34 38 2c 31 31 36 2e 36 38 32 63 30 2c 32 2e 36 32 32 2d 31 2e 38 34 35 2c 33 2e 39 30 38 2d 34 2e 32 37 2c 33 2e 39 30 38 63 2d 32 2e 34 32 36 2c 30 2d 34 2e 32 37 31 2d 31 2e 32 38 36 2d 34 2e 32 37 31 2d 33 2e 39 30 38 76 2d 36 2e 33 31 37 68 32 2e 31 30 32 0a 09 09 76 36 2e 31 31 39 63 30 2c 31 2e 36 38 39 2c 30 2e 37 37 33 2c 32 2e 33 38 38 2c 32 2e 31 36 39 Data Ascii: /><path style="fill:#FFFFFF;" d="M154.123,120.366v-10.002h2.106v8.234h5.266v1.768H154.123z"/><path style="fill:#FFFFFF;" d="M171.48,116.682c0,2.622-1.845,3.908-4.27,3.908c-2.426,0-4.271-1.286-4.271-3.908v-6.317h2.102v6.119c0,1.689,0.773,2.388,2.169
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 31 30 2e 33 36 34 6c 2d 33 2e 38 30 31 2c 31 30 2e 30 30 32 68 2d 32 2e 31 34 37 6c 2d 33 2e 37 38 36 2d 31 30 2e 30 30 32 68 32 2e 32 36 31 6c 31 2e 39 37 34 2c 35 2e 36 34 36 0a 09 09 63 30 2e 33 32 31 2c 30 2e 39 32 35 2c 30 2e 36 31 34 2c 32 2e 30 30 36 2c 30 2e 36 31 34 2c 32 2e 30 30 36 68 30 2e 30 35 37 63 30 2c 30 2c 30 2e 32 38 38 2d 31 2e 30 38 31 2c 30 2e 36 30 39 2d 32 2e 30 30 36 6c 31 2e 39 38 32 2d 35 2e 36 34 36 48 32 31 35 2e 32 36 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 32 31 36 2e 37 34 32 2c 31 32 30 2e 33 36 36 76 2d 31 30 2e 30 30 32 68 32 2e 31 30 32 76 31 30 2e 30 30 32 48 32 31 36 2e 37 34 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 Data Ascii: 10.364l-3.801,10.002h-2.147l-3.786-10.002h2.261l1.974,5.646c0.321,0.925,0.614,2.006,0.614,2.006h0.057c0,0,0.288-1.081,0.609-2.006l1.982-5.646H215.262z"/><path style="fill:#FFFFFF;" d="M216.742,120.366v-10.002h2.102v10.002H216.742z"/><path style="fi
2024-01-15 13:24:22 UTC	1252	IN	Data Raw: 33 31 38 4c 32 34 39 2e 31 34 2c 31 31 33 2e 33 31 38 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 32 39 2e 30 33 2c 31 33 37 2e 33 36 36 6c 2d 30 2e 39 31 31 2d 30 2e 39 36 33 63 2d 30 2e 38 31 35 2c 30 2e 37 33 33 2d 31 2e 38 36 32 2c 31 2e 31 33 36 2d 33 2e 30 30 31 2c 31 2e 31 33 36 0a 09 09 63 2d 31 2e 39 38 35 2c 30 2d 33 2e 37 39 37 2d 30 2e 39 34 33 2d 33 2e 37 39 37 2d 32 2e 39 31 33 63 30 2d 31 2e 33 33 35 2c 30 2e 37 35 33 2d 32 2e 31 38 35 2c 32 2e 30 33 35 2d 32 2e 38 6c 30 2e 33 30 39 2d 30 2e 31 34 39 63 2d 30 2e 38 32 35 2d 30 2e 39 34 39 2d 31 2e 30 37 38 2d 31 2e 35 32 31 2d 31 2e 30 37 38 2d 32 2e 32 30 31 0a 09 09 63 30 2d 31 2e 33 32 31 2c 31 2e 32 31 37 2d 32 2e Data Ascii: 318L249.14,113.318z"/><path style="fill:#FFFFFF;" d="M129.03,137.366l-0.911-0.963c-0.815,0.733-1.862,1.136-3.001,1.136c-1.985,0-3.797-0.943-3.797-2.913c0-1.335,0.753-2.185,2.035-2.8l0.309-0.149c-0.825-0.949-1.078-1.521-1.078-2.201c0-1.321,1.217-2.
2024-01-15 13:24:22 UTC	1066	IN	Data Raw: 33 34 2e 38 30 37 2c 31 35 36 2e 36 32 33 2c 31 33 32 2e 33 36 35 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 22 20 64 3d 22 4d 31 36 37 2e 30 30 31 2c 31 33 37 2e 33 36 36 6c 2d 32 2e 32 39 39 2d 33 2e 39 30 34 68 2d 31 2e 38 38 31 76 33 2e 39 30 34 68 2d 32 2e 31 30 32 76 2d 31 30 2e 30 30 32 68 35 2e 30 31 39 63 32 2e 32 31 32 2c 30 2c 33 2e 34 38 31 2c 31 2e 31 35 39 2c 33 2e 34 38 31 2c 33 2e 30 34 32 0a 09 09 63 30 2c 31 2e 34 39 38 2d 30 2e 38 30 35 2c 32 2e 35 34 38 2d 32 2e 32 36 39 2c 32 2e 38 39 36 6c 32 2e 34 39 35 2c 34 2e 30 36 33 48 31 36 37 2e 30 30 31 7a 20 4d 31 36 32 2e 38 32 31 2c 31 33 31 2e 37 39 36 68 32 2e 36 32 63 31 2e 30 39 34 2c 30 2c 31 2e 36 35 37 2d 30 2e 35 32 33 2c 31 2e Data Ascii: 34.807,156.623,132.365z"/><path style="fill:#FFFFFF;" d="M167.001,137.366l-2.299-3.904h-1.881v3.904h-2.102v-10.002h5.019c2.212,0,3.481,1.159,3.481,3.042c0,1.498-0.805,2.548-2.269,2.896l2.495,4.063H167.001z M162.821,131.796h2.62c1.094,0,1.657-0.523,1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50333	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	2747	OUT	GET /pcs/view?xai=AKAOjstlOL8gFm-Sha73TplxNpv3SIKh7tw8Vs1ZirowUBSIl43rukUSdHNL3HNHlB0EwAyC7dtVLcHbJQym8GU30p72fXaO7vClywhwdIdZQ1jg51rG0vyHPVtr7dqzPfi5pex3AZl6MBXUH7baDQ1PmwPulqw7AymrIHtZsWLXoxmoxxf91DE5BLGIjoHIBb8xQKQe3dP5q4UgJU6ZhUM-iR6bMNwAB4dpVqExGg4AsdajzHTV-gNdaWmagrc1gPn-cqyFdmrXi7PoykCRTbop2qZ9X3gDr5mRYWyH3He7HC-uhxcXV9sckeJunHq0hXcF5Qm6M2OFnjyPboDnneXCcu0GZVQUBLH3HztX1qTB-apaS4YGLvQTqHAXEr5qU-AAKod7YYbpYsnFLS88nKcSbnzcX6HxGCoqVIcusKjL1L_TP1RJXkcrjPQ-okiy9bp-lkNAitwxZEmQNB2j8LJQZazpfA402uN3m8xZro1dGJH0z8b4DobH-Z8CBz5eUVuCnNbyWgCIkPx97Ai2xWfB4iMXtqxGEmDns6jMoflxNpuQdHPn3h9ECCPwWyYdEolZn2hw8UQZRou49lpMuVVLjbA9OhRxFOV-yZGrid84x-X9tzyppIFqVbuTmJ_tK5ocxhnI_L0lsCJQmDsWgj_waygQN06m4ipBQbTi99GI-N99uBadx0odNHT27iKP3hMzNdbO4I3TUh8G4AatnKfRRIMJKoxqsQ_PyAyVSNhs6P0xbh00_Acj4pZDEKYwptTGh2zUuXjEhnxC5PzGvGICmCsx8ETzXvGNtKEPCZEz63QGqxyePFvRWI4WzAE4wsHOxoPPkyBb1wFqhFmdHfyj8Pw8Hdeiobnm2wE2SXEJew2Rth2O9zHblbDotdZw-NLZOCTWvuqSCK0jPk5z9_8N54kudv5PtrwZYFKdwOxek5wBM53Jlq6CajQ1MzzooYxYnp-GuaJ0edvxmMCpC1cb4hHZGdH9TkfGP550OphcbO-_Vgke86IajRLoG7C3hDLKfWK3RcCKHksfn9YkhTJzGCegYo_VQxU-E-7d4lwbbvhYETQws3UHrTnRtTIsOcOyHd2sxUHE7n8vG2XA8oXjGqqG1Jz7icRCrFccfcrgmlRHzVCpW_gkj8-MOSHxA1l1yjjb22555XTt9kj10xlv4Nni-hQH3d2YxnSypH2B50ZRABSMJg5Wr96H9g2l_u2tkn08Ounvm9BIzdBcIP6X1tTB_XulLAoIx1XWHPy36UOjmNl2h0Uf37_TWNEcZldjoZMnLetAzI1p3JOPUbNnkim06MDG_ZFuavXhczd_oa7sZsDIERYhRCFIP8zFkyNQtgsE062O6qwvauNthMp1yEJFb9t3PLhTLWoz22_FrqBBkr82NMOyMTQQlLXsp22CwUU1blliF0g&sai=AMfl-YQko6AAe4tYzcu4xEGPeFDpepu4C4lBMSELmDyrzFmq_yhwLW8QOGuAEAinZhOvBtNhHarZWgsvkQ1aqD7sH1-vX8U-W_qAUtBZOqduFfjl0tG9lEKuoGEfx7kPcCDTHkfsKdxXMqIIgfwa8psJCxm9rDp2tibxlDod-PGS3iAvxi8GWG-Y2LD_Ee1Nm7dTDCYNZD27PuQkkDqQsUn3B8VaC1jJmq2mb-mq8Peq4YKQNXlJL8H6cr6qsi84R4DOwjqnJOkVtIED8v4uqus4J19SX3G2vBA5s4CI5_dtPCw5fLbj956Kj7dm3xPfuxnhHdN9P0Sw6O3lNT7rBzIqOCQ1EWb5HDldR9G4sF7Zjqf-qp9wYkuKLVD4BJ3qnQkNVSTcLC_jrdJuhapJvjo2oDFKvGsq0R1xQ0emJNoV9EjVSlDDNQ&sig=Cg0ArKJSzG4a9cNBDJOEEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5296&vt=11&dtpt=3614&dett=3&cstd=1675&cisv=r20240109.81285&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50342	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	3009	OUT	GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5641&vt=11&dtpt=3284&dett=3&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:22 UTC	1708	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"14552530081537911592","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"18433607850811982668"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50341	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	3009	OUT	GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5096&vt=11&dtpt=3284&dett=3&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:22 UTC	1706	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x78d91c54887b73270000000000000000","13":"0x5c5691a3c84d5aea0000000000000000","14":"0x5156904339dc91e70000000000000000","15":"0xb0af0758f7ba3e8d0000000000000000"},"debug_key":"8854216559505967335","debug_reporting":true,"destination":["https://explorajourneys.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["13651271","13650698","13650701","13651220","13651229","13651235","13655738","13656494","13975320","13976235"],"21":[],"8":["12717414"]},"priority":"0","source_event_id":"4556172928729954551"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:22 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:22 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:22 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50347	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	794	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRoChikZM29BgTK0PaeQ94qs92Z7vCZULHLNj7E4dguvZCVtd4twFkBtAT32YsektqdKXoJuvoWm7WygFkgXfKWV-jDGnrV52pK HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50355	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	782	OUT	GET /pixel?google_nid=cognitiv&google_hm=xdmXEDM5sk22n9PM2iy-bQ&google_push=AXcoOmSTJ-VXWnK4_Nn4JTqjyi_xHnKpwCn42R5uyKD26Qkmr_mnAkxM7pJehZfhY-HIZh6UUAE-SOFGirmmG6QmlxBQ30LPhcZP61I HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50348	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	839	OUT	GET /pixel?google_nid=cognitiv&google_hm=eYNxQOhAVEaQ0WOGha3j5g&google_push=AXcoOmSZMB2tIiRhyFAwqYbvTyp1bs6Q42Fvyf4kXewIgDN9yN4lexcg-CnH7QvVG3LyFlq9PhN9PMcxFuSMhh2KJdyQDV2hL0bSFEW3bR7RwI6M5GkXggM96LVuP5XJLa2pqUqCotw75o-rBLZ1BapbG96Brwk0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50354	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	804	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQdzeKIDFd2JVtlBCmOGPl6RdKoQqtVyYML-ZZ-4bEd-O6pII51j1CaI_7pR4i7DrBCyPHAITCoYV9MohDpastUNqhJzE-GnA&google_hm=eS1hT0RVTjZSRTJwRjIxTWdOMDNzMjI0Q3NXN19QaWxaNn5B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50363	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	839	OUT	GET /pixel?google_nid=cognitiv&google_hm=qXJB9OnwRUuAk11aba0hXA&google_push=AXcoOmQ93vsXRecU31nxLh2uZ8jTv7mf1NLUsk9kMXZzzj0FN7Uy7UCCkdiubjNdq_HRn8PzQ15JbYDmCNQkmXpIunGnpd2czF1A3IIKNEcHZWFuYir2bDF4LrsrDnRPOyUQDlL5Y_9oJeFznm4yaaIUqPwrzMx8 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:22 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:22 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50360	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	785	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmRYBe6DwlyZw1NbOzC15mpcpo1b2afOCRTn8TrDtsi1Ive5TO8iRBPyNrER-b0IW7KcImgLGyuvlpZ8oDYR__OUEi9RXHObXmF8UQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50361	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:22 UTC	422	OUT	GET /ads/richmedia/studio/60024164/60024164_20231214070146977_PS_Logo_Main-Hardgoods.png.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:23 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 1901 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 19:22:22 GMT Expires: Mon, 15 Jan 2024 19:22:22 GMT Cache-Control: public, max-age=86400 Age: 64921 Last-Modified: Thu, 14 Dec 2023 15:01:47 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	508	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 84 00 00 00 32 08 03 00 00 00 aa 09 83 fd 00 00 00 a2 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 04 2e 76 82 00 00 00 35 74 52 4e 53 00 80 40 90 70 1f 60 f1 e1 30 10 b0 4f f7 09 06 e7 a0 48 19 fa a6 d0 22 ca 68 15 b7 7a 39 eb d5 63 0d 5c 8d 55 34 29 dc Data Ascii: PNGIHDR2PLTE.v5tRNS@p`0OH"hz9c\U4)
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: b6 62 8c 5d e5 cd 63 0c 5b 4b 4f cf 63 7c 13 8b 9f f0 61 12 c5 f8 21 a9 0b 04 36 19 df 8f d6 f1 32 9e cf c6 10 6c a9 64 04 08 77 c1 cc 5d 86 00 c2 e0 45 42 f6 de 8c 11 3e e6 70 c7 b0 e9 30 d2 b3 95 38 a9 09 15 0c e4 85 43 82 0c 05 43 7a 72 6e 03 3a 25 9d f9 b8 7b cc 74 13 9c 84 6a fc 3d 00 e7 83 13 c9 30 58 01 f1 70 7c b6 ec 01 d3 c1 31 c5 26 ca a9 c4 03 d3 c1 bb 65 45 60 0c 52 b0 de a0 2b ab f6 ba 20 95 15 60 fb db 5d ca 26 c3 75 34 6d 63 61 8e 9c 82 91 79 cf f5 29 16 f1 20 0c 8f 16 49 b6 1b 54 b3 69 00 72 51 4c e4 bd 5e ad b1 68 48 d0 ad 96 10 80 de 31 45 47 a9 39 13 b5 6f 07 ac ef a3 81 ac c9 f9 97 d2 07 c0 8a 94 2c 08 6b d5 75 53 82 de a2 8f 24 be c0 52 6a a1 f6 22 d1 0f 7a 4a 43 17 c0 55 96 75 d4 fa 1b 00 ca 56 d3 a7 44 da 1f cb 44 f1 be 25 b1 90 7b Data Ascii: b]c[KOc\|a!62ldw]EB>p08CCzrn:%{tj=0Xp\|1&eE`R+ `]&u4mcay) ITirQL^hH1EG9o,kuS$Rj"zJCUuVDD%{
2024-01-15 13:24:23 UTC	141	IN	Data Raw: f5 2b 89 45 ea f5 f9 b4 27 58 c5 3e 7c 72 cd 42 02 1e 8f 89 fc d4 c7 12 58 3d 9f 8e 31 04 7c c4 42 fe ff a8 ab 4a 98 29 f9 a1 f2 53 de a8 24 64 3d c3 83 e9 c0 f2 b4 0a 1c c6 b8 a2 77 c8 8b e9 18 13 a1 e4 27 0e 4e f1 84 f4 19 8b 11 31 56 f6 16 d1 4a 1d e0 ed cb 69 3c 0c 21 b8 26 85 ce e6 8b 9b f2 a6 8c 79 a8 b8 ba 6b 51 88 56 8c a3 03 10 a7 e2 b9 f3 b9 1b e1 2b df fa ce e1 ee 13 88 8a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: +E'X>\|rBX=1\|BJ)S$d=w'N1VJi<!&ykQV+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50372	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	2736	OUT	GET /pcs/view?xai=AKAOjssNROolRqLxk4B0K-U8zFwLdDWKfw67CQ36pXoYVm6jNHbnvrIpp9xJ6TmdnKrnE_qODByerSWBRCG07FRW4YSyXOnMrGOjlfPTNe1W93XBV-ucHcSzWNvVM9roH8J2ASKn_IKbydM2NkpBlHeS0pRNoxsRXEuypxsJVEEebuiX_HcG-g3_RrZgpGjE4B3ow9kHo2Ub74Zgz0kmLzWFsG_KCq9BAIe2SqD9f0wsrjyAkXz0Sxuhy-XBFIldR5r-dYMZtL5Isrr2vJHo_FhcwqmMtWhsVzoWI-7d9ZMRbBQFrsrYvu5UIT17usPfcQwVudJ66S-t-KfGSIwWhF4pepGbMNy4pb0eyc3Ii5DURYRlNCLmGtvUoutMKfWzcobFzNJgnRk20MA-WpJqvVl3zXjEnaSXjd_cpoqPEzJJ4VGyV3tRYyO-Pk4TDClwE2AUpcss9LkX3cyfdbs-VCRfi1-VVHOJQr5_LC68KvEh5Ei7Db6XxLqbGH07L2E84OVTkXg8jj1YSsgTQg_CbINAvKFseLe1uV-b0C2gda6u0phf-XSoumWJIthfSLAKK6kYYpweGaua-p6CGopWo2xBxGkvFRMUL8A4_3A6cBxyMnWUe787jtiuq-2jLfzaVtTrJmu8z9lBO0yYkXcBBEF_klViTNZQ1do4nZxnl2WrEXl_OLczOdSXgt3im8lEEuOjHMhxjAtJ6tP_iJoS-7DCtNsI_CAEpPx3PIJUfOUEK2ohae6vYWViXRwn0_k55IPn52dWRqnVLBhrdL4irMDThrdF78GWfez0d0Q2valpIkNYRMhN430ET9WevOoCN1w8GE46kFjFSIiAzRfMQbhTzEJ3gQKQG4w_fMYohTdvAsU_FxbA6IrkIuftlxnU66HG7HKVycUdAVdyvz8iDWEhR7F-ILXiyCguKLaVkp7Z-2EmyRl4Xc264NM0_jd9u4cuILOotSnfSaIRZT43ccFDecRqg5FBNXG9Jg9lXZaTQBc06UN-u4OwO3pomPs7Az-wrJQnMmysJ7tHKx9AQFAt7U0xq5no9QrJWKNhrqpQHACy4lAgTUKXGHbuYCUlu8kdKgly4ByhLcyZQR9i6HGGZERJHWbJD9RI-Wf6ELP2mUJKfcs5S2tQGWiziQfUG6_aKmDDPUuatPeRSpU7JftSnTCiPm0qzClmlnxI2nkrkhPBB4sAi_2_4fprxlpAz-kO3w0amYsQOKmHgFFOCrGXnmSygJEDpHfZcy9JvB1H8tTg-ruc_6ZGz5t-2JHNxrf8dqLystIFKZKge6KETdo6qr1KPyj_HDbBqNsSFYywjDY8WIzvjb7DTbtwDn8C82yrjDeW1orBdmlDIlVHGGncQOStXK5gx9ULG2htN0CsmncHty4wkkVkxmgxgN3N7LK3l178Vtq_zVDtD9jS9cpmHe5O&sai=AMfl-YTYhMkLM1ne21e3YJax-3_7ixtg7BPHBegH5FD3vWD4XKNkaOS6rUIU8Als0dGS_dw_lUeNRsTljEns3iZU2cmy7PJ3M029rA7sTHxHCW2maYj8JsSlPCIxl1kKKRyHtL0ybcQMpVM5Bd9f9N9xKLRt_h_V2GWkfdQymP35E6M1ZrOuTp_pFrdlXQOcXdbltUdLTYIVoDwNlU4c9pvt7LsR2IPtbWeZh9u-wR5dBcejKVYAlDJKRXQp58zRjhdVvy-UvIPTeUkpN94TdTcYcZXmBkeQ7Fw8spXwAhTlHkEV9rxrPHsz5pcJxBvuMNeQl9MqQyv-NurhgyAjDqmSp9peRSdplqhc60caXasoCberaXMAP2FPC5JI_D1BPJa29yd82BOOT3VqAJc0qM5nTrMxRr9M0i2HVlBaTTeV&sig=Cg0ArKJSzAtaPZwBQVMJEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5452&vt=11&dtpt=3269&dett=3&cstd=2174&cisv=r20240109.13177&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50350	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	628	OUT	GET /wp-content/uploads/2024/01/AirMacau-768x512.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:23 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:23 GMT content-type: image/jpeg last-modified: Fri, 12 Jan 2024 09:00:05 GMT accept-ranges: bytes content-length: 94730 date: Mon, 15 Jan 2024 13:24:23 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:23 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 f6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 Data Ascii: JFIFdd,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:1
2024-01-15 13:24:24 UTC	14994	IN	Data Raw: 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 55 6e 74 69 74 6c 65 64 20 64 65 73 69 67 6e 20 2d 20 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 30 37 33 39 39 45 45 41 39 34 43 31 31 45 45 41 46 46 44 41 32 31 34 33 46 35 38 31 36 38 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 30 37 33 39 39 45 46 41 39 34 43 31 31 45 45 41 46 46 44 41 32 31 34 33 46 35 38 31 36 38 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 Data Ascii: ng="x-default">Untitled design - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:207399EEA94C11EEAFFDA2143F58168D" stRef:documentID="xmp.did:207399EFA94C11EEAFFDA2143F58168D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xp
2024-01-15 13:24:24 UTC	16384	IN	Data Raw: e6 a5 40 18 5d 14 02 82 f8 a4 31 e6 d5 c5 2b 06 35 74 6e 0b d6 d9 08 b8 a5 26 20 6c a9 dd de 00 0e 4d 26 b7 22 78 9b 8b a3 cf 8c 5f 64 4b 4a e4 5a 55 be 1a 9d 52 5b 0e 1e 52 90 70 2b 91 a8 87 27 6f 05 b8 f2 5c c1 b6 fb 56 1d 94 b5 3c b3 e7 d0 56 27 2d a6 88 2e 06 f5 3e a0 89 a4 ad a8 75 6c 97 14 b5 6c 42 11 c6 4f ad 5b 8f 4e f3 3a 2b 9e 5d 9c b3 05 65 ed 46 45 bb 59 b3 73 71 94 35 15 60 34 ea 02 b7 61 3e 26 bb 58 74 9e e9 51 83 2e b2 13 e0 f5 4d ae 50 9f 6e 8f 3a 2e d7 9a 71 01 49 5a 55 c2 c5 62 d4 63 e4 c9 b9 12 12 84 28 ab 2c af 6a fa 00 6a 88 a6 3b 2b 09 08 5a 81 4a be 92 80 f4 e2 b6 63 64 1b 1c 88 8d 91 8b aa 52 d2 b5 80 06 07 51 55 e4 24 98 a7 a5 90 df 72 95 2f 81 c9 29 ac ea 16 c9 59 6f 11 1b 62 b6 07 07 00 d7 57 04 6a 25 53 1c ab 23 cb 2b 41 13 52 Data Ascii: @]1+5tn& lM&"x_dKJZUR[Rp+'o\V<V'-.>ullBO[N:+]eFEYsq5`4a>&XtQ.MPn:.qIZUbc(,jj;+ZJcdRQU$r/)YobWj%S#+AR
2024-01-15 13:24:24 UTC	16384	IN	Data Raw: a1 01 17 51 b2 77 c6 5a 46 3d c1 9a a3 32 2d c6 47 43 1d e3 69 5a 4f 18 00 d5 04 c5 ac e3 de 57 44 f1 49 30 f2 22 2d 45 e5 15 1e 9e 02 9b e5 09 3a 66 cf 4e 76 88 f5 b2 13 70 26 32 87 58 68 00 da 92 81 94 d6 0c ba 7d c7 43 0e a7 69 ac 97 db 9c 65 44 4b 2d db 96 56 06 37 74 cd 65 f9 11 ab e5 bc 18 ed 43 da 1d c7 52 36 63 a5 4a 8b 1c 75 43 67 95 7c 4d 68 c3 a5 d9 dc cf 93 59 b9 51 90 ef 9d 42 97 85 83 83 c6 fe 4d 6b 96 14 61 59 24 d9 21 87 4a 5a 1d e1 c9 3c 93 e7 52 5c 2a 13 65 95 8a 3a ae 57 78 b1 10 12 37 38 92 a5 13 f4 52 0f 24 d5 5a a7 b6 05 98 7e 71 d9 e4 ea 06 16 ae f1 2a dc a2 e9 70 01 e4 06 d4 8a f2 f2 c5 ef 25 67 62 32 db 13 94 eb fb b3 33 6f 2d 34 ca c2 91 19 94 b4 48 e9 bb 1c fd f5 de e9 d8 dc 51 cb d4 4b 73 33 8c f7 92 24 21 0d b6 56 b5 1d a8 48 Data Ascii: QwZF=2-GCiZOWDI0"-E:fNvp&2Xh}CieDK-V7teCR6cJuCg\|MhYQBMkaY$!JZ<R\e:Wx78R$Z~qp%gb23o-4HQKs3$!VH
2024-01-15 13:24:24 UTC	16384	IN	Data Raw: 33 94 4f 29 ab c2 a3 27 5d 8c 2f 69 1d a9 2a c5 a2 e1 76 73 6f b2 bb 63 90 5b db 70 df c6 e5 03 85 04 9f 10 a2 33 9f 2c 56 fc 4a e5 b9 99 65 c2 a3 91 58 25 96 35 1d b9 cc 05 25 32 13 90 79 f1 ad 52 7c 15 a4 76 ff 00 68 78 a8 14 95 2c a8 e0 01 c9 f8 62 a8 95 77 26 9b 23 5c bb 1e bd 76 b5 70 81 b2 4b 70 a0 c0 2a 12 9f 74 72 d8 38 e0 27 c4 f0 6a a7 2a 26 91 9e d4 fa 82 df d8 75 f2 6d 93 b3 2b f9 98 99 d1 12 cd c9 c7 02 5c ee dd 49 20 14 28 74 38 27 e1 42 5b b9 63 46 d3 b3 c4 48 ed 3b f2 75 be e9 a4 85 ca b9 40 74 ad 94 93 95 29 5b bb c4 fd a7 3f 6d 41 f0 c0 bf ec de c8 be c1 f4 83 b7 8d 75 a9 de 6d 2f 23 f4 56 74 ac 29 29 3e 40 75 2a f8 70 29 be 7b 08 a7 0f 76 4d db ff 00 7a 97 15 fc 1c d4 6b 51 0d 29 45 28 2b f0 1e 8b f8 75 a3 e2 88 c9 31 6c 5a 1f f2 6a b6 Data Ascii: 3O)']/ivsoc[p3,VJeX%5%2yR\|vhx,bw&#\vpKptr8'j&um+\I (t8'B[cFH;u@t)[?mAum/#Vt))>@up){vMzkQ)E(+u1lZj
2024-01-15 13:24:24 UTC	16384	IN	Data Raw: 33 ff 00 77 f0 25 f9 4f 37 d0 0f e3 8f 54 ff 00 ea 43 ff 00 07 fd 68 fe 67 fc 3d e9 3f f7 7f 01 fe 53 cf f4 03 f8 e3 d5 3f fa 90 ff 00 c1 ff 00 5a 3f 99 ff 00 0f 7e 8c ff 00 dd fc 05 f9 4f 37 d0 36 be d4 af 77 25 22 3c f6 e0 3c c2 d6 02 d2 a8 e0 e4 67 9e b9 ad 38 3d 99 74 9d 0e ec da 39 64 8c d2 74 f7 be ff 00 65 11 7a f9 cd d4 e9 9d c2 d5 02 15 be 22 5a 81 1d b8 ec 2b df 08 40 c0 c9 e6 bf 2c 75 6d 7e b3 59 a8 73 d7 4d ce 6b 8b 7f 47 07 a1 c5 08 c6 35 15 48 9b 5c c2 c0 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 5a e9 a8 dd f4 e2 e9 19 0d 27 3f 33 5e cb c1 5a 25 9b 5a f3 4b b4 15 fd ac e6 f5 2c 9b 71 ed 5e 64 4e d5 ee a6 15 89 a8 4d ab 0e 4b 73 07 fb 29 e4 fd f8 af b0 62 5c d9 e7 72 3a 54 72 44 af 8c 2b 24 79 8a d0 66 40 6a 42 Data Ascii: 3w%O7TChg=?S?Z?~O76w%"<<g8=t9dtez"Z+@,um~YsMkG5H\P@(P@Z'?3^Z%ZK,q^dNMKs)b\r:TrD+$yf@jB
2024-01-15 13:24:24 UTC	13388	IN	Data Raw: 9f 9a c5 45 04 25 de ed ad ad 4d ae 6c 74 ad 27 0a 49 58 04 1a d9 1e 9f a9 92 52 8e 36 d7 d4 5d 1d 3e 56 ad 45 95 b7 cd 6b 6d b3 c6 43 c9 5a 25 95 2f 6e c6 9c 19 1e b5 d0 e9 fd 03 53 ab c8 e0 d6 ca 57 ca 35 69 7a 76 5c d2 71 6a 88 f6 1d 7f 6f bd 3a eb 6a 47 b1 f7 69 07 73 cb 00 2b e1 57 f5 2f 0d 6a 34 71 8c 93 df 7e 88 b3 57 d2 b2 e0 49 f7 bf 42 e4 df ad 60 13 ed f1 bf c4 15 ca fc 99 aa ff 00 0e 5f 71 8b e4 b9 bf 45 91 af da a6 06 9d ee 0c de f0 87 b3 b7 bb 19 e9 ff 00 f3 57 f4 de 8f 9f 5f bb dc d7 c3 57 7f 49 66 93 45 93 53 7e ef cb d4 a9 fe 34 2c 3f fe 2b fc 3f f5 ae 9f f2 43 5d ff 00 97 ef fe 06 cf c8 ba 9f a3 ef 0e e3 da 45 ae dd 31 c8 ae 46 96 a5 23 19 29 09 c1 c8 cf 9f ad 1a 6f 0a 6a b3 e3 59 63 28 a4 fe bf 5a f4 0c 5d 1b 36 48 29 a6 b9 1e 47 68 fa Data Ascii: E%Mlt'IXR6]>VEkmCZ%/nSW5izv\qjo:jGis+W/j4q~WIB`_qEW_WIfES~4,?+?C]E1F#)ojYc(Z]6H)Gh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50368	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	423	OUT	GET /ads/richmedia/studio/60024164/60024164_20231221092021363_Hero-Image_Cat_Consumables2.png HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:23 UTC	745	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 54447 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sun, 14 Jan 2024 18:58:11 GMT Expires: Mon, 15 Jan 2024 18:58:11 GMT Cache-Control: public, max-age=86400 Age: 66372 Last-Modified: Thu, 21 Dec 2023 17:20:21 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	507	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 01 2a 08 03 00 00 00 a1 b1 ee 44 00 00 02 fa 50 4c 54 45 00 00 00 cd ca c8 d2 d1 d1 dd dd dd dd dc dc de de de de de de de de de dc dc dc d4 d1 cf c5 c0 bd c2 be bc c2 c2 c2 c9 c9 c9 c8 c8 c8 de de de 36 33 2a c3 c3 c3 1f 22 1a 1c 20 18 b9 b9 b9 bc bc bc 12 18 10 d6 a7 8b 20 23 1c 65 59 4d 8d 6e 5c c1 c1 c1 e0 e0 e0 d8 d8 d8 c9 c9 c9 de de de da da da e2 e2 e2 cc cc cc c4 c4 c4 bf bf bf cf cf cf bb bb bb d5 d4 d4 f6 f6 f6 59 6c 75 5a 6e 7a ef ee ee 5e 6e 75 f2 f2 f2 55 6c 78 55 69 74 5e 71 79 5e 73 7e 62 75 7d 5a 6a 70 4e 62 6d b8 b7 b7 ec eb eb 55 67 6f 11 15 0e 65 78 82 15 19 12 e8 e8 e7 50 65 72 d2 e1 ef 1a 1d 16 4c 5f 69 c2 d5 e6 53 64 6c ec d1 c6 ef d9 d0 1f 21 1a cc de ee 52 61 68 6a Data Ascii: PNGIHDRDPLTE63" #eYMn\YluZnz^nuUlxUit^qy^s~bu}ZjpNbmUgoexPerL_iSdl!Rahj
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 7b 79 c0 b8 b2 69 76 7c 9c 90 88 a8 9e 97 c3 bd b7 c0 8b 6d 5d 41 2d 2a 2e 26 da d5 d2 69 61 5e 69 45 31 7e 58 43 53 4d 4a 76 4f 3a 02 06 02 94 88 80 b0 a5 9d b5 ab a4 ac bc c9 a3 97 8f 60 80 96 5a 54 52 62 5b 59 68 89 a1 b5 c4 d2 5d 51 48 68 4c 3a a7 7c 65 82 ae d0 79 9e b9 c0 cc d9 23 70 9c 7e 8c 91 e3 cb c2 ca d4 df b7 82 65 7a 98 ad 40 3e 3a 66 59 4f 73 a6 ca 47 63 75 9b 73 5e 6d 92 ac 76 60 54 89 94 9a 58 49 3f 64 9a c0 54 39 27 b5 88 6f a6 85 74 55 77 8e e1 ec f5 9a 7c 6c 4c 6c 83 8d 5f 45 af 8e 7c 35 7d a7 8a 70 62 35 67 89 4c 83 a9 a9 b4 be 55 90 b7 09 6b 9d 9f 68 4b c3 9e 8b 7d 6a 5e 70 55 46 cb a7 94 1c 62 8a 92 69 55 85 63 51 d4 dc e3 1a 80 b3 b9 97 85 a8 73 55 97 a1 a8 40 73 97 20 33 3e 8b 7b 71 bf c5 ce 9f a9 b3 b2 7b 5c 47 2f 1f 2c 56 72 e9 Data Ascii: {yiv\|m]A-*.&ia^iE1~XCSMJvO:`ZTRb[Yh]QHhL:\|ey#p~ez@>:fYOsGcus^mv`TXI?dT9'otUw\|lLl_E\|5}pb5gLUkhK}j^pUFbiUcQsU@s 3>{q{\G/,Vr
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 2c 15 a0 0a 56 71 9b 30 37 68 4f 34 22 eb ca 51 71 65 5a 4b 93 2f 81 8c dc 90 25 85 e8 3b 71 57 d9 1a 34 a2 68 19 04 81 47 b7 01 5c e8 2c 6e 16 26 86 ee b6 31 19 8f 75 db 06 38 5d 55 55 45 56 34 4d 1b 81 1c 98 15 85 18 d5 2a f2 b6 4d 79 73 51 7b fb 78 b3 f2 ee ff 78 6d 7c 03 37 e1 b7 26 b8 9d 9e e2 65 d4 60 a5 4b 7a d1 32 0a 82 c8 5f 79 31 4c e7 f9 7e 18 7e bb 30 cf d9 4d c2 6f ed b6 8d ba 86 4e 12 8d e4 48 96 55 04 32 fc 06 66 c5 42 a5 82 45 76 1f 6e 4d f7 ab 56 3b 3e 7e f6 ec 8d 66 a3 d6 1c 47 80 54 06 ce 4a b9 d5 21 60 a3 f5 e8 37 ac 66 2f 49 c0 2d 8e 7d 37 8c fd 30 08 42 1f ba c1 c5 f2 97 5f 2d 26 fa 58 47 96 1c c9 1d f8 4d 51 46 0a 68 c9 3c a5 c2 d9 59 ad 50 a9 11 5b ad 56 2b a0 4b d9 9a ee ae 72 ab 3d c3 f3 9b ca 67 b7 6c e7 79 5b de a0 94 18 ed 56 Data Ascii: ,Vq07hO4"QqeZK/%;qW4hG\,n&1u8]UUEV4M*MysQ{xxm\|7&e`Kz2_y1L~~0MoNHU2fBEvnMV;>~fGTJ!`7f/I-}70B_-&XGMQFh<YP[V+Kr=gly[V
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 6b d2 91 46 aa 5c 4c 67 01 59 f4 91 dc 2a 22 4f d6 ce 5e bf 3e 13 a3 40 16 d4 78 25 76 9f 6f bf 0e d8 8e e4 ca 27 ed 34 e6 b1 a6 cd fc d2 f3 73 0b aa 96 09 0e c6 cb b8 41 55 ab 4a db 95 9b 49 bd 1e c5 e0 16 83 5b 1c df 0e 71 0e b8 e9 6d bd dd 36 54 85 d0 c4 cc 0d b7 d9 36 9a 49 05 96 a3 9b 2a ac 70 38 10 66 d4 58 d9 f0 2f 0c 90 2a 71 f9 75 7f 1b 14 16 36 b2 c9 95 51 cb bf 03 dc 86 9b 99 ad 4d 73 9f e2 4b cd b2 d7 38 05 38 28 c7 06 6e 16 6c 57 ad 5a 0d 0e 03 09 99 2d 97 e9 47 d4 1b 4e de 8e 09 6a 2a 2f 4c 3a 2c 6f 60 87 b7 a3 4d 00 8f d5 0d 02 33 89 9f 73 d0 f7 9f bd 06 a6 9a 48 94 c0 28 4c 27 08 12 5d e1 7e 96 b9 34 45 72 cb d2 22 95 97 b7 7c df 44 6e ed 63 1c b1 7d e6 79 d3 d9 bc 3f 68 60 0a 60 a5 bb e5 86 83 71 15 6a 34 ab 49 9c 20 53 c6 cb 08 27 6f 97 Data Ascii: kF\LgY"O^>@x%vo'4sAUJI[qm6T6Ip8fX/qu6QMsK88(nlWZ-GNj/L:,o`M3sH(L']~4Er"\|Dnc}y?h``qj4I S'o
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 13 63 83 99 dc 44 6e 9c 08 24 8a d3 6b 86 ca 4c 02 ec 74 41 65 9c 9d 6a 9c dd 40 48 dc cc 83 90 20 ba 10 0d 05 1c c4 67 8f 05 84 9e 46 ed 91 a7 ce ed 06 b4 cd f0 7e 16 db 27 af bc d9 44 ad 1d b3 d6 72 73 b5 2f ec 84 9b 60 03 32 9b 99 a5 38 9c 23 36 82 93 d0 86 e5 65 b6 28 ab 55 19 c2 6d 21 2f c1 81 a4 32 15 90 d4 c4 48 a5 b8 1b 94 83 c4 58 7a 23 78 11 8a 9a 73 b3 c8 66 40 63 f9 5d 70 c3 00 8f 14 35 1f 1b 28 12 e2 a8 52 c3 ef f1 1b 5a ee ec a5 27 ec 6b 35 53 93 bc af 35 3e f5 6c 2f 48 57 b3 e4 84 5b 84 e0 6c 27 e9 28 8e df bd e4 e6 c5 f2 39 1a cb 2c bd c9 ed d1 d2 fd fb 22 39 fa c9 62 d2 60 62 c2 ce 32 d4 e6 a7 d2 fc 32 08 a0 87 64 64 23 37 b7 e4 24 8c 66 02 09 26 8d 66 1f 1d 26 3e 61 7b 81 3f ae 49 52 89 ea 2f 67 9c b5 f4 e4 2d d7 31 6b f4 69 3d f2 da 2a Data Ascii: cDn$kLtAej@H gF~'Drs/`28#6e(Um!/2HXz#xsf@c]p5(RZ'k5S5>l/HW[l'(9,"9b`b22dd#7$f&f&>a{?IR/g-1ki=*
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 6c 8e de 8e d5 62 5d d3 89 b5 64 3e 8f c5 29 5c 51 1d 48 dc b4 4a 81 b6 8a 6b 20 e4 fc 5b 68 a2 46 6c 03 cf 1e 6d 55 96 66 52 81 ad ec 41 3d 1a 13 6e 94 99 fd 01 dc 22 d4 db 60 3a bd 5e 85 29 b5 61 c3 84 d9 a4 69 82 1b 67 6f 29 8d a1 cc 97 7a b0 9d a9 43 ba 07 fb 8f 17 d1 fc 50 d7 2a c2 17 fa e9 24 09 cf 9e 9e a2 df 15 a2 20 ad 65 2f 7c 96 92 db a3 05 72 28 0b d8 76 c1 17 fa cf 91 be 77 ce 9d 4a fb c0 e6 d5 5c 02 b8 fa ce 5f 30 b9 33 05 b5 4d e7 a7 9f a4 52 0f c7 5c 88 6e 34 52 6b 6b 8a d7 89 b5 4b d7 31 ba 03 cf c2 b5 f5 f1 d2 56 6a 6b 92 d8 22 5e c1 25 5a 13 bd 59 17 ed 47 33 99 6c 65 a9 52 bd 2f 76 f7 e1 7d 66 25 49 ec 72 49 67 92 0d 65 aa 6d 71 9b 0d 96 e8 60 fd e0 70 7f 72 27 a1 4b 29 2e b9 07 3e 08 3a 1f d1 11 97 0c dc 0a aa 2a e0 9b 0f 9e 91 6a 03 Data Ascii: lb]d>)\QHJk [hFlmUfRA=n"`:^)aigo)zCP$ e/\|r(vwJ\_03MR\n4RkkK1Vjk"^%ZYG3leR/v}f%IrIgemq`pr'K).>:j
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: cf 21 38 76 42 42 21 d0 02 03 14 69 3a 32 12 3b f7 57 97 eb b8 73 79 60 83 c4 80 ac e0 d3 42 1a bb 5c 9c ea 40 99 1e bf 36 7d b1 ab a7 fb ab ee ae 8e d3 01 ee 55 19 db f0 68 2e dd 14 b7 6f 86 ce 0f f1 df f4 da 08 ca db d1 27 58 99 4a 9a a9 f2 84 70 b3 a4 66 7d f8 db 11 41 2b fb ed 96 97 98 24 90 85 91 8e a8 ab 39 2c 70 56 36 69 dd 28 0f 10 06 85 db 2a 22 dc 12 a2 9b cd 2d 41 4f b9 58 ab 55 d2 d9 f1 f1 ab 57 0f 7f 3d 9a 7d f1 eb 46 3a 38 dc 8f 51 6b ec e0 39 6c 23 b0 9b d2 d8 f0 67 47 24 e0 41 6e 8f 9d 12 65 52 73 03 8d b9 82 64 94 32 c4 57 2d ee f6 4b c5 c0 b1 0e c3 9b be 70 b9 b7 a7 b7 b7 0b f6 d9 29 00 f7 3a fe 87 b6 d6 1b fb 92 ae 0b a3 97 be 07 37 03 db 89 f9 d1 91 91 62 62 fa 89 19 30 ef b8 5c b6 de 9c 87 1c 78 9e 84 c6 38 d6 12 1b 03 1a 4c 1a 22 a4 Data Ascii: !8vBB!i:2;Wsy`B\@6}Uh.o'XJpf}A+$9,pV6i(*"-AOXUW=}F:8Qk9l#gG$AneRsd2W-Kp):7bb0\x8L"
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 04 38 38 da 97 1b 4e 65 cf fe 10 7e 89 48 05 7c 98 68 0b 36 a0 94 b3 86 c2 5d 56 6c 00 d9 e5 be d1 7e 32 0b ed 7f 02 c7 e2 56 4f 4f 27 b2 4e 76 61 7e a0 da 5e de 4e 4d d8 3a c6 6e aa 4e 2a 57 75 53 49 34 4c ee e1 47 d5 72 5c 67 c3 df a8 3d 74 dc 4a a5 3c c1 95 ae cd 8e d8 fe 6b 81 03 b6 f0 72 45 09 4d 84 1b fe 4f 43 6a 1d dc a4 56 22 e0 86 e5 d6 15 dc 79 ba 85 e5 0d 70 04 1c ee 83 c3 3a f7 60 6f ff b0 be b5 35 3b 3e 7b 5c 3f c4 b7 87 87 db 8f 1f ef 8c 9c be 0f ad 1d 1f bd 77 84 b8 64 f9 d1 e6 e2 fa 7a 3a 0e 70 5f 0f b1 1e 32 08 26 32 af 8c 58 72 69 09 15 49 0e 2b 7f b8 74 0f 05 2f 9e 89 0e f9 41 71 60 4b 80 38 f2 2b 17 eb 57 49 8d cc 42 c5 fd 1f 95 13 62 a3 75 b4 4a 2f 85 94 5d 13 25 db 2c 95 ec 84 61 a1 95 1c d8 c5 c0 56 35 4b 89 2b 9c 10 55 50 f9 aa f9 Data Ascii: 88Ne~H\|h6]Vl~2VOO'Nva~^NM:nN*WuSI4LGr\g=tJ<krEMOCjV"yp:`o5;>{\?wdz:p_2&2XriI+t/Aq`K8+WIBbuJ/]%,aV5K+UP
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 32 19 24 35 4a 7a 4a 72 63 c0 82 3a 25 d9 71 36 8f d9 39 f6 31 a6 6d 23 d6 4d 68 d4 59 eb 25 f6 c2 13 b7 66 4f 5f c6 d6 49 2d 4c b6 ba b5 a0 ea 78 49 cf 2f 39 73 5e e6 eb f8 94 89 d9 12 05 dd 8d 8c 42 6a bc 6e 21 83 ef 2d aa 2e a3 d4 6a 1c 5f 48 03 5e 13 5b ae 2b af bd d2 3e 61 3e a4 16 3e 6d 6e 77 7f 9f 19 27 38 91 db 2c c1 8d 7c 14 51 93 2c a0 d5 79 83 b5 b0 c9 65 b5 e4 36 b9 95 65 8a 4d 47 29 5a e3 bd ec 93 33 f8 31 60 3d ec e4 e2 f1 63 51 1b c0 ed 7c 71 7a 74 7e 31 7e 7a 72 b1 8d 68 12 dc 7e de 5c 4c 2b 08 39 b0 62 bd 23 ad d2 cf f8 39 c4 be 37 fa 73 9c c2 a3 0c 05 db 87 83 1c 40 bf b7 84 c8 52 81 57 71 e7 7a c1 ad af a5 b5 16 3f da 6d 95 2a 59 26 89 a0 c9 47 7b 46 a1 8d 8d 72 2b 78 9e 1d 04 39 33 f0 5c 53 b3 de ae 96 03 de 1f ca 40 12 d9 8c 92 ae a5 Data Ascii: 2$5JzJrc:%q691m#MhY%fO_I-LxI/9s^Bjn!-.j_H^[+>a>>mnw'8,\|Q,ye6eMG)Z31`=cQ\|qzt~1~zrh~\L+9b#97s@RWqz?m*Y&G{Fr+x93\S@
2024-01-15 13:24:23 UTC	1252	IN	Data Raw: 16 bb 8b b3 37 90 74 b3 c2 c5 34 60 15 dc 36 e9 11 80 8d 43 79 43 28 3f 32 2e 61 fe 2d 23 e8 32 cb 85 29 3d ee cf f9 1a 33 78 9f a1 72 c9 c3 63 03 b5 0f 69 40 d8 0e 68 3d 1d 76 c3 b1 09 63 92 cb d6 99 79 93 df cb f3 6b 25 d7 f6 0a 9e 82 b9 04 d7 f5 7d 57 33 1d 5f 6f 58 be e9 0c 61 c9 8e 57 f1 0f 35 d7 4c 96 6c bb e0 3a 15 b3 94 f7 75 1c 01 99 7e b8 9b 7f b8 fe ab 6e 7b bb 0f 91 0f dc ed e9 c4 76 a9 ad fe ea 77 f3 bf 7d 8b 96 cc 21 52 2d 70 7b 2f da 22 2c 81 09 bf 30 9a 14 0b a3 12 3c d0 1c b9 89 9f 04 b8 2c 3e 84 1b 7e 89 d0 72 e7 31 dc e4 d8 eb ef 0f 8f 1f e1 88 ed 61 f4 01 3e ff 5c 6a 5c 8b e0 b6 42 bd fd dc 4c cb 61 50 6f 87 55 49 98 9c 93 4d 17 c9 df 62 42 3e 20 d8 d0 cd 19 a4 cb c4 62 18 b7 92 c6 3c 42 c9 18 45 d6 2e 96 b4 ed a6 7b 03 cf 5e 09 ad bd Data Ascii: 7t4`6CyC(?2.a-#2)=3xrci@h=vcyk%}W3_oXaW5Ll:u~n{vw}!R-p{/",0<,>~r1a>\j\BLaPoUIMbB> b<BE.{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50377	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	861	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQavy6-IB40pCi3Mg3q9EFlsflxJyMlZe5fa3ROp0jcknW2eKB1DzEfC2tG0b1yq7PssR3GZthvKfk8N5p1ECmObK5Jlhs-VK4UK_kJn_WQUUYenD8AW3LZQSf-XTjWlU3S_JI8ybUwPOAPoWCl5K25Gq4&google_hm=eS1BRjguYnZCRTJwR0NTYVBjLkJ6Qkk5T1pkRm9JOGJYRH5B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50371	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	806	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmTjlHxcbnm3GRyLVHtDqo7y-5JixTZ--XeSYXOfuNJPBpP9_-HLenWlhZr6xJnmOKnXzzEsFKaUjk7j8viIWDf2NozMl9l2Q-FT&google_hm=eS00MjdSZGpwRTJwSHk4Mm1aMUYuR29YZ1pOYUtxUDlGNX5B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50375	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	2736	OUT	GET /pcs/view?xai=AKAOjssnFtP1ArfFs_6n-aGN_K5HU43n7fBblyNDhMRSaoWB4zooeDyx5r-Svna7Y0i-fhDWIubVCOC5voFcpWWDILNbukb-M8bB-AU39rLJMyFsKg2VTpgbFLoLvJLE5_35ZpOvvwYo-A3k4NmOJHUSN_xYNZ_MyVGuL4HOdFTpJxkA2BesA_DmVPp_YtQnUEa6DFKoT8XGBqORFgbgwu18B8HW1G0dyDDaqFNMSXkXqI5GxH5b64zm_1GvS3tIcyufUIbOrx6aCBxSGf2uSNWLNsaW7DIYzBTJ9Pca_I8XxtVuzAV4nn_iXqhjqBUBSn4FGw3SIJ_UXly2ilq0X4hKhMGnVGAh_C640UL_jMPKKnTSeYXukqNabB0na_6CwXMXdL7jjMpyKv2capjvfvd-aPrLmNuUAJiI0BrFhii_075BU7JAy_KqEW-1dY2mjDn2qHm89ODyHE3D4wLjMOoWx3M5U9my-1jBMIHhr0kL3aetrEvRN6E7hPD40Ug62ajU7gbIdj4_QR_f0LnP2EFTPFih4nbceU93m84fVU_e5r0GM7lrPeQvB4HARB732CeYCrjSEaayRICWw3UqcFrkBacNy_E0Ben1c6wMosIHKEmBSLE0nEpOCozFlGXoEJ9Kjz3dy75A2IEWOtzsstR9_7xt5Fxuo2XjTAyKgzCCVzM0HkxVMzDwFyd0naqIILXvSzrQzWlneMjkf5y5NVEeCsEe5D9TC_E_uvrHKHqfWOsG5ySWRqnG80VAVZjy3spKXXFFfyCKlNRoJs0FWm_c52K_BZmagdTNStRN-AbDS5xLqklWZNnOXC80scAtCogwZdDDDLu_ObarmaIPsXn2Tx_5mmuNJrSrJbg0MubvddnGfLkomwtgcShnAAubnj7MMmDRw-fxGGKY_iWouhjMiEhtTZmP8Ye6EdUd2Sk5d1_ZEN-UKrf5fyrbyDGobnyvxAlukuuJEe9uEYPDw7I8-nH0eUEd3Luap1bh2DAK0GnFSkks3NR4RPOXDC5IoHXfkQJrzVMSrhWxg5zzJUxWjMH8kB2pZmZGXZu1ml_6oMVg75Gw0UpcoAGLegLXB8ep53PU8K_cqHaUrAWhYP3h_3Rw4ZXQchZLmVlnaGt-SbBnRZZUw6GyfW0oc_UiPaxor_l9GjIKA3TTwi1drkPGSEtMp4jSa8q9jgP7edK5ovibBLmpPNSFZRo4hmX8iUi8g9TEEHxLVQtrzZdZbHv797AVjRM7lvuCCRAr1KtED-TJuE1EXQru3vUk3zB0X9bn4kf1s9AZBtM39XdHWYy_c19MjHUMeMOakISn2FrUh1hCKFrXKTlzog6-UuLS8OrIziatfqHYWBTYhx2Q8PdPK2LIH5VG6fDMPrj7hLDFuwzhQCpoPzI-DxXWuh_KwiW_76_1atHnZg164xlWc2KoJCTg&sai=AMfl-YTWYFT-2L0ZZZxlmF_aNRJEpqjVjto204lY56SH-3tGxDDQfLEDMnOj4S5suWPW9iADHet4_Z_B3b6r1CmGH-Sh5c4A2XspjybLsg5qrSPmJiaH_Npzrqv2KeJNjd93BPT6rWrAvfVgJ0cJcng3UJUumrjt3W3lOFkwL1ZMzWLNoR1g65q8j7MXxBQZTGaoWxkm6oNL4OJDPiiaTRC8aIq3XlwG5wamXMq7JmYkSJm7T4Yj94B6AzcaRGbyVD_eJIgknq4eK0AyznvZxmoaDSoEFaO71fxo_bbuqBHC8j8m_IOuCdengJmgSCL2bNGJx6v-ErPxjIdSADavC2pQFRbW-p1t-DsP-lRmT9BMrVR2PBPMd_-keef6KQ9AdUEwn5rWD81l-hrm7H3ze0N4d5Nzg_YWRHvrpA5uKduu&sig=Cg0ArKJSzERzeTx-RfVGEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5641&vt=11&dtpt=3284&dett=3&cstd=2352&cisv=r20240109.96957&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50373	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	861	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmSAt0Awg44Bor-lDFjtX2QR5OySl1YIgPhmPvP9BdEZ2_kFgbEVWo_5x6b32qgu2LbzjNTV1UQMiJalT0GdTlvPhLKYfYjn82HsU6PGbvk2oDrfZanpQtVA_EU-r6cbH04vgQjjOzgHTr_OI_EpJuPZt54&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50374	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	2736	OUT	GET /pcs/view?xai=AKAOjsvp3HnPTyBTMkamhSpTB6pl6H-kRFr6pd0yCjSNRUVbbIudG7cl2M5DsB78mq7A_KVNGU7WzHOybDNQV5PSJe7Pa15kzCAHLztLxN12Mai5uhGsRBBIjc9EuwNQVSZ4juxRxIvvjHoRcn7ssVnJl70KptXDzA7V4sPAEFrsZxD_no5qN7tioO7KMj964OGG91GjyYXEPq9ZvYTVs63zKSywWOGY7acWNJEguVnRSpTdrVGkapWwv0EwaeLleBXAnPqH-5Mv1aGL8fSP7hQ7ybyKP9tBxJsljygmGSqWsNw3-yLxaCspKzZrXWnrRmtGoUZl3XQFO8G-Th2JvyaLzyw49BFm6Jehy-sBOetz7L9NeRu4w5379s2_qkQLrJuh1HBZwHTa_0Ba3jM_xmg1NwU3SMgMOKNB0Ov0TaR4QfslOvy1JCSGyzI3VpxeGykeE0SL-nkiU0ORzhPc8uKr_zHb1_0SM6fhwcHmWa8qKjAb524w6QyCoywFAgNRr2xCMJXgotB2BJ1lp3VxTq8eCqVxvtO6FshHAMr4LLrOriFWKKmNXC4zu3ysARdMJj64gPh7_pJqyuFTrIuCkrBq8uw4s-jBdURYqkLa0B14-fYF4-4QlGmQlh_OGaNDHT0NCSEW3A4dPQhq1lCCEnJ9yGmYw-dChYHTYRWJR9QBdIKCAl8qh5DEo3COfLLGPmUrGOcc9s5a4mdCEe5dli4VAjzHwU5oXQ9onaKvO4vbvwAtSTmXdkVg1sQcl9Ht_Cmp8hE0utz3IbiLlAdP-9DbK4UXjvlMDTJpdzjvJsZmIRZuKdeXFuItWU9bDOS78PLnkyBTyP3GCMVdCopz47Dd_k5BdrDR9meYuXr1Y-o-5ReJ8C7EuMB-Aqwt2J629S00Dwa1Kgr9_EcCFoVCYRdCnWUKlJ8rMsV_9QfClNqgKuYW_rfAVzCOld06qAbc1jAZTI7y3GPE8a1O8O-2vmS6D4NXJDAkZYjLJIGuT8DVSXZ_4UDqEasg5iGU0H7hGtktsmkoOlLuTqkmTzWvoxuvRmMfw2GueQDTN4GMZe78bQIP8h03PZxagYt_u2IEwWFKsxV0xIismBt91RP1mA-Lce1Tjbc7yu9LpUqrWNoUoB2j9b1581APKe2BXeqdzjp96KyIY-AQHiIWkCc0p6V9QegJez_OS-xVcCDHMO5gxRkuPJfs-kbNChJPzmyYnsST79zyH8DdrHCH_Xr3XcrAChxwIE0lPRiSzZ9sUtfuC_a0X1C1CeRJqFsAebqo-hCT-4fdOWMK9AVJazxBVtGKaTXcStLxMQ067T9L9x1CkVSTllNmU_zNnMSt1PuRc7_KauqkoOkf9g4gLm6CqLzK7IQv6k4WEV2n7BevwuCOIHMFw02M9srTQicw0TY8AbIYj_OKTjpUXHoEK-RtEug8Ij9J&sai=AMfl-YQIPYSXP0X6eBlgXf8BxHMUWnx54ZqZxqYAoznjkURWFneDTQhMfs-RfeEkSzxPWDFrLmkiyKFEqE6iCeVERbGSDjJvEqJ1JP79tHMVVa7iUfrgy2t6cwJGzmadmVRtaDeO4ccr1DXekSdMVhJhbdZ5b-ZtfUHT-NrQcwSHOdOYjr3nBYclyz2uEEk_V-eIpSOMX50YJsgW9PQcFr9U1R9hCk2cXbygxrFWsfTNKbJrJWKQJebbMjwkmT8WOVICXAnKLrWm9cXSIwYPSM1ej_ZS0OolcUT8CT1_jipHRFWBS_M-c1yMad-IgqToYu4vKbDpa83WKMbVK4ZKJGfrk8WTYOVOK83xTC3SlO3gdf6JBf6W6T1X5-1rgZWtHrJ-2l1I97PQX-WdsNpyJlFeOLsjZgzO8ZGwBvtouflW&sig=Cg0ArKJSzKds88P4aZx-EAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9leHBsb3Jham91cm5leXMuY29t&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=5096&vt=11&dtpt=3284&dett=3&cstd=1809&cisv=r20240109.65887&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:23 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50379	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	822	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRDum50lrWXz5Yhu0Czgd0D5fL_h_Rscn_AHruSbuLJuNWan_vL9POHqlOScdmDES34uhh3bxcbFm3ejitO9U9jC15TrQLo3FSN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50380	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	820	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQKnbnaV4TG-U97_v64H__QwyOBp2b9ebutC3UrjRj_XsJNR82ga2abClIlEnSXnCYhtbObnS4pxTxKpQwPviot5HqL1FGi-Q HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50383	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	877	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmSeIjwUFXvxwNTWjhprFrP8zvznMWF19iP2i-PlozM-pOpTtsqzuREHMn-yHs8qDsl59OOWhEbCvuRAH5dcRU3_JcH66va6klcBFnotonw0HOgeO8jsVWVHsT2NQowwdJ4FNnxLdKOgasLNhv18FTkkKXw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50390	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	877	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRk8aAOzcL4YDJzbs3Jk5669CA18yOSK12ynhlqEeBV8XROypkoUtnq4I4PJ6nNicocVYSfGYXW0qxStfQK1Swa2IYIyql2iAHQGlw4llcFkMf8yWYz0rFgDOVXKmspoP9m6kHGuuSyHalgTNOpjM-hMWI HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50391	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	783	OUT	GET /pixel?google_nid=cognitiv&google_hm=JA0jvjkdJEyhrXrvc-004A&google_push=AXcoOmTeTxhG3cZDFb65U_3cZD8V_qfG8kOAM1WTdHABzBFu-vrLVYPGdKr_QK8J5Zvg6Fvfcd8Y2AIaXkhS3-83BENwoNLOyHXjHWbm HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50389	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSA2rqtx26tZoo69R83K1ejUFQXWvehH2eUUYmAIwwL2cq_iuH40V8ucqQ-J5m1Kax5qV3goPKR0lklc7vyyRcuWijtSO4Ifuk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50393	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	839	OUT	GET /pixel?google_nid=cognitiv&google_hm=2AGeIjQlUEOPwEHomUdE7g&google_push=AXcoOmSRJVK1r0bwbzqmvXy1HVnwuTrVi-8utwKYnuEESDI8uad60B-7dZTcNjDhvYFO5Iq5AjK0fhx2bM6nG5ksHUlC7NSbgMJpkuVuSc8-pOJ5-1Pl9iRBG6WSmsxWtnmCHc3mPPpCL9AIQdF-L_ycDc9MJKbp HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:23 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:23 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50394	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:23 UTC	856	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQLPQsGYxBPWhisDOKW-ucf0uP2dZrbKNvNLqzFdFTBpvmCCXbKJSXSB8DWT4TtdB9lIFxRkqG0L_c30Dlo8MNgekNcZ_tlxW8BS2E-4VFypeQcX5fRQaxy3ssFVbl4ITqMj0QnaIjXgaII6pCtVbQuTA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:24 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:24 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50400	52.223.40.198	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:24 UTC	406	OUT	GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:24 UTC	502	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:24 GMT Content-Length: 213 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIiOmv4ID2yjwQBTgB; expires=Wed, 15 Jan 2025 13:24:24 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:24 UTC	213	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 74 69 63 6b 79 61 64 73 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 74 69 63 6b 79 61 64 73 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50403	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	802	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTg1oVVJq2CzUaXoIbGqF1uMwtljfn6vOzmRR5X7hdfNWWGBomuPq9RwBaSi75INbEp5WDTR_E4Drg5dZClVvi31-yzmKlq6Qx0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50401	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	805	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQ8Yj0cOEDIBaCRoT6dUuokZ3KdfNnqBtFdqVgsk8ecgLrpgtrzZd9XNU_m8b-yFr66Pdot9iMsCSAM3bKsBUkygeFvmqHRCoE&google_hm=eS1CZ2hVUFh4RTJwR05uemUwNUxzZE4zSTA3Sm0xSDg5T35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50404	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	793	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSPPCHYvLjAcvs22H8OEgs26pGGD24WaLYLYGB9omykS0pgKoRtQMq0gkEuCOgQvVoRgzlnrOpRrnztMIsuWYgJnDf0Py8nzd8 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50406	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	860	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQfmTq3Is77ba_flMb4dL03clvvQIsB9jjOormIMdW38cCKI2tbyGDeZsh8k0fsRlXoY4FTmTxI3mnYs7MOA--CzVeiAEjGoSBRh8eYNyjhcZ-WoyinjhHPwwdWgViR30bo70Z9R9OS6pFxvZmXLaWqyA&google_hm=eS1iLk5QRDRsRTJwRlNUdjhZdllmTnFQOU5JSV9pdTh0RH5B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50405	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	821	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmTF3ezaLmYOz7Nh2RaJSZqLFbD3AxsHaxKL62-HjPNokkeI8LPO18riMOgTp21BtNJvoa3uGvruAuLto-2mvxlgNOu22fEJwjw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50407	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	785	OUT	GET /pixel?google_nid=cognitiv&google_hm=42F6C9VsIUWMcvSy0Mjpyg&google_push=AXcoOmTc4iOoIaSEFaPR0PCrXgmTJS6Sh94MGxiniMwmE5mSnrLh_qglaXEVMk0PykMGUQxU_6X2ztO6nVmzWajmi1yK6P8bD2WpGYrShg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50409	52.223.40.198	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	493	OUT	GET /track/cmb/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSgCMgsIiOmv4ID2yjwQBTgB
2024-01-15 13:24:25 UTC	543	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:25 GMT Content-Length: 287 Connection: close server: Kestrel location: https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=baaecee9-0d90-4ef2-8354-2f6a99116284&gdpr=0&gdpr_consent= set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiI6a_ggPbKPBAFOAE.; expires=Wed, 15 Jan 2025 13:24:25 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:25 UTC	287	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 Data Ascii: Redirecting to: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=baaecee9-0d90-4ef2-8354-2f6a99116284&gdpr=0&gdpr_consent=">https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=baaecee9-0d90-4ef2-8354-2f6a9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50410	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	849	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRQY8Dv_obd-pk_zo9jEywu2IbTKWRSkzxJkKIwTtBSUbhMbWx6PsVxs-4ncxBXivnoadYQzB4yAid4_DOjuyA_lUC7BFEggCr-aSwqsoLtSeNjd4aCuB8o4-rHJMfOBc8f1MxB_bd08PVsB6pFigNZb4M HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50411	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	794	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRsuJQ0O4AH-fkCLpqsfj3zt-0CJ6oq1Ws8pUO6d-JylLypl98tLuiwtGCd3GsY2eViCM0ByMBqxYxH3KPgBRz8iOor7sc4w4QN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50408	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	863	OUT	GET /wp-content/uploads/2024/01/AirMacau-768x512.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325055.38.0.0; FCNEC=%5B%5B%22AKsRol_wrahsvHY4dGfMzxoJRGWNHS_NkmycOxFhASitXjG8f5CCjAydz0HYcyKh_3SfOIXzrk5VGTYy_iX6ZcNA7Clepo6XAgMsR8aF1nhT2J2qrPj_3B1rUrd9jgN31HTq2Gb_QAgcMWuUEiuP0I-d2RAkSs27Jw%3D%3D%22%5D%5D
2024-01-15 13:24:26 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:24:26 GMT content-type: image/jpeg last-modified: Fri, 12 Jan 2024 09:00:05 GMT accept-ranges: bytes content-length: 94730 date: Mon, 15 Jan 2024 13:24:26 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:26 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 00 ff e1 03 f6 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 31 34 36 32 38 39 39 37 37 37 2c 20 32 30 32 33 2f 30 36 2f 32 35 2d 32 33 3a 35 37 3a 31 Data Ascii: JFIFdd,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:1
2024-01-15 13:24:26 UTC	14994	IN	Data Raw: 6e 67 3d 22 78 2d 64 65 66 61 75 6c 74 22 3e 55 6e 74 69 74 6c 65 64 20 64 65 73 69 67 6e 20 2d 20 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 2f 72 64 66 3a 41 6c 74 3e 20 3c 2f 64 63 3a 74 69 74 6c 65 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 30 37 33 39 39 45 45 41 39 34 43 31 31 45 45 41 46 46 44 41 32 31 34 33 46 35 38 31 36 38 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 30 37 33 39 39 45 46 41 39 34 43 31 31 45 45 41 46 46 44 41 32 31 34 33 46 35 38 31 36 38 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 Data Ascii: ng="x-default">Untitled design - 1</rdf:li> </rdf:Alt> </dc:title> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:207399EEA94C11EEAFFDA2143F58168D" stRef:documentID="xmp.did:207399EFA94C11EEAFFDA2143F58168D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xp
2024-01-15 13:24:26 UTC	16384	IN	Data Raw: e6 a5 40 18 5d 14 02 82 f8 a4 31 e6 d5 c5 2b 06 35 74 6e 0b d6 d9 08 b8 a5 26 20 6c a9 dd de 00 0e 4d 26 b7 22 78 9b 8b a3 cf 8c 5f 64 4b 4a e4 5a 55 be 1a 9d 52 5b 0e 1e 52 90 70 2b 91 a8 87 27 6f 05 b8 f2 5c c1 b6 fb 56 1d 94 b5 3c b3 e7 d0 56 27 2d a6 88 2e 06 f5 3e a0 89 a4 ad a8 75 6c 97 14 b5 6c 42 11 c6 4f ad 5b 8f 4e f3 3a 2b 9e 5d 9c b3 05 65 ed 46 45 bb 59 b3 73 71 94 35 15 60 34 ea 02 b7 61 3e 26 bb 58 74 9e e9 51 83 2e b2 13 e0 f5 4d ae 50 9f 6e 8f 3a 2e d7 9a 71 01 49 5a 55 c2 c5 62 d4 63 e4 c9 b9 12 12 84 28 ab 2c af 6a fa 00 6a 88 a6 3b 2b 09 08 5a 81 4a be 92 80 f4 e2 b6 63 64 1b 1c 88 8d 91 8b aa 52 d2 b5 80 06 07 51 55 e4 24 98 a7 a5 90 df 72 95 2f 81 c9 29 ac ea 16 c9 59 6f 11 1b 62 b6 07 07 00 d7 57 04 6a 25 53 1c ab 23 cb 2b 41 13 52 Data Ascii: @]1+5tn& lM&"x_dKJZUR[Rp+'o\V<V'-.>ullBO[N:+]eFEYsq5`4a>&XtQ.MPn:.qIZUbc(,jj;+ZJcdRQU$r/)YobWj%S#+AR
2024-01-15 13:24:26 UTC	16384	IN	Data Raw: a1 01 17 51 b2 77 c6 5a 46 3d c1 9a a3 32 2d c6 47 43 1d e3 69 5a 4f 18 00 d5 04 c5 ac e3 de 57 44 f1 49 30 f2 22 2d 45 e5 15 1e 9e 02 9b e5 09 3a 66 cf 4e 76 88 f5 b2 13 70 26 32 87 58 68 00 da 92 81 94 d6 0c ba 7d c7 43 0e a7 69 ac 97 db 9c 65 44 4b 2d db 96 56 06 37 74 cd 65 f9 11 ab e5 bc 18 ed 43 da 1d c7 52 36 63 a5 4a 8b 1c 75 43 67 95 7c 4d 68 c3 a5 d9 dc cf 93 59 b9 51 90 ef 9d 42 97 85 83 83 c6 fe 4d 6b 96 14 61 59 24 d9 21 87 4a 5a 1d e1 c9 3c 93 e7 52 5c 2a 13 65 95 8a 3a ae 57 78 b1 10 12 37 38 92 a5 13 f4 52 0f 24 d5 5a a7 b6 05 98 7e 71 d9 e4 ea 06 16 ae f1 2a dc a2 e9 70 01 e4 06 d4 8a f2 f2 c5 ef 25 67 62 32 db 13 94 eb fb b3 33 6f 2d 34 ca c2 91 19 94 b4 48 e9 bb 1c fd f5 de e9 d8 dc 51 cb d4 4b 73 33 8c f7 92 24 21 0d b6 56 b5 1d a8 48 Data Ascii: QwZF=2-GCiZOWDI0"-E:fNvp&2Xh}CieDK-V7teCR6cJuCg\|MhYQBMkaY$!JZ<R\e:Wx78R$Z~qp%gb23o-4HQKs3$!VH
2024-01-15 13:24:26 UTC	16384	IN	Data Raw: 33 94 4f 29 ab c2 a3 27 5d 8c 2f 69 1d a9 2a c5 a2 e1 76 73 6f b2 bb 63 90 5b db 70 df c6 e5 03 85 04 9f 10 a2 33 9f 2c 56 fc 4a e5 b9 99 65 c2 a3 91 58 25 96 35 1d b9 cc 05 25 32 13 90 79 f1 ad 52 7c 15 a4 76 ff 00 68 78 a8 14 95 2c a8 e0 01 c9 f8 62 a8 95 77 26 9b 23 5c bb 1e bd 76 b5 70 81 b2 4b 70 a0 c0 2a 12 9f 74 72 d8 38 e0 27 c4 f0 6a a7 2a 26 91 9e d4 fa 82 df d8 75 f2 6d 93 b3 2b f9 98 99 d1 12 cd c9 c7 02 5c ee dd 49 20 14 28 74 38 27 e1 42 5b b9 63 46 d3 b3 c4 48 ed 3b f2 75 be e9 a4 85 ca b9 40 74 ad 94 93 95 29 5b bb c4 fd a7 3f 6d 41 f0 c0 bf ec de c8 be c1 f4 83 b7 8d 75 a9 de 6d 2f 23 f4 56 74 ac 29 29 3e 40 75 2a f8 70 29 be 7b 08 a7 0f 76 4d db ff 00 7a 97 15 fc 1c d4 6b 51 0d 29 45 28 2b f0 1e 8b f8 75 a3 e2 88 c9 31 6c 5a 1f f2 6a b6 Data Ascii: 3O)']/ivsoc[p3,VJeX%5%2yR\|vhx,bw&#\vpKptr8'j&um+\I (t8'B[cFH;u@t)[?mAum/#Vt))>@up){vMzkQ)E(+u1lZj
2024-01-15 13:24:26 UTC	16384	IN	Data Raw: 33 ff 00 77 f0 25 f9 4f 37 d0 0f e3 8f 54 ff 00 ea 43 ff 00 07 fd 68 fe 67 fc 3d e9 3f f7 7f 01 fe 53 cf f4 03 f8 e3 d5 3f fa 90 ff 00 c1 ff 00 5a 3f 99 ff 00 0f 7e 8c ff 00 dd fc 05 f9 4f 37 d0 36 be d4 af 77 25 22 3c f6 e0 3c c2 d6 02 d2 a8 e0 e4 67 9e b9 ad 38 3d 99 74 9d 0e ec da 39 64 8c d2 74 f7 be ff 00 65 11 7a f9 cd d4 e9 9d c2 d5 02 15 be 22 5a 81 1d b8 ec 2b df 08 40 c0 c9 e6 bf 2c 75 6d 7e b3 59 a8 73 d7 4d ce 6b 8b 7f 47 07 a1 c5 08 c6 35 15 48 9b 5c c2 c0 50 00 a0 01 40 02 80 05 00 0a 00 14 00 28 00 50 00 a0 01 40 02 80 05 00 5a e9 a8 dd f4 e2 e9 19 0d 27 3f 33 5e cb c1 5a 25 9b 5a f3 4b b4 15 fd ac e6 f5 2c 9b 71 ed 5e 64 4e d5 ee a6 15 89 a8 4d ab 0e 4b 73 07 fb 29 e4 fd f8 af b0 62 5c d9 e7 72 3a 54 72 44 af 8c 2b 24 79 8a d0 66 40 6a 42 Data Ascii: 3w%O7TChg=?S?Z?~O76w%"<<g8=t9dtez"Z+@,um~YsMkG5H\P@(P@Z'?3^Z%ZK,q^dNMKs)b\r:TrD+$yf@jB
2024-01-15 13:24:27 UTC	13388	IN	Data Raw: 9f 9a c5 45 04 25 de ed ad ad 4d ae 6c 74 ad 27 0a 49 58 04 1a d9 1e 9f a9 92 52 8e 36 d7 d4 5d 1d 3e 56 ad 45 95 b7 cd 6b 6d b3 c6 43 c9 5a 25 95 2f 6e c6 9c 19 1e b5 d0 e9 fd 03 53 ab c8 e0 d6 ca 57 ca 35 69 7a 76 5c d2 71 6a 88 f6 1d 7f 6f bd 3a eb 6a 47 b1 f7 69 07 73 cb 00 2b e1 57 f5 2f 0d 6a 34 71 8c 93 df 7e 88 b3 57 d2 b2 e0 49 f7 bf 42 e4 df ad 60 13 ed f1 bf c4 15 ca fc 99 aa ff 00 0e 5f 71 8b e4 b9 bf 45 91 af da a6 06 9d ee 0c de f0 87 b3 b7 bb 19 e9 ff 00 f3 57 f4 de 8f 9f 5f bb dc d7 c3 57 7f 49 66 93 45 93 53 7e ef cb d4 a9 fe 34 2c 3f fe 2b fc 3f f5 ae 9f f2 43 5d ff 00 97 ef fe 06 cf c8 ba 9f a3 ef 0e e3 da 45 ae dd 31 c8 ae 46 96 a5 23 19 29 09 c1 c8 cf 9f ad 1a 6f 0a 6a b3 e3 59 63 28 a4 fe bf 5a f4 0c 5d 1b 36 48 29 a6 b9 1e 47 68 fa Data Ascii: E%Mlt'IXR6]>VEkmCZ%/nSW5izv\qjo:jGis+W/j4q~WIB`_qEW_WIfES~4,?+?C]E1F#)ojYc(Z]6H)Gh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50412	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	782	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQZRS489zz06udeXZ-aBJnYpP-WaMbYC5drtNUJzUlVF2_XCeNtHcIH9cafZtQwXd5AIa3vjXhW8IGyBtcW7Il5G_rhLdnNAE8 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50413	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	805	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQS77cTC4nMRa55DWsbCqRj-gKSxM1q_rNu3pgkEu6yoqPof7cLEzU9Heppm7UmCMdWfPXzLhGI5gU3WmiG9BzQisTUPI30SB4&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50415	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	821	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmRwpmsk5b1hrjAm10VAPEfsx6x0LjA3R2w-RSEmr9o8N0sK8owjEUqz-fnfglySi_0qL_A-s3ZQHzJFuL3xTXICom7dzcbGQsk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50414	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSi_oDA7vinFeFX0bVgjwOSb9BUwloWwKgl2quBqyM4WgB_WR1ca3JPR6JygCfxYimVY7TVS2vFZdZp5n_c_Pf4vwpFPzIXYBY HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:25 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:25 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50417	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	805	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQoxfAlDoZh_Zs6Ib8fRWrUx35HQiMbkbtz9lpd9h96N8SYsIW9aG9tCj6L1aCPq21vHOtssj7FL6azcI-XaakY7drKC8pEGuk&google_hm=eS1pTktXdFp4RTJwSG1WQVlvUE9RdW9EYUpJU0ZvRC5acX5B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:26 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:26 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50418	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:25 UTC	845	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFRQU9zbnpVTlFCZA==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRtKbMdrq9XgH6tlmWc5eawPgrzguh_C-RH2QZodKiKq5Qb4yaUnfchmynLT8HYVXXuW3BJ07AsN5C5ehdsgfDLgui21ryKPwI HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:26 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:26 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50419	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	793	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmT0Bnbp9WEwmlHxYV6-Mri0sSGcuwFN1HIW5D71OhwFYHF6dl2qjmlQYM9zP3XVpc4XtMq-X4yDVT9R1uioU-BMOZAlKPLGbtM HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:26 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:26 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50425	34.206.227.189	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	518	OUT	GET /sync/stickyads/53a62d6169986a2c9839605a347fcfe7?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:26 UTC	882	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:26 GMT Content-Length: 0 Connection: close Location: https://ads.stickyadstv.com/user-registering?dataProviderId=199&userId=y-pFDDaGpE2oNx1Go3M_rc3foJW3zHtfOmDY.owbFM~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:26 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50427	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50428	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:26 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50432	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50430	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50429	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50431	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:26 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50436	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:27 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50435	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:27 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:27 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50437	31.13.66.19	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:27 UTC	404	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:27 UTC	1760	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fzh_CN%2Fall.js reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: QznLRc71ImmXt4R9aY4ik4Mci2LjrDCQYI4YLaqU/xuR9pt1cgPXJ1SzfFF8C3ht1evv+sBwf/mPK7btgAF6BA== Date: Mon, 15 Jan 2024 13:24:27 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50438	52.7.65.124	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:27 UTC	378	OUT	GET /cookie-sync/stv?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:27 UTC	389	IN	HTTP/1.1 303 See Other Date: Mon, 15 Jan 2024 13:24:27 GMT location: https://match.prod.bidr.io/cookie-sync/stv?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Mon, 15 Jan 2024 13:34:27 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50439	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:27 UTC	2333	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325066&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325066514&bpp=16&bdt=581&idt=153&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=2458750656016&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=209 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:28 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:28 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 6c 61 6e 67 5c 78 33 64 65 6e 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 6d 65 74 61 20 63 68 61 72 73 65 74 5c 78 33 64 5c 78 32 32 55 54 46 2d 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!DOCTYPE html\x3e\x3chtml lang\x3den\x3e\x3chead\x3e\x3cmeta charset\x3d\x22UTF-8\x22\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/scrip
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 6f 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 45 35 45 35 45 35 3b 7d 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 76 69 73 69 74 65 64 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 68 6f 76 65 72 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 5c 78 33 64 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 Data Ascii: ox;pointer-events:none;z-index:1;border:1px solid #E5E5E5;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir\x3drtl] .flip-on-rtl{transform:scale(-1,1);transform-ori
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 2d 35 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 36 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 37 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 77 69 64 74 68 3a 33 30 25 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 68 65 69 67 68 74 3a 38 30 25 3b 7d 2e 6e 73 2d 76 78 Data Ascii: -5{display:block;max-height:100%;max-width:100%;height:100%;}.ns-vxvtm-e-6{flex-shrink:0;flex-grow:0;height:100%;}.ns-vxvtm-e-7{box-sizing:border-box;flex-shrink:0;display:flex;align-items:center;flex-direction:row;width:30%;flex-grow:1;height:80%;}.ns-vx
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 20 32 70 78 3b 68 65 69 67 68 74 3a 34 39 2e 36 70 78 3b 77 69 64 74 68 3a 31 38 30 2e 39 70 78 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 32 33 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 32 34 7b 64 69 73 70 6c 61 79 3a 69 Data Ascii: justify-content:center;padding:0 2px;height:49.6px;width:180.9px;}.ns-vxvtm-e-23{box-sizing:border-box;flex-shrink:0;line-height:2;overflow:hidden;text-overflow:ellipsis;text-transform:capitalize;white-space:nowrap;max-width:100%;}.ns-vxvtm-e-24{display:i
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 30 70 78 29 3b 7d 74 6f 7b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 20 62 6c 75 72 28 30 70 78 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 66 6c 61 73 68 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 5c 78 32 32 35 30 25 20 35 30 25 5c 78 32 32 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 5f 6b 65 79 66 72 61 6d 65 73 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 30 7b Data Ascii: 0px);}to{filter:opacity(100%) blur(0px);}} @keyframes flash{from{transform-origin:\x2250% 50%\x22;transform:scale(2);filter:opacity(0%);}to{transform:scale(1);filter:opacity(100%);}}@keyframes fadein_keyframes{0%{opacity:0;}100%{opacity:1;}}.ns-vxvtm-e-0{
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 61 63 69 74 79 3a 31 2e 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 78 32 32 52 6f 62 6f 74 6f 5c 78 32 32 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 31 37 2c 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 32 34 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 32 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 39 2c 37 33 2c 37 39 2c 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 7d 2e 6e 73 2d 76 78 76 74 6d 2d 65 2d 32 33 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 Data Ascii: acity:1.0;font-family:\x22Roboto\x22,Roboto,Arial,sans-serif;}.ns-vxvtm-e-17,.ns-vxvtm-e-24{white-space:nowrap;}.ns-vxvtm-e-22{background-color:rgba(69,73,79,1);box-shadow:0 2px 2px 0 rgba(0,0,0,.25);border-radius:4px;}.ns-vxvtm-e-23{color:rgba(255,255,25
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 77 28 29 3f 75 28 5c 78 32 32 43 68 72 6f 6d 69 75 6d 5c 78 32 32 29 3a 28 76 28 5c 78 32 32 43 68 72 6f 6d 65 5c 78 32 32 29 7c 7c 76 28 5c 78 32 32 43 72 69 4f 53 5c 78 32 32 29 29 5c 78 32 36 5c 78 32 36 21 28 77 28 29 3f 30 3a 76 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 76 28 5c 78 32 32 53 69 6c 6b 5c 78 32 32 29 7d 3b 21 76 28 5c 78 32 32 41 6e 64 72 6f 69 64 5c 78 32 32 29 7c 7c 78 28 29 3b 78 28 29 3b 76 28 5c 78 32 32 53 61 66 61 72 69 5c 78 32 32 29 5c 78 32 36 5c 78 32 36 28 78 28 29 7c 7c 28 77 28 29 3f 30 3a 76 28 5c 78 32 32 43 6f 61 73 74 5c 78 32 32 29 29 7c 7c 28 77 28 29 3f 30 3a 76 28 5c 78 32 32 4f 70 65 72 61 5c Data Ascii: .brands.length:!1}function x(){return w()?u(\x22Chromium\x22):(v(\x22Chrome\x22)\|\|v(\x22CriOS\x22))\x26\x26!(w()?0:v(\x22Edge\x22))\|\|v(\x22Silk\x22)};!v(\x22Android\x22)\|\|x();x();v(\x22Safari\x22)\x26\x26(x()\|\|(w()?0:v(\x22Coast\x22))\|\|(w()?0:v(\x22Opera\
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 72 6e 20 6e 65 77 20 41 28 61 2c 42 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 5c 78 33 64 4c 29 7b 72 65 74 75 72 6e 20 4d 28 61 2c 62 29 7c 7c 43 7d 3b 76 61 72 20 4f 5c 78 33 64 28 61 2c 62 2c 63 2c 64 2c 65 29 5c 78 33 64 5c 78 33 65 7b 69 66 28 65 29 63 5c 78 33 64 61 2b 28 5c 78 32 32 5c 78 32 36 5c 78 32 32 2b 62 2b 5c 78 32 32 5c 78 33 64 5c 78 32 32 2b 63 29 3b 65 6c 73 65 7b 76 61 72 20 6e 5c 78 33 64 5c 78 32 32 5c 78 32 36 5c 78 32 32 2b 62 2b 5c 78 32 32 5c 78 33 64 5c 78 32 32 3b 6c 65 74 20 72 5c 78 33 64 61 2e 69 6e 64 65 78 4f 66 28 6e 29 3b 30 5c 78 33 65 72 3f 63 5c 78 33 64 61 2b 6e 2b 63 3a 28 72 2b 5c 78 33 64 6e 2e 6c 65 6e 67 74 68 2c 6e 5c 78 33 64 61 2e 69 6e 64 65 78 4f 66 28 5c 78 32 32 5c 78 32 36 5c 78 32 32 2c 72 29 Data Ascii: rn new A(a,B)}}function N(a,b\x3dL){return M(a,b)\|\|C};var O\x3d(a,b,c,d,e)\x3d\x3e{if(e)c\x3da+(\x22\x26\x22+b+\x22\x3d\x22+c);else{var n\x3d\x22\x26\x22+b+\x22\x3d\x22;let r\x3da.indexOf(n);0\x3er?c\x3da+n+c:(r+\x3dn.length,n\x3da.indexOf(\x22\x26\x22,r)
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 2e 6e 6f 77 28 29 2b 61 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 29 7b 63 6f 6e 73 74 20 61 5c 78 33 64 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 5c 78 32 36 5c 78 32 36 61 2e 6e 6f 77 3f 61 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 76 61 72 20 61 61 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 76 61 72 20 63 5c 78 33 64 55 28 29 7c 7c 54 28 29 3b 74 68 69 73 2e 6c 61 62 65 6c 5c 78 33 64 61 3b 74 68 69 73 2e 74 79 70 65 5c 78 33 64 62 3b 74 68 69 73 2e 76 61 6c 75 65 5c 78 33 64 63 3b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 5c 78 33 64 30 3b 74 68 69 73 2e 74 61 73 6b 49 64 5c 78 33 64 74 68 69 73 2e Data Ascii: .now()+a.timing.navigationStart):Date.now()}function U(){const a\x3df.performance;return a\x26\x26a.now?a.now():null};var aa\x3dclass{constructor(a,b){var c\x3dU()\|\|T();this.label\x3da;this.type\x3db;this.value\x3dc;this.duration\x3d0;this.taskId\x3dthis.
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 62 5c 78 33 64 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 56 5c 78 32 36 5c 78 32 36 57 28 29 5c 78 32 36 5c 78 32 36 56 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 68 5c 78 32 36 5c 78 32 36 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 5c 78 33 64 28 55 28 29 7c 7c 54 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 5c 78 33 64 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 56 5c 78 32 36 5c 78 32 36 57 28 29 5c 78 32 36 5c 78 32 36 56 2e 6d 61 72 6b 28 62 29 Data Ascii: b\x3d`goog_${a.label}_${a.uniqueId}_start`;V\x26\x26W()\x26\x26V.mark(b);return a}end(a){if(this.h\x26\x26\x22number\x22\x3d\x3d\x3dtypeof a.value){a.duration\x3d(U()\|\|T())-a.value;var b\x3d`goog_${a.label}_${a.uniqueId}_end`;V\x26\x26W()\x26\x26V.mark(b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50447	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	2207	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:28 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:28 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 62 61 6e 6e 65 72 42 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 34 68 76 6f 72 22 20 78 2d 70 68 61 73 65 3d 22 61 73 73 65 6d 62 6c 65 22 3e 2e 6e 73 2d 34 68 76 6f 72 2d 6c 2d 62 61 6e 6e 65 72 42 7b Data Ascii: t-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="bannerB" data-ns="ns-4hvor" x-phase="assemble">.ns-4hvor-l-bannerB{
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 2d 38 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 38 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 2e 35 70 78 20 73 6f 6c 69 64 20 23 65 66 65 66 65 66 3b 7d 2e 6e 73 2d 34 68 76 6f 72 2d 65 2d 39 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 35 2e 36 70 78 20 31 32 70 78 3b 7d 2e 6e Data Ascii: -8{box-sizing:border-box;flex-shrink:0;display:flex;flex-direction:row;align-items:center;justify-content:space-between;height:84px;width:100%;border-top:0.5px solid #efefef;}.ns-4hvor-e-9{display:block;max-height:100%;max-width:100%;margin:5.6px 12px;}.n
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 69 6e 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 Data Ascii: rames bounce{from{transform:translateY(-100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframes slide-in{from{transform:translateX(-100%);filter:opacity(0%);}to{transform:translateX(0%);filter:opacity(100%);}} @keyframes s
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 78 3a 31 3b 7d 2e 6e 73 2d 34 68 76 6f 72 2d 65 2d 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 2e 6e 73 2d 34 68 76 6f 72 2d 65 2d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 23 66 66 66 20 30 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 25 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 34 68 76 6f 72 2d 65 2d 31 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 31 35 32 39 33 31 30 36 32 36 30 37 34 31 31 38 34 Data Ascii: x:1;}.ns-4hvor-e-6{font-family:"Roboto",Roboto,Arial,sans-serif;}.ns-4hvor-e-7{background-image:linear-gradient(0deg,#fff 0%,transparent 0%);white-space:nowrap;}.ns-4hvor-e-10{background-image:url(https://tpc.googlesyndication.com/simgad/15293106260741184
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 71 26 26 30 3c 71 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 77 28 29 3f 75 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 76 28 22 43 68 72 6f 6d 65 22 29 7c 7c 76 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 77 28 Data Ascii: ome(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(b=f.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function w(){return g?!!q&&0<q.brands.length:!1}function x(){return w()?u("Chromium"):(v("Chrome")\|\|v("CriOS"))&&!(w(
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 22 3d 22 2b 63 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 22 26 22 2b 62 2b 22 3d 22 3b 6c 65 74 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 6e 29 3b 30 3e 72 3f 63 3d 61 2b 6e 2b 63 3a 28 72 2b 3d 6e 2e 6c 65 6e 67 74 68 2c 6e 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 72 29 2c 63 3d 30 3c 3d 6e 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 2b 61 2e 73 75 62 73 74 72 69 6e 67 28 6e 29 3a 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 29 7d 72 65 74 75 72 6e 20 36 45 34 3c 63 2e 6c 65 6e 67 74 68 3f 76 6f 69 64 20 30 21 3d 3d 64 3f 4f 28 61 2c 62 2c 64 2c 76 6f 69 64 20 30 2c 65 29 3a 61 3a 63 7d 3b 76 61 72 20 50 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 20 51 3d 5b 48 2c 49 2c 4b 2c 4a 2c 47 2c 46 28 22 6d 61 72 6b 65 74 22 29 2c 46 28 22 69 74 Data Ascii: "="+c);else{var n="&"+b+"=";let r=a.indexOf(n);0>r?c=a+n+c:(r+=n.length,n=a.indexOf("&",r),c=0<=n?a.substring(0,r)+c+a.substring(n):a.substring(0,r)+c)}return 6E4<c.length?void 0!==d?O(a,b,d,void 0,e):a:c};var P=window;const Q=[H,I,K,J,G,F("market"),F("it
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 62 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 53 29 7b 53 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 66 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 53 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 53 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 29 7b 61 26 26 56 26 26 57 28 29 26 26 28 56 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f Data Ascii: =>{var a;if(a=ba){var b;if(null===S){S="";try{a="";try{a=f.top.location.hash}catch(c){a=f.location.hash}a&&(S=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=S;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function ca(a){a&&V&&W()&&(V.clearMarks(`go
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 6f 61 64 22 2c 65 61 2c 21 31 29 7d 3b 77 69 6e 64 6f 77 2e 62 67 7a 3d 61 3d 3e 7b 69 66 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 7b 76 61 72 20 62 3d 4f 28 61 2e 68 72 65 66 2c 22 62 67 22 2c 22 31 30 22 29 3b 76 61 72 20 63 3d 52 28 29 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 29 7b 76 61 72 20 64 3d 4e 28 62 2c 51 29 3b 64 3d 3d 3d 43 26 26 63 28 62 29 3b 62 3d 64 7d 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 76 61 72 20 65 3d 62 3b 65 6c 73 65 20 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 65 3d 62 3b 65 6c 73 65 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 62 3a 7b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 62 29 7d 63 61 74 63 68 28 6e 29 7b 65 3d 22 68 74 74 70 73 Data Ascii: oad",ea,!1)};window.bgz=a=>{if(a=document.getElementById(a)){var b=O(a.href,"bg","10");var c=R();if(!(b instanceof A)){var d=N(b,Q);d===C&&c(b);b=d}if(b instanceof A)var e=b;else if(b instanceof A)e=b;else{b=String(b);b:{try{e=new URL(b)}catch(n){e="https
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 6d 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 64 61 3f 21 21 75 26 26 30 3c 75 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 72 65 74 75 72 6e 20 7a 28 29 3f 76 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 7a 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 Data Ascii: &-1!=b.indexOf(a)):!1:!1}function x(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function z(){return da?!!u&&0<u.brands.length:!1}function B(){return z()?v("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(z()?0:x("Edge"))\|\|x(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50450	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	1245	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=t4gr2hmzo6q0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:28 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:28 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-5b-OmgEa6Nwd9YZl2JZ78w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:28 UTC	361	IN	Data Raw: 32 61 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a70<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 67 45 61 36 4e 77 64 39 59 5a 6c 32 4a 5a 37 38 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 35 62 2d 4f 6d Data Ascii: gEa6Nwd9YZl2JZ78w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="5b-Om
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 61 38 78 45 4a 63 41 38 32 6c 4f 36 46 75 58 76 39 67 75 46 33 32 4b 69 79 4d 65 75 65 4d 6a 58 4b 6c 73 6c 50 79 74 58 44 79 41 6a 69 39 4e 41 61 51 62 73 4b 55 4b 6b 48 71 43 38 4e 77 34 74 63 66 30 6c 69 73 38 49 72 70 4c 49 50 45 55 6c 6b 77 4c 42 71 49 6c 56 44 33 7a 6d 5a 5a 35 4f 5a 44 36 4c 6c 71 6e 2d 41 4d 43 4c 50 38 4e 4f 69 33 37 65 30 44 79 71 33 2d 35 7a 71 79 53 4a 36 57 59 48 62 63 75 31 30 69 38 52 4a 6c 41 30 31 41 6a 4e 68 42 37 54 66 4c 4a 2d 77 69 6b 48 41 35 45 35 67 42 49 53 56 76 64 79 64 58 6b 68 72 6d 57 6d 47 6d 31 33 38 30 77 32 6d 44 6c 54 31 63 70 7a 6c 61 70 6f 47 68 54 59 55 6f 75 63 58 51 35 38 47 38 36 76 6f 6c 61 63 68 73 55 68 72 34 4d 79 48 66 7a 63 4f 74 58 4f 5f 35 69 78 39 4a 4c 39 51 4d 4c 71 6b 63 37 77 58 37 67 Data Ascii: a8xEJcA82lO6FuXv9guF32KiyMeueMjXKlslPytXDyAji9NAaQbsKUKkHqC8Nw4tcf0lis8IrpLIPEUlkwLBqIlVD3zmZZ5OZD6Llqn-AMCLP8NOi37e0Dyq3-5zqySJ6WYHbcu10i8RJlA01AjNhB7TfLJ-wikHA5E5gBISVvdydXkhrmWmGm1380w2mDlT1cpzlapoGhTYUoucXQ58G86volachsUhr4MyHfzcOtXO_5ix9JL9QMLqkc7wX7g
2024-01-15 13:24:28 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 56 6c 35 65 46 49 78 51 33 4d 72 52 33 70 4a 64 47 31 68 53 6e 5a 59 65 6e 5a 55 5a 55 56 56 54 6c 70 45 59 54 46 6e 63 55 4a 5a 57 44 4a 7a 62 57 6c 4e 64 33 64 35 56 7a 56 78 52 7a 52 44 59 30 55 32 63 6d 56 76 56 7a 42 58 61 6e 42 36 62 57 67 7a 4d 54 6c 77 54 7a 4e 77 64 48 42 6c 65 54 68 71 62 6a 49 32 52 54 46 4d 64 6d 68 32 56 6e 46 44 63 48 68 51 55 46 4a 47 62 55 78 73 56 47 49 78 61 56 49 31 5a 58 64 69 64 32 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz\x22,\x22\x22,\x22TVl5eFIxQ3MrR3pJdG1hSnZYenZUZUVVTlpEYTFncUJZWDJzbWlNd3d5VzVxRzRDY0U2cmVvVzBXanB6bWgzMTlwTzNwdHBleThqbjI2RTFMdmh2VnFDcHhQUFJGbUxsVGIxaVI1ZXdid2
2024-01-15 13:24:28 UTC	495	IN	Data Raw: 77 51 6c 64 46 4e 6c 70 55 5a 30 35 54 59 55 78 7a 4d 6b 4d 30 5a 45 56 55 5a 58 64 57 4d 6e 52 48 4f 47 46 74 62 57 68 56 61 6e 6c 70 51 6e 4e 33 4f 47 6f 35 64 56 45 72 54 54 4a 6c 4f 57 4e 43 55 46 4a 70 59 6d 38 32 63 47 30 78 59 32 4e 56 63 46 49 79 62 6d 46 50 52 57 35 74 4e 6b 55 72 52 45 6c 73 51 32 67 33 56 45 78 57 56 54 68 59 4e 44 52 4d 4d 47 4e 6c 61 6e 5a 44 4d 6d 46 57 64 6c 6c 48 59 55 64 69 63 55 5a 54 61 57 46 7a 54 57 73 30 4d 46 68 35 54 6b 4e 70 57 57 4a 75 61 58 70 57 5a 46 4e 50 57 46 42 52 53 55 31 68 4f 58 64 34 54 54 4d 77 56 6d 51 34 4e 7a 46 48 62 6d 78 6f 5a 6c 51 79 59 55 64 48 4d 48 4e 53 53 55 74 44 4d 6c 68 71 64 55 74 31 57 54 68 76 5a 48 64 79 51 30 64 6e 59 53 38 30 65 54 45 78 61 6b 34 76 5a 45 68 73 62 33 68 48 64 45 Data Ascii: wQldFNlpUZ05TYUxzMkM0ZEVUZXdWMnRHOGFtbWhVanlpQnN3OGo5dVErTTJlOWNCUFJpYm82cG0xY2NVcFIybmFPRW5tNkUrRElsQ2g3VExWVThYNDRMMGNlanZDMmFWdllHYUdicUZTaWFzTWs0MFh5TkNpWWJuaXpWZFNPWFBRSU1hOXd4TTMwVmQ4NzFHbmxoZlQyYUdHMHNSSUtDMlhqdUt1WThvZHdyQ0dnYS80eTExak4vZEhsb3hHdE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50451	52.7.65.124	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	420	OUT	GET /cookie-sync/stv?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-01-15 13:24:28 UTC	657	IN	HTTP/1.1 303 See Other Date: Mon, 15 Jan 2024 13:24:28 GMT location: https://ads.stickyadstv.com/user-registering?userId=AAHOOU7LSmQAABbY4Pqw9Q&dataProviderId=817&gdpr=0 Server: gunicorn set-cookie: bito=AAHOOU7LSmQAABbY4Pqw9Q; Domain=bidr.io; expires=Thu, 13 Feb 2025 08:24:28 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Thu, 13 Feb 2025 08:24:28 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50442	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	591	OUT	OPTIONS /wp-json/wordpress-popular-posts/v2/widget?is_single=0 HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with,x-wp-nonce Origin: http://mylovelybluesky.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:29 UTC	1035	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: application/json; charset=UTF-8 x-robots-tag: noindex link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type allow: POST x-litespeed-tag: 8bb_HTTP.200 access-control-allow-origin: http://mylovelybluesky.com access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE access-control-allow-credentials: true vary: Origin,User-Agent x-litespeed-cache-control: no-cache content-length: 333 date: Mon, 15 Jan 2024 13:24:29 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:29 UTC	333	IN	Data Raw: 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 77 6f 72 64 70 72 65 73 73 2d 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 5c 2f 76 32 22 2c 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 61 72 67 73 22 3a 7b 22 69 73 5f 73 69 6e 67 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 67 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 5d 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 Data Ascii: {"namespace":"wordpress-popular-posts\/v2","methods":["POST"],"endpoints":[{"methods":["POST"],"args":{"is_single":{"type":"integer","default":null,"required":false},"lang":{"type":"string","default":null,"required":false}}}],"_links":{"self":[{"href":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50455	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50452	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50454	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50453	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:28 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50462	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50463	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	852	OUT	GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:29 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:29 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-NtpOwWAd9jhoqZ-y6ChVwQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 37 63 36 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7c65if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4d 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.M),reject:g(this.o)}};e.prototype.M=function(g){if(g===this)this.o(new TypeErr
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 6c 28 77 28 7a 29 29 7d 63 61 74 63 68 28 47 29 7b 6e 28 47 29 7d 7d 3a 79 7d 76 61 72 20 6c 2c 6e 2c 72 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 29 7b 6c 3d 77 3b 6e 3d 79 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 Data Ascii: l(w(z))}catch(G){n(G)}}:y}var l,n,r=new e(function(w,y){l=w;n=y});this.kb(k(g,l),k(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.kb=function(g,h){function k(){switch(l.g){case 1:g(l.i);break;case 2:h(l.i);break;defa
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 66 28 21 71 61 28 6b 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 62 3b 63 61 28 6b 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 69 66 Data Ascii: ion c(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===l}function d(k){if(!qa(k,f)){var l=new b;ca(k,f,{value:l})}}function e(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return l(n)})}if
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 55 3f 6c 2e 55 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 55 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6d 61 3a 74 68 69 73 5b 31 5d 2e 6d 61 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 55 29 2c 74 68 69 73 5b 31 5d 2e 6d 61 2e 6e 65 78 74 3d 6c 2e 55 2c 74 68 69 73 5b 31 5d 2e 6d 61 3d 6c 2e 55 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: 0],k[1])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.U?l.U.value=k:(l.U={next:this[1],ma:this[1].ma,head:this[1],key:h,value:k},l.list.push(l.U),this[1].ma.next=l.U,this[1].ma=l.U,this.size++);return thi
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 70 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 Data Ascii: \|-Infinity===b\|\|0===b)return b;var c=Math.floor(Math.abs(b));return 0>b?-c:c}});p("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push(b[d]);return c}});p("Object.is",function(a){return a?a:function(b,c){return b===c?0
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 Data Ascii: pe[Symbol.iterator]=b.prototype.values;b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 6c 3d 3d 64 7c 7c 64 3e 65 29 64 3d 65 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: l==d\|\|d>e)d=e;d=Number(d);0>d&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fi
2024-01-15 13:24:29 UTC	1656	IN	Data Raw: 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 44 61 2c 48 61 2c 4d 61 2c 51 61 2c 54 61 2c 56 61 2c 57 61 2c 58 61 2c 24 61 2c 6d 62 2c 73 62 2c 72 62 2c 77 62 2c 79 62 2c 78 62 2c 7a 62 2c 41 62 2c 45 62 2c 57 62 2c 5a 62 2c 24 62 2c 62 63 2c 65 63 2c 63 63 2c 64 63 2c 66 63 2c 67 63 2c 6a 63 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 Data Ascii: 9*Math.random()>>>0);}catch(e){_._DumpException(e)}try{var Da,Ha,Ma,Qa,Ta,Va,Wa,Xa,$a,mb,sb,rb,wb,yb,xb,zb,Ab,Eb,Wb,Zb,$b,bc,ec,cc,dc,fc,gc,jc;_.ya=function(a){_.t.setTimeout(function(){throw a;},0)};_.za=function(){var a=_.t.navigator;return a&&(a=a.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50464	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50466	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50465	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:28 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:29 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50474	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	1235	OUT	POST /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 9512 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=t4gr2hmzo6q0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZXT8aNLOVPJpm8mxLl4nAoL1EgFDncli__fNPclb4ZbVTIjxkgDsy5mDWB_5JDBOzdYeUGHQnbPi2v1LWE; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:29 UTC	9512	OUT	Data Raw: 0a 18 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 12 a4 0f 30 33 41 46 63 57 65 41 36 6a 37 57 6b 49 5f 31 71 69 70 6b 46 7a 66 70 47 55 74 76 46 63 70 50 30 73 4b 74 49 44 48 69 44 63 59 4e 6f 33 5a 35 62 43 74 31 70 48 75 78 66 52 4c 6c 32 39 62 6e 6f 4c 49 36 45 49 56 48 47 49 7a 4a 4f 41 49 64 55 4c 2d 38 58 4a 56 6d 64 4a 68 57 77 71 51 35 52 37 77 65 76 78 53 74 32 46 64 4d 72 6f 66 53 4f 73 42 6e 76 66 6a 2d 69 76 38 53 56 34 45 36 39 6d 67 45 70 36 55 41 2d 75 67 72 41 46 43 72 53 76 67 42 71 61 67 72 45 4d 53 64 47 36 64 2d 2d 47 5a 48 52 6c 48 41 62 73 51 64 74 34 4d 56 4d 41 37 45 50 55 44 44 61 65 75 51 74 70 59 6d 32 4e 47 30 37 30 4d 79 69 58 2d 63 57 4c 64 57 4b 55 54 62 37 65 73 67 50 37 69 6d 71 65 51 63 53 69 Data Ascii: Ya-Cd6PbRI5ktAHEhm9JuKEu03AFcWeA6j7WkI_1qipkFzfpGUtvFcpP0sKtIDHiDcYNo3Z5bCt1pHuxfRLl29bnoLI6EIVHGIzJOAIdUL-8XJVmdJhWwqQ5R7wevxSt2FdMrofSOsBnvfj-iv8SV4E69mgEp6UA-ugrAFCrSvgBqagrEMSdG6d--GZHRlHAbsQdt4MVMA7EPUDDaeuQtpYm2NG070MyiX-cWLdWKUTb7esgP7imqeQcSi
2024-01-15 13:24:29 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:29 GMT Expires: Mon, 15 Jan 2024 13:24:29 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY;Path=/recaptcha;Expires=Sat, 13-Jul-2024 13:24:29 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:29 UTC	556	IN	Data Raw: 61 37 66 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 4d 56 73 30 4f 6b 74 2d 78 76 76 72 54 75 69 4e 41 64 2d 71 76 57 77 38 38 46 39 39 58 34 7a 65 56 76 6c 78 62 68 77 6a 4c 42 6f 50 79 39 4e 78 6e 52 47 72 61 54 49 63 31 43 50 50 36 58 78 36 68 78 77 56 5a 6c 31 71 5a 4f 65 31 4a 6c 4e 51 75 39 71 34 51 6a 67 52 32 43 6f 71 64 34 56 48 74 6c 41 48 69 30 4d 35 58 32 73 44 34 44 6e 50 54 36 51 68 30 33 36 4a 42 4e 53 33 72 59 37 65 74 6f 70 77 33 53 53 75 7a 63 58 79 49 79 6b 70 4c 75 34 6f 51 4d 5a 31 39 6d 33 79 59 4a 67 43 30 5f 79 57 6d 38 61 45 6f 2d 51 70 68 4a 70 4e 58 2d 50 68 54 6e 44 75 76 49 38 45 46 73 64 41 6f 46 68 30 34 57 6b 47 34 4c 5a 4d 36 37 77 54 35 4a 76 47 38 6e 4c 6b 39 7a 73 35 62 66 61 7a 4a 57 Data Ascii: a7f)]}'["rresp","03AFcWeA7MVs0Okt-xvvrTuiNAd-qvWw88F99X4zeVvlxbhwjLBoPy9NxnRGraTIc1CPP6Xx6hxwVZl1qZOe1JlNQu9q4QjgR2Coqd4VHtlAHi0M5X2sD4DnPT6Qh036JBNS3rY7etopw3SSuzcXyIykpLu4oQMZ19m3yYJgC0_yWm8aEo-QphJpNX-PhTnDuvI8EFsdAoFh04WkG4LZM67wT5JvG8nLk9zs5bfazJW
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 43 42 4c 53 75 43 4c 41 4f 58 6b 30 48 55 5f 75 5f 53 4c 4f 44 52 6f 38 46 36 30 76 4e 65 4b 56 4d 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 22 2c 22 22 2c 22 54 56 6c 35 57 6e 52 6f 64 6b 78 52 62 32 59 76 64 48 42 47 64 6d 64 46 61 47 5a 48 51 6d 49 32 52 45 64 44 54 44 6c 55 64 45 70 59 63 58 68 55 5a 33 70 70 57 6e 6c 6b 4f 45 56 5a 4e 79 74 4a 62 54 56 4f 54 30 77 32 5a 6d 56 7a 4f 45 74 46 4e 55 52 6d 5a 6d 4d Data Ascii: CBLSuCLAOXk0HU_u_SLODRo8F60vNeKVM",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz","","TVl5WnRodkxRb2YvdHBGdmdFaGZHQmI2REdDTDlUdEpYcXhUZ3ppWnlkOEVZNytJbTVOT0w2ZmVzOEtFNURmZmM
2024-01-15 13:24:29 UTC	886	IN	Data Raw: 51 30 5a 77 65 45 68 42 51 33 5a 49 59 30 6c 58 51 6a 4a 73 55 6b 38 77 4e 47 45 33 53 44 56 70 54 6d 56 53 5a 31 4a 4f 62 48 64 47 53 31 68 52 56 56 68 59 4e 46 68 57 54 56 5a 6b 4f 46 5a 56 4f 57 6c 6c 4c 30 4a 70 54 32 68 32 54 32 70 73 52 6c 6c 78 51 58 70 47 64 57 68 31 59 58 64 50 64 30 56 6d 5a 6b 30 79 52 54 4a 61 56 46 56 76 62 6a 64 4c 56 31 4d 77 5a 31 6c 69 51 7a 5a 58 62 30 31 6a 4f 46 64 47 63 56 70 53 59 32 67 72 53 6c 4a 34 51 6e 68 35 61 57 78 4a 54 47 68 36 65 57 4a 59 51 6d 4e 48 65 55 68 51 4e 55 5a 68 56 47 39 58 55 47 38 78 56 6b 38 79 64 57 39 6e 63 7a 56 44 57 45 4e 53 62 58 64 71 55 57 4e 61 65 48 52 76 53 57 67 31 52 33 64 43 52 47 6c 6d 4d 55 39 7a 4e 30 68 51 59 30 35 42 64 6e 4a 56 61 31 4a 56 54 55 35 71 52 31 46 56 61 46 70 Data Ascii: Q0ZweEhBQ3ZIY0lXQjJsUk8wNGE3SDVpTmVSZ1JObHdGS1hRVVhYNFhWTVZkOFZVOWllL0JpT2h2T2psRllxQXpGdWh1YXdPd0VmZk0yRTJaVFVvbjdLV1MwZ1liQzZXb01jOFdGcVpSY2grSlJ4Qnh5aWxJTGh6eWJYQmNHeUhQNUZhVG9XUG8xVk8ydW9nczVDWENSbXdqUWNaeHRvSWg1R3dCRGlmMU9zN0hQY05BdnJVa1JVTU5qR1FVaFp
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 31 36 36 37 0d 0a 52 6c 46 4b 64 6c 42 69 55 44 42 53 4d 54 56 4e 51 7a 59 30 52 31 42 53 4d 30 68 73 64 6b 4a 46 55 33 56 55 4e 7a 56 68 52 79 74 78 57 48 51 7a 4e 56 70 49 59 6c 6f 31 56 6d 68 42 4d 6b 70 50 52 44 4a 48 4f 45 46 59 53 30 68 78 52 57 35 57 59 55 4a 50 59 6b 6c 76 54 47 6c 58 56 58 5a 69 4f 58 45 77 61 6b 31 59 51 54 46 45 4e 6d 52 53 57 58 52 79 5a 48 5a 58 4d 55 52 44 5a 7a 55 32 51 55 4e 6a 52 48 46 71 63 57 4a 6f 61 57 4a 6a 59 56 4e 79 53 32 63 31 55 30 46 33 64 30 4e 46 4e 48 46 43 61 30 31 72 61 46 5a 56 63 33 6c 71 51 57 70 71 59 6e 52 42 4e 54 4e 52 4e 30 55 35 62 33 5a 35 4b 32 35 76 4d 45 30 30 4d 46 46 5a 62 44 42 75 56 57 78 69 5a 58 67 72 4d 6b 52 56 52 6c 64 49 4e 30 52 33 51 32 5a 54 55 6a 46 5a 4d 47 68 78 62 47 70 74 5a Data Ascii: 1667RlFKdlBiUDBSMTVNQzY0R1BSM0hsdkJFU3VUNzVhRytxWHQzNVpIYlo1VmhBMkpPRDJHOEFYS0hxRW5WYUJPYklvTGlXVXZiOXEwak1YQTFENmRSWXRyZHZXMURDZzU2QUNjRHFqcWJoaWJjYVNyS2c1U0F3d0NFNHFCa01raFZVc3lqQWpqYnRBNTNRN0U5b3Z5K25vME00MFFZbDBuVWxiZXgrMkRVRldIN0R3Q2ZTUjFZMGhxbGptZ
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 4a 33 59 7a 4a 43 61 30 59 79 4d 57 70 79 5a 69 74 69 52 6b 4e 6a 57 6b 78 7a 55 30 35 4e 4e 69 74 77 4e 45 56 51 61 32 56 51 63 54 64 55 52 6e 56 6e 65 46 4a 4b 64 6c 5a 36 5a 33 68 51 53 53 38 32 4e 6a 68 30 61 79 73 76 64 45 4a 73 5a 7a 63 34 62 58 42 43 51 6b 6c 30 4c 33 6c 79 4c 32 6b 72 55 58 5a 33 62 33 70 54 51 53 39 31 57 6b 39 6b 55 44 49 34 59 57 74 56 4c 30 64 71 5a 6b 46 54 55 48 64 6b 4e 53 74 6d 51 6b 4e 57 4c 32 68 76 4f 44 52 45 55 6d 52 6f 54 47 5a 73 59 57 46 49 4e 48 46 74 59 32 6f 77 4f 48 6c 42 61 6d 39 77 61 7a 52 44 54 54 52 46 63 46 52 78 4d 55 68 50 52 55 30 76 65 6b 51 79 61 56 70 44 57 6d 74 32 61 6c 64 42 59 54 46 50 4d 55 6c 4f 55 47 63 7a 61 32 5a 6a 57 45 6b 33 62 6c 42 68 4e 57 52 4c 64 31 46 42 55 58 46 71 4d 7a 5a 4a 5a Data Ascii: J3YzJCa0YyMWpyZitiRkNjWkxzU05NNitwNEVQa2VQcTdURnVneFJKdlZ6Z3hQSS82Njh0aysvdEJsZzc4bXBCQkl0L3lyL2krUXZ3b3pTQS91Wk9kUDI4YWtVL0dqZkFTUHdkNStmQkNWL2hvODREUmRoTGZsYWFINHFtY2owOHlBam9wazRDTTRFcFRxMUhPRU0vekQyaVpDWmt2aldBYTFPMUlOUGcza2ZjWEk3blBhNWRLd1FBUXFqMzZJZ
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 56 6c 62 48 52 53 55 6d 56 4a 4e 32 5a 73 53 30 39 59 61 6b 74 68 4e 44 5a 33 4e 48 45 31 64 45 74 43 51 6a 41 72 56 6d 68 4a 52 6e 64 4e 61 33 4a 32 61 30 6c 4d 5a 55 4e 6c 51 33 68 7a 62 33 4e 6b 64 6a 52 47 51 7a 64 4d 57 54 6b 33 5a 6b 52 30 63 30 6f 35 64 56 6f 79 61 6e 70 79 4d 47 30 72 59 6a 68 57 65 45 78 43 59 31 59 78 65 55 38 32 55 6a 68 73 4d 31 68 4e 53 6a 4e 6a 63 6d 52 6d 63 46 5a 6a 56 47 68 6a 62 54 46 36 65 45 46 6f 4e 6d 5a 36 62 6e 64 34 63 57 5a 69 4e 57 6c 51 65 47 46 5a 51 32 4e 35 53 54 4e 52 54 7a 51 7a 63 32 4e 6c 64 45 68 44 64 69 39 50 52 6d 39 36 61 48 4e 33 51 58 4a 45 61 54 52 75 4d 57 35 56 4f 48 64 52 5a 7a 45 79 4e 44 52 45 65 6e 56 42 4b 79 39 72 55 32 35 71 5a 31 64 43 5a 33 42 31 4d 6b 30 79 5a 55 73 32 54 58 52 51 54 Data Ascii: VlbHRSUmVJN2ZsS09YakthNDZ3NHE1dEtCQjArVmhJRndNa3J2a0lMZUNlQ3hzb3NkdjRGQzdMWTk3ZkR0c0o5dVoyanpyMG0rYjhWeExCY1YxeU82UjhsM1hNSjNjcmRmcFZjVGhjbTF6eEFoNmZ6bnd4cWZiNWlQeGFZQ2N5STNRTzQzc2NldEhDdi9PRm96aHN3QXJEaTRuMW5VOHdRZzEyNDREenVBKy9rU25qZ1dCZ3B1Mk0yZUs2TXRQT
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 4a 4b 54 6e 4e 4e 61 30 31 4f 54 58 63 30 64 47 68 43 57 45 4d 72 53 6d 56 6f 63 55 6c 43 61 6a 42 36 4e 57 74 58 4d 6d 52 35 57 6b 64 6e 4d 45 5a 76 55 6a 64 75 59 32 35 6e 4f 44 5a 36 63 33 70 4a 62 6b 5a 70 59 58 6f 33 55 7a 64 33 4e 44 46 4a 52 45 52 69 53 46 51 76 51 6b 52 61 61 6e 6b 76 63 44 6b 30 53 55 63 79 55 33 52 4b 4d 55 46 4a 62 55 39 4f 63 48 56 57 51 32 56 32 4e 6b 6c 58 54 57 46 75 53 58 70 32 52 58 68 49 52 6d 31 56 65 56 52 58 5a 47 67 33 56 45 5a 42 59 6b 31 4d 65 6d 49 31 62 57 35 51 65 57 56 4e 4e 6c 63 78 52 33 6c 78 61 30 70 56 4e 54 64 72 54 6e 64 4a 55 54 49 78 64 47 4a 52 54 54 68 69 4e 48 42 6d 63 45 46 36 52 6a 68 76 4e 6d 35 4c 65 55 68 6e 61 7a 68 6f 56 58 4e 6d 53 58 4d 79 61 46 70 68 59 30 46 34 64 46 5a 52 4d 31 70 68 61 Data Ascii: JKTnNNa01OTXc0dGhCWEMrSmVocUlCajB6NWtXMmR5WkdnMEZvUjduY25nODZ6c3pJbkZpYXo3Uzd3NDFJRERiSFQvQkRaankvcDk0SUcyU3RKMUFJbU9OcHVWQ2V2NklXTWFuSXp2RXhIRm1VeVRXZGg3VEZBYk1MemI1bW5QeWVNNlcxR3lxa0pVNTdrTndJUTIxdGJRTThiNHBmcEF6RjhvNm5LeUhnazhoVXNmSXMyaFphY0F4dFZRM1pha
2024-01-15 13:24:29 UTC	735	IN	Data Raw: 68 58 4b 32 46 4d 63 31 68 59 4e 6a 4e 34 63 6d 68 30 53 6a 6c 47 56 45 5a 6b 4e 6b 70 77 64 30 5a 6d 55 6b 31 75 59 53 39 35 51 33 64 59 51 56 63 79 55 55 46 72 4c 33 6c 30 4b 31 42 59 62 45 68 47 56 6d 31 72 54 7a 4e 78 53 48 52 71 4d 58 56 57 4f 44 68 49 52 6d 68 4d 53 46 42 71 53 45 70 6f 64 56 6f 7a 5a 57 31 4a 62 6a 55 76 64 56 64 4e 56 6d 74 43 59 6b 67 72 64 6c 6c 57 63 45 4e 55 61 45 68 6c 4c 31 5a 33 4f 47 4d 76 54 47 74 35 55 30 64 47 4d 32 51 33 51 6c 52 47 54 48 70 34 62 6d 46 49 55 47 59 30 4d 6b 74 51 56 6c 49 34 61 6a 52 73 62 6e 68 70 4e 46 4a 4f 62 47 70 57 65 57 34 31 59 7a 56 57 57 55 64 5a 54 6a 4e 7a 51 33 70 30 63 6b 78 56 55 56 42 57 55 47 51 35 52 45 51 77 53 32 73 32 51 57 70 77 56 31 46 56 53 31 4a 58 55 6a 52 78 4e 6b 74 47 4f Data Ascii: hXK2FMc1hYNjN4cmh0SjlGVEZkNkpwd0ZmUk1uYS95Q3dYQVcyUUFrL3l0K1BYbEhGVm1rTzNxSHRqMXVWODhIRmhMSFBqSEpodVozZW1JbjUvdVdNVmtCYkgrdllWcENUaEhlL1Z3OGMvTGt5U0dGM2Q3QlRGTHp4bmFIUGY0MktQVlI4ajRsbnhpNFJObGpWeW41YzVWWUdZTjNzQ3p0ckxVUVBWUGQ5REQwS2s2QWpwV1FVS1JXUjRxNktGO
2024-01-15 13:24:29 UTC	1252	IN	Data Raw: 31 32 30 65 0d 0a 50 61 54 6c 4c 54 6b 35 42 4d 30 4a 44 53 44 4e 50 53 54 64 71 61 44 4a 30 65 44 46 48 51 6e 68 75 4d 54 6c 70 61 57 46 4c 51 32 6c 6d 4e 30 73 34 61 6b 51 77 57 48 4e 58 63 56 5a 46 4b 32 5a 75 4b 32 4d 77 4d 6d 52 42 4e 44 5a 74 65 46 56 71 59 6e 64 59 64 44 68 4f 53 46 6f 79 4e 31 67 77 61 47 68 43 61 7a 42 4d 54 46 4a 7a 61 7a 4a 55 52 45 4e 68 56 6b 70 56 55 6e 46 48 53 57 74 53 52 46 55 31 52 6b 6c 36 4d 55 59 33 54 48 45 78 54 6e 4a 61 4e 31 70 73 56 79 74 77 61 57 52 6e 62 54 52 71 5a 45 4e 43 4e 6b 35 6e 52 57 63 30 55 48 64 73 4c 7a 68 72 65 6e 51 32 53 57 70 47 4b 30 56 45 53 6d 5a 4e 63 31 6c 74 59 6d 68 78 57 47 63 34 61 55 35 73 61 31 42 6a 52 6d 31 58 5a 57 74 7a 5a 48 68 46 53 6b 6c 34 53 44 52 6b 59 53 74 54 4e 47 4a 4b Data Ascii: 120ePaTlLTk5BM0JDSDNPSTdqaDJ0eDFHQnhuMTlpaWFLQ2lmN0s4akQwWHNXcVZFK2ZuK2MwMmRBNDZteFVqYndYdDhOSFoyN1gwaGhCazBMTFJzazJURENhVkpVUnFHSWtSRFU1Rkl6MUY3THExTnJaN1psVytwaWRnbTRqZENCNk5nRWc0UHdsLzhrenQ2SWpGK0VESmZNc1ltYmhxWGc4aU5sa1BjRm1XZWtzZHhFSkl4SDRkYStTNGJK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50479	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	927	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=ctdQweTKqSOSmMiZKg2Yl40gsP94JXU8K8nzXWGMH55glgStuSJWx%2FvAAUomCJrkv98Rg2pkQpKGgVV2IRO0DA%3D%3D
2024-01-15 13:24:29 UTC	637	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:29 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:29 GMT; path=/; secure; samesite=none Set-Cookie: ss=oSINJOxlG8Bno5Tmx0zJCDqyvK5Whq%2F5usCOtWDg9hYwYBOwINbREVe7AJtXC7Ck%2BkpGtkXkgWYVlpEDVSSNCA%3D%3D; expires=Wed, 15 Jan 2025 13:24:29 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50476	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	876	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:29 UTC	993	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:29 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:29 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50478	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	1472	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
2024-01-15 13:24:29 UTC	364	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:29 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA Content-Length: 244 Connection: Close
2024-01-15 13:24:29 UTC	244	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 53 36 77 49 5a 44 73 71 41 4d 66 52 52 61 6b 6d 38 4a 76 75 7a 73 61 31 78 6e 50 6b 59 59 79 34 4a 39 39 34 50 45 6c 7a 30 59 6b 77 58 4c 37 33 59 79 69 43 35 36 33 4b 67 38 48 45 6c 65 61 74 49 73 57 56 6b 54 35 73 6b 66 37 4f 5f 69 76 61 4b 64 6f 71 48 43 4d 30 30 62 57 6b 65 62 76 41 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50481	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	1576	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015z89133403656&_p=1705325066007&gcd=11l1l1l1l1&dma=0&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&tfd=3072 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:29 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50486	68.67.179.153	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	742	OUT	GET /getuid?https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D209%26userId%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=727555877560728591; XANDR_PANID=6VE-vV-DyD0Bgm83LAgwXPsLj6abjlMZT9N7FeKEiHLkpHUUo_QHEOitb1AEx7cqsDzYqgMCBBUtU4GlZxpav9SSufp-9yRgLEsBzC5W5dY.; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa
2024-01-15 13:24:29 UTC	1273	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:29 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=1LUGdF0gV92_AiwdOI_MH6PTgxh42uHzqQMGKcit5_y9ko9eTLa4j1YO_IR48jqT-GuRaFVqb1C6JzToKzPjpr8Ic9vieiyC0qPrLm8DPkY.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned Location: https://ads.stickyadstv.com/user-registering?dataProviderId=209&userId=727555877560728591&gdpr=0&gdpr_consent=&gdpr=0 AN-X-Request-Uuid: 78e9d7ab-1aa3-4171-956c-ce2ee9c299d0 Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:29 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 570.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50483	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRkpbmA-8NEoZcsVivCjP8-kyP2ylEElZkKzdiGjAro7Mi6OL7OlNQbf7lfs_v6jEnyK46320XwINQvYtbVCQD-t57R7g HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:29 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:29 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50495	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	2334	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:30 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:30 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:30 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 23 67 6f 6f 67 6c 65 5f 73 63 61 6c 69 6e 67 5f 64 69 76 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 2c 31 2e 31 32 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 36 31 30 34 30 31 33 30 31 2c 21 31 29 2c 64 61 5c 78 33 64 61 61 28 35 37 32 34 31 37 33 39 32 2c 21 30 29 3b 76 61 72 20 75 3b 63 6f 6e 73 74 20 65 61 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 75 5c 78 33 64 65 61 3f 65 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 72 65 74 75 72 6e 20 63 61 3f 75 3f 75 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 5c 78 33 64 5c 78 33 65 62 5c 78 32 36 5c 78 32 36 2d 31 21 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 5c 78 33 64 62 2e 75 73 65 Data Ascii: 610401301,!1),da\x3daa(572417392,!0);var u;const ea\x3dq.navigator;u\x3dea?ea.userAgentData\|\|null:null;function fa(a){return ca?u?u.brands.some(({brand:b})\x3d\x3eb\x26\x26-1!\x3db.indexOf(a)):!1:!1}function w(a){var b;a:{if(b\x3dq.navigator)if(b\x3db.use
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 6c 65 74 20 73 61 2c 74 61 5c 78 33 64 21 64 61 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 5c 78 33 64 61 5b 41 5d 7c 30 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e Data Ascii: a\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}let sa,ta\x3d!da;function ua(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d\x3da[A]\|0;if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 32 36 28 61 5b 41 5d 7c 30 29 5c 78 32 36 32 3f 61 3a 46 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 78 33 64 5c 78 33 64 64 2c 65 2c 66 29 3b 65 6c 73 65 20 69 66 28 42 28 61 29 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 6b 20 69 6e 20 61 29 67 5b 6b 5d 5c 78 33 64 45 61 28 61 5b 6b 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 61 5c 78 33 64 67 7d 65 6c 73 65 20 61 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 64 7c 7c 63 3f 61 5b 41 5d 7c 30 3a 30 3b 64 5c 78 33 64 64 3f 21 21 28 67 5c 78 32 36 33 32 29 3a 76 6f 69 64 20 30 3b 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 Data Ascii: 26(a[A]\|0)\x262?a:Fa(a,b,c,void 0!\x3d\x3dd,e,f);else if(B(a)){const g\x3d{};for(let k in a)g[k]\x3dEa(a[k],b,c,d,e,f);a\x3dg}else a\x3db(a,d);return a}}function Fa(a,b,c,d,e,f){const g\x3dd\|\|c?a[A]\|0:0;d\x3dd?!!(g\x2632):void 0;a\x3dArray.prototype.slice
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 62 7c 5c 78 33 64 36 34 3b 76 61 72 20 64 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 28 2d 2d 64 2c 42 28 63 5b 64 5d 29 29 29 7b 62 7c 5c 78 33 64 32 35 36 3b 63 5c 78 33 64 64 2d 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 5c 78 33 63 5c 78 33 64 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 78 33 64 62 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 63 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 61 5b 41 5d 5c 78 33 64 62 7d 74 68 69 73 2e 6a 5c 78 33 64 61 7d 74 6f 4a 53 4f 4e 28 29 7b 69 66 28 73 61 29 76 61 72 20 61 5c 78 33 64 4a 61 28 74 68 69 73 2c 74 68 69 73 2e 6a 2c 21 31 29 3b 65 6c 73 65 20 61 5c 78 33 64 46 61 28 74 68 69 73 2e 6a 2c 47 61 2c 76 6f 69 64 Data Ascii: b\|\x3d64;var d\x3dc.length;if(d\x26\x26(--d,B(c[d]))){b\|\x3d256;c\x3dd-(+!!(b\x26512)-1);if(1024\x3c\x3dc)throw Error();b\x3db\x26-16760833\|(c\x261023)\x3c\x3c14}}a[A]\x3db}this.j\x3da}toJSON(){if(sa)var a\x3dJa(this,this.j,!1);else a\x3dFa(this.j,Ga,void
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 32 36 5c 78 32 36 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 73 69 7a 65 29 61 5c 78 33 64 6e 75 6c 6c 3b 61 21 5c 78 33 64 6b 5c 78 32 36 5c 78 32 36 28 63 5c 78 33 64 21 30 29 7d 6e 75 6c 6c 21 5c 78 33 64 61 3f 66 5b 76 5d 5c 78 33 64 61 3a 63 5c 78 33 64 21 30 7d 69 66 28 63 29 7b 66 6f 72 28 6c 65 74 20 79 20 69 6e 20 66 29 7b 74 5c 78 33 64 66 3b 62 72 65 61 6b 20 61 7d 74 5c 78 33 64 6e 75 6c 6c 7d 7d 74 21 5c 78 33 64 6d 5c 78 32 36 5c 78 32 36 28 70 5c 78 33 64 21 30 29 3b 68 2d 2d 7d 66 6f 72 28 65 5c 78 33 64 2b 21 21 28 65 5c 78 32 36 35 31 32 29 2d 31 3b 30 5c 78 33 63 68 3b 68 2d 2d 29 7b 76 5c 78 33 64 68 2d 31 3b 6d 5c 78 33 64 62 5b 76 5d 3b 69 66 28 21 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 6d 7c 7c 21 6c 61 5c 78 32 36 5c 78 32 36 75 Data Ascii: 26\x260\x3d\x3d\x3da.size)a\x3dnull;a!\x3dk\x26\x26(c\x3d!0)}null!\x3da?f[v]\x3da:c\x3d!0}if(c){for(let y in f){t\x3df;break a}t\x3dnull}}t!\x3dm\x26\x26(p\x3d!0);h--}for(e\x3d+!!(e\x26512)-1;0\x3ch;h--){v\x3dh-1;m\x3db[v];if(!(null\x3d\x3dm\|\|!la\x26\x26u
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 20 61 2e 73 3b 62 5c 78 33 64 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 5c 78 33 64 62 7d 3b 76 61 72 20 53 61 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 5c 78 33 64 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 5c 78 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 54 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 30 5c Data Ascii: a.s;b\x3dnew a;return a.s\x3db};var Sa\x3dRegExp(\x22^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?\x3d[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$\x22);function Ta(a,b,c,d){for(var e\x3dc.length;0\
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 5c 78 32 32 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 5c 78 32 32 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 62 28 61 2c 62 5c 78 33 64 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 5c 78 33 64 6e 75 6c 6c 2c 64 5c 78 33 64 21 31 2c 65 5c 78 33 64 21 31 29 7b 62 62 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 62 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 5c 78 33 64 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 Data Ascii: 0))):a.addEventListener(\x22DOMContentLoaded\x22,b)};function ab(a,b\x3ddocument){return b.createElement(String(a).toLowerCase())};function Q(a,b,c\x3dnull,d\x3d!1,e\x3d!1){bb(a,b,c,!1,d,e)}function bb(a,b,c,d,e,f\x3d!1){a.google_image_requests\|\|(a.google
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 2e 67 5c 78 33 64 7b 7d 7d 7d 3b 76 61 72 20 67 62 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 5c 78 33 64 65 62 28 64 62 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 32 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 5c 78 32 32 29 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 5c 78 33 64 5c 78 32 32 5c 78 32 32 3b 66 6f 72 28 6c 65 74 20 63 5c 78 33 64 30 3b 63 5c 78 33 63 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 Data Ascii: .g\x3d{}}};var gb\x3dclass extends hb{constructor(){super();var a\x3deb(db,document.currentScript);a\x3da\x26\x26a.getAttribute(\x22data-jc-flags\x22)\|\|\x22\x22;try{const b\x3dJSON.parse(a)[0];a\x3d\x22\x22;for(let c\x3d0;c\x3cb.length;c++)a+\x3dString.fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50494	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	2344	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:30 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:30 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:30 UTC	653	IN	Data Raw: 36 63 34 61 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 30 30 70 78 3b 68 65 69 67 68 74 3a 20 32 35 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 6c4a<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 300px;height: 250px;position: absolute;left: 50%;ma
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 ma
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 52 79 65 56 39 6a 62 32 52 6c 58 31 56 54 58 33 42 6c 63 6e 4e 76 62 6c 39 79 5a 57 64 70 62 32 35 66 59 32 39 6b 5a 56 38 30 5a 54 51 7a 4e 57 59 7a 4e 54 4d 32 4d 7a 63 75 61 6e 4e 76 62 68 49 61 51 30 38 32 65 47 35 32 61 53 30 7a 4e 45 31 45 52 6d 49 32 54 7a 42 52 55 57 52 6b 63 32 4e 4c 64 6c 45 59 41 53 49 66 43 4a 67 57 45 4b 69 6c 41 52 69 5f 71 44 34 67 6e 50 6d 6c 42 43 67 43 4d 41 49 34 41 56 32 61 6d 52 6b 2d 59 50 65 65 44 42 4c 67 41 77 72 56 41 32 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 63 47 4e 7a 4c 32 46 6a 64 47 6c 32 5a 58 5a 70 5a 58 63 5f 65 47 46 70 50 55 46 4c 51 55 39 71 63 33 56 74 4f 54 51 78 4d 48 5a 61 5a 54 4e 53 54 Data Ascii: RyeV9jb2RlX1VTX3BlcnNvbl9yZWdpb25fY29kZV80ZTQzNWYzNTM2MzcuanNvbhIaQ082eG52aS0zNE1ERmI2TzBRUWRkc2NLdlEYASIfCJgWEKilARi_qD4gnPmlBCgCMAI4AV2amRk-YPeeDBLgAwrVA2h0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vcGNzL2FjdGl2ZXZpZXc_eGFpPUFLQU9qc3VtOTQxMHZaZTNST
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 78 32 36 6c 74 3b 31 37 33 35 30 32 30 21 5c 78 33 64 6e 65 68 75 60 2f 21 33 36 34 5c 78 33 64 35 30 35 31 21 39 61 62 6b 7b 61 28 24 31 36 30 32 31 30 3a 33 5c 78 32 36 61 6d 70 3b 5c 78 32 36 6c 74 3b 63 62 6f 74 66 2b 2a 30 31 35 30 30 33 34 3a 25 32 62 65 6a 76 66 2f 25 37 32 3b 31 37 36 31 33 21 5c 78 33 64 65 66 64 77 61 2a 5c 78 32 36 23 33 39 3b 37 36 34 36 33 3b 32 31 24 3f 65 62 6b 70 62 24 5c 78 32 36 61 6d 70 3b 30 33 36 36 37 31 37 5c 78 32 36 67 74 3b 2a 5c 78 32 36 67 74 3b 62 67 69 70 66 2b 21 33 5c 78 33 64 37 31 32 33 36 33 25 39 61 69 68 77 63 29 21 37 32 30 32 5c 78 32 36 6c 74 3b 32 31 37 5c 78 32 36 23 33 39 3b 39 65 66 6f 74 6d 28 5c 78 32 36 61 6d 70 3b 32 30 30 36 31 3b 34 38 5c 78 32 36 61 6d 70 3b 5c 78 32 36 67 74 3b 60 64 6f Data Ascii: x26lt;1735020!\x3dnehu`/!364\x3d5051!9abk{a($160210:3\x26amp;\x26lt;cbotf+0150034:%2bejvf/%72;17613!\x3defdwa\x26#39;76463;21$?ebkpb$\x26amp;0366717\x26gt;*\x26gt;bgipf+!3\x3d712363%9aihwc)!7202\x26lt;217\x26#39;9efotm(\x26amp;20061;48\x26amp;\x26gt;`do
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 5c 78 33 64 43 4d 47 4c 31 41 49 51 38 4e 58 62 41 68 6a 50 73 39 6a 66 41 54 41 42 5c 78 32 36 76 5c 78 33 64 41 50 45 75 63 4e 57 46 66 43 5a 32 33 61 30 42 39 54 62 70 66 54 67 4a 77 70 64 78 6e 65 57 66 39 33 2d 6e 47 32 4f 76 59 5f 4e 75 4d 56 67 49 45 66 6f 34 72 4e 33 4c 4e 52 44 62 6c 72 34 67 6e 47 64 63 35 71 6a 33 63 79 44 34 2d 38 43 43 45 73 5f 4d 67 54 35 67 31 6e 70 56 4c 30 4a 76 65 73 4c 76 59 41 50 77 51 32 34 7a 6e 39 33 4d 36 7a 73 65 47 55 59 5c 78 32 32 20 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 20 61 72 69 61 2d 68 69 64 64 65 6e 5c 78 33 64 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 69 66 72 Data Ascii: bleclick.net/xbbe/pixel?d\x3dCMGL1AIQ8NXbAhjPs9jfATAB\x26v\x3dAPEucNWFfCZ23a0B9TbpfTgJwpdxneWf93-nG2OvY_NuMVgIEfo4rN3LNRDblr4gnGdc5qj3cyD4-8CCEs_MgT5g1npVL0JvesLvYAPwQ24zn93M6zseGUY\x22 style\x3d\x22display:none\x22 aria-hidden\x3d\x22true\x22\x3e\x3c/ifr
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 32 6b 79 51 33 6e 64 65 4a 76 43 63 58 61 72 42 36 6f 48 59 53 38 57 53 4a 74 62 6a 6a 58 7a 58 4e 54 6e 63 61 66 4d 5f 72 46 4d 54 30 58 6e 63 34 75 34 7a 74 66 50 67 47 31 5a 43 30 79 44 44 45 30 50 31 62 76 4b 42 31 6c 31 75 6d 46 57 78 37 37 37 44 41 70 76 56 45 59 4b 32 5a 64 42 72 6a 45 58 52 62 65 35 79 52 44 6b 66 5f 4b 41 62 4c 56 47 49 75 51 53 73 65 78 72 61 6a 5f 52 75 6f 5a 41 59 47 43 68 72 7a 6a 42 54 61 62 63 41 30 69 56 4d 65 6e 49 6d 47 41 7a 39 77 78 75 65 32 36 68 6b 78 56 67 70 4f 48 6b 52 45 68 51 6d 66 32 57 4e 66 5f 57 47 30 64 77 69 57 70 6e 76 65 75 42 36 50 4b 78 4a 6a 5f 5f 5f 5f 73 62 64 53 62 38 55 33 54 31 70 37 6a 33 59 62 72 37 78 41 54 4a 53 66 5a 75 72 69 77 54 65 35 76 4b 4c 42 43 35 52 79 42 63 4b 41 75 42 38 2d 6f 51 Data Ascii: 2kyQ3ndeJvCcXarB6oHYS8WSJtbjjXzXNTncafM_rFMT0Xnc4u4ztfPgG1ZC0yDDE0P1bvKB1l1umFWx777DApvVEYK2ZdBrjEXRbe5yRDkf_KAbLVGIuQSsexraj_RuoZAYGChrzjBTabcA0iVMenImGAz9wxue26hkxVgpOHkREhQmf2WNf_WG0dwiWpnveuB6PKxJj____sbdSb8U3T1p7j3Ybr7xATJSfZuriwTe5vKLBC5RyBcKAuB8-oQ
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 4c 6f 7a 77 58 6b 76 4a 35 70 33 57 63 44 72 73 72 53 43 66 33 44 65 58 37 61 38 75 61 36 74 32 76 73 7a 71 4d 73 4c 5f 7a 46 41 79 58 33 55 58 47 57 4f 67 75 4d 76 65 79 36 50 45 6d 4f 42 41 64 57 6e 66 53 68 76 61 44 59 7a 6d 38 50 41 52 2d 72 4a 38 49 74 6d 73 46 75 56 73 6c 78 6a 75 47 47 4f 6a 4c 33 5f 64 39 67 65 57 58 66 79 42 41 6a 4c 4d 6f 35 46 52 61 6e 37 63 34 64 4b 4b 32 72 36 35 4a 58 30 6b 4e 6c 66 50 61 4b 59 68 37 69 52 6c 47 76 63 4d 51 47 6b 67 64 46 61 4c 52 31 37 4e 62 52 7a 77 6e 77 54 6e 30 49 76 4b 42 5f 30 75 36 64 55 35 6d 4c 6c 54 4a 2d 59 31 44 4f 4b 33 43 30 59 48 49 67 2d 48 5a 4d 6a 55 7a 45 4d 52 35 6d 67 57 5f 78 4e 52 72 66 46 7a 63 35 49 69 4e 66 62 6d 6e 5f 4d 51 45 42 58 61 61 73 35 54 48 73 4c 39 43 67 49 58 48 67 43 Data Ascii: LozwXkvJ5p3WcDrsrSCf3DeX7a8ua6t2vszqMsL_zFAyX3UXGWOguMvey6PEmOBAdWnfShvaDYzm8PAR-rJ8ItmsFuVslxjuGGOjL3_d9geWXfyBAjLMo5FRan7c4dKK2r65JX0kNlfPaKYh7iRlGvcMQGkgdFaLR17NbRzwnwTn0IvKB_0u6dU5mLlTJ-Y1DOK3C0YHIg-HZMjUzEMR5mgW_xNRrfFzc5IiNfbmn_MQEBXaas5THsL9CgIXHgC
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 7a 54 37 43 77 61 57 69 4a 7a 4e 57 59 6a 75 78 79 6d 73 6d 79 48 70 44 4a 71 72 36 67 50 62 62 50 36 6c 4e 52 4b 44 67 57 32 54 62 6d 42 71 4f 4c 71 79 54 32 5a 56 4a 41 38 41 39 7a 52 7a 30 43 61 79 5a 47 2d 64 67 36 59 74 36 55 43 6a 63 7a 76 6c 5f 2d 66 6b 59 4e 5a 55 55 33 48 5f 42 62 38 32 4c 65 72 39 52 48 74 33 61 70 30 36 6e 37 6f 6c 75 6c 62 36 62 67 62 53 6b 67 57 56 42 79 56 65 32 6a 6a 31 56 42 5a 44 4a 4e 48 68 62 61 4f 5f 35 44 58 6c 64 64 54 4e 61 54 72 66 55 49 6c 44 7a 4b 37 62 33 44 37 77 4c 58 4b 79 33 31 43 71 50 6f 49 4d 78 4f 4d 37 7a 4c 73 32 64 57 66 52 48 38 36 55 50 62 76 38 75 64 42 4a 32 65 45 70 78 72 79 4d 76 70 55 72 57 5f 44 6a 4f 7a 32 32 4c 67 72 4d 68 35 5a 79 36 70 64 66 66 72 49 5a 50 31 70 46 37 75 51 6b 32 66 5a 55 Data Ascii: zT7CwaWiJzNWYjuxymsmyHpDJqr6gPbbP6lNRKDgW2TbmBqOLqyT2ZVJA8A9zRz0CayZG-dg6Yt6UCjczvl_-fkYNZUU3H_Bb82Ler9RHt3ap06n7olulb6bgbSkgWVByVe2jj1VBZDJNHhbaO_5DXlddTNaTrfUIlDzK7b3D7wLXKy31CqPoIMxOM7zLs2dWfRH86UPbv8udBJ2eEpxryMvpUrW_DjOz22LgrMh5Zy6pdffrIZP1pF7uQk2fZU
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 57 35 52 63 34 73 38 48 41 4b 55 64 79 52 35 5a 79 56 6e 75 6c 71 76 4e 49 4d 6b 61 6b 4e 33 38 38 31 65 34 63 6d 55 57 73 4d 59 4b 58 5f 6b 4a 5f 72 32 66 61 32 4e 66 4f 77 61 41 48 73 44 55 4c 6c 43 73 71 75 53 63 77 66 68 7a 4e 58 63 68 55 54 34 79 4f 76 6f 6c 73 38 78 41 69 4a 6a 52 7a 74 70 51 46 4a 4e 37 69 46 31 4a 66 2d 4b 51 42 4e 48 66 2d 45 61 68 4b 55 52 56 39 66 35 2d 77 59 42 56 4f 44 5a 63 37 48 61 30 6c 64 37 6c 31 4a 79 31 34 77 4f 5f 33 46 44 34 76 35 51 31 34 63 74 75 72 47 64 5a 75 56 35 61 6b 59 61 34 72 4a 38 36 57 49 68 68 5f 44 35 36 43 33 46 6b 44 57 52 6e 39 46 5a 4d 4c 6e 65 75 52 59 50 41 75 52 50 4f 41 48 6e 62 43 4a 4b 67 67 52 53 78 4b 43 5a 4b 63 35 5a 71 34 44 44 54 69 66 6b 45 31 36 7a 46 37 44 6e 36 4c 54 63 43 73 32 73 Data Ascii: W5Rc4s8HAKUdyR5ZyVnulqvNIMkakN3881e4cmUWsMYKX_kJ_r2fa2NfOwaAHsDULlCsquScwfhzNXchUT4yOvols8xAiJjRztpQFJN7iF1Jf-KQBNHf-EahKURV9f5-wYBVODZc7Ha0ld7l1Jy14wO_3FD4v5Q14cturGdZuV5akYa4rJ86WIhh_D56C3FkDWRn9FZMLneuRYPAuRPOAHnbCJKggRSxKCZKc5Zq4DDTifkE16zF7Dn6LTcCs2s
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 2d 62 57 42 68 50 48 68 37 69 64 70 31 36 77 65 6c 42 32 64 71 34 53 51 30 71 75 45 6f 4c 37 36 68 6d 36 7a 71 32 68 73 39 6d 57 62 44 66 41 59 48 77 5a 6d 68 6e 39 62 59 78 75 44 58 31 41 65 4e 4f 59 54 6f 44 53 41 66 34 48 64 58 31 6b 53 58 54 54 39 46 71 65 35 72 74 77 47 57 6a 55 6d 48 31 36 61 6f 41 58 44 7a 4e 32 33 7a 42 71 39 49 44 75 4d 6a 55 34 54 6f 38 36 5f 76 56 57 43 63 5f 6c 51 4b 6e 41 7a 53 6f 71 68 70 48 45 55 74 71 74 6e 56 32 65 72 31 34 77 4b 71 6b 61 57 4c 5f 56 30 77 2d 78 37 64 6b 32 34 4e 4e 42 67 51 39 49 75 56 4b 59 4f 5f 68 2d 34 77 50 41 79 74 59 46 4d 6a 33 51 74 71 42 6a 78 6f 58 32 79 73 4c 32 75 4b 57 31 68 32 4f 4e 5a 42 56 38 36 61 34 67 4a 6a 6f 58 4c 6f 4b 6a 6b 73 30 73 42 77 4f 5a 6e 49 50 79 5a 33 64 41 48 39 62 77 Data Ascii: -bWBhPHh7idp16welB2dq4SQ0quEoL76hm6zq2hs9mWbDfAYHwZmhn9bYxuDX1AeNOYToDSAf4HdX1kSXTT9Fqe5rtwGWjUmH16aoAXDzN23zBq9IDuMjU4To86_vVWCc_lQKnAzSoqhpHEUtqtnV2er14wKqkaWL_V0w-x7dk24NNBgQ9IuVKYO_h-4wPAytYFMj3QtqBjxoX2ysL2uKW1h2ONZBV86a4gJjoXLoKjks0sBwOZnIPyZ3dAH9bw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50496	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	2354	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:30 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:30 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:30 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 49 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 22 73 74 79 6c 65 3d 22 6c 65 66 74 3a 30 70 78 3b 74 6f 70 3a 30 70 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><div class="GoogleActiveViewInnerContainer"style="left:0px;top:0p
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 38 68 37 62 43 59 78 6f 66 6d 6b 59 64 6e 35 33 4b 52 78 4a 30 31 47 77 4b 45 48 4a 5a 61 68 52 50 30 58 6a 54 5a 36 73 6f 77 4c 69 37 31 4b 76 46 74 4e 44 66 59 68 57 64 50 55 6f 6d 49 59 6b 4c 6e 71 33 75 58 6c 46 42 66 34 5a 4e 30 74 54 41 4f 6f 7a 57 4e 69 4b 38 52 64 75 52 6d 71 4d 4a 57 33 56 6d 74 4a 58 63 70 64 51 73 74 77 75 51 4c 30 26 61 6d 70 3b 73 69 67 3d 43 67 30 41 72 4b 4a 53 7a 4e 70 79 2d 47 68 72 42 52 55 46 45 41 45 26 61 6d 70 3b 63 69 64 3d 43 41 51 53 4f 77 41 76 48 68 66 5f 59 7a 74 2d 30 42 31 53 55 6c 39 76 2d 73 73 4d 45 6b 48 58 6c 43 59 58 5a 46 34 2d 47 74 2d 59 7a 4a 47 6b 4a 78 4d 73 32 67 65 5a 6f 4e 74 2d 52 6e 52 4d 4d 34 74 67 54 30 41 7a 4e 6d 72 42 55 62 67 5a 79 34 5f 65 47 41 45 22 64 61 74 61 2d 67 6f 6f 67 6c 65 Data Ascii: 8h7bCYxofmkYdn53KRxJ01GwKEHJZahRP0XjTZ6sowLi71KvFtNDfYhWdPUomIYkLnq3uXlFBf4ZN0tTAOozWNiK8RduRmqMJW3VmtJXcpdQstwuQL0&sig=Cg0ArKJSzNpy-GhrBRUFEAE&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_eGAE"data-google
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 6e 61 69 64 3d 22 31 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 73 6c 69 66 74 3d 22 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 63 70 6d 61 76 3d 22 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 62 74 72 3d 22 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 69 74 70 6c 3d 22 32 30 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 72 73 3d 22 32 22 64 61 74 61 2d 67 6f 6f 67 6c 65 2d 61 76 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 30 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 37 35 33 33 37 34 25 32 62 65 6a 76 66 2f 25 32 37 38 34 34 26 67 74 3b 26 23 33 39 3b 39 77 75 76 62 24 26 61 6d 70 3b 35 36 35 33 33 26 67 74 3b 21 3d 7c 76 71 63 29 21 32 37 33 37 39 34 26 61 Data Ascii: "data-google-av-naid="1"data-google-av-slift=""data-google-av-cpmav=""data-google-av-btr=""data-google-av-itpl="20"data-google-av-rs="2"data-google-av-flags="["x%278440'9efotm(&753374%2bejvf/%27844>'9wuvb$&56533>!=\|vqc)!273794&a
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 78 62 62 65 2f 70 69 78 65 6c 3f 64 3d 43 49 50 2d 33 67 49 51 76 4d 54 67 41 68 6a 5f 77 4e 48 66 41 54 41 42 26 76 3d 41 50 45 75 63 4e 56 6f 43 49 4c 34 47 76 4d 65 6a 2d 39 34 32 53 68 52 78 34 32 53 31 52 35 78 47 56 6e 4c 68 69 74 71 4b 53 6f 68 30 6c 50 77 44 7a 70 47 6f 6f 31 4d 32 38 67 45 39 75 72 52 32 55 31 58 44 49 59 4f 73 79 49 73 34 31 4a 4d 55 31 45 31 73 59 73 4f 59 68 7a 57 71 58 77 7a 51 4b 70 74 49 59 44 4c 4b 44 6b 51 4e 33 6c 59 31 65 38 56 78 73 67 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 66 72 61 6d 65 3e 3c 64 69 76 3e 3c 64 Data Ascii: ="https://googleads.g.doubleclick.net/xbbe/pixel?d=CIP-3gIQvMTgAhj_wNHfATAB&v=APEucNVoCIL4GvMej-942ShRx42S1R5xGVnLhitqKSoh0lPwDzpGoo1M28gE9urR2U1XDIYOsyIs41JMU1E1sYsOYhzWqXwzQKptIYDLKDkQN3lY1e8Vxsg" style="display:none" aria-hidden="true"></iframe><div><d
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 32 2c 48 3a 5c 78 32 32 69 6e 4d 6f 62 69 6c 65 41 64 53 64 6b 5c 78 32 32 7d 2c 71 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6d 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 69 6e 20 70 29 7b 76 61 72 20 65 5c 78 33 64 70 5b 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 3b 63 20 69 6e 20 61 5c 78 32 36 5c 78 32 36 64 65 6c 65 74 65 20 61 5b 63 5d 3b 61 5b 65 5d 5c 78 33 64 62 7d 7d 29 7d 2c 70 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 5c 78 33 64 7b 7d 3b 6d 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 61 5b 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 5c 78 33 64 62 7d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 76 61 72 20 74 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: 2,H:\x22inMobileAdSdk\x22},q\x3dfunction(a){m(a,function(b,c){if(c.toLowerCase()in p){var e\x3dp[c.toLowerCase()];c in a\x26\x26delete a[c];a[e]\x3db}})},p\x3dfunction(){var a\x3d{};m(n,function(b){a[b.toLowerCase()]\x3db});return a}();var t\x3dfunction(a
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 53 74 72 69 6e 67 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5c 78 32 32 5c 78 32 32 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 6e 65 77 20 42 3b 76 61 72 20 43 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 5c 78 33 64 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 5c 78 32 36 5c 78 32 36 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 5c 78 32 32 5c 78 32 32 3b 69 66 28 43 21 5c 78 33 64 5c 78 33 64 43 29 74 68 72 6f 77 20 45 72 72 6f 72 28 5c 78 32 32 53 61 66 65 48 74 6d 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 5c 78 32 32 29 3b 74 68 69 73 2e 67 5c 78 33 64 61 7d 3b 44 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 Data Ascii: String\x3dfunction(){return\x22\x22.toString()};new B;var C\x3d{},D\x3dfunction(){var a\x3dg.trustedTypes\x26\x26g.trustedTypes.emptyHTML\|\|\x22\x22;if(C!\x3d\x3dC)throw Error(\x22SafeHtml is not meant to be built directly\x22);this.g\x3da};D.prototype.toS
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 32 32 74 72 75 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 62 2e 64 65 62 75 67 6a 73 5c 78 32 36 5c 78 32 36 28 65 5c 78 33 64 65 2e 72 65 70 6c 61 63 65 28 45 2e 70 61 74 74 65 72 6e 2c 45 2e 69 29 29 3b 28 62 5c 78 33 64 67 2e 73 65 6c 66 5c 78 33 64 5c 78 33 64 67 2e 74 6f 70 29 7c 7c 28 62 5c 78 33 64 77 69 6e 64 6f 77 2e 59 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2e 59 2e 53 61 6e 64 42 6f 78 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2e 59 2e 53 61 6e 64 42 6f 78 2e 76 65 6e 64 6f 72 2c 64 5c 78 33 64 77 69 6e 64 6f 77 2e 24 73 66 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2e 24 73 66 2e 65 78 74 2c 66 5c 78 33 64 77 69 6e 64 6f 77 2e 24 57 4c 58 52 6d 41 64 2c 62 5c 78 33 64 21 21 28 77 69 6e 64 6f 77 2e 49 4e 5f 41 44 53 45 4e 53 45 5f 49 46 52 41 4d Data Ascii: 22true\x22\x3d\x3db.debugjs\x26\x26(e\x3de.replace(E.pattern,E.i));(b\x3dg.self\x3d\x3dg.top)\|\|(b\x3dwindow.Y\x26\x26window.Y.SandBox\x26\x26window.Y.SandBox.vendor,d\x3dwindow.$sf\x26\x26window.$sf.ext,f\x3dwindow.$WLXRmAd,b\x3d!!(window.IN_ADSENSE_IFRAM
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 63 2b 2b 29 62 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 61 5b 63 5d 2c 31 30 29 29 3b 72 65 74 75 72 6e 20 62 7d 2c 4b 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 65 2c 64 2c 66 29 7b 76 61 72 20 68 5c 78 33 64 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 78 32 32 73 63 72 69 70 74 5c 78 32 32 29 3b 68 2e 73 72 63 5c 78 33 64 61 3b 68 2e 74 79 70 65 5c 78 33 64 63 3f 63 3a 5c 78 32 32 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 78 32 32 3b 68 2e 61 73 79 6e 63 5c 78 33 64 21 21 62 3b 66 5c 78 32 36 5c 78 32 36 28 68 2e 63 72 6f 73 73 4f 72 69 67 69 6e 5c 78 33 64 5c 78 32 32 61 6e 6f 6e 79 6d 6f 75 73 5c 78 32 32 29 3b 65 5c 78 32 36 5c 78 32 36 28 68 2e 6f 6e 6c 6f 61 64 5c 78 33 64 65 29 3b 64 5c 78 32 36 Data Ascii: c++)b.push(parseInt(a[c],10));return b},K\x3dfunction(a,b,c,e,d,f){var h\x3ddocument.createElement(\x22script\x22);h.src\x3da;h.type\x3dc?c:\x22text/javascript\x22;h.async\x3d!!b;f\x26\x26(h.crossOrigin\x3d\x22anonymous\x22);e\x26\x26(h.onload\x3de);d\x26
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 74 49 6e 70 6c 61 63 65 29 5c 78 32 36 5c 78 32 36 5c 78 32 32 74 72 75 65 5c 78 32 32 5c 78 33 64 5c 78 33 64 63 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 63 5c 78 33 64 21 30 3b 65 6c 73 65 7b 63 5c 78 33 64 61 2e 67 2e 70 72 69 6d 61 72 79 46 69 6c 65 73 3b 66 6f 72 28 76 61 72 20 65 5c 78 33 64 30 3b 65 5c 78 33 63 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 64 5c 78 33 64 63 5b 65 5d 2e 72 65 6e 64 65 72 41 73 3b 69 66 28 5c 78 32 32 45 58 50 41 4e 44 41 42 4c 45 5c 78 32 32 5c 78 33 64 5c 78 33 64 64 7c 7c 5c 78 32 32 42 41 4e 4e 45 52 5c 78 32 32 5c 78 33 64 5c 78 33 64 64 29 7b 63 5c 78 33 64 21 30 3b 62 72 65 61 6b 20 61 7d 7d 63 5c 78 33 64 21 31 7d 21 63 7c 7c 62 5c 78 32 36 5c 78 32 36 5c 78 32 32 5c 78 32 32 21 5c 78 33 64 62 7c Data Ascii: tInplace)\x26\x26\x22true\x22\x3d\x3dc.toLowerCase())c\x3d!0;else{c\x3da.g.primaryFiles;for(var e\x3d0;e\x3cc.length;e++){var d\x3dc[e].renderAs;if(\x22EXPANDABLE\x22\x3d\x3dd\|\|\x22BANNER\x22\x3d\x3dd){c\x3d!0;break a}}c\x3d!1}!c\|\|b\x26\x26\x22\x22!\x3db\|
2024-01-15 13:24:30 UTC	1252	IN	Data Raw: 5b 30 2d 33 5d 29 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 28 62 5c 78 33 64 6b 28 4c 2c 61 29 2c 77 69 6e 64 6f 77 2e 6d 72 61 69 64 3f 28 4b 28 5c 78 32 32 6d 72 61 69 64 2e 6a 73 5c 78 32 32 2c 21 31 2c 5c 78 32 32 74 65 78 74 2f 78 2d 64 6f 2d 6e 6f 74 2d 64 6f 77 6e 6c 6f 61 64 5c 78 32 32 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 4c 28 61 29 29 3a 4b 28 5c 78 32 32 6d 72 61 69 64 2e 6a 73 5c 78 32 32 2c 21 31 2c 5c 78 32 32 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 5c 78 32 32 2c 62 2c 62 29 29 3a 4c 28 61 29 7d 7d 2c 50 5c 78 33 64 5b 5c 78 32 32 73 74 75 64 69 6f 5c 78 32 32 2c 5c 78 32 32 72 65 6e 64 65 72 69 6e 67 5c 78 32 32 2c 5c 78 32 32 42 6f 77 52 65 73 70 6f 6e 73 65 5c 78 32 32 2c 5c 78 32 32 70 72 Data Ascii: [0-3])/.test(navigator.userAgent)?(b\x3dk(L,a),window.mraid?(K(\x22mraid.js\x22,!1,\x22text/x-do-not-download\x22,null,null),L(a)):K(\x22mraid.js\x22,!1,\x22text/javascript\x22,b,b)):L(a)}},P\x3d[\x22studio\x22,\x22rendering\x22,\x22BowResponse\x22,\x22pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50498	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:29 UTC	1435	OUT	GET /f/AGSKWxV-2F7d6zjYqZS_8dA5_G1T8LtpVIOchz52O7tz5pXzG4swVHw_M8wZ79rpkCdU4R8_GJ2Nw0fUSyyT4qhuPubHpC_pgtpnqfsA8QJwEdWlmJj0LOBKWFSPSUmH_pZ3CbCVL_ZrwA==?fccs=W1siQUtzUm9sX3dyYWhzdkhZNGRHZk16eG9KUkdXTkhTX05rbXljT3hGaEFTaXRYakc4ZjVDQ2pBeWR6MEhZY3lLaF8zU2ZPSVh6cms1VkdUWXlfaVg2WmNOQTdDbGVwbzZYQWdNc1I4YUYxbmhUMkoycXJQal8zQjFyVXJkOWpnTjMxSFRxMkdiX1FBZ2NNV3VVRWl1UDBJLWQyUkFrU3MyN0p3PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwNjgsNzUyMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:30 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:30 GMT Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-YKoW7nYjU9F0yUqsf9AJpw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 32 39 36 61 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 68 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 296aif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Sn=function(a){for(var b=_.hc.apply(1,
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6a 6f 28 64 29 3b 74 68 69 73 2e 69 3d 6e 65 77 20 5f 2e 49 6e 28 64 2c 6e 65 77 20 5f 2e 4c 67 28 5f 2e 7a 6b 28 74 68 69 73 2e 67 29 29 29 7d 3b 0a 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 6b 6f 28 74 68 69 73 2e 68 2c 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 6b 6f 28 74 68 69 73 2e 68 2c 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 6f 28 74 68 69 73 2e 68 2c 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 63 3d 74 68 69 73 2e 69 3b 61 3d 5f 2e 44 28 74 68 69 73 2e 67 2c 5f 2e 70 65 2c 31 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 Data Ascii: .location.hostname;this.h=new jo(d);this.i=new _.In(d,new _.Lg(_.zk(this.g)))};mo.prototype.start=function(a,b){switch(a){case 1:ko(this.h,1);break;case 3:ko(this.h,3);break;case 2:ko(this.h,2);break;default:var c=this.i;a=_.D(this.g,_.pe,1);var d=this.g
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 6c 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6e 6f 7d 2c 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 73 6f 28 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 6f 28 61 2c 31 29 7d 2c 61 29 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 31 3d 3d 3d 66 3f 30 3d 3d 3d 65 3f 75 6f 28 61 2c 32 29 3a 75 6f 28 61 2c 33 29 3a 63 2e 6e 6f 74 69 66 79 28 65 29 7d 2c 61 29 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 3d 3d 3d 61 2e 67 26 26 28 61 2e 67 3d 62 2c 61 2e 68 2e 67 28 62 29 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: l;this.h=new no},vo=function(a,b){for(var c=new so(b.map(function(e){return e.g()}),function(){uo(a,1)},a),d=0;d<b.length;d++)b[d].addListener(function(e,f){1===f?0===e?uo(a,2):uo(a,3):c.notify(e)},a)},uo=function(a,b){null===a.g&&(a.g=b,a.h.g(b))},wo=fun
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 6f 28 61 2e 43 2c 61 2e 69 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 65 6c 73 65 20 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 3b 0a 4f 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 52 6f 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 31 29 7d 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 71 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 69 3d 61 3b 74 68 69 73 2e 6c 3d 62 3b 74 68 69 73 2e 41 3d 63 7d 3b 5f 2e 41 28 53 6f 2c 71 6f 29 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: o(a.C,a.i,b,c)}catch(d){Po(a,a.l,b,c)}else Po(a,a.l,b,c)};Oo.prototype.h=function(){var a=this;Ro(this,function(){ro(a,0)},function(){ro(a,1)})};var So=function(a,b,c,d,e){qo.call(this,d,e);this.i=a;this.l=b;this.A=c};_.A(So,qo);So.prototype.g=function()
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 3b 76 61 72 20 63 3d 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3b 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 61 2e 67 26 26 61 2e 68 2e 67 28 61 2e 67 2e 74 65 73 74 28 65 29 2c 65 2c 64 29 3b 63 26 26 63 28 64 2c 65 2c 66 29 7d 7d 2c 59 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 29 7d 3b 76 61 72 20 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 68 3d 6e 65 77 20 5f 2e 67 65 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 62 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 7c 7c 21 64 7c 7c 22 53 63 72 69 70 74 20 65 72 72 6f 72 22 21 3d 3d 65 26 Data Ascii: ;var c=_.t.onerror;_.t.onerror=function(d,e,f){a.g&&a.h.g(a.g.test(e),e,d);c&&c(d,e,f)}},Yo=function(a,b){a.h.addEventListener(b)};var Vo=function(){this.g=new Map;this.h=new _.ge(document)},bp=function(a,b){Yo(b,function(c,d,e){c\|\|!d\|\|"Script error"!==e&
2024-01-15 13:24:30 UTC	1629	IN	Data Raw: 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 77 59 57 64 6c 59 57 51 76 61 6e 4d 76 62 47 6c 6b 59 58 49 75 61 6e 4d 5c 2f 5a 6d 4e 6b 58 48 55 77 4d 44 4e 6b 64 48 4a 31 5a 53 4a 64 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 63 47 46 6e 5a 57 46 6b 4d 69 35 6e 62 32 39 6e 62 47 56 7a 65 57 35 6b 61 57 4e 68 64 47 6c 76 62 69 35 6a 62 32 30 76 5a 6d 46 32 61 57 4e 76 62 69 35 70 59 32 38 69 58 53 77 78 4d 44 41 73 4e 53 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 5a 6e 56 75 5a 47 6c 75 5a Data Ascii: udWxsLG51bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvanMvbGlkYXIuanM\/ZmNkXHUwMDNkdHJ1ZSJdLFtudWxsLG51bGwsImh0dHBzOi8vcGFnZWFkMi5nb29nbGVzeW5kaWNhdGlvbi5jb20vZmF2aWNvbi5pY28iXSwxMDAsNSxbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vZnVuZGluZ
2024-01-15 13:24:30 UTC	836	IN	Data Raw: 50 52 30 78 76 4c 54 4a 53 52 31 5a 31 52 56 4a 47 62 57 46 59 62 6d 4e 75 64 55 39 6a 63 6a 4e 49 61 55 68 7a 4e 7a 64 77 62 58 56 69 61 46 46 6c 53 57 39 6a 53 30 4e 6d 65 6a 46 55 5a 47 52 70 56 47 6c 32 65 45 51 30 4f 45 63 34 63 79 31 32 57 57 70 77 62 56 59 30 56 6c 59 34 52 45 46 63 64 54 41 77 4d 32 52 63 64 54 41 77 4d 32 51 69 58 53 78 62 62 6e 56 73 62 43 78 62 4e 31 31 64 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 5a 6d 51 77 4f 47 59 30 59 57 55 32 5a 6d 5a 69 4d 47 52 6b 4f 53 49 73 62 6e 56 73 62 43 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 68 30 64 48 42 7a 4f 69 38 76 5a 6e 56 75 5a 47 6c 75 5a 32 4e 6f 62 32 6c 6a 5a 58 4e 74 5a 58 4e 7a 59 57 Data Ascii: PR0xvLTJSR1Z1RVJGbWFYbmNudU9jcjNIaUhzNzdwbXViaFFlSW9jS0NmejFUZGRpVGl2eEQ0OEc4cy12WWpwbVY0VlY4REFcdTAwM2RcdTAwM2QiXSxbbnVsbCxbN11dLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwiZmQwOGY0YWU2ZmZiMGRkOSIsbnVsbCxbbnVsbCxudWxsLG51bGwsImh0dHBzOi8vZnVuZGluZ2Nob2ljZXNtZXNzYW
2024-01-15 13:24:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50501	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	1621	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325066007&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&_s=2&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=ad_impression&ep.query_id=CO2Arve-34MDFZ670QQdmCsJKw&tfd=3782 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:30 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50511	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	1472	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
2024-01-15 13:24:30 UTC	364	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:30 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A Content-Length: 244 Connection: Close
2024-01-15 13:24:30 UTC	244	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 75 7a 30 74 4d 34 41 43 2d 31 31 58 38 6b 53 77 41 33 72 61 71 46 79 39 46 68 38 66 52 67 56 6f 66 61 2d 32 39 54 51 74 31 39 62 73 7a 63 72 63 6c 57 37 72 56 35 76 4f 37 51 77 6c 33 45 77 52 4f 6d 52 79 37 6f 70 44 67 63 55 69 4c 4a 4b 47 31 4d 74 69 68 4b 4d 67 66 63 35 74 47 5f 41 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50512	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	928	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4 HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=oSINJOxlG8Bno5Tmx0zJCDqyvK5Whq%2F5usCOtWDg9hYwYBOwINbREVe7AJtXC7Ck%2BkpGtkXkgWYVlpEDVSSNCA%3D%3D
2024-01-15 13:24:30 UTC	632	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:30 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4 Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:30 GMT; path=/; secure; samesite=none Set-Cookie: ss=M9ckRZ7UFa63QwwIxepPJStKX9L86obNH9OBME0dzKGK0dp7fUdcp21nuQOns2uh5G1GqMvVpo6DmV14m438Ww%3D%3D; expires=Wed, 15 Jan 2025 13:24:30 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50509	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	873	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:30 UTC	990	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:30 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:30 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50506	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	2523	OUT	GET /xbbe/pixel?d=CIP-3gIQvMTgAhj_wNHfATAB&v=APEucNVoCIL4GvMej-942ShRx42S1R5xGVnLhitqKSoh0lPwDzpGoo1M28gE9urR2U1XDIYOsyIs41JMU1E1sYsOYhzWqXwzQKptIYDLKDkQN3lY1e8Vxsg HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:30 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50517	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	2513	OUT	GET /xbbe/pixel?d=CMGL1AIQ8NXbAhjPs9jfATAB&v=APEucNWFfCZ23a0B9TbpfTgJwpdxneWf93-nG2OvY_NuMVgIEfo4rN3LNRDblr4gnGdc5qj3cyD4-8CCEs_MgT5g1npVL0JvesLvYAPwQ24zn93M6zseGUY HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:31 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:31 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50518	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	2051	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=435837736;ord=uhetnu;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIpL6e-L7fgwMVqqfRBB1t5wlKEAEYASAAEgJhNPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4GAE%26sig%3DAOD64_36maZYIRbAE4Hq57cPbZ-yYhra_A%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=_kzn67urD;cmpl=8;gcsr=m;stc=1;sttr=12;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:31 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:31 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 39 34 33 31 30 34 34 38 39 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 44 7a 4b 6c 5a 61 7a 42 42 37 4f 53 6f 50 4d 50 69 62 65 4b 77 41 49 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_943104489"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_DzKlZazBB7OSoPMPibeKwAI"\x3e');(function() {var m = document.createElem
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: e-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelecto
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 4f 79 45 33 66 69 2d 33 34 4d 44 46 54 4d 4a 61 41 67 64 69 5a 73 43 4b 41 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 73 64 76 50 34 4e 32 79 72 50 6c 72 6b 72 48 6f 31 46 6d 66 50 31 75 58 63 32 70 39 49 4f 45 75 51 65 68 2d 69 6d 42 72 62 4d 6f 4d 36 6b 59 55 44 66 61 58 59 70 79 42 73 33 37 34 68 36 6e 4c 54 49 4a 53 4f 66 35 55 50 67 58 70 67 5f 4c 78 4c 7a 35 72 47 45 55 69 6e 5f 62 36 4a 71 74 66 71 37 41 77 35 79 4d 4e 5f 53 58 6c 56 6c 4c 32 30 58 74 76 36 6e 36 6c 7a 54 4d 4c 43 33 56 45 36 64 78 62 4d 6b 4a 4e 76 42 69 37 50 Data Ascii: 2 id\x3d\x22img_anch_COyE3fi-34MDFTMJaAgdiZsCKA\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjssdvP4N2yrPlrkrHo1FmfP1uXc2p9IOEuQeh-imBrbMoM6kYUDfaXYpyBs374h6nLTIJSOf5UPgXpg_LxLz5rGEUin_b6Jqtfq7Aw5yMN_SXlVlL20Xtv6n6lzTMLC3VE6dxbMkJNvBi7P
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 65 65 2d 4c 37 66 67 77 4f 41 43 67 47 59 43 77 48 49 43 77 47 41 44 41 47 69 44 41 67 71 42 67 6f 45 72 4c 71 78 41 74 6f 4d 45 41 6f 4b 45 4e 43 64 6c 64 43 62 6b 59 69 69 4f 52 49 43 41 51 4f 71 44 51 4a 56 55 38 67 4e 41 64 67 54 44 64 41 56 41 66 67 57 41 59 41 58 41 51 25 32 36 61 73 65 25 33 44 32 25 32 36 67 63 6c 69 64 25 33 44 45 41 49 61 49 51 6f 62 43 68 4d 49 70 4c 36 65 2d 4c 37 66 67 77 4d 56 71 71 66 52 42 42 31 74 35 77 6c 4b 45 41 45 59 41 53 41 41 45 67 4a 68 4e 50 44 5f 42 77 45 25 32 36 6e 75 6d 25 33 44 31 25 32 36 63 69 64 25 33 44 43 41 51 53 4f 77 41 76 48 68 66 5f 38 5f 65 4e 5f 7a 58 41 53 5f 52 34 2d 4c 4b 72 57 65 6b 41 45 67 43 77 78 51 79 35 63 44 61 34 4f 38 66 6f 69 42 6d 4f 46 45 66 65 54 76 69 6e 6d 39 43 70 35 77 39 30 Data Ascii: ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIpL6e-L7fgwMVqqfRBB1t5wlKEAEYASAAEgJhNPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 64 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 5c 78 33 64 5b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 5c 78 32 36 5c 78 32 36 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 73 65 6c 66 5c 78 32 36 5c 78 32 36 Data Ascii: d\x3dArray.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a){a\x3d[\x22object\x22\x3d\x3dtypeof globalThis\x26\x26globalThis,a,\x22object\x22\x3d\x3dtypeof window\x26\x26window,\x22object\x22\x3d\x3dtypeof self\x26\x26
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 33 64 61 3b 69 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 5c 78 33 64 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 5c 78 32 36 5c 78 32 36 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 5c 78 33 64 62 5b 63 5d 3b 61 2e 41 5c 78 33 64 62 2e 70 72 6f 74 6f 74 79 70 65 7d 76 61 72 20 6a 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 Data Ascii: 3da;if(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var d\x3dObject.getOwnPropertyDescriptor(b,c);d\x26\x26Object.defineProperty(a,c,d)}else a[c]\x3db[c];a.A\x3db.prototype}var ja\x3d\x22function\x22\x3d\x3dtypeof
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 78 70 72 65 73 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 5c 78 32 36 5c 78 32 36 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 5c 78 32 36 5c 78 32 36 2d 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 7d 7d 29 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 Data Ascii: xpression\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){return a?a:function(b){return\x22number\x22!\x3d\x3dtypeof b?!1:!isNaN(b)\x26\x26Infinity!\x3d\x3db\x26\x26-Infinity!\x3d\x3db}});/* Copyright The Closure Libra
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 78 32 32 29 3a 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 71 61 5c 78 33 64 21 6e 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 72 61 5c 78 33 64 21 77 2c 73 61 5c 78 33 64 21 77 3b 76 61 72 20 45 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 53 79 6d Data Ascii: x22):A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefined\x22!\x3d\x3dtypeof Uint8Array,qa\x3d!na\x26\x26\x22function\x22\x3d\x3d\x3dtypeof btoa;var ra\x3d!w,sa\x3d!w;var E\x3d\x22function\x22\x3d\x3d\x3dtypeof Sym
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 74 7d 76 61 72 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 47 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 2c 41 61 5c 78 33 64 5b 5d 3b 47 28 41 61 2c 35 35 29 3b 4d 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 41 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 Data Ascii: t}var K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;G(a,d\|1);return!0}var M,Aa\x3d[];G(Aa,55);M\x3dObject.freeze(Aa);Object.freeze(ne
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 72 6e 20 46 61 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 7a 61 7c 7c 21 4c 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 70 61 5c 78 32 36 5c 78 32 36 6e 75 6c 6c 21 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: rn Fa(b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);case \x22boolean\x22:return a?1:0;case \x22object\x22:if(a){if(Array.isArray(a))return za\|\|!L(a,void 0,9999)?a:void 0;if(pa\x26\x26null!\x3da\x26\x26a instanceof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50519	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRKvkKRj8S86_HOkg4uId-EbBKYfy27OojsplOhGpjchrxCaRGWA1dlXwpsNKjQ32OBGcAZgzb_M2sQHht_iVJjr1Assg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:31 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:31 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50520	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:30 UTC	3080	OUT	GET /pagead/adview?ai=CEzPDDDKlZe3KD573xtYPmNek2ALUnfD5XO_GsfWkC9CQgOyQAhABIO34qSBgyYagiqSk4BGgAc3x9uICyAEJqAMByAPLBKoE4gFP0BFXg4lgna-w0PkSmMmMOvxv7N7w-r3prYC62LKNZFf_gHaxTDGZxQWV8Lxb-i09qscoEcVdTUreVUOg5RRcPwAKqynnYWT8uTk1yk-zZofALByuELY072eZJ5FESVP7Z9BLVvKuMRAqNnuNpuaAjL3_B1JiXP4cd-D7fi0TXF6lLBcCebutpA5PNZj67kw3K4gIh7yiIVJKd1Lmvo2rGkaxGM86zOFAqGClrYAPR4dc00zlIivPHpXLrCPRBzlrBgmLggADurbtAPr1MJtRd3O8PIwHa-EtdmWL4VZtzKm9wATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBi6AB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQmZdE0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOliTya33vt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwRCgsQ0Mz6v8mdvYHaARICAQO4E-QD2BMNiBQE0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=t5UNEhJPzJ4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5GAE&template_id=484&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:31 UTC	1225	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x77cb9221bb873f380000000000000000","2":"0xf7537ab5dbbd8ad20000000000000000","3":"0xd18ff16b6714e77e0000000000000000","4":"0xabd9a90cd8b6c9ac0000000000000000","5":"0x1d9277f4458f2d890000000000000000"},"debug_key":"2379460838429847113","debug_reporting":true,"destination":"https://overheaddoorhighcountry.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["744339661"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"572295683802292433"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:31 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50119	99.84.208.113	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	867	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=2281214538&col=29305905,5876516,358438438,549336255,207488824 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfuhAAAAAABAgAsAQfogAQAAC0BB-gYBAABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViwAAAAADF3_DQAAAAAgwHqZAA
2024-01-15 13:24:31 UTC	789	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:30 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfujwAAAAACAgAsAQfogAYAAC0BB-gYBgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViYAAAAADF4HOAAAAAAgvjS_AA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 03a399d73bdcccc9e7ad44d059b07ef4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: qzUsgZ2yGxbuvvIRfAPNVI2fUR6wKm4tY2fRN7-c4X56vc-K6G9UBw==
2024-01-15 13:24:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50527	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	858	OUT	POST /el/AGSKWxVPVHo71UKqDQDNglws8iah5jTy2MWA0qxjFnTqLrVUJD3CECBBsrY-SD09F6_pfxtTgQIujK9xXcj8CPj5FQ5jJ_VRbNCcmaFLB5Qstk34Ur33h6u9_3k6oTOqoXwj2IxHxpE1eA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:31 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 37 30 30 36 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325070068,null,null,[[1,1]]]
2024-01-15 13:24:31 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:31 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-hVyBDHuR2tRf6LuLdxarMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50528	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	1081	OUT	GET /f/AGSKWxWzSWYo0g8LYhdMECZmVIGG_VIkVwd3MgyuMkmns5pUj_rlmw3BWBuT_6yCG_pPAyj0GTT4oN3u185hV4UGF0wmSr-UhauGCUz5jOml_-hI_kANeGuo9suooylO1HUNSS8EEYBsA2DKo8oZt2Nscm5Uw1A46ld_CEu5CfTLIL2-z36CcggjerE6N0tv/_/customadmode._ad728x90./embed/ads./EmreAds./sponsored_listings. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:31 UTC	1605	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:31 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-1sQLatMFEyjndqoFE66AKg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:31 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 61 35 37 65 31 63 61 38 2d 35 33 64 36 2d 34 35 30 36 2d 38 32 61 35 2d 33 32 36 62 65 63 61 39 38 36 35 30 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['a57e1ca8-53d6-4506-82a5-326beca98650'] = true;
2024-01-15 13:24:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50530	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	2665	OUT	OPTIONS /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=362&cbvp=1&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:31 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:31 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50541	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	925	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=M9ckRZ7UFa63QwwIxepPJStKX9L86obNH9OBME0dzKGK0dp7fUdcp21nuQOns2uh5G1GqMvVpo6DmV14m438Ww%3D%3D
2024-01-15 13:24:31 UTC	641	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:31 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:31 GMT; path=/; secure; samesite=none Set-Cookie: ss=y%2B1scOSQWUtQ6Mm6Op4xIwyriwLl90sDRsuT6lrp%2FFfE5RjwlmFxxX%2Bjo3E6cTNZeyVWX%2FsYv9AcCSLUUXePAA%3D%3D; expires=Wed, 15 Jan 2025 13:24:31 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50533	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:31 UTC	798	OUT	GET /sadbundle/2024815875537436803/index.html?e=69&leftOffset=0&topOffset=0&c=Dy5dGanKQr&t=1&renderingType=2&ev=01_250 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:31 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 93389 Date: Mon, 15 Jan 2024 13:24:31 GMT Expires: Tue, 14 Jan 2025 13:24:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 26 Dec 2023 19:35:29 GMT X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:31 UTC	420	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 43 44 22 20 63 6f 6e 74 65 6e 74 3d 22 59 54 6b 33 4f 44 51 33 5a 57 5a 68 4e 32 49 34 4e 7a 5a 6d 4d 7a 42 6b 4e 54 45 77 59 6a 4a 6c 65 32 37 39 33 33 62 34 34 30 66 31 66 35 34 35 35 61 31 33 35 65 39 66 37 36 39 37 33 63 65 64 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 47 6f 6f 67 6c 65 20 57 65 62 20 44 65 73 69 67 6e 65 72 20 31 35 2e 33 2e 30 2e 30 38 32 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 65 6d 70 6c 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 42 61 6e 6e 65 72 Data Ascii: <!DOCTYPE html><html><head><meta name="GCD" content="YTk3ODQ3ZWZhN2I4NzZmMzBkNTEwYjJle27933b440f1f5455a135e9f76973ced" /> <meta charset="utf-8"> <meta name="generator" content="Google Web Designer 15.3.0.0828"> <meta name="template" content="Banner
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 64 2d 69 6e 61 63 74 69 76 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 2e 74 72 61 6e 73 70 61 72 65 6e 74 7b 6f 70 61 63 69 74 79 3a 30 7d 2e 67 77 64 2d 70 61 67 65 64 65 63 6b 3e 2e 67 77 64 2d 70 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2c 6f 70 61 63 69 74 79 3b 2d 6d 6f 7a 2d 74 72 Data Ascii: d-inactive{visibility:hidden}</style> <style>.gwd-pagedeck{position:relative;display:block}.gwd-pagedeck>.gwd-page.transparent{opacity:0}.gwd-pagedeck>.gwd-page{position:absolute;top:0;left:0;-webkit-transition-property:-webkit-transform,opacity;-moz-tr
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 67 77 64 2d 61 74 74 61 63 68 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 6c 69 67 68 74 62 6f 78 2d 73 74 79 6c 65 22 3e 2e 67 77 64 2d 6c 69 67 68 74 62 6f 78 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 20 69 64 3d 22 67 77 64 2d 74 65 78 74 2d 73 74 79 6c 65 22 3e 70 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 31 7b 6d 61 72 67 69 6e 3a 30 70 78 7d 68 32 7b 6d 61 72 67 69 6e 3a Data Ascii: one;-moz-user-select:none;-ms-user-select:none;user-select:none}</style> <style>gwd-attached{display:none}</style> <style id="gwd-lightbox-style">.gwd-lightbox{overflow:hidden}</style> <style id="gwd-text-style">p{margin:0px}h1{margin:0px}h2{margin:
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 35 30 25 20 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 33 70 78 2c 20 2d 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 36 35 2c 20 2e 36 35 2c 20 2e 36 35 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 33 70 78 2c 20 2d 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 36 35 2c 20 2e 36 35 2c 20 2e 36 35 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 33 70 78 2c 20 2d 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 36 35 2c 20 2e 36 35 2c 20 2e 36 35 29 7d 2e 69 6d 61 67 65 31 7b 70 6f 73 69 74 Data Ascii: -origin:50% 50%;-moz-transform-origin:50% 50%;transform:translate3d(-23px, -1px, 0) scale3d(.65, .65, .65);-webkit-transform:translate3d(-23px, -1px, 0) scale3d(.65, .65, .65);-moz-transform:translate3d(-23px, -1px, 0) scale3d(.65, .65, .65)}.image1{posit
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 68 3a 32 33 39 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 65 66 74 3a 33 35 70 78 3b 74 6f 70 3a 34 30 38 70 78 3b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 74 61 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 6f 6e 74 73 65 72 72 61 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 23 35 30 35 30 35 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: h:239px;font-size:25px;color:#fff;font-family:Montserrat;font-weight:bold;height:auto;left:35px;top:408px;opacity:1}.cta{position:absolute;font-family:Montserrat;font-weight:bold;color:#505050;text-align:center;height:auto;background-image:none;background
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 37 2c 20 2e 34 37 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 38 32 70 78 2c 20 2d 32 37 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 34 37 2c 20 2e 34 37 2c 20 2e 34 37 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 38 32 70 78 2c 20 2d 32 37 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 34 37 Data Ascii: 7, .47);animation-timing-function:linear;-webkit-animation-timing-function:linear;-moz-animation-timing-function:linear}100%{opacity:1;transform:translate3d(82px, -271px, 0) scale3d(.47, .47, .47);-webkit-transform:translate3d(82px, -271px, 0) scale3d(.47
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 78 2c 20 2d 32 37 31 70 78 2c 20 30 29 20 73 63 61 6c 65 33 64 28 2e 34 37 2c 20 2e 34 37 2c 20 2e 34 37 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 7d 23 70 61 67 65 31 2e 67 77 64 2d 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 67 77 64 2d 67 65 6e 2d 31 79 70 6a 67 77 64 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 79 70 6a 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 31 Data Ascii: x, -271px, 0) scale3d(.47, .47, .47);visibility:inherit}}#page1.gwd-play-animation .gwd-gen-1ypjgwdanimation{animation:1.302s linear 0s 1 normal forwards gwd-gen-1ypjgwdanimation_gwd-keyframes;-webkit-animation:1.302s linear 0s 1 normal forwards gwd-gen-1
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 65 6e 64 7d 35 33 2e 37 36 33 34 25 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 39 39 2e 38 34 36 34 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 69 6e 68 65 72 69 74 7d 7d 23 70 61 67 65 31 2e 67 77 64 2d 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 20 2e 67 77 64 2d 67 65 6e 2d 39 62 78 66 67 77 64 61 6e 69 6d 61 74 69 6f 6e 7b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 33 30 32 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 Data Ascii: end}53.7634%{opacity:0;-moz-animation-timing-function:linear}99.8464%{opacity:1;-moz-animation-timing-function:linear}100%{opacity:1;visibility:inherit}}#page1.gwd-play-animation .gwd-gen-9bxfgwdanimation{animation:1.302s linear 0s 1 normal forwards gwd-g
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 3a 2e 37 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 67 6d 68 65 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 3b 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 2e 37 73 20 6c 69 6e 65 61 72 20 30 73 20 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 67 77 64 2d 67 65 6e 2d 67 6d 68 65 67 77 64 61 6e 69 6d 61 74 69 6f 6e 5f 67 77 64 2d 6b 65 79 66 72 61 6d 65 73 7d 2e 67 77 64 2d 64 69 76 2d 6d 79 31 72 7b 68 65 69 67 68 74 3a 32 35 30 70 78 7d 2e 67 77 64 2d 74 61 70 61 72 65 61 2d 69 73 6b 63 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 70 78 3b 77 69 64 74 68 3a 33 30 30 70 78 3b 68 65 69 67 68 74 3a 32 35 30 70 78 3b 6c Data Ascii: :.7s linear 0s 1 normal forwards gwd-gen-gmhegwdanimation_gwd-keyframes;-moz-animation:.7s linear 0s 1 normal forwards gwd-gen-gmhegwdanimation_gwd-keyframes}.gwd-div-my1r{height:250px}.gwd-taparea-iskc{position:absolute;top:0px;width:300px;height:250px;l
2024-01-15 13:24:31 UTC	1252	IN	Data Raw: 6e 73 74 72 75 63 74 28 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 5b 5d 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 3b 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3b 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 48 54 4d 4c 45 6c 65 6d 65 6e 74 3b 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 48 54 4d 4c 45 6c 65 6d 65 6e 74 2c 42 75 69 6c 74 49 6e 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 7d 7d 29 28 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 Data Ascii: nstruct(BuiltInHTMLElement,[],this.constructor)};HTMLElement.prototype=BuiltInHTMLElement.prototype;HTMLElement.prototype.constructor=HTMLElement;Object.setPrototypeOf(HTMLElement,BuiltInHTMLElement)}})();(function(){/* Copyright The Closure Library Au

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50543	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	2158	OUT	GET /pagead/adview?ai=C9zu_DDKlZeqJAdjkvPIPm--EkAaarfGydNPs3sTFEdvZHhABIO34qSBgyYagiqSk4BGgAY_x_P4CyAEJqAMByAPLBKoE4gFP0PsVEi3-Hi02QTPbbB1k0s6-0ITMjLQQ73YJXp2HvSsv7d8zoClZhnQTjDfPb9VNTQSj_gQ4xqIa1oe_1e_kyFHEDJ_XbYuulXE8GKqhV4gIBEeOWcmJeI1Oweumf-baZ3Tl-oR2uzM0RgdCBV6_x99xK1xQ8AHSx3Qv0szsVcS6kTMZ2MO9QkD1EWCw2OKfdN2kcK0stz55CakoNAxgj8hju6YWwZNXps8PwyBZ76iRstmSHuoK7qp8Kz6jYnDw-44rYiBNmaJuyuRJpBH4n4lJWfbGkWcPQ3wPIC3efCR8wATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBi6AB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQrJIb0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOliLjJ_3vt-DA5oJpgJodHRwczovL3d3dy5nZXRhcHAuY29tL3Avc2VtL2NvbnN0cnVjdGlvbi1tYW5hZ2VtZW50LXNvZnR3YXJlLz91dG1fY29udGVudD1kJnV0bV9zb3VyY2U9cGRpcy1nb29nbGUmdXRtX21lZGl1bT1jcGMmYWNjb3VudF9jYW1wYWlnbl9pZD0yMDI1OTI3NTAwOSZhY2NvdW50X2FkZ3JvdXBfaWQ9MTUxNjQ4MjIwMzYyJmFkX2lkPTY2MTM4MDk2NzgzOSZ1dG1fY2FtcGFpZ249OjE6R0E6MjpDT006MzpFTkc6NDpBTEw6NTpCQVU6NjpTT0Y6NzpEZXNrdG9wOjk6Q29uc3RydWN0aW9uX01hbmFnZW1lbnQ6MTQ6UERJU19QU1SACgHICwGiDAgqBgoErLqxAtoMEQoLEODiurfU1cr_-QESAgEDuBPkA9gTDYgUBdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=YAx44dD1bOk&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1FGAE&template_id=484&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:32 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xce75f8629f85660e0000000000000000","2":"0x4427632a5f783a7d0000000000000000","3":"0x1f9bf1cd1995cc340000000000000000","4":"0xfd3abb05a8d8c95b0000000000000000","5":"0x9d9f34b1fdb72450000000000000000"},"debug_key":"12275968522015847772","debug_reporting":true,"destination":"https://getapp.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["803158159"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"14563516096960793601"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50540	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	1474	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
2024-01-15 13:24:32 UTC	366	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:32 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi Content-Length: 246 Connection: Close
2024-01-15 13:24:32 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 32 54 4e 4c 35 7a 49 38 72 4c 6d 4e 78 6b 6d 54 59 4e 63 72 59 64 30 76 7a 76 74 4e 45 67 5f 57 42 4c 38 34 68 74 62 5f 65 79 35 42 4e 4f 67 72 74 34 59 55 4d 42 41 54 37 71 49 46 68 36 4b 30 77 48 4d 63 77 52 69 61 59 4e 56 71 6a 4c 62 69 5f 4c 4c 52 66 73 57 50 4b 45 59 30 4d 73 4b 59 69 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50549	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	877	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:32 UTC	994	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50538	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	877	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:32 UTC	994	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:32 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50552	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	927	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=M9ckRZ7UFa63QwwIxepPJStKX9L86obNH9OBME0dzKGK0dp7fUdcp21nuQOns2uh5G1GqMvVpo6DmV14m438Ww%3D%3D
2024-01-15 13:24:32 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:32 GMT; path=/; secure; samesite=none Set-Cookie: ss=d3X1mRea%2FucWdOV94ccvL4E%2BSiEvD95edpx1ZFDOVbSS39UZN1KnmofUPHz%2FiwHE9CZn691I8DHq47en8%2F5XpQ%3D%3D; expires=Wed, 15 Jan 2025 13:24:32 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50551	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	1473	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
2024-01-15 13:24:32 UTC	365	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:32 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk Content-Length: 245 Connection: Close
2024-01-15 13:24:32 UTC	245	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 53 4e 54 66 48 77 71 76 77 73 45 33 31 4a 48 79 59 4f 35 65 36 57 4f 42 2d 42 46 58 7a 71 51 50 67 78 54 6d 45 56 6d 61 6f 61 62 31 68 55 2d 62 65 35 55 59 6d 43 45 41 79 45 31 6a 69 4b 41 6b 54 5f 52 5a 6c 70 32 54 59 71 4d 63 49 64 77 46 49 50 6f 38 57 6c 30 6c 4d 71 77 47 51 63 74 6a 6b 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50546	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	858	OUT	POST /el/AGSKWxVPVHo71UKqDQDNglws8iah5jTy2MWA0qxjFnTqLrVUJD3CECBBsrY-SD09F6_pfxtTgQIujK9xXcj8CPj5FQ5jJ_VRbNCcmaFLB5Qstk34Ur33h6u9_3k6oTOqoXwj2IxHxpE1eA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:32 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 37 30 36 33 37 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325070637,null,null,[[3,1]]]
2024-01-15 13:24:32 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-l3EnfsNVb_sUJN_BSz8tbg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50547	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	1070	OUT	OPTIONS /pcs/view?xai=AKAOjsv83EF5UOrk6HBIiiiewMKKXENrEggrjHFrY0qM00JkChKQltBPvh-s6cb8C0ij4iQaTGYsO8v4H4Wd5U3mzheYZWpnlsmJIudXCwY0gG8ZBzhDhtpdoddKAAuYdT6ISjIos1GTtlVVEIGc42e_rx6PhJjstrUYy_Tz_z718j2l8cA1WvNYda9Hnjel1t-aUis&sai=AMfl-YTqLH-miKFNUeMXFYUGNd0-Pk0LZSrRd8-eLisZ7P6LJXRS2hc8lcQskFS79ImAz0MLXpU6lZNuavOYZwzvBrkcWGTCa-4HkFmV4Q&sig=Cg0ArKJSzDbC6WF6U5gfEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.04599&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:32 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50545	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	6312	OUT	GET /dbm/ad?dbm_c=AKAmf-D98bqk1f2DSGTVW9a8Fsu1hJzHsZPixphfFenb6L9PvOjoWsDhw3M509b-o11Kty5K9U5S5KBNr_xUDlqPz9Bq0gxTiQPSkGmgwdsdAMgNcJWSEHHHo8Om0JKqs6lWdbWALV-vGWay0oooBy-1syz_PP389wQEXXmoQTDkydSiodX4iVE&dbm_d=AKAmf-AS-BVzHGuJVWQJ4IwOWzFkgL0l8dxqlA623Y572r1mL9txyubAOk8BzbecQ0dqAAQk8kCJ7ehGY2W5Rc4s8HAKUdyR5ZyVnulqvNIMkakN3881e4cmUWsMYKX_kJ_r2fa2NfOwaAHsDULlCsquScwfhzNXchUT4yOvols8xAiJjRztpQFJN7iF1Jf-KQBNHf-EahKURV9f5-wYBVODZc7Ha0ld7l1Jy14wO_3FD4v5Q14cturGdZuV5akYa4rJ86WIhh_D56C3FkDWRn9FZMLneuRYPAuRPOAHnbCJKggRSxKCZKc5Zq4DDTifkE16zF7Dn6LTcCs2sbPfKPSS-0UiM81d3BP-ZP0Ga-5K8gK1wJKeZNpVMbdgaZfxzxJUxVmeYIONy-2iv3nWNUk-97RpstyF14mfCE3jZKY8J-l1f28oHoJnyUaBR_8Td8WgGsmB0QObeR0RWS58DAmZQkf1UuDA8sEuoQh76KzLujPJ2UsUKRDewysmxYBpeRjWK4e8PedjDm_unePnvvDPsbe3kXDogx0JORkLgwodqBkypgjScPg9yIriqT3lQzZQ0IOmrX5TDtAjD2QTHUDUx_o-2vC4e7Z9rgXDaQoEpIo_HF5msGY5Gg10WIMEnJ2kyQ3ndeJvCcXarB6oHYS8WSJtbjjXzXNTncafM_rFMT0Xnc4u4ztfPgG1ZC0yDDE0P1bvKB1l1umFWx777DApvVEYK2ZdBrjEXRbe5yRDkf_KAbLVGIuQSsexraj_RuoZAYGChrzjBTabcA0iVMenImGAz9wxue26hkxVgpOHkREhQmf2WNf_WG0dwiWpnveuB6PKxJj____sbdSb8U3T1p7j3Ybr7xATJSfZuriwTe5vKLBC5RyBcKAuB8-oQky3Ka--UKJydgIgDsEAcB0KMVY4axxGMZeR7MkKtZYKggeY-o-qpxmevtN6iuSz8V94FlxFr0RqkcpyRpnaNWdWrIuHdMjev8gYlptb-aMXcLdRATt4W4_TD8ZGgsy2S8MAVHBuBKxlgzH77EBFRRA5c7K9gOsMqFBNy2oy0DvMa9BufeXlAAc1GqgSSeSBq7rzR3_Ff2zSwwRPR_2-GeKSNPMyUhEz77R9hXE0IzReIads7gGjwISomxCJuHNwRQ0eBp1-KUGWnxH3zwaCNcSuG-Agg5pqNg4qFBEPcGEjysYi7a1KiWUf5xUcFINVs9EaMcTncixWyk13uH_e3BUaD2lCC7gLwknW9wJqq4J3BNafCzK7i3CP0E-gYRhT1gzxbK1seo_XWLrMtaqarDyhdkBzAE0kF4MgySquLt6L-RrTz3WLtK-bWBhPHh7idp16welB2dq4SQ0quEoL76hm6zq2hs9mWbDfAYHwZmhn9bYxuDX1AeNOYToDSAf4HdX1kSXTT9Fqe5rtwGWjUmH16aoAXDzN23zBq9IDuMjU4To86_vVWCc_lQKnAzSoqhpHEUtqtnV2er14wKqkaWL_V0w-x7dk24NNBgQ9IuVKYO_h-4wPAytYFMj3QtqBjxoX2ysL2uKW1h2ONZBV86a4gJjoXLoKjks0sBwOZnIPyZ3dAH9bw5O-Ew61nCfSbsdXqv_FprwDA3Ln2L93Kf7k3QO0Te0YymWfvCT32cey0s36x-vyTbut04MwOBBbIT1jqSOfjm5Dj6OP9rlrOcCHu1iMskGb8WRN9w0s48O1HVQBsrf77U_aRA2WSBvrZQtQM2MmMrvqDmpiDSjBPhZVkZCqL_Ivk_ahYyLm7omoUwtaL7QWmkevPBWEf_8caC8otdo-Rjjl3O2WoIY09oJr-CBeZM8UCRr2hqP9aF2xrUr7S6sUkHJB27LrdPCt3NE9O9r6ak4AmfrlkS6EE7MQQ0DjfXgtrvO3BBLozwXkvJ5p3WcDrsrSCf3DeX7a8ua6t2vszqMsL_zFAyX3UXGWOguMvey6PEmOBAdWnfShvaDYzm8PAR-rJ8ItmsFuVslxjuGGOjL3_d9geWXfyBAjLMo5FRan7c4dKK2r65JX0kNlfPaKYh7iRlGvcMQGkgdFaLR17NbRzwnwTn0IvKB_0u6dU5mLlTJ-Y1DOK3C0YHIg-HZMjUzEMR5mgW_xNRrfFzc5IiNfbmn_MQEBXaas5THsL9CgIXHgCS3S2dWEfGUsyWxdDOnF_M7ZE0y_Cvqy8M_XOPPrHfK3Y2fe2cEFE2dXnXsFzhkDkpAwlGSkI2m4l1SanhCEfOgMVzaBpyS4spbFg4B1xuNT1JYSKl_tpDrsMG-JcZCBuXuWAhUye-le8XNXSYSe06nFkgCwekUfigmig71GDdZqG0-mzzkilfMaFM5l4By8iZeDJOGzBnqwubr_DjRyIgwYeIYK06_qfL7G7vGgjvWhLfrCaZ140qxloKU5-MZfNGP6TixyPF2vzbpYTn8s9Ioh69MjJHl18X1uchR7j3NGgP5dvjjFnmnSreagE8_GAiTwGiup2wNOiKjp50LvLFkBXAcHfBJ3iRoxCo9Mcn4yky8gX2qolb0k5EbeWl1bPGEtQ1xi9UiISWhPhNGzLLk2PjGvBDR6hl1FbPZjbVEoKDMDqLcNLfqfXWY5YRkPY7N7wj8xmVuuIT62q8nL2kUXv0gCx6X7ReYY1ZEsU5tU1KcYeKkEz45zpWalJJLF6Qm4ybcoRQuKpctNZkB5z1BREwyI8OXY3tjjCcnjXtbsFeVkJQkbpaYeZN3fN1_78CvI4vXK4B0FY6W7RfY_oKfOYJL3VQePxqh1IxwheaVAUbbXbyU8Zii2o2IFuAoPlh6t16wLIlZdTDb86O7tK05qcb83YMQMU5-wbiTaaSz6F5S_Bkx9XFjPVzZIV6TqnQYioD3IPIKdFD3yujX42mgxZ8xjtffXgkan8OyIbD-TM4jmxDNX9PP1TILagzSMG2PcmJimdrXWfChhsGSwPrU3TAyURRHlxTYfsmYxNkQxnl72RpFdcaS_wZy8_4bXy3ksMIPIUQYlSgXS1_6x4s_Lg3SYH5tA9MpFYsdkpsZCHb4r9L2H87iwOGEw-86me-IlCV-UpqSN_UckTM56lxVidQ5cImY1Vz7VqlP0OurwnypaydnWbHfHWvPSdGrTbyAzGkl42cbf7prFmQCBjK73iURGMUsZmdCwIFzT7CwaWiJzNWYjuxymsmyHpDJqr6gPbbP6lNRKDgW2TbmBqOLqyT2ZVJA8A9zRz0CayZG-dg6Yt6UCjczvl_-fkYNZUU3H_Bb82Ler9RHt3ap06n7olulb6bgbSkgWVByVe2jj1VBZDJNHhbaO_5DXlddTNaTrfUIlDzK7b3D7wLXKy31CqPoIMxOM7zLs2dWfRH86UPbv8udBJ2eEpxryMvpUrW_DjOz22LgrMh5Zy6pdffrIZP1pF7uQk2fZUwcRCvuQ73c6IrubiiDEl8PtDBIXHRYWcl9--5jxZr5BAP0Gs8xVlcWi1jJDzkKjfMpyXwvGLFGfQVzGG63nQ5dI2h26gHOq1sHche7eyXOCuNqNcwIOtkAbDfPJr13815ChaLhq-TCfpo8ZqEfnEqdR5TDK95-cm9Vbv6mZymLlS9N-Ua0syvEuyyC9I_6UWOyZTyfCY7nFJqvTBFuKJ8pa7hUiybNNNf1HIrMQkvpOHyW94eM9X3ouEGEvb2kYfqGI27Q8kKDXUXYwXc1YK3YYNQ&cid=CAQSOwAvHhf_wPBaE5IrSf5SVnjTZgH9-XtVGBmjHKHRbqt0X5m5pSYDZgNvJmTLjTu8WfxfYHVRRgLSuwLrGAE&dv3_ver=m202309260101&nel=1&rfl=http%3A%2F%2Fmylovelybluesky.com%2F&ds=l&xdt=1&iif=1&cor=8061403577741055000&adk=3062569611&idt=685&cac=0&dtd=9 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:32 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:32 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 69 66 20 28 21 77 69 6e 64 6f 77 2e 6d 72 61 69 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 69 64 3d 22 61 64 5f 75 6e 69 74 22 5c 78 33 65 27 29 3b 7d 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 45 44 4b 6c 5a 66 53 53 42 35 36 63 6f 50 4d 50 31 5a 69 6e 6d 41 6b 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6a 63 27 2c 20 27 38 32 Data Ascii: 8000if (!window.mraid) {document.write('\x3cdiv id="ad_unit"\x3e');}document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_EDKlZfSSB56coPMP1ZinmAk"\x3e');(function() {var m = document.createElement('meta');m.setAttribute('data-jc', '82
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 49 46 52 41 4d 45 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 26 26 21 64 Data Ascii: b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelectorAll("IFRAME");for(var b=0;b<a.length&&!d
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 56 63 77 4a 6b 77 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 76 5f 6e 6d 31 79 45 58 47 36 74 6b 6f 5f 5a 41 64 50 57 54 33 62 4d 54 67 72 65 64 72 6c 53 47 4e 30 2d 7a 36 67 53 78 33 74 76 71 38 42 62 53 31 6a 32 6f 35 76 55 50 68 5f 57 42 45 37 4e 2d 63 68 38 76 61 53 32 51 7a 2d 6a 70 45 6e 57 6b 6b 49 6f 75 43 41 64 73 36 5a 33 76 65 52 6e 44 4a 70 58 77 57 32 68 73 67 65 54 50 51 38 54 5f 4e 44 32 49 65 52 6b 56 66 4c 77 52 43 6d 4a 7a 31 67 6d 4f 63 6d 57 61 6d 67 44 54 5a 56 70 73 6b 56 45 5f 51 79 62 78 54 45 44 75 71 71 74 32 52 71 53 64 75 63 61 71 57 44 62 33 58 6f 66 59 56 74 4f 31 58 41 Data Ascii: VcwJkw\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjsv_nm1yEXG6tko_ZAdPWT3bMTgredrlSGN0-z6gSx3tvq8BbS1j2o5vUPh_WBE7N-ch8vaS2Qz-jpEnWkkIouCAds6Z3veRnDJpXwW2hsgeTPQ8T_ND2IeRkVfLwRCmJz1gmOcmWamgDTZVpskVE_QybxTEDuqqt2RqSducaqWDb3XofYVtO1XA
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 7a 53 70 33 71 5f 4e 45 32 74 69 51 42 48 56 61 46 45 63 65 4a 72 31 64 47 76 53 53 72 2d 33 30 65 6d 42 43 79 73 55 2d 2d 63 70 75 4f 51 78 37 52 73 79 67 5a 4c 42 79 5f 41 39 38 4a 49 76 32 49 33 42 6a 47 69 31 6e 42 50 4c 36 49 34 67 38 72 30 6a 4b 62 34 37 59 6e 55 48 4c 77 5f 49 62 6b 51 56 6e 4a 4d 52 4f 4f 71 49 65 66 4b 32 77 7a 6c 6d 6d 54 38 36 68 68 4f 4c 31 6f 4d 4e 6f 41 31 30 49 70 33 6f 36 4a 6c 6f 61 6c 6b 31 76 39 64 59 59 53 76 67 36 33 35 53 6c 77 5f 4d 39 67 69 42 49 74 69 55 48 2d 56 73 4c 47 64 4e 69 53 77 72 44 46 50 74 4a 77 56 38 6b 5f 51 35 51 37 6e 56 32 35 32 33 4c 78 54 72 5a 34 58 62 30 53 4b 69 6e 41 6a 61 42 54 5a 71 65 64 50 4f 61 41 54 73 59 79 55 46 71 47 43 54 39 78 4b 64 50 6e 67 37 30 51 35 38 49 64 65 48 6d 77 61 63 Data Ascii: zSp3q_NE2tiQBHVaFEceJr1dGvSSr-30emBCysU--cpuOQx7RsygZLBy_A98JIv2I3BjGi1nBPL6I4g8r0jKb47YnUHLw_IbkQVnJMROOqIefK2wzlmmT86hhOL1oMNoA10Ip3o6Jloalk1v9dYYSvg635Slw_M9giBItiUH-VsLGdNiSwrDFPtJwV8k_Q5Q7nV2523LxTrZ4Xb0SKinAjaBTZqedPOaATsYyUFqGCT9xKdPng70Q58IdeHmwac
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 3a 62 6c 6f 63 6b 5c 78 32 32 5c 78 33 65 5c 78 33 63 2f 61 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 5c 78 33 64 5c 78 32 32 37 34 5c 78 32 32 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 5c 78 33 64 5c 78 32 32 72 32 30 32 34 30 31 30 39 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 61 2d 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 50 54 61 6d 66 6d 2d 33 34 4d 44 46 52 34 4f 61 41 67 64 56 63 77 4a 6b 77 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 66 6f 72 2d 73 75 72 65 2d 6f 70 65 6e 2d 62 72 6f 77 73 65 72 5c 78 33 64 5c 78 32 32 66 61 6c 73 65 5c 78 32 32 20 64 61 74 61 2d 6a 63 70 2d 66 6f 72 2d 73 75 72 65 2d 6f 70 65 6e 2d 63 75 73 74 6f 6d 2d 74 61 62 73 5c 78 33 64 5c 78 32 32 66 61 6c 73 65 5c 78 32 32 20 Data Ascii: :block\x22\x3e\x3c/a\x3e\x3cscript data-jc\x3d\x2274\x22 data-jc-version\x3d\x22r20240109\x22 data-jcp-a-id\x3d\x22img_anch_CPTamfm-34MDFR4OaAgdVcwJkw\x22 data-jcp-for-sure-open-browser\x3d\x22false\x22 data-jcp-for-sure-open-custom-tabs\x3d\x22false\x22
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 76 61 72 20 64 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 62 2e 70 72 6f 74 6f 74 79 70 65 5c 78 33 64 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 72 3b 20 69 66 28 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 72 5c 78 33 64 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 74 3b 61 3a 7b 76 61 72 20 65 61 5c 78 33 64 7b 61 3a 21 30 7d 2c 66 61 5c 78 33 64 7b 7d 3b 74 72 79 Data Ascii: var da\x3d\x22function\x22\x3d\x3dtypeof Object.create?Object.create:function(a){function b(){}b.prototype\x3da;return new b},r; if(\x22function\x22\x3d\x3dtypeof Object.setPrototypeOf)r\x3dObject.setPrototypeOf;else{var t;a:{var ea\x3d{a:!0},fa\x3d{};try
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 20 64 5c 78 33 64 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 5c 78 32 36 5c 78 32 36 28 64 5c 78 33 64 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 5c 78 33 64 64 2e 6c 65 6e 67 74 68 3b 63 5c 78 33 64 63 7c 7c 30 3b 66 6f 72 28 30 5c 78 33 65 63 5c 78 32 36 5c 78 32 36 28 63 5c 78 33 64 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 5c 78 33 63 65 3b 63 2b 2b 29 7b 76 61 72 20 66 5c 78 33 64 64 5b 63 5d 3b 69 66 28 66 5c 78 33 64 5c 78 33 64 5c 78 33 64 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 29 3b 20 70 28 5c 78 32 32 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: d\x3dthis;d instanceof String\x26\x26(d\x3dString(d));var e\x3dd.length;c\x3dc\|\|0;for(0\x3ec\x26\x26(c\x3dMath.max(c+e,0));c\x3ce;c++){var f\x3dd[c];if(f\x3d\x3d\x3db\|\|Object.is(f,b))return!0}return!1}}); p(\x22String.prototype.includes\x22,function(a){r
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 5c 78 33 64 75 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 5c 78 33 64 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 5c 78 33 64 5c 78 32 32 5c 78 32 32 7d 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 72 65 74 75 72 6e 20 6c 61 3f 21 21 79 5c 78 32 36 5c 78 32 36 30 5c 78 33 63 79 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 72 65 74 75 72 6e 20 42 28 29 3f 7a 28 5c 78 32 32 43 68 72 6f 6d 69 75 6d 5c 78 32 32 29 3a 28 41 28 5c 78 32 32 43 68 72 6f 6d 65 5c 78 32 32 29 7c 7c 41 28 5c 78 32 32 43 72 69 4f 53 5c 78 32 Data Ascii: :!1:!1}function A(a){var b;a:{if(b\x3du.navigator)if(b\x3db.userAgent)break a;b\x3d\x22\x22}return-1!\x3db.indexOf(a)};function B(){return la?!!y\x26\x260\x3cy.brands.length:!1}function C(){return B()?z(\x22Chromium\x22):(A(\x22Chrome\x22)\|\|A(\x22CriOS\x2
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 65 74 75 72 6e 20 61 2e 67 7d 2c 47 5c 78 33 64 45 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 5b 45 5d 5c 78 33 64 62 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 6f 69 64 20 30 21 5c 78 33 64 5c 78 33 64 61 2e 67 3f 61 2e 67 5c 78 33 64 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 7b 67 3a 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 7d 7d 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 76 61 28 29 7b 76 61 72 20 61 5c 78 33 64 5b 5d 3b 74 61 28 61 2c 31 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 29 7b 61 5c 78 33 64 61 5c 78 33 65 5c 78 33 65 31 34 5c 78 32 36 31 30 32 33 3b 72 65 74 Data Ascii: eturn a.g},G\x3dE?function(a,b){a[E]\x3db}:function(a,b){void 0!\x3d\x3da.g?a.g\x3db:Object.defineProperties(a,{g:{value:b,configurable:!0,writable:!0,enumerable:!1}})}; function va(){var a\x3d[];ta(a,1);return a}function I(a){a\x3da\x3e\x3e14\x261023;ret
2024-01-15 13:24:32 UTC	1252	IN	Data Raw: 31 32 29 3a 61 5c 78 33 64 5b 5d 3b 62 5c 78 32 36 5c 78 32 36 28 64 5c 78 33 64 64 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 62 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 29 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 36 34 29 72 65 74 75 72 6e 20 61 3b 64 7c 5c 78 33 64 36 34 3b 69 66 28 63 5c 78 32 36 5c 78 32 36 28 64 7c 5c 78 33 64 35 31 32 2c 63 21 5c 78 33 64 5c 78 33 64 61 5b 30 5d 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 61 3a 7b 63 5c 78 33 64 61 3b 76 61 72 20 65 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 65 29 7b 76 61 72 20 66 5c 78 33 64 65 2d 31 3b 69 66 28 4a 28 63 5b 66 5d 29 29 Data Ascii: 12):a\x3d[];b\x26\x26(d\x3dd\x26-16760833\|(b\x261023)\x3c\x3c14)}else{if(!Array.isArray(a))throw Error();d\x3dF(a);if(d\x2664)return a;d\|\x3d64;if(c\x26\x26(d\|\x3d512,c!\x3d\x3da[0]))throw Error();a:{c\x3da;var e\x3dc.length;if(e){var f\x3de-1;if(J(c[f]))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50554	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	3340	OUT	GET /pagead/adview?ai=CwDomDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT-J57WV5cFke2C7HuA-cnoIcOnmw25EEzvrZXwGjnhqko6noabw0wATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCO0w7SCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WJuHnvi-34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ0J2V0JuRiKI5EgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=gOhQXJ6sIP0&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4GAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:32 UTC	1214	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"11964540800952776727","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"15575536808091553377"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50555	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	3001	OUT	GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=362&cbvp=1&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:32 UTC	1693	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x9066eda738a9801b0000000000000000","15":"0x34ab61c3a57ecca90000000000000000"},"debug_key":"8284256729658220666","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"5472863388033120908"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50557	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	858	OUT	POST /el/AGSKWxVPVHo71UKqDQDNglws8iah5jTy2MWA0qxjFnTqLrVUJD3CECBBsrY-SD09F6_pfxtTgQIujK9xXcj8CPj5FQ5jJ_VRbNCcmaFLB5Qstk34Ur33h6u9_3k6oTOqoXwj2IxHxpE1eA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:32 UTC	76	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 37 31 32 31 32 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325071212,null,null,[null,[1]]]
2024-01-15 13:24:32 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-iAYwnGBVvefegNGC9ll5ig' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50556	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	858	OUT	POST /el/AGSKWxVPVHo71UKqDQDNglws8iah5jTy2MWA0qxjFnTqLrVUJD3CECBBsrY-SD09F6_pfxtTgQIujK9xXcj8CPj5FQ5jJ_VRbNCcmaFLB5Qstk34Ur33h6u9_3k6oTOqoXwj2IxHxpE1eA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:32 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 37 31 32 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325071220,null,null,[[2,1]]]
2024-01-15 13:24:32 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-kuli4l9HfXlOHMHau09eTA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50558	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	1500	OUT	GET /f/AGSKWxV6q9mPXZm3NTvC7lh2ig9R2js_P-ooPTAw8YAdu-S0uqIAdjDOXXPlg5aH1REC7ID1nvYA26W5a4LP6apbC_MJUCWvreQydH14-_9V7RdU2E5xtr3PRaA3_Zk9rGbPQdL1707cGA==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:32 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-TOmqW5KA3hN3X-vQfMbXPg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:32 UTC	1629	IN	Data Raw: 62 38 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 50 41 2c 5f 2e Data Ascii: b8dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var PA=function(a){this.j=_.v(a)};_.A(PA,_.
2024-01-15 13:24:32 UTC	1335	IN	Data Raw: 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 65 6c 5c 2f 41 47 53 4b 57 78 55 73 58 31 55 49 4b 4e 2d 42 78 51 4d 47 6b 51 4a 35 48 66 57 61 43 72 7a 59 54 69 6b 55 62 47 78 71 6c 71 33 77 4d 68 6c 71 38 71 4f 74 4b 6f 31 61 62 5f 52 6d 45 70 67 39 68 79 6c 7a 66 73 46 70 52 6a 42 6e 5a 68 41 30 6a 56 6a 73 42 6c 75 34 63 71 39 44 6a 55 61 62 38 69 6e 74 35 33 72 63 78 70 63 52 55 44 30 66 47 7a 33 63 43 32 79 34 47 38 30 78 65 54 56 54 56 2d 59 51 64 46 64 4c 4c 41 48 58 75 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 3f 64 6d 69 64 5c 5c 5c 5c 75 30 30 33 64 35 33 Data Ascii: null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/el\/AGSKWxUsX1UIKN-BxQMGkQJ5HfWaCrzYTikUbGxqlq3wMhlq8qOtKo1ab_RmEpg9hylzfsFpRjBnZhA0jVjsBlu4cq9DjUab8int53rcxpcRUD0fGz3cC2y4G80xeTVTV-YQdFdLLAHXuQ\\\\u003d\\\\u003d?dmid\\\\u003d53
2024-01-15 13:24:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50568	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	1406	OUT	GET /pcs/view?xai=AKAOjsv83EF5UOrk6HBIiiiewMKKXENrEggrjHFrY0qM00JkChKQltBPvh-s6cb8C0ij4iQaTGYsO8v4H4Wd5U3mzheYZWpnlsmJIudXCwY0gG8ZBzhDhtpdoddKAAuYdT6ISjIos1GTtlVVEIGc42e_rx6PhJjstrUYy_Tz_z718j2l8cA1WvNYda9Hnjel1t-aUis&sai=AMfl-YTqLH-miKFNUeMXFYUGNd0-Pk0LZSrRd8-eLisZ7P6LJXRS2hc8lcQskFS79ImAz0MLXpU6lZNuavOYZwzvBrkcWGTCa-4HkFmV4Q&sig=Cg0ArKJSzDbC6WF6U5gfEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.04599&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:32 UTC	1592	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"11896074325962782491","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"9540527518309257450"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:32 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50572	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:32 UTC	2682	OUT	OPTIONS /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1680&vt=11&dtpt=1318&dett=3&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:32 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50573	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:34 UTC	2511	OUT	OPTIONS /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:35 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50575	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:34 UTC	608	OUT	GET /simgad/8335829572458372918 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:35 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 36404 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Jan 2024 03:28:52 GMT Expires: Sat, 11 Jan 2025 03:28:52 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 15 Dec 2023 10:58:43 GMT Content-Type: image/jpeg Age: 294942 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:35 UTC	429	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0a 09 0a 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 fa 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 01 02 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 05 06 07 08 01 04 09 00 0a 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 10 00 01 02 06 02 01 Data Ascii: !Adobed@,
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 30 e1 52 40 f1 42 13 23 04 50 62 72 82 92 33 a2 24 60 b2 14 05 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 ec 1d 6f c1 96 0d 02 10 9b f0 82 98 c0 6d 79 32 11 81 9c 2d 96 78 32 1e 61 82 31 3c 07 9a c8 08 7e 68 48 cb 32 98 43 c0 40 f2 c3 85 e0 28 7e 11 a0 48 21 44 18 08 04 19 68 41 94 f2 03 68 23 d6 89 e0 d9 01 b3 74 19 f7 57 bc 0e 5a a6 50 18 19 1f 99 96 0a 27 99 94 61 9a 48 24 7b 42 34 78 61 a0 48 64 59 18 04 20 42 81 e6 08 0c 10 c0 41 81 8d af 07 93 1b 00 8c a1 8d aa 94 1d 15 4c 74 5b a2 d4 49 75 4f ac d7 bd 28 b0 41 90 c3 62 0c a3 2c c8 16 84 e1 9e 19 01 34 68 14 99 8d 14 9e d3 59 06 d4 41 01 80 21 64 32 30 86 ba 78 11 c0 63 32 08 f6 41 1f 5d 16 87 26 96 94 e3 5f 34 d1 1c db 07 85 6e 6f c3 af 11 3c 18 0c b0 49 e1 99 47 35 fa 9c f0 87 49 b9 7d 01 33 c8 24 Data Ascii: 0R@B#Pbr3$`omy2-x2a1<~hH2C@(~H!DhAh#tWZP'aH${B4xaHdY BALt[IuO(Ab,4hYA!d20xc2A]&_4no<IG5I}3$
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 21 e0 f9 71 f9 df d9 69 97 bc f9 4e be cc 16 be d8 4c 8c 42 9c 64 1e 8e 46 67 13 b5 78 7c 6f b9 b6 9d df 33 6e fa dc 18 79 4a ab ca 33 43 22 3b 61 44 ac af b8 f9 e7 24 57 66 88 69 21 69 9c de e9 60 f4 5d 6f d3 43 02 71 76 c5 e0 25 2a ac d8 8c a9 56 dc 93 9d 16 ce 99 f4 52 8d b9 27 0a 2e 4d 71 ed df 13 ac 92 99 81 f2 e7 e1 fe a9 4a 3d bf cc 52 ad ce b3 21 56 49 fd 6c 36 ac 84 d9 93 77 40 fc 8f bb 96 b7 72 ba 41 df f2 5c c4 d3 5b 32 ab 2c ca 2e 55 d5 73 ef 76 6e 95 72 b6 6c c2 5b c1 b6 02 08 e6 c8 40 d7 d3 68 f2 68 88 ae a8 60 31 c9 f4 d9 ae 15 e6 fa 5c 55 ce 48 aa da c3 ab 3c bd 4d ac 7b 2b b0 59 74 78 04 1f 26 7e 63 df c1 1e 9f c3 4b f6 e5 53 94 9d 96 46 79 db 99 17 3c e3 88 ea e8 17 8c f7 bb fd 1e 3d c5 ec f9 8d 0b a2 cb b6 2e fc b6 db 8b 2b a8 fd 4c 52 Data Ascii: !qiNLBdFgx\|o3nyJ3C";aD$Wfi!i`]oCqv%*VR'.MqJ=R!VIl6w@rA\[2,.Usvnrl[@hh`1\UH<M{+Ytx&~cKSFy<=.+LR
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 33 10 21 9c 83 43 28 28 02 05 86 b0 10 05 20 20 58 16 04 a3 54 7a a0 6a 0c 00 34 e1 d3 05 58 33 9b 00 80 80 30 21 91 14 06 20 f1 98 18 03 c1 30 6c 06 2b 21 7a 26 06 b0 81 80 90 9e c4 c0 56 41 60 40 10 82 00 b0 03 00 98 01 25 0a 01 81 16 00 0f ff da 00 08 01 02 00 01 05 00 f3 2f 13 f0 62 51 2f 13 f5 08 3e 47 89 c1 fe 0a 7e 99 fa 27 e1 34 ee 2a 16 c3 88 f0 7d 32 fe 18 44 fd 34 f4 e5 d8 35 08 6a 15 52 ea a1 15 4e a2 3e 56 de 87 d8 53 47 c8 83 f8 f2 f4 ce 27 13 f4 08 69 a2 e2 aa 5d 1e 10 da 96 45 13 81 55 34 cd 34 29 d5 f2 85 02 0f ae 8a 85 2f 22 b6 85 2c a3 f0 e7 e8 26 07 89 79 a3 fc a1 8a 76 7e 1a 50 78 15 06 ea 6a d0 12 6a d6 97 00 9a 62 b8 0f 93 c3 0d f3 5d c5 96 da 0d 50 33 c1 ba 36 8b ac d1 b5 c5 8f e9 53 3f fd 5a 74 52 53 2e 19 62 9d 46 ba 9d b6 cf d8 Data Ascii: 3!C(( XTzj4X30! 0l+!z&VA`@%/bQ/>G~'4*}2D45jRN>VSG'i]EU44)/",&yv~Pxjjb]P36S?ZtRS.bF
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 36 dc 4a 50 93 3f c5 97 99 c0 51 11 cd 40 12 4c 15 a9 43 9a a0 38 a4 fa d2 93 24 7f 2d d9 13 4d 4d 09 71 5f e3 4c 35 40 52 6c 4c 7c 6d 5c 3f f6 db 7c 94 89 7e 01 32 84 99 fa 13 fa 4d 33 f2 12 df b7 c2 04 06 d0 54 1a 9a 10 01 40 40 f8 d6 82 98 98 4c 2d be 30 aa 79 13 e8 e5 0d fd 2b 13 c9 3c 01 80 d0 10 a4 81 14 68 e2 9a b4 07 28 5b 48 48 89 42 d6 11 1f 32 60 38 0c 4c c4 cc 7b 98 3e c5 26 39 18 9c 4e 10 f2 90 05 42 c1 e6 65 f7 0b 98 7d 42 3e 65 4b 99 90 59 93 8b 2b 25 46 41 c5 4f e6 27 d3 f9 21 3e c1 4b 91 70 b2 b3 f6 f4 e6 10 dd 3a 43 74 ca 59 78 ca 9d c3 22 7f 30 89 98 41 04 04 22 27 e2 70 af ab 43 da 42 38 88 f8 fd 9a a7 fe a7 c2 60 34 4c 7c 46 0b 24 42 e9 ca 4f c0 a9 a9 b2 98 2c 90 96 d9 f7 2d 19 fc 46 4a 68 a6 14 99 19 44 a2 70 8f a7 19 c3 8d 15 c7 01 Data Ascii: 6JP?Q@LC8$-MMq_L5@RlL\|m\?\|~2M3T@@L-0y+<h([HHB2`8L{>&9NBe}B>eKY+%FAO'!>Kp:CtYx"0A"'pCB8`4L\|F$BO,-FJhDp
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 03 a8 3e 54 a0 90 08 23 d7 cd 33 f2 8b 70 02 e0 9e 2f c0 5a 60 fd 54 b0 98 52 a7 16 c4 82 f3 cc 25 d6 dd 6c b6 af 03 c2 96 01 1e f0 0f a6 e3 fa 6d d0 a1 68 a4 71 48 71 6e 25 11 58 41 66 44 b0 97 12 20 ad 20 97 50 92 b5 a5 20 2c 13 f2 a0 95 2c 24 2d 41 55 3e 4d 2b 0c 8b af f7 62 0b 60 c0 04 42 88 10 a2 5c 55 bb da a1 29 8b e3 05 2b 84 89 c2 a6 08 82 26 78 7b a5 3e fe 8b 8f e9 b5 54 da 1b a5 05 d7 84 d4 f2 9b 28 66 a3 fb 67 9b 25 9a 64 97 54 c2 39 a6 a1 25 34 eb 68 34 d2 5a 0a 69 ff 00 77 78 a1 35 3e 5d ac 1c 6a d5 c9 ef 06 0f 18 42 91 3b 7f bd 53 63 de f5 25 35 0e 38 52 42 a7 02 1c 3c 43 15 21 61 3e e3 d0 e3 69 70 0a 36 81 00 00 e3 08 72 05 3a 02 54 c2 14 94 a4 24 25 21 21 74 ad ac ad 84 2d 20 7b 7d 9b 53 71 a4 38 11 4a da 4f 89 c2 08 4a 2a c1 0f 71 5c 7b Data Ascii: >T#3p/Z`TR%lmhqHqn%XAfD P ,,$-AU>M+b`B\U)+&x{>T(fg%dT9%4h4Ziwx5>]jB;Sc%58RB<C!a>ip6r:T$%!!t- {}Sq8JOJ*q\{
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: ee be 62 a7 50 47 34 f1 2c bb 26 d3 50 1b c9 32 8b 2e 07 8d 75 d7 5c 5e 9a 6a 33 2c f7 08 d7 76 aa 8e e1 ea 7b e6 0f d7 ae c0 76 07 71 e4 9d 80 c7 aa 75 3e 43 ce 8a a5 a9 18 91 f0 20 f8 9c a3 b8 fd d2 ce fa ff 00 b1 3a 73 dd 0c ef b0 1b 10 a4 2a 25 28 94 29 90 a2 da 11 00 80 1c 6d 2b 09 24 2a 62 40 47 b0 00 a9 50 89 88 e6 99 38 e2 90 80 e3 ce 2d 92 04 70 2f 84 8e 23 eb 12 8d cd 4c 32 fb ae eb de fd 89 7f b2 7d 95 ad b7 37 b2 ad f6 0b ee ce e8 cf 56 b2 eb ae 5b 64 ea ee 1b 92 ea cb c5 53 76 8b fd 1f 59 5e ac 63 4e 44 a3 76 66 ab d7 1a 8f f6 fb dc 9b bf 74 64 db 23 bc 5d 8d 7b 60 e7 dd b4 ec 2d 97 40 ed de d9 ef f5 64 fb bd c7 37 37 76 b4 d1 ac d3 fd d3 cb 3b 57 de 3c 0a ab 6f 6e 8e ea 62 38 cf 47 b7 ce ea db 76 f4 f7 53 b5 45 ad 09 9b d5 6c bd 33 cf 8a a7 Data Ascii: bPG4,&P2.u\^j3,v{vqu>C :s%()m+$b@GP8-p/#L2}7V[dSvY^cNDvftd#]{`-@d77v;W<onb8GvSEl3
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 98 23 ce df da 58 fe 96 d7 7a cb 61 d9 36 c6 05 04 4e 08 82 22 51 63 71 bf 87 61 6e 6d 53 58 e5 8b 71 ef cd eb 7f be e7 9a 7f 54 5f 4e d3 ec a6 4d 89 e9 0c b7 1d c9 32 ec 9b 3b c8 75 eb 1a 8a b3 16 c1 f2 8a 77 92 21 0b 26 2e 16 e6 ee 94 f7 3c 19 21 bb dd 86 b5 d8 c4 69 99 a0 b7 6f 8d f7 db 8d 13 b8 fa e5 d9 fd 73 d8 06 e9 68 52 95 81 00 08 11 28 e3 1c 61 d5 06 9b dd b7 3c 3a cb fb 92 ee 17 f5 76 d4 ed 4e c6 ad d0 ff 00 fc e9 dc 5d eb bc 58 3b 3d 92 77 33 05 c5 ef 19 ef 66 31 0d 7f bb f7 47 71 ec 7a 5f 2e ec fe dc c2 f7 6f 44 fa 5f ff 00 ea e9 89 8f 04 44 a3 32 ca dc b3 e0 3b 35 77 fa 0c c7 5d 6d 2a 3e b6 ea 6b 25 c7 28 c6 eb 28 bb 33 d9 6a f5 63 d5 d8 fe ca b7 59 36 25 25 2e af d5 d9 fe da d6 59 ae 13 7e 56 4f 8d 34 11 2f fe 9a 84 21 6d e6 b5 49 a7 6e d7 Data Ascii: #Xza6N"QcqanmSXqT_NM2;uw!&.<!ioshR(a<:vN]X;=w3f1Gqz_.oD_D2;5w]m*>k%((3jcY6%%.Y~VO4/!mIn
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 8a 0a 1b 25 d2 40 6a 99 12 e2 df c5 6f aa 79 35 f7 5a 25 7d e6 8d db 39 96 11 82 59 7b 9f 90 d0 d1 d2 f7 39 ea b4 3b db 6b 95 43 1d 85 da 79 8e 67 80 6b 4b 0b 56 2c 4b b2 5b b3 28 d7 95 d7 ec 82 e3 95 d6 e3 bb 26 fd 8a 50 5c 37 8e db b9 d2 5d 6a ae 37 7b 96 03 79 66 db 5a f6 f6 c8 5c 7a 97 b7 3d 80 c5 da 6b f7 25 ed 95 8d 36 3f dd bb b2 0c af a4 3d c3 c8 7b 50 c8 7e 12 f4 25 e8 2e 82 29 ae 68 fb dc e7 05 c3 33 c4 65 1f 6d 53 b5 2f 59 55 e2 d5 8f e5 b7 2d 83 7c 77 5f e5 f9 2d ee e5 85 d6 6d 0b f6 49 ff 00 79 65 a5 9d a5 91 66 d7 ec 34 90 93 f3 29 2a 0f 15 04 10 21 2e 4a 3e 63 c9 bb bd 35 a9 da 77 5c 75 7a 79 6f 5c 31 94 63 ce b4 d5 0d aa 4c d9 ec 40 35 d9 5f b6 b5 61 98 55 4a 97 60 ee 36 11 4d 76 ce f2 6c 6d dc 71 f8 eb 4f 53 b5 4e e4 c2 ac df b7 0e 8c b4 Data Ascii: %@joy5Z%}9Y{9;kCygkKV,K[(&P\7]j7{yfZ\z=k%6?={P~%.)h3emS/YU-\|w_-mIyef4)*!.J>c5w\uzyo\1cL@5_aUJ`6MvlmqOSN
2024-01-15 13:24:35 UTC	1252	IN	Data Raw: 25 50 f4 22 f9 48 fd ab a2 99 23 54 d8 4f 5d b5 36 a6 c9 3b eb 54 e0 ea a7 54 54 fb 9d 9d ca f2 eb 5e 34 fe d5 d7 56 7d e3 51 79 ea 9e c0 c6 ea 8e 9e cb 58 4b ba f7 ec 17 4c f5 bf 17 56 4f 93 5e 30 fd 6b 87 76 6f 6d 61 ba fb aa 19 d6 5d 9e 63 b8 36 19 6b c1 ac fe c6 24 22 dd 6e 7e e7 59 41 89 d9 a8 9b ff 00 07 65 8f f0 76 58 ff 00 05 64 8f f0 36 38 ff 00 8f 58 4c 7f c7 ac 11 ff 00 1e b0 c1 c7 31 f3 1f f1 ac 76 17 88 62 6e 05 e2 38 ba 99 ce 30 9f f8 fa 4a e0 b9 1f 24 5c 6f c5 88 5b 77 7b 9b 94 b6 36 d8 37 4a fb b3 11 ae 73 1b 7d af 30 b8 53 39 f1 5c 75 ed 06 50 7b 39 a0 76 f6 d2 d2 9a 13 a1 5d 95 d7 9b 87 31 eb 3d 46 5b 55 86 e9 5c 66 c9 1b 12 e1 8f 5b ac 76 ea 64 82 c5 ae 89 c1 55 89 59 ab 18 d8 9a 3f 1e af c4 f3 6d 51 98 64 cd 60 ba 8b 6a 55 67 56 16 2e Data Ascii: %P"H#TO]6;TTT^4V}QyXKLVO^0kvoma]c6k$"n~YAevXd68XL1vbn80J$\o[w{67Js}0S9\uP{9v]1=F[U\f[vdUY?mQd`jUgV.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50581	54.164.228.18	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	935	OUT	GET /adx.gif?google_gid=CAESEB6Ns0Z2RIrQJlESppYwpxo&google_cver=1&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw HTTP/1.1 Host: beacon.lynx.cognitivlabs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; ss=d3X1mRea%2FucWdOV94ccvL4E%2BSiEvD95edpx1ZFDOVbSS39UZN1KnmofUPHz%2FiwHE9CZn691I8DHq47en8%2F5XpQ%3D%3D
2024-01-15 13:24:35 UTC	635	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:35 GMT Content-Length: 0 Connection: close Server: Kestrel Location: https://cm.g.doubleclick.net/pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw Set-Cookie: UID=10a8fe53-56f5-4a67-863f-47181f3701fd; expires=Wed, 15 Jan 2025 13:24:35 GMT; path=/; secure; samesite=none Set-Cookie: ss=eZ26xIYyfzk0jhqadp9D6HpZoG6hzPeoSOgPDj0Wym6jRQJ2Ru3ofmWGaSmyPJlGCw36JyC6U7gnCFzrb1yIQg%3D%3D; expires=Wed, 15 Jan 2025 13:24:35 GMT; path=/; secure; samesite=none

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50578	52.0.126.85	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	877	OUT	GET /sync/adx?google_gid=CAESEH9U2g9Ep4cZ8I2ALydxEF8&google_cver=1&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI
2024-01-15 13:24:35 UTC	994	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:35 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=yahoo&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBAEypWUCEJ8smhdoqM_K6nUIecfYZaMFEgEBAQGDpmWvZQAAAAAA_eMAAA&S=AQAAAmO98D0S56xb4sGp2MYDIuI; Expires=Tue, 14 Jan 2025 19:24:35 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50580	54.160.145.206	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	1474	OUT	GET /sync?nid=154&google_gid=CAESEGCVCv9uCMfE2kTcNXS1FWw&google_cver=1&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id=s%3A0-88cea7cc-414b-5931-4490-9389000b3410.YX8fBqWbbKIl9htyS%2BuNQoiPjQDzg%2BxgiaqyMjX0kfw; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v2=s%3AiM6nzEFLWTFEkJOJAAs0EGalMCo.OWSeOwcZ0xOe3VtaYbow6MRlFZ6Ze%2BHwMl9A3b37RbE; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8; sa-user-id-v3=s%3AAQAKIGnrengvFsmRP0yBGLf-VZ-GhBAQvioZQ5D7yTVlaVz8EHwYBCCC5JStBjABOgT87-jmQgQXJ09o.HAm0unKqqat40Jn%2Bmr1KFOGSOqQd1xWnzFN24%2BAQRi8
2024-01-15 13:24:35 UTC	366	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:35 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd Content-Length: 246 Connection: Close
2024-01-15 13:24:35 UTC	246	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 73 74 61 63 6b 61 64 61 70 74 5f 75 73 64 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 69 4d 36 6e 7a 45 46 4c 57 54 46 45 6b 4a 4f 4a 41 41 73 30 45 47 61 6c 4d 43 6f 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 35 6a 35 51 46 56 32 69 39 6f 47 6f 5a 55 49 58 6f 35 67 4f 73 62 32 35 34 46 44 38 6d 59 77 36 46 72 70 79 67 2d 35 47 4c 38 70 77 73 71 74 39 64 4b 50 6a 69 52 6d 55 51 73 58 67 5a 53 54 38 66 78 4a 58 79 51 44 46 74 42 33 57 46 63 71 4f 6d 66 73 48 79 59 45 4a 4c 7a 65 4e 52 52 51 51 64 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50576	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	1499	OUT	GET /f/AGSKWxV8CPxdjL64wIQW98SRBN695jm4NK4yrOu3YhMY0kqORO3jivOB553nDV6Qt_QMzxyNWv6d3cWNSxS6vSDFDD3sVsvTKgzR4F5n_pvnvqREIqa0XoDUTVaq0cm-n0nZ-8U3u5kufA==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:35 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:35 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-JgE1yj-kvzoG1xD5qSY7Hg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:35 UTC	1629	IN	Data Raw: 64 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 4d 6e 2c 5f 2e Data Ascii: d16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Mn=function(a){this.j=_.v(a)};_.A(Mn,_.
2024-01-15 13:24:35 UTC	1629	IN	Data Raw: 71 77 2f 6d 3d 63 6f 6f 6b 69 65 5f 72 65 66 72 65 73 68 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 37 2c 5c 78 32 32 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 5c 5c 5c 78 32 32 2c 5c 5c 5c 78 32 32 41 4b 73 52 6f 6c 39 7a 38 4d 6f 6e 70 4b 79 75 49 62 6c 75 61 32 32 45 75 73 6e 50 33 4f 64 59 43 77 7a 72 65 57 47 6c 61 4b 62 2d 6e 36 7a 31 42 2d 4e 43 77 63 75 35 59 70 57 55 6b 32 51 69 67 50 58 32 36 71 6b 64 52 50 64 6a 32 34 32 34 46 6d 68 49 35 78 55 62 53 70 61 6c 49 38 4d 70 77 6a 63 61 49 36 45 45 31 57 4b 42 57 7a 31 39 70 50 4c 4f 54 76 75 7a 4f 5a 6a Data Ascii: qw/m=cookie_refresh_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b7,\x22\x5b\x5bnull,\\\x22mylovelybluesky.com\\\x22,\\\x22AKsRol9z8MonpKyuIblua22EusnP3OdYCwzreWGlaKb-n6z1B-NCwcu5YpWUk2QigPX26qkdRPdj2424FmhI5xUbSpalI8MpwjcaI6EE1WKBWz19pPLOTvuzOZj
2024-01-15 13:24:35 UTC	99	IN	Data Raw: 70 4d 43 65 65 72 32 78 39 43 71 78 64 6e 33 33 31 53 36 4d 74 50 73 7a 37 79 69 68 32 51 48 53 6d 4a 33 32 47 4b 34 78 59 68 79 78 65 5a 54 6d 56 4e 62 4b 4e 4c 32 5f 4d 58 49 34 42 5a 6b 56 7a 6e 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 27 29 3b 7d 0d 0a Data Ascii: pMCeer2x9Cqxdn331S6MtPsz7yih2QHSmJ32GK4xYhyxeZTmVNbKNL2_MXI4BZkVznQ\\u003d\\u003d\x22\x5d\x5d');}
2024-01-15 13:24:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50583	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	1618	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325066007&gcd=11l1l1l1l1&dma=0&tcfd=10000&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=3&tfd=8863 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:35 UTC	226	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4f 71 5f 6e 5f 65 2d 33 34 4d 44 46 56 67 79 54 77 67 64 6d 7a 63 42 59 67 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4e 62 62 6e 50 69 2d 33 34 4d 44 46 55 61 43 64 77 45 64 49 5f 73 46 44 67 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4b 53 2d 6e 76 69 2d 33 34 4d 44 46 61 71 6e 30 51 51 64 62 65 63 4a 53 67 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4f 36 78 6e 76 69 2d 33 34 4d 44 46 62 36 4f 30 51 51 64 64 73 63 4b 76 51 Data Ascii: en=ad_impression&ep.query_id=COq_n_e-34MDFVgyTwgdmzcBYgen=ad_impression&ep.query_id=CNbbnPi-34MDFUaCdwEdI_sFDgen=ad_impression&ep.query_id=CKS-nvi-34MDFaqn0QQdbecJSgen=ad_impression&ep.query_id=CO6xnvi-34MDFb6O0QQddscKvQ
2024-01-15 13:24:35 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50585	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	3018	OUT	GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1680&vt=11&dtpt=1318&dett=3&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:35 UTC	1630	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x5999270ca9a0aea0000000000000000","13":"0x45625ba7384c6e300000000000000000","14":"0x9066eda738a9801b0000000000000000","15":"0x34ab61c3a57ecca90000000000000000"},"debug_key":"759370663338153848","debug_reporting":true,"destination":["https://petsmart.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"2592000","filter_data":{"14":["9318934","10815968","10866010","10866322"],"21":[],"8":["9847590"]},"priority":"0","source_event_id":"10095535817796411070"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50594	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	2847	OUT	GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:35 UTC	1643	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x4577849dd61306000000000000000000","13":"0xed952ece2a2e83800000000000000000","14":"0xbbeb3a5bb4c4e5b70000000000000000","15":"0xb80fce5b0d8ed75f0000000000000000"},"debug_key":"15560093480707379567","debug_reporting":true,"destination":["https://lavazzausa.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"expiry":"86400","filter_data":{"14":["12683866","8496279"],"21":[],"8":["9180768"]},"priority":"0","source_event_id":"10684619075210720358"} X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50596	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	2530	OUT	OPTIONS /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2681&vt=11&dtpt=2678&dett=2&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:35 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:35 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50599	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	859	OUT	POST /el/AGSKWxWytKwuzCypEOy1NhjmYoEOOYwm6dIv5_pYeAtoGtn33LLgMO2kIypkW_y_fPdN425NViZzHAFjmwhtWEE7zHAAbOzuxK18a8oXU9sf7y-pdRbqmvx_oqRvrJloVi6pN5pxIMZJtQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:35 UTC	166	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 37 34 35 30 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 38 36 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325074509,null,null,null,null,null,null,null,null,null,null,null,[[1,186,"mylovelybluesky.com","mylovelybluesky.com",3]]]
2024-01-15 13:24:35 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:35 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-0GPq8eEXGNq0PXMqjp4eiQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50598	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	858	OUT	POST /el/AGSKWxVPVHo71UKqDQDNglws8iah5jTy2MWA0qxjFnTqLrVUJD3CECBBsrY-SD09F6_pfxtTgQIujK9xXcj8CPj5FQ5jJ_VRbNCcmaFLB5Qstk34Ur33h6u9_3k6oTOqoXwj2IxHxpE1eA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:35 UTC	63	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 30 2c 6e 75 6c 6c 2c 31 5d 5d 2c 31 37 30 35 33 32 35 30 37 34 35 31 30 5d Data Ascii: [null,null,null,null,null,null,null,[[0,null,1]],1705325074510]
2024-01-15 13:24:35 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:35 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-h0tKzQ5b-3e7BMWj2XNCmA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50602	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:35 UTC	2866	OUT	GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2681&vt=11&dtpt=2678&dett=2&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:36 UTC	1577	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x4577849dd61306000000000000000000","13":"0xed952ece2a2e83800000000000000000","14":"0xbbeb3a5bb4c4e5b70000000000000000","15":"0xb80fce5b0d8ed75f0000000000000000"},"debug_key":"987026804325371100","debug_reporting":true,"destination":["https://lavazzausa.com","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"expiry":"86400","filter_data":{"14":["12683866","8496279"],"21":[],"8":["9180768"]},"priority":"0","source_event_id":"3249215448988709772"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:36 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50610	172.253.62.106	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:36 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:36 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Mon, 15 Jan 2024 13:24:36 GMT Expires: Mon, 15 Jan 2024 13:24:36 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:36 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-01-15 13:24:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50614	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:36 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQ3O00v06J6pWRrAmYBQdt0ZzVZpACR4WTb8ujiVz4OfQYN5CS5pdt2tZ6Fya9Q_wprKdOyOlQD4H1GoBrxZA_H_N97Ee4bdkc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50619	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	792	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmS6wIZDsqAMfRRakm8Jvuzsa1xnPkYYy4J994PElz0YkwXL73YyiC563Kg8HEleatIsWVkT5skf7O_ivaKdoqHCM00bWkebvA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50624	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	783	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmThHMtQv24_irKpYNJGEcYpHCGuSyPkrc2Lns5VPw6Vn6hhjuvMUjaEq55l0LGaedYZQmoADQQ9V_kACLSEUp15ef6gxIwbvTFr HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50628	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	2728	OUT	GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=362&cbvp=1&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50620	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	805	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmTqsO0UpV6iCU6Gyh2UOTklOcJHUhgrVhdhyimCVlPrRe1LrpglzLmhBxnfvGeetPJcwlI8MUUEUQBiXW9mcD6qqiIehvmEWzU&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50617	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	844	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmSjYPHbuNMi0EVqUr_KN6VbgVJoTmh_JRmSbOo7MgC8M0pb1qez5tgBR_NGC8kBAO52PFJYrVFxoxg_7Jkp-w0EPocLtda6FQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50616	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	792	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmRuz0tM4AC-11X8kSwA3raqFy9Fh8fRgVofa-29TQt19bszcrclW7rV5vO7Qwl3EwROmRy7opDgcUiLJKG1MtihKMgfc5tG_A HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50629	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	1133	OUT	GET /pcs/view?xai=AKAOjsv83EF5UOrk6HBIiiiewMKKXENrEggrjHFrY0qM00JkChKQltBPvh-s6cb8C0ij4iQaTGYsO8v4H4Wd5U3mzheYZWpnlsmJIudXCwY0gG8ZBzhDhtpdoddKAAuYdT6ISjIos1GTtlVVEIGc42e_rx6PhJjstrUYy_Tz_z718j2l8cA1WvNYda9Hnjel1t-aUis&sai=AMfl-YTqLH-miKFNUeMXFYUGNd0-Pk0LZSrRd8-eLisZ7P6LJXRS2hc8lcQskFS79ImAz0MLXpU6lZNuavOYZwzvBrkcWGTCa-4HkFmV4Q&sig=Cg0ArKJSzDbC6WF6U5gfEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.04599&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50625	18.164.116.51	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	620	OUT	GET /pixel/2387/?ct=US&st=NC&city=13457&dma=68&zp=28806&bw=4&che=2281214538&col=29305905,5876516,358438438,549336255,207488824 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M; u=C\|0EAgtN-6CLTfujwAAAAACAgAsAQfogAYAAC0BB-gYBgABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViYAAAAADF4HOAAAAAAgvjS_AA
2024-01-15 13:24:37 UTC	789	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:36 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3Ag3MJlERIakCd9grD8GKoaLTlyTRPzZ6M;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0EAgtN-6CLTfulQAAAAADAgAsAQfogAgAAC0BB-gYCAABAAcAAAAAAb8sMf__HgAAAAAAWaskAAAAABVdViYAAAAADF4HOAAAAAAgvjS_AA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 0252b483f7b420504a413a83f987b080.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: bF7RZmvqUGhCzGodCgle8a2sJ3qITIrht5Q-SI8YkxMWPzibZfc4mQ==
2024-01-15 13:24:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50632	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50626	54.175.232.95	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	484	OUT	GET /ping_match.gif?st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:37 UTC	686	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:36 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0ed26a5ebd930b0f7@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=9PBZdF5b1RpmXb5; Domain=.w55c.net; Expires=Thu, 13-Feb-2025 23:24:37 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50636	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50635	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50634	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50633	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50637	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50640	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	782	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTanlgwde5JZaUm6Vv2rS-vJKDuo32mmaGvA9GdD1MyJfaoviRS5-JakHpQ9BZRV8Y1jU9F3Sfg1AKR11s4UggZR_c9lR9w5z4 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50639	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	802	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmT_TBDDvQHQOK133RMSIg8IPAgF8-iKKwD7Bc4WSmk2Iz8i3ddyCFvePYVq6R4Bo5M2IOv7DUGykVt4brO8n_NVEGwxg0fd&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50641	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	798	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQaeUDlnVQurQazgNwTyK1O-t1nVsNOgTJQG5CLkAzceCnwgtZhJgh8AgE_RnXC0I1yvQ5PMwhmZ2At2LGxdtGd7ZgA3ozb HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50642	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	842	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR8-7nf_ZGrmK5pgWWgz_1AJSNOk5or24NWFPdluzEmrbrv4St3Qf1vE_HEwGVqGPIBY5PKDJJDc-6tuY8YJirEpuR0wi2p HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50643	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	783	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmTXeCsFAd1LUzCMV444iNZitTn20VYbSV4AWrxHnBDiDxXSAnYaShXOf1epFaSPXswBkE8_-pyjUnRwb1cMco0GV5EvqlPODboe HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50644	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	802	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmRQzk3SCSYSzu6zA99kv6dQuxPPFQqFmH4KvXDTI2kpdGCWudIyLv3WlMNrUnGtX1143aCAOIe7eL0z7_sbouimKCk51xWKDuR2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:37 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50645	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50647	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50646	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3039	OUT	GET /pagead/interaction/?ai=Cj6lWDDKlZe3KD573xtYPmNek2ALUnfD5XO_GsfWkC9CQgOyQAhABIO34qSBgyYagiqSk4BGgAc3x9uICyAEJqAMByAPLBKoE5QFP0BFXg4lgna-w0PkSmMmMOvxv7N7w-r3prYC62LKNZFf_gHaxTDGZxQWV8Lxb-i09qscoEcVdTUreVUOg5RRcPwAKqynnYWT8uTk1yk-zZofALByuELY072eZJ5FESVP7Z9BLVvKuMRAqNnuNpuaAjL3_B1JiXP4cd-D7fi0TXF6lLBcCebutpA5PNZj67kw3K4gIh7yiIVJKd1Lmvo2rGkaxGM86zOFAqGClrYAPR4dc00zlIivPHpXLrGHTJqvai6LMPqsVJljYmDymJ5HVfl2k3gbxXnnhoXun-eXFf-4B41uGwATfrJGZgwKIBfXs34gHoAYugAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WJPJrfe-34MDsQlPWCIGEl69iYAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ0Mz6v8mdvYHaARICAQOqDQJVU8gNAbgT5APYEw2IFATQFQH4FgGAFwE&sigh=VvqEmS3nzQw&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5&label=window_focus&gqid=DDKlZYPcDoywoPMP9seBaA&qqid=CO2Arve-34MDFZ670QQdmCsJKw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50648	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3142	OUT	GET /pagead/interaction/?ai=CkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=-sfwA0KlPoc&cid=CAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4&label=window_focus&gqid=DjKlZeqZBaGpoPMP2KqjgA8&qqid=CKS-nvi-34MDFaqn0QQdbecJSg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50649	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3194	OUT	GET /pagead/interaction/?ai=C714aDjKlZe7yBb6dxtYP9o6r6Avzg-Sudanlvd6fEWQQASDt-KkgYMmGoIqkpOARoAHOhqbAAsgBCakCnF5Mi3Zfsj6oAwHIA5sEqgSMAk_QKj8D6nkMHvvJl6UPd2I1r0oSBD0SDVI6qtY5-TYllVIUAuMl5ID-2tUl0_AiiKjTWcD1MI_MgsGw0dbaoEdB0TGMStqycJ8dsRRK6dkB6VRcDsR-uS5n_T-LlPBowGRtkkBv1yVhc9V9gMx3q8qPexru6_F9BAzcc_Td_gzIrwWSJz5t5PwalZ68ydicX79OslGPclixBwMSmZWBOfv6r3qT-WMEyQqwUC8gc2Nxqc2WO5gsddCqgia_YW0_I-8NKNmqVQtGV4NKtzy-yJV2neRXV4c4MsKJkiQqj_OTdCp732xnf9hQcUBYTpszzxQNpkafnpqhVKNZGPZlZ7sguPLPdycCYiEkm6jABPKiysioBOAEA4gFspHCgEqQBgGgBkyAB5r52b8BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYmvud-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBOV_qIW0BMA2BMNiBQF2BQB0BUB-BYBgBcB&sigh=yyoMu8lH2Xk&cid=CAQSOwAvHhf_wPBaE5IrSf5SVnjTZgH9-XtVGBmjHKHRbqt0X5m5pSYDZgNvJmTLjTu8WfxfYHVRRgLSuwLr&label=window_focus&gqid=DjKlZcSRBbeToPMP4auMoA0&qqid=CO6xnvi-34MDFb6O0QQddscKvQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50652	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	2745	OUT	GET /pcs/view?xai=AKAOjstSY2BQCwvOYbORlMR0k68z9mH9EU0dUMqqEu0t3ZdYNI2xFEnoqoz6eHSAm2cI58jVSquqwYyQf_aI09-E826WiiXljHNh3HWtPGIGtBl2hKUA65Odrw8IurOZjtWw47O3fJ9zbUfiBI03IzLDcx_tT5itOmEn3dK757vLRduTOp6NGe1QwmZWljgB2FLP5tMgUyGuBmBSu_36Er8Q3jUJgIuvatYqhAyo8f4E1iZWBxiko0H130dQu6N-Cdwnxz_JhVBYihShS3spBYqdDG5Om2bEnj-PCk3ZHzVQ2S_uYcr3IUo4rERrxIgL2sGLAp6NsVIscqnbGAISu5dzlyEjjtFSvhBu6j9yn33YlY28D99a-jxwy_LBb_kv1JyhoFmDzINOlx2aliuX-WZ-SuOklCtVhBNTFdaA1JKIQZBz8V9a9Wpq2r4tqtoovCoGJ3WfmyDb_LbpU4fIewz6oigHCpNCCgLnhSBmm8NAIT_287iaAJitjYujaGLPjodVPYVLhyPUmg0n6BrBjbvsOgEfPYj7E3cZbZwFRmJy1JNYcvdsJXfkU1UB5geYY9pQx4IrIoTpInnU4xCFUkD3gQrzES_LOQ8scRss9R10an21vbWYOz5QT4-A8HfJx_Nbyd9oJNfWjKE5nYoUM5oyNsOQTWFxwVm1eQvC9ceeBh4ZSYKJBl2bT-XSo1kip5AAB1cczMkOiyungfgjmG1WKtIY5gx_hKDQCwVzmb-q6GWhLkLKng0mQJypqC1I5TC4LyKAR38WvAaZmB-sxvvpWtV-qBYQcJzPNLQP5YdRJyCWEVNdCx0q1R0kyES-dsjTIxwmmYz9P3Vz6JetNXz2aCmpF0D9QaSMbJ2HwLbUPrABUi8Z48cX3_aJk7CMr7zzw5bRZxj50kzhYNpizxnu0wq3TAtRrCAoD-wlxhcT_q3VCZIcSqC-Gn-WXLr3MKktuhsa4PWfnKfkmvgWA2_KTn5BO6bNzpc5N7alTDx9sn_5MExx8rYWWPJspdQ1a0T_StxDAN3MrvNXAOAamFjPgyrHLbB9gHGASVxUTQeUNVguBoBZQPjj80VEeZ4ATCauUEnj_R8130ZFvaZnb5i1APQRt5oftzBp0j71jnoXacXxC-2v4SAzaYqaceU9sjdRZGHOEq2LwmRnVYeMzWfMORNIRN81I87XqnKbB6HL8WqppupWt00NqTNMeCVt31la4PTwmPWTUvHajclD4u5DKFe6TLDJ1B-i4YX7txxb2TAdIVMV0YhmrsRrgL119A29gFvyYM3T2cpLmiDmkGW-SPZdbHASrNMRzOtKOYuwt0UmjsYxCE8Y89aqweb1jCGx8Cjsy8jZ5XNBHbTrxUOsufYAFVPNwm2KD_fH9480oO3GS2SQ5QtJymTmbcjY5ApXGlEzW8094w&sai=AMfl-YS7_DmTxuKjegTD4zK1A8tM_-LTaBzA3H9Hb-0YJVxuwdAmAXWiHP5Ngpua3I74djuexM9j-5nTfzXoAqqmGqq1sIF9hill6bgo8GgIna8N6FGbGeV0Iv9L6-nPsBdNFOz2L7v-34bA1sP3-6z73U8mWfnfoEJRVWQ6t2M32Ti2qpT0SKYlNj4Lb9vQGVlqiv3Q-DI_aJxVZ4JgwcWq1MhiDuZjpYo56K2OTmKdjPn2H6tsvsbkozenKnflWvsot81Eb1dzITXtDPtvzSi3dzIhrYWazmDFYWb8L-FteStp3nMXZrSlP2NcxBlqq9lhGLiTQKq9aOvsFu8L_Stx2JErlUW5bRqi0YHH8gB168J-4gYcD2rocSFBeGbOyYb-q04J0o93Ujv4MToCZyxP7rvdPbBgx8czu71Grz5TmR_0Jb0QUg&sig=Cg0ArKJSzAHyOJaCQiYDEAE&uach_m=%5BUACH%5D&pr=missingexchangepricemacro&crd=aHR0cHM6Ly9wZXRzbWFydC5jb20saHR0cHM6Ly9hZ2tuLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1680&vt=11&dtpt=1318&dett=3&cstd=350&cisv=r20240109.05708&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:37 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50650	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	3187	OUT	GET /pagead/interaction/?ai=Cqkk-DjKlZdacBMaE3rsPo_aXcJPVw6x19e79jfgQZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0BXg-a8gg-p6kuTeeOzAH37dI1s4hCmWLu4viZWkA3NFVp-FH2RkciWB9AGEzjiB4KiPsciz2_nNgxxfS1MrpLyvM-FlDYkz3ig7FmmcLqqH5h70SWTFHDWG_zaeS5ZYoTvhdSZDpbQ1yaVTxkdp3JM-q5x0VhMiPm8H73oVHsMNg92uejSSZC_k48azZiq9Jaq-eFstQkJZgUHPpjwTWZaekyyEc0sqOrk1nXGcEkkJwrRpbhC-HZ0gVNeLxFtR2Xy2WXHY_BU5uVNcVT3YiXShFW1YuDfplVjGrdsnyVJNZblhYrXXdjCL7RdCqiNQXNdR7fP6LkFVRxEfMe0iojGljiBheRcNRMAEqPDRp6AE4AQDiAWcx_SJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljaqJz4vt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=477fF8LZsZk&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_e&label=window_focus&gqid=DjKlZcK7A-m2oPMPzYOxyAQ&qqid=CNbbnPi-34MDFUaCdwEdI_sFDg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:37 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:37 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50655	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	2574	OUT	GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=1&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	895	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: private Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:37 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50657	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	802	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTk8OR8gBWBt_X4rJo3mqyvjSfpMFREwzRVfu-a9tidnP1zPIWnl6xJocxR1GtxysjKaW33LVe69BpxBN6leTKX_KXH9un53xoY HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50651	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	361	OUT	GET /simgad/8335829572458372918 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:38 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 36404 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 19:17:41 GMT Expires: Fri, 10 Jan 2025 19:17:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 15 Dec 2023 10:58:43 GMT Content-Type: image/jpeg Age: 324417 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	429	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 0d 0a 09 0a 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 fa 01 2c 03 01 11 00 02 11 01 03 11 01 ff c4 01 02 00 00 00 06 03 01 01 00 00 00 00 00 00 00 00 00 00 02 03 05 06 07 08 01 04 09 00 0a 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 10 00 01 02 06 02 01 Data Ascii: !Adobed@,
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 30 e1 52 40 f1 42 13 23 04 50 62 72 82 92 33 a2 24 60 b2 14 05 ff da 00 0c 03 01 01 02 11 03 11 00 00 00 ec 1d 6f c1 96 0d 02 10 9b f0 82 98 c0 6d 79 32 11 81 9c 2d 96 78 32 1e 61 82 31 3c 07 9a c8 08 7e 68 48 cb 32 98 43 c0 40 f2 c3 85 e0 28 7e 11 a0 48 21 44 18 08 04 19 68 41 94 f2 03 68 23 d6 89 e0 d9 01 b3 74 19 f7 57 bc 0e 5a a6 50 18 19 1f 99 96 0a 27 99 94 61 9a 48 24 7b 42 34 78 61 a0 48 64 59 18 04 20 42 81 e6 08 0c 10 c0 41 81 8d af 07 93 1b 00 8c a1 8d aa 94 1d 15 4c 74 5b a2 d4 49 75 4f ac d7 bd 28 b0 41 90 c3 62 0c a3 2c c8 16 84 e1 9e 19 01 34 68 14 99 8d 14 9e d3 59 06 d4 41 01 80 21 64 32 30 86 ba 78 11 c0 63 32 08 f6 41 1f 5d 16 87 26 96 94 e3 5f 34 d1 1c db 07 85 6e 6f c3 af 11 3c 18 0c b0 49 e1 99 47 35 fa 9c f0 87 49 b9 7d 01 33 c8 24 Data Ascii: 0R@B#Pbr3$`omy2-x2a1<~hH2C@(~H!DhAh#tWZP'aH${B4xaHdY BALt[IuO(Ab,4hYA!d20xc2A]&_4no<IG5I}3$
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 21 e0 f9 71 f9 df d9 69 97 bc f9 4e be cc 16 be d8 4c 8c 42 9c 64 1e 8e 46 67 13 b5 78 7c 6f b9 b6 9d df 33 6e fa dc 18 79 4a ab ca 33 43 22 3b 61 44 ac af b8 f9 e7 24 57 66 88 69 21 69 9c de e9 60 f4 5d 6f d3 43 02 71 76 c5 e0 25 2a ac d8 8c a9 56 dc 93 9d 16 ce 99 f4 52 8d b9 27 0a 2e 4d 71 ed df 13 ac 92 99 81 f2 e7 e1 fe a9 4a 3d bf cc 52 ad ce b3 21 56 49 fd 6c 36 ac 84 d9 93 77 40 fc 8f bb 96 b7 72 ba 41 df f2 5c c4 d3 5b 32 ab 2c ca 2e 55 d5 73 ef 76 6e 95 72 b6 6c c2 5b c1 b6 02 08 e6 c8 40 d7 d3 68 f2 68 88 ae a8 60 31 c9 f4 d9 ae 15 e6 fa 5c 55 ce 48 aa da c3 ab 3c bd 4d ac 7b 2b b0 59 74 78 04 1f 26 7e 63 df c1 1e 9f c3 4b f6 e5 53 94 9d 96 46 79 db 99 17 3c e3 88 ea e8 17 8c f7 bb fd 1e 3d c5 ec f9 8d 0b a2 cb b6 2e fc b6 db 8b 2b a8 fd 4c 52 Data Ascii: !qiNLBdFgx\|o3nyJ3C";aD$Wfi!i`]oCqv%*VR'.MqJ=R!VIl6w@rA\[2,.Usvnrl[@hh`1\UH<M{+Ytx&~cKSFy<=.+LR
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 33 10 21 9c 83 43 28 28 02 05 86 b0 10 05 20 20 58 16 04 a3 54 7a a0 6a 0c 00 34 e1 d3 05 58 33 9b 00 80 80 30 21 91 14 06 20 f1 98 18 03 c1 30 6c 06 2b 21 7a 26 06 b0 81 80 90 9e c4 c0 56 41 60 40 10 82 00 b0 03 00 98 01 25 0a 01 81 16 00 0f ff da 00 08 01 02 00 01 05 00 f3 2f 13 f0 62 51 2f 13 f5 08 3e 47 89 c1 fe 0a 7e 99 fa 27 e1 34 ee 2a 16 c3 88 f0 7d 32 fe 18 44 fd 34 f4 e5 d8 35 08 6a 15 52 ea a1 15 4e a2 3e 56 de 87 d8 53 47 c8 83 f8 f2 f4 ce 27 13 f4 08 69 a2 e2 aa 5d 1e 10 da 96 45 13 81 55 34 cd 34 29 d5 f2 85 02 0f ae 8a 85 2f 22 b6 85 2c a3 f0 e7 e8 26 07 89 79 a3 fc a1 8a 76 7e 1a 50 78 15 06 ea 6a d0 12 6a d6 97 00 9a 62 b8 0f 93 c3 0d f3 5d c5 96 da 0d 50 33 c1 ba 36 8b ac d1 b5 c5 8f e9 53 3f fd 5a 74 52 53 2e 19 62 9d 46 ba 9d b6 cf d8 Data Ascii: 3!C(( XTzj4X30! 0l+!z&VA`@%/bQ/>G~'4*}2D45jRN>VSG'i]EU44)/",&yv~Pxjjb]P36S?ZtRS.bF
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 36 dc 4a 50 93 3f c5 97 99 c0 51 11 cd 40 12 4c 15 a9 43 9a a0 38 a4 fa d2 93 24 7f 2d d9 13 4d 4d 09 71 5f e3 4c 35 40 52 6c 4c 7c 6d 5c 3f f6 db 7c 94 89 7e 01 32 84 99 fa 13 fa 4d 33 f2 12 df b7 c2 04 06 d0 54 1a 9a 10 01 40 40 f8 d6 82 98 98 4c 2d be 30 aa 79 13 e8 e5 0d fd 2b 13 c9 3c 01 80 d0 10 a4 81 14 68 e2 9a b4 07 28 5b 48 48 89 42 d6 11 1f 32 60 38 0c 4c c4 cc 7b 98 3e c5 26 39 18 9c 4e 10 f2 90 05 42 c1 e6 65 f7 0b 98 7d 42 3e 65 4b 99 90 59 93 8b 2b 25 46 41 c5 4f e6 27 d3 f9 21 3e c1 4b 91 70 b2 b3 f6 f4 e6 10 dd 3a 43 74 ca 59 78 ca 9d c3 22 7f 30 89 98 41 04 04 22 27 e2 70 af ab 43 da 42 38 88 f8 fd 9a a7 fe a7 c2 60 34 4c 7c 46 0b 24 42 e9 ca 4f c0 a9 a9 b2 98 2c 90 96 d9 f7 2d 19 fc 46 4a 68 a6 14 99 19 44 a2 70 8f a7 19 c3 8d 15 c7 01 Data Ascii: 6JP?Q@LC8$-MMq_L5@RlL\|m\?\|~2M3T@@L-0y+<h([HHB2`8L{>&9NBe}B>eKY+%FAO'!>Kp:CtYx"0A"'pCB8`4L\|F$BO,-FJhDp
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 03 a8 3e 54 a0 90 08 23 d7 cd 33 f2 8b 70 02 e0 9e 2f c0 5a 60 fd 54 b0 98 52 a7 16 c4 82 f3 cc 25 d6 dd 6c b6 af 03 c2 96 01 1e f0 0f a6 e3 fa 6d d0 a1 68 a4 71 48 71 6e 25 11 58 41 66 44 b0 97 12 20 ad 20 97 50 92 b5 a5 20 2c 13 f2 a0 95 2c 24 2d 41 55 3e 4d 2b 0c 8b af f7 62 0b 60 c0 04 42 88 10 a2 5c 55 bb da a1 29 8b e3 05 2b 84 89 c2 a6 08 82 26 78 7b a5 3e fe 8b 8f e9 b5 54 da 1b a5 05 d7 84 d4 f2 9b 28 66 a3 fb 67 9b 25 9a 64 97 54 c2 39 a6 a1 25 34 eb 68 34 d2 5a 0a 69 ff 00 77 78 a1 35 3e 5d ac 1c 6a d5 c9 ef 06 0f 18 42 91 3b 7f bd 53 63 de f5 25 35 0e 38 52 42 a7 02 1c 3c 43 15 21 61 3e e3 d0 e3 69 70 0a 36 81 00 00 e3 08 72 05 3a 02 54 c2 14 94 a4 24 25 21 21 74 ad ac ad 84 2d 20 7b 7d 9b 53 71 a4 38 11 4a da 4f 89 c2 08 4a 2a c1 0f 71 5c 7b Data Ascii: >T#3p/Z`TR%lmhqHqn%XAfD P ,,$-AU>M+b`B\U)+&x{>T(fg%dT9%4h4Ziwx5>]jB;Sc%58RB<C!a>ip6r:T$%!!t- {}Sq8JOJ*q\{
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: ee be 62 a7 50 47 34 f1 2c bb 26 d3 50 1b c9 32 8b 2e 07 8d 75 d7 5c 5e 9a 6a 33 2c f7 08 d7 76 aa 8e e1 ea 7b e6 0f d7 ae c0 76 07 71 e4 9d 80 c7 aa 75 3e 43 ce 8a a5 a9 18 91 f0 20 f8 9c a3 b8 fd d2 ce fa ff 00 b1 3a 73 dd 0c ef b0 1b 10 a4 2a 25 28 94 29 90 a2 da 11 00 80 1c 6d 2b 09 24 2a 62 40 47 b0 00 a9 50 89 88 e6 99 38 e2 90 80 e3 ce 2d 92 04 70 2f 84 8e 23 eb 12 8d cd 4c 32 fb ae eb de fd 89 7f b2 7d 95 ad b7 37 b2 ad f6 0b ee ce e8 cf 56 b2 eb ae 5b 64 ea ee 1b 92 ea cb c5 53 76 8b fd 1f 59 5e ac 63 4e 44 a3 76 66 ab d7 1a 8f f6 fb dc 9b bf 74 64 db 23 bc 5d 8d 7b 60 e7 dd b4 ec 2d 97 40 ed de d9 ef f5 64 fb bd c7 37 37 76 b4 d1 ac d3 fd d3 cb 3b 57 de 3c 0a ab 6f 6e 8e ea 62 38 cf 47 b7 ce ea db 76 f4 f7 53 b5 45 ad 09 9b d5 6c bd 33 cf 8a a7 Data Ascii: bPG4,&P2.u\^j3,v{vqu>C :s%()m+$b@GP8-p/#L2}7V[dSvY^cNDvftd#]{`-@d77v;W<onb8GvSEl3
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 98 23 ce df da 58 fe 96 d7 7a cb 61 d9 36 c6 05 04 4e 08 82 22 51 63 71 bf 87 61 6e 6d 53 58 e5 8b 71 ef cd eb 7f be e7 9a 7f 54 5f 4e d3 ec a6 4d 89 e9 0c b7 1d c9 32 ec 9b 3b c8 75 eb 1a 8a b3 16 c1 f2 8a 77 92 21 0b 26 2e 16 e6 ee 94 f7 3c 19 21 bb dd 86 b5 d8 c4 69 99 a0 b7 6f 8d f7 db 8d 13 b8 fa e5 d9 fd 73 d8 06 e9 68 52 95 81 00 08 11 28 e3 1c 61 d5 06 9b dd b7 3c 3a cb fb 92 ee 17 f5 76 d4 ed 4e c6 ad d0 ff 00 fc e9 dc 5d eb bc 58 3b 3d 92 77 33 05 c5 ef 19 ef 66 31 0d 7f bb f7 47 71 ec 7a 5f 2e ec fe dc c2 f7 6f 44 fa 5f ff 00 ea e9 89 8f 04 44 a3 32 ca dc b3 e0 3b 35 77 fa 0c c7 5d 6d 2a 3e b6 ea 6b 25 c7 28 c6 eb 28 bb 33 d9 6a f5 63 d5 d8 fe ca b7 59 36 25 25 2e af d5 d9 fe da d6 59 ae 13 7e 56 4f 8d 34 11 2f fe 9a 84 21 6d e6 b5 49 a7 6e d7 Data Ascii: #Xza6N"QcqanmSXqT_NM2;uw!&.<!ioshR(a<:vN]X;=w3f1Gqz_.oD_D2;5w]m*>k%((3jcY6%%.Y~VO4/!mIn
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 8a 0a 1b 25 d2 40 6a 99 12 e2 df c5 6f aa 79 35 f7 5a 25 7d e6 8d db 39 96 11 82 59 7b 9f 90 d0 d1 d2 f7 39 ea b4 3b db 6b 95 43 1d 85 da 79 8e 67 80 6b 4b 0b 56 2c 4b b2 5b b3 28 d7 95 d7 ec 82 e3 95 d6 e3 bb 26 fd 8a 50 5c 37 8e db b9 d2 5d 6a ae 37 7b 96 03 79 66 db 5a f6 f6 c8 5c 7a 97 b7 3d 80 c5 da 6b f7 25 ed 95 8d 36 3f dd bb b2 0c af a4 3d c3 c8 7b 50 c8 7e 12 f4 25 e8 2e 82 29 ae 68 fb dc e7 05 c3 33 c4 65 1f 6d 53 b5 2f 59 55 e2 d5 8f e5 b7 2d 83 7c 77 5f e5 f9 2d ee e5 85 d6 6d 0b f6 49 ff 00 79 65 a5 9d a5 91 66 d7 ec 34 90 93 f3 29 2a 0f 15 04 10 21 2e 4a 3e 63 c9 bb bd 35 a9 da 77 5c 75 7a 79 6f 5c 31 94 63 ce b4 d5 0d aa 4c d9 ec 40 35 d9 5f b6 b5 61 98 55 4a 97 60 ee 36 11 4d 76 ce f2 6c 6d dc 71 f8 eb 4f 53 b5 4e e4 c2 ac df b7 0e 8c b4 Data Ascii: %@joy5Z%}9Y{9;kCygkKV,K[(&P\7]j7{yfZ\z=k%6?={P~%.)h3emS/YU-\|w_-mIyef4)*!.J>c5w\uzyo\1cL@5_aUJ`6MvlmqOSN
2024-01-15 13:24:38 UTC	1252	IN	Data Raw: 25 50 f4 22 f9 48 fd ab a2 99 23 54 d8 4f 5d b5 36 a6 c9 3b eb 54 e0 ea a7 54 54 fb 9d 9d ca f2 eb 5e 34 fe d5 d7 56 7d e3 51 79 ea 9e c0 c6 ea 8e 9e cb 58 4b ba f7 ec 17 4c f5 bf 17 56 4f 93 5e 30 fd 6b 87 76 6f 6d 61 ba fb aa 19 d6 5d 9e 63 b8 36 19 6b c1 ac fe c6 24 22 dd 6e 7e e7 59 41 89 d9 a8 9b ff 00 07 65 8f f0 76 58 ff 00 05 64 8f f0 36 38 ff 00 8f 58 4c 7f c7 ac 11 ff 00 1e b0 c1 c7 31 f3 1f f1 ac 76 17 88 62 6e 05 e2 38 ba 99 ce 30 9f f8 fa 4a e0 b9 1f 24 5c 6f c5 88 5b 77 7b 9b 94 b6 36 d8 37 4a fb b3 11 ae 73 1b 7d af 30 b8 53 39 f1 5c 75 ed 06 50 7b 39 a0 76 f6 d2 d2 9a 13 a1 5d 95 d7 9b 87 31 eb 3d 46 5b 55 86 e9 5c 66 c9 1b 12 e1 8f 5b ac 76 ea 64 82 c5 ae 89 c1 55 89 59 ab 18 d8 9a 3f 1e af c4 f3 6d 51 98 64 cd 60 ba 8b 6a 55 67 56 16 2e Data Ascii: %P"H#TO]6;TTT^4V}QyXKLVO^0kvoma]c6k$"n~YAevXd68XL1vbn80J$\o[w{67Js}0S9\uP{9v]1=F[U\f[vdUY?mQd`jUgV.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50659	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	793	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmSNTfHwqvwsE31JHyYO5e6WOB-BFXzqQPgxTmEVmaoab1hU-be5UYmCEAyE1jiKAkT_RZlp2TYqMcIdwFIPo8Wl0lMqwGQctjk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50661	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	806	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmQrPMud0BVPMzD7CuaP6w_qOcUawW4xcpRQ6ZSA4K2ubpSOVMmaLO3B99uF_HLWQJq72GP5qb7cT1hkXnrsW_m25anMosW5T79I&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50660	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	806	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmR6JkQlclRBmtTTGuAhp_aoVodYdP-5B5l1co24WSkwCxaE4CzsByAtwt1vt9mrBfbS8A8abXSEeQj2mGmH5bRm1wmWKik1b-9B&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50658	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	785	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmS7O29np2R17MXhuW7ikyhjeWKcM6Rb0J97g4pvt1e0xu_cczp3jCTFoN_58lrYfs7oo_rR3OTmC2PUu6jci44NVq5ivu8N8qpJyg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50663	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:37 UTC	794	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmR2TNL5zI8rLmNxkmTYNcrYd0vzvtNEg_WBL84htb_ey5BNOgrt4YUMBAT7qIFh6K0wHMcwRiaYNVqjLbi_LLRfsWPKEY0MsKYi HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50664	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	1842	OUT	GET /pagead/interaction/?ai=CpXR_DDKlZeqJAdjkvPIPm--EkAaarfGydNPs3sTFEdvZHhABIO34qSBgyYagiqSk4BGgAY_x_P4CyAEJqAMByAPLBKoE5QFP0PsVEi3-Hi02QTPbbB1k0s6-0ITMjLQQ73YJXp2HvSsv7d8zoClZhnQTjDfPb9VNTQSj_gQ4xqIa1oe_1e_kyFHEDJ_XbYuulXE8GKqhV4gIBEeOWcmJeI1Oweumf-baZ3Tl-oR2uzM0RgdCBV6_x99xK1xQ8AHSx3Qv0szsVcS6kTMZ2MO9QkD1EWCw2OKfdN2kcK0stz55CakoNAxgj8hju6YWwZNXps8PwyBZ76iRstmSHuoK7qp8K3yhQ-I8EzVFspszPnRuUBoTgxt8lqdRh04Ikf37nVIjOOMT30qsPXvuwATK6cD3tASIBYGCsLxLoAYugAfruPWDAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIuMn_e-34MDsQkLBNN1UEDOPIAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ4OK6t9TVyv_5ARICAQOqDQJVU8gNAbgT5APYEw2IFAXQFQH4FgGAFwE&sigh=Wq94U4s43bw&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1F&label=window_focus&gqid=DDKlZegt7LWg8w_OwZxQ&qqid=COq_n_e-34MDFVgyTwgdmzcBYg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:38 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50666	54.175.232.95	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	526	OUT	GET /ping_match.gif?scc=1&st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_&gdpr=0&gdpr_consent= HTTP/1.1 Host: pm.w55c.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=9PBZdF5b1RpmXb5
2024-01-15 13:24:38 UTC	736	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:37 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=593&userId=9PBZdF5b1RpmXb5&gdpr=0&gdpr_consent= Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0ed26a5ebd930b0f7@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=9PBZdF5b1RpmXb5; Domain=.w55c.net; Expires=Sat, 15-Feb-2025 13:24:38 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchfreewheel=5; Domain=.w55c.net; Expires=Wed, 14-Feb-2024 13:24:38 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50665	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	2593	OUT	GET /pcs/view?xai=AKAOjssbQD-V-SslIRXoqssIUGwO94b92yOAR8XhLsjkFouK2Bbyp_xxjA77_ols-rOQoF66S2N0cCBZdjoPKOrsIODOUbr2dDvMzJLYeNDe9To5QtWvqZgwNGFoR2_MD6EuqiTTWknZmvN5wuM7FpagQXMRauR58-xztqd3DisCam0QRVi4kwh5BkySu2tI53VUayMTksaH-jyfawDq4I97Hj99tpGceZZ0cjsIeMTeGZgCKipOCvpQDHEQxnx5AWXV9EjCRp-jNwNQyQ1KnqxPSg6iRGnKwcVMko294vzv91-A3V4Ee1xxW9NwVNGle0Z3pZxslRHMNuISAy_ip54du1zseWv8D9Ie2YY9PbpdSzldRKic7SFu1aVUS7qmGArYTcilnKJti9_VhNeDKpX-V5EyKH61hh4-ZL8NbftAXvy8AJ34JzQ0niH9RNFctpwSGRhM2rJW0s6j0kWoYDUH8x7PI6Hlr0aoiH5EJRR27mDuqbWxNbq6y7tFQiHwOS0Av-NVl7HCIvuTEP7Si5rKd0vqhd_FWxTfjFeErihiBBXGMlG4bgPEOcE0AHMcQMmohOyo7lsl666OLxz-DLTZFSAqpzwtgBo3aa7QriRkM-Yqk0uJAY00dZSnKuX0HBqgIs8ysR9UP-20n__qoHub88ZsRkCqb3RdVJ2EZ8E4XlWQHJ6s5QGnfP1hjXWm9hJt6hRZU1SJ8lSrnNP65by93K0BpKL0EJ2nC0VmG1450mI8aabwuzzqqC8wNRZJ8e4mkEW15_TOYnzBC-f94pOhCcKuqlMRVzTeToXgD6GfaNBMDaxK_B3XaTxM_YBgZgiYCfnnJt-haOuwzYbdzvpDflTaLROROor0b643gT-tOZ72HJ70LxIIXi0jsoBpAwLjTvbWOFyZ_v-yZVyz6IEOiEM_b7PINdoBIsR_4RaTYbYtN5qWektZ4-Zgyt_QQcdwIhKSrVQJaS23WPhs75Hz-ZQ47G_UnUBmMv7_j2Rf_MGprrVRFIBLKTEXSoe96pu1YMunc3D_JDflxkxBo8B5M_JTEFrvemSFjmrURUDaExQBchbU80euUUBdh_2hw8PYtRwVIhHnpJqMUxO4FlCBYti0bVeRs6iJAtk8XpXWaETz4jdu-dAbK0wFXf_Ffs8rWPxQ-LO-kGRJBBsVXgilv2hVxxFYfXn8XpDqxqdZa7xTiboaxFtJPJNUpgUklrrgQo5KVc1GSzDPgEwtqJjiekGBkZreVxKh_H1cnaavCEl45ZdCKGVHUrIKQUV9-BznNoxbpXDtGXvt1PNJfYNHccCjiUo6n5WA6chHlz-sE7lw6lgXd4FPehvG0NCyTBniwR_YvI04qHP5Gv1M82ul2yh2-4zpDnGN4zD-Rp7EAgilYt--ZR36OCQMt4Urkj5fppWUoLN1_hPZr-o322i8mFJi_6a6uxxgnbgEXNRU_x-l-CX-ZMM&sai=AMfl-YRAeOGyQNKDK99GUC0EJ3NhH9SDIiCemH_jKx8_v4PvXjJYHFzLwxfjXH5XBrxCHV4-eeUq06LVFE9rr1walV46daR3hg6z-SawvBIDjoUxUvL787fBtkNYJxIkV9DwHs7ibHPEc1w2fbTOiIQr54w3CmWgbP1WPnKOyJ02S9fevZ0Si0BzVhXISSay6tJWWpfj58cb4KHkQ23sHOFIWWu5eaPnaGxzcdL4Wx9HvwwHJ-_ParfEMv0WtZBNXjqubWtK7heoADJm40U0ITmW6JeMj6tSCQ&sig=Cg0ArKJSzGe1PTUMJBv8EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9sYXZhenphdXNhLmNvbQ&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2681&vt=11&dtpt=2678&dett=2&cstd=0&cisv=r20240109.37092&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:38 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50667	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:38 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50674	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	845	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmRfr734V0ahK5eHYkp2NUscxxd_eDTKE8uEJe1sOrER9_ievttcWs1pYvuZhdRbABu5E5VQci2lJ2xgCXwYnGd5juco1O9P2S0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50675	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	846	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmTGz4UZLqS-5gc_aHR-pPbF1CFhusTIvhGVoMfznNnv6WGyVzNc4aqfIK6aes2bqDSA3MbEGuALffi9U0O9kZ7H0XfE2cOfUrds HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50676	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	877	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=&google_cver=1&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_push=AXcoOmQ5nhm6xIgjDRfadzioPySk6oufYMOwMIx6xd5oc2NHOLmJF7PC2NZT7FirCo__0WVOTvG1kVPTO2PDLNCAntZi0UVfjlF01a9Y4XSlbWwprMQZtYg5qhLQBElHRVdsQHBim7UWBAx0uF-WDmkg9rAWbRw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50677	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	846	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_hm=WmFVeUFnQU9zVG9hNXdCVQ==&google_gid=CAESED9hDNKqKqU7P1eolvVywIM&google_cver=1&google_push=AXcoOmR6u1drK2729o5c18wG9Q3s2LyiDDPuQX3X4eZLFn6k0-HgSvtCKKoTwKUgqaR0H-Cu3hOr6onHd0khznnN_6tpsk-fzr4VMkt2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50678	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	802	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmTHuv3Gb-mHtSeYaCb0U4tcEmwp6oYY3ZY5w7thL3IhoTHX6RMVrq6B6j9i-Ad-0leNseCbJx6xrqF9PKjZrOVReYbJ9ywp2HJP HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50682	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	806	OUT	GET /pixel?google_nid=yahoo&google_push=AXcoOmTg19MNHiSrhtf7ONs3qvkjvA8odruV5-GH3gvLYd84NAhkhbAvNbPyVrbq4TsXKO24sB0Q_vqcaPP4t-Wy0_tCCPZnBibLsT8M&google_hm=eS1fQXhpemRSRTJwSFVta3ZCb3IuaFhvb0lUWmtNSl85Q35B HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50687	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	794	OUT	GET /pixel?google_nid=stackadapt_usd&google_hm=iM6nzEFLWTFEkJOJAAs0EGalMCo&google_push=AXcoOmQ5j5QFV2i9oGoZUIXo5gOsb254FD8mYw6Frpyg-5GL8pwsqt9dKPjiRmUQsXgZST8fxJXyQDFtB3WFcqOmfsHyYEJLzeNRRQQd HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:38 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:38 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50689	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:38 UTC	785	OUT	GET /pixel?google_nid=cognitiv&google_hm=U_6oEPVWZ0qGP0cYHzcB_Q&google_push=AXcoOmQ1Cp3bqpx8XkRSx5bhCjey_jlqCD_3yNM0w8IQYyB9F4SEQH-Yk04-dQV0QqiHPAkuwzjMFSfQentvxqH8w6Wb_A_dHnciKhWCNw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:39 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:38 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:39 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50704	31.13.66.19	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:41 UTC	404	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:41 UTC	1760	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fzh_CN%2Fall.js reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: sXlXmI3eu9Y5e4LwXVXtbWFnATd5Xop3gMiqdEtGi4zs+qTD5neDVJdpYTQzV+4YbHUb3nvkDVvcJMbXSWf6/w== Date: Mon, 15 Jan 2024 13:24:41 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	50706	54.157.70.26	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:41 UTC	523	OUT	GET /d/sync/cookie/generic?partner=stickyadstv&append=1&cb=4661227&redirect=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D690%26userId%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:41 UTC	486	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:41 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=2148262d-9961-4511-b7d1-a27495ac7d5f Set-Cookie: cu=2148262d-9961-4511-b7d1-a27495ac7d5f\|1705325081735; Path=/; Domain=ipredictive.com; Expires=Tue, 14 Jan 2025 13:24:41 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 2a23def0-2750-4b23-851b-11e3a402944b Content-Length: 134 Connection: Close
2024-01-15 13:24:41 UTC	134	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 36 39 30 26 61 6d 70 3b 75 73 65 72 49 64 3d 32 31 34 38 32 36 32 64 2d 39 39 36 31 2d 34 35 31 31 2d 62 37 64 31 2d 61 32 37 34 39 35 61 63 37 64 35 66 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=2148262d-9961-4511-b7d1-a27495ac7d5f">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	50705	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:41 UTC	591	OUT	OPTIONS /wp-json/wordpress-popular-posts/v2/widget?is_single=0 HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with,x-wp-nonce Origin: http://mylovelybluesky.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:43 UTC	1035	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: application/json; charset=UTF-8 x-robots-tag: noindex link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type allow: POST x-litespeed-tag: 8bb_HTTP.200 access-control-allow-origin: http://mylovelybluesky.com access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE access-control-allow-credentials: true vary: Origin,User-Agent x-litespeed-cache-control: no-cache content-length: 333 date: Mon, 15 Jan 2024 13:24:43 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:43 UTC	333	IN	Data Raw: 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 77 6f 72 64 70 72 65 73 73 2d 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 5c 2f 76 32 22 2c 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 61 72 67 73 22 3a 7b 22 69 73 5f 73 69 6e 67 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 67 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 5d 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 Data Ascii: {"namespace":"wordpress-popular-posts\/v2","methods":["POST"],"endpoints":[{"methods":["POST"],"args":{"is_single":{"type":"integer","default":null,"required":false},"lang":{"type":"string","default":null,"required":false}}}],"_links":{"self":[{"href":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	50712	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:43 UTC	1245	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6yzty5mqq4q2 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:43 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:43 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-EgrJHUMPYWuNIFAVobYn1w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:43 UTC	361	IN	Data Raw: 32 61 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a4f<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 55 4d 50 59 57 75 4e 49 46 41 56 6f 62 59 6e 31 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 45 67 72 4a 48 Data Ascii: UMPYWuNIFAVobYn1w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="EgrJH
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 79 4a 6c 30 4e 38 46 69 35 50 56 52 74 58 31 57 57 6c 65 7a 41 39 2d 58 65 49 4d 72 74 42 74 5a 4e 30 43 68 52 65 37 31 39 4c 66 52 45 44 47 78 57 46 68 78 41 51 6a 37 4c 5f 68 71 51 48 59 6c 75 6c 6b 33 38 61 6a 4d 63 72 4f 55 58 55 66 55 38 47 4b 35 61 44 4f 70 4d 66 48 54 56 50 73 33 47 75 76 43 43 4a 56 32 79 58 4a 5f 71 41 79 6f 76 31 46 2d 44 55 66 46 48 5f 6c 57 4d 50 45 4d 50 33 77 47 6e 37 42 63 78 54 5a 4d 35 43 79 35 7a 45 31 42 61 30 37 4d 56 34 74 33 37 62 5a 6b 72 67 78 71 45 49 42 2d 37 58 61 74 35 30 58 78 35 38 42 33 49 55 30 47 43 57 46 48 43 6c 34 2d 77 30 78 4f 6e 54 54 33 70 4b 51 77 79 37 59 79 4c 54 75 31 6f 47 5a 52 6b 77 59 36 71 35 68 6b 6d 56 71 6b 38 56 34 48 71 66 6b 6f 6a 68 6c 59 46 4f 54 70 6b 71 78 4d 49 79 57 30 30 68 50 Data Ascii: yJl0N8Fi5PVRtX1WWlezA9-XeIMrtBtZN0ChRe719LfREDGxWFhxAQj7L_hqQHYlulk38ajMcrOUXUfU8GK5aDOpMfHTVPs3GuvCCJV2yXJ_qAyov1F-DUfFH_lWMPEMP3wGn7BcxTZM5Cy5zE1Ba07MV4t37bZkrgxqEIB-7Xat50Xx58B3IU0GCWFHCl4-w0xOnTT3pKQwy7YyLTu1oGZRkwY6q5hkmVqk8V4HqfkojhlYFOTpkqxMIyW00hP
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 56 6c 35 5a 55 45 79 51 69 73 7a 52 48 49 78 63 45 78 48 55 46 52 34 57 58 67 31 4c 7a 6c 50 5a 31 52 4e 4d 6e 46 53 4d 48 59 79 61 48 42 72 54 30 74 47 57 6a 64 33 57 58 68 51 5a 47 6c 7a 51 58 4e 55 54 6e 68 77 56 57 68 59 51 57 4e 57 5a 46 4e 75 51 30 64 6e 4b 32 63 34 62 6b 77 79 61 46 46 70 53 7a 56 53 56 6a 67 7a 51 6b 59 30 4d 47 64 4f 55 48 68 4a 61 46 4e 61 59 55 68 43 4c 30 78 6d 51 6c 6f 32 62 56 68 6d 4e 48 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz\x22,\x22\x22,\x22TVl5ZUEyQiszRHIxcExHUFR4WXg1LzlPZ1RNMnFSMHYyaHBrT0tGWjd3WXhQZGlzQXNUTnhwVWhYQWNWZFNuQ0dnK2c4bkwyaFFpSzVSVjgzQkY0MGdOUHhJaFNaYUhCL0xmQlo2bVhmNH
2024-01-15 13:24:43 UTC	462	IN	Data Raw: 50 61 30 4e 44 53 31 70 72 52 6d 46 53 52 32 6c 4a 5a 6c 4e 34 62 45 38 79 53 53 39 69 64 45 74 58 63 6b 64 46 55 45 78 4b 65 47 52 46 52 45 56 34 54 58 63 76 5a 30 68 74 4d 56 56 34 63 30 52 43 63 46 4d 76 4b 30 52 61 63 58 6b 79 57 58 52 35 52 57 68 6a 4f 45 5a 47 64 48 5a 71 4e 79 74 61 62 45 78 78 61 58 45 30 55 6c 70 52 62 30 35 55 4f 46 46 70 4d 46 56 5a 4e 57 5a 6b 54 54 56 72 59 6c 4e 4b 53 58 64 42 54 48 59 30 4f 55 68 6c 5a 32 35 36 54 54 64 47 53 57 70 72 64 6d 45 79 4d 48 52 70 55 30 4e 73 61 58 4a 53 56 55 35 71 65 53 74 4d 61 31 64 45 54 6c 45 72 62 30 31 68 5a 58 46 32 59 6d 55 77 63 6c 41 34 62 7a 51 34 4e 46 64 73 59 6e 46 49 4d 44 46 78 55 45 6c 47 4f 55 68 45 4d 44 68 6c 53 31 4a 4f 59 6d 34 79 62 55 56 52 55 31 55 33 53 48 6b 34 57 6d Data Ascii: Pa0NDS1prRmFSR2lJZlN4bE8ySS9idEtXckdFUExKeGRFREV4TXcvZ0htMVV4c0RCcFMvK0RacXkyWXR5RWhjOEZGdHZqNytabExxaXE0UlpRb05UOFFpMFVZNWZkTTVrYlNKSXdBTHY0OUhlZ256TTdGSWprdmEyMHRpU0NsaXJSVU5qeStMa1dETlErb01hZXF2YmUwclA4bzQ4NFdsYnFIMDFxUElGOUhEMDhlS1JOYm4ybUVRU1U3SHk4Wm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.5	50713	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:43 UTC	2372	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325081&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325079738&bpp=176&bdt=1433&idt=1645&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=1063240671184&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1737 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:43 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:43 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:43 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/sc
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 67 6f 6f 67 6c 65 5f 73 63 61 6c 69 6e 67 5f 64 69 76 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 5c 78 33 64 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 5c 78 33 64 5c Data Ascii: 3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv id\x3d\x22google_scaling_div\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscript data-jc\x3d\
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 69 75 6d 5c 78 32 32 29 3a 28 77 28 5c 78 32 32 43 68 72 6f 6d 65 5c 78 32 32 29 7c 7c 77 28 5c 78 32 32 43 72 69 4f 53 5c 78 32 32 29 29 5c 78 32 36 5c 78 32 36 21 28 78 28 29 3f 30 3a 77 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 77 28 5c 78 32 32 53 69 6c 6b 5c 78 32 32 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 69 61 5b 5c 78 32 32 20 5c 78 32 32 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 69 61 5b 5c 78 32 32 20 5c 78 32 32 5d 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 77 28 5c 78 32 32 41 6e 64 72 6f 69 64 5c 78 32 32 29 7c 7c 68 61 28 29 3b 68 61 28 29 3b 77 28 5c 78 32 32 53 61 66 61 72 69 5c 78 32 32 29 5c 78 32 36 5c 78 32 36 28 68 61 28 29 7c 7c 28 78 28 29 3f 30 3a 77 28 5c 78 32 32 43 6f 61 73 74 5c 78 32 32 29 29 Data Ascii: ium\x22):(w(\x22Chrome\x22)\|\|w(\x22CriOS\x22))\x26\x26!(x()?0:w(\x22Edge\x22))\|\|w(\x22Silk\x22)};function ia(a){ia[\x22 \x22](a);return a}ia[\x22 \x22]\x3dfunction(){};!w(\x22Android\x22)\|\|ha();ha();w(\x22Safari\x22)\x26\x26(ha()\|\|(x()?0:w(\x22Coast\x22))
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 78 61 29 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 69 66 28 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 5c 78 33 64 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 21 5c 78 33 64 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 5c 78 32 32 61 72 72 61 79 5c 78 32 32 3a 62 3a 5c 78 32 32 6e 75 6c 6c 5c 78 32 32 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 42 61 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 44 Data Ascii: Object.freeze(new xa);function Aa(a){if(\x22boolean\x22!\x3d\x3dtypeof a){var b\x3dtypeof a;throw Error(`Expected boolean but got ${\x22object\x22!\x3db?b:a?Array.isArray(a)?\x22array\x22:b:\x22null\x22}: ${a}`);}return a};let Ba;function Ca(a,b){return D
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 6a 3b 6c 65 74 20 65 5c 78 33 64 64 5b 41 5d 3b 69 66 28 65 5c 78 32 36 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 48 61 28 64 2c 65 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 5c 78 33 64 6f 61 28 62 29 3b 69 66 28 63 5c 78 33 65 5c 78 33 64 65 29 7b 6c 65 74 20 66 2c 67 5c 78 33 64 62 3b 69 66 28 62 5c 78 32 36 32 35 36 29 66 5c 78 33 64 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 64 29 72 65 74 75 72 6e 3b 66 5c 78 33 64 61 5b 65 2b 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 5d 5c 78 33 64 7b 7d 3b 67 7c Data Ascii: ;function G(a,b,c){const d\x3da.j;let e\x3dd[A];if(e\x262)throw Error();Ha(d,e,b,c);return a}function Ha(a,b,c,d){const e\x3doa(b);if(c\x3e\x3de){let f,g\x3db;if(b\x26256)f\x3da[a.length-1];else{if(null\x3d\x3dd)return;f\x3da[e+(+!!(b\x26512)-1)]\x3d{};g\|
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 4a 61 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 76 61 72 20 65 5c 78 33 64 28 63 3f 61 2e 6a 3a 62 29 5b 41 5d 2c 66 5c 78 33 64 6f 61 28 65 29 2c 67 5c 78 33 64 21 31 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 74 61 29 7b 69 66 28 21 63 29 7b 62 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 29 3b 76 61 72 20 6b 3b 69 66 28 62 2e 6c 65 6e 67 74 68 5c 78 32 36 5c 78 32 36 42 28 6b 5c 78 33 64 62 5b 62 2e 6c 65 6e 67 74 68 2d 31 5d 29 29 66 6f 72 28 67 5c 78 33 64 30 3b 67 5c 78 33 63 64 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 64 5b 67 5d 5c 78 33 65 5c 78 33 64 66 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 5b 62 2e 6c 65 6e 67 74 68 2d Data Ascii: Ja(a,b,c){const d\x3da.constructor.B;var e\x3d(c?a.j:b)[A],f\x3doa(e),g\x3d!1;if(d\x26\x26ta){if(!c){b\x3dArray.prototype.slice.call(b);var k;if(b.length\x26\x26B(k\x3db[b.length-1]))for(g\x3d0;g\x3cd.length;g++)if(d[g]\x3e\x3df){Object.assign(b[b.length-
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 5c 78 33 64 46 3b 67 5c 78 32 36 5c 78 32 36 28 62 2e 6c 65 6e 67 74 68 5c 78 33 64 68 29 3b 74 5c 78 32 36 5c 78 32 36 62 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 4b 61 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 49 7b 7d 3b 76 61 72 20 4a 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 5c 78 33 64 21 31 29 7b 74 68 69 73 2e 6b 65 79 5c 78 33 64 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 5c 78 33 64 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 5c 78 33 64 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 7d 7d 3b 76 61 72 20 4c 61 5c 78 33 64 6e 65 77 20 4a 28 5c 78 32 32 31 30 30 30 30 30 5c 78 32 32 29 2c 4d 61 5c 78 33 64 6e 65 77 20 4a 28 5c 78 32 32 34 35 33 36 38 32 35 39 Data Ascii: \x3dF;g\x26\x26(b.length\x3dh);t\x26\x26b.push(t);return b};var Ka\x3dclass extends I{};var J\x3dclass{constructor(a,b\x3d!1){this.key\x3da;this.defaultValue\x3db;this.valueType\x3d\x22boolean\x22}};var La\x3dnew J(\x22100000\x22),Ma\x3dnew J(\x2245368259
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 33 64 66 7c 7c 33 35 5c 78 33 64 5c 78 33 64 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 5c 78 33 64 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 55 61 5c 78 33 64 2f 23 7c 24 2f 2c 56 61 5c 78 33 64 2f 5b 3f 5c 78 32 36 5d 28 24 7c 23 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 6c 65 74 20 62 5c 78 33 64 71 2c 63 5c 78 33 64 30 3b 66 6f 72 28 3b 62 5c 78 32 36 5c 78 32 36 34 30 5c 78 33 65 63 2b 2b 5c 78 32 36 5c 78 32 36 21 61 28 62 29 3b 29 61 3a 7b 74 72 79 7b 63 6f 6e 73 74 20 64 5c 78 33 64 62 2e 70 61 72 65 6e 74 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 64 21 5c 78 33 64 62 29 7b 62 5c 78 33 64 64 3b 62 72 65 61 6b 20 61 7d 7d 63 61 74 63 68 7b 7d 62 5c 78 33 64 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 29 7b 69 66 28 21 67 6c Data Ascii: 3df\|\|35\x3d\x3df)return b;b+\x3de+1}return-1}var Ua\x3d/#\|$/,Va\x3d/[?\x26]($\|#)/;function Wa(a){let b\x3dq,c\x3d0;for(;b\x26\x2640\x3ec++\x26\x26!a(b);)a:{try{const d\x3db.parent;if(d\x26\x26d!\x3db){b\x3dd;break a}}catch{}b\x3dnull}}function Xa(){if(!gl
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 68 2c 67 2c 76 6f 69 64 20 30 29 3b 30 5c 78 33 63 5c 78 33 64 6c 5c 78 32 36 5c 78 32 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 68 2c 6c 2c 31 29 7d 52 61 28 67 2c 5c 78 32 32 6c 6f 61 64 5c 78 32 32 2c 6b 29 3b 52 61 28 67 2c 5c 78 32 32 65 72 72 6f 72 5c 78 32 32 2c 6b 29 7d 3b 4e 28 67 2c 5c 78 32 32 6c 6f 61 64 5c 78 32 32 2c 6b 29 3b 4e 28 67 2c 5c 78 32 32 65 72 72 6f 72 5c 78 32 32 2c 6b 29 7d 64 5c 78 32 36 5c 78 32 36 28 67 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 5c 78 33 64 5c 78 32 32 6e 6f 2d 72 65 66 65 72 72 65 72 5c 78 32 32 29 3b 66 5c 78 32 36 5c 78 32 36 28 67 2e 61 74 74 72 69 62 75 74 69 6f 6e 53 72 Data Ascii: Array.prototype.indexOf.call(h,g,void 0);0\x3c\x3dl\x26\x26Array.prototype.splice.call(h,l,1)}Ra(g,\x22load\x22,k);Ra(g,\x22error\x22,k)};N(g,\x22load\x22,k);N(g,\x22error\x22,k)}d\x26\x26(g.referrerPolicy\x3d\x22no-referrer\x22);f\x26\x26(g.attributionSr
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 29 7b 7d 7d 7d 2c 66 62 3b 63 6c 61 73 73 20 6d 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 5c 78 33 64 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 5c 78 33 64 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 5c 78 33 64 62 2e 6d 65 73 73 61 67 65 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 68 69 73 2e 69 64 5c 78 33 64 62 2e 69 64 7c 7c 5c 78 32 32 6a 73 65 72 72 6f 72 5c 78 32 32 3b 74 68 69 73 2e 6d 65 74 61 5c 78 33 64 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 6e 62 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 5c 78 32 32 Data Ascii: ){}}},fb;class mb{constructor(a,b){this.error\x3da;this.context\x3db.context;this.msg\x3db.message\|\|\x22\x22;this.id\x3db.id\|\|\x22jserror\x22;this.meta\x3d{}}};const nb\x3dRegExp(\x22^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)\x22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.5	50714	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:43 UTC	2249	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:44 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:44 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:44 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 76 69 73 69 74 65 64 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 68 6f 76 65 72 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 6c 31 70 32 39 22 20 78 2d 70 68 61 73 65 3d 22 61 73 73 65 6d 62 6c 65 22 3e 2e 6e 73 2d 6c 31 70 32 39 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 37 35 30 70 78 3b Data Ascii: ic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019"></script><style data-nl="stacked_layout" data-ns="ns-l1p29" x-phase="assemble">.ns-l1p29-l-stacked_layout{opacity:.01;position:absolute;top:0;left:0;display:block;width:750px;
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 65 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 35 2e 30 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 32 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 33 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 35 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 36 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 38 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 39 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 Data Ascii: ex;min-height:95.03px;width:100%;position:relative;}.ns-l1p29-e-5,.ns-l1p29-e-20,.ns-l1p29-e-35,.ns-l1p29-e-50,.ns-l1p29-e-66,.ns-l1p29-e-81,.ns-l1p29-e-96,.ns-l1p29-e-111{box-sizing:border-box;display:flex;flex-direction:column;flex:1 1 auto;justify-cont
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 38 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 7d 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 32 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 34 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 35 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 37 32 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 38 37 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 32 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 37 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 Data Ascii: ,.ns-l1p29-e-85,.ns-l1p29-e-100,.ns-l1p29-e-115{font-weight:700;line-height:1.2;min-height:1.3em;text-overflow:ellipsis;}.ns-l1p29-e-11,.ns-l1p29-e-26,.ns-l1p29-e-41,.ns-l1p29-e-56,.ns-l1p29-e-72,.ns-l1p29-e-87,.ns-l1p29-e-102,.ns-l1p29-e-117{box-sizing:b
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 76 2d 30 20 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 76 2d 30 20 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 6c 31 70 32 39 22 20 78 2d 70 68 61 73 65 3d 22 64 65 63 6f 72 61 74 65 22 3e 2e 6e 73 2d 6c 31 70 32 39 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 74 69 74 6c 65 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: 5,.ns-l1p29-v-0 .ns-l1p29-e-100,.ns-l1p29-v-0 .ns-l1p29-e-115{font-size:18px;display:block;}</style><style data-nl="stacked_layout" data-ns="ns-l1p29" x-phase="decorate">.ns-l1p29-l-stacked_layout{opacity:1;position:relative;}.title:hover{text-decoration:
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 65 2d 37 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 37 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 37 37 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 38 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 39 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 39 32 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 35 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 30 37 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 32 30 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 32 32 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 31 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 32 36 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 34 31 2c 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 35 36 Data Ascii: e-71,.ns-l1p29-e-75,.ns-l1p29-e-77,.ns-l1p29-e-86,.ns-l1p29-e-90,.ns-l1p29-e-92,.ns-l1p29-e-101,.ns-l1p29-e-105,.ns-l1p29-e-107,.ns-l1p29-e-116,.ns-l1p29-e-120,.ns-l1p29-e-122{white-space:nowrap;}.ns-l1p29-e-11,.ns-l1p29-e-26,.ns-l1p29-e-41,.ns-l1p29-e-56
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 31 30 37 35 32 39 38 30 31 35 31 34 38 36 32 36 36 35 38 35 2f 31 34 37 36 33 30 30 34 36 35 38 31 31 37 37 38 39 35 33 37 29 3b 7d 2e 6e 73 2d 6c 31 70 32 39 2d 65 2d 36 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 Data Ascii: repeat:no-repeat;background-size:contain;background-position:center;cursor:pointer;background-image:url(https://tpc.googlesyndication.com/simgad/10752980151486266585/14763004658117789537);}.ns-l1p29-e-65{background-color:#cccccc;background-repeat:no-repea
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 6d 2c 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 65 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: he Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,b){function
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 6f 3d 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 29 7b 6c 65 74 20 62 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 62 2b 2b 7d 63 6f 6e 73 74 20 6b 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 6c 65 74 20 63 2c 64 3b 66 6f 72 28 6c 65 74 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 63 20 69 6e 20 64 29 Data Ascii: o=null};function ja(a){let b=0;for(const c in a)b++}const ka="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");function la(a,b){let c,d;for(let e=1;e<arguments.length;e++){d=arguments[e];for(c in d)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.5	50710	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:43 UTC	2253	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:43 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:43 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:43 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:100
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 62 61 6e 6e 65 72 42 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 6f 69 39 6c 6c 22 20 78 2d 70 68 61 73 65 3d 22 61 73 73 65 6d 62 6c 65 22 3e 2e 6e 73 2d 6f 69 39 6c 6c 2d 6c 2d 62 61 6e 6e 65 72 42 7b Data Ascii: t-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><style data-nl="bannerB" data-ns="ns-oi9ll" x-phase="assemble">.ns-oi9ll-l-bannerB{
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 2d 38 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 68 65 69 67 68 74 3a 38 34 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 30 2e 35 70 78 20 73 6f 6c 69 64 20 23 65 66 65 66 65 66 3b 7d 2e 6e 73 2d 6f 69 39 6c 6c 2d 65 2d 39 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 35 2e 36 70 78 20 31 32 70 78 3b 7d 2e 6e Data Ascii: -8{box-sizing:border-box;flex-shrink:0;display:flex;flex-direction:row;align-items:center;justify-content:space-between;height:84px;width:100%;border-top:0.5px solid #efefef;}.ns-oi9ll-e-9{display:block;max-height:100%;max-width:100%;margin:5.6px 12px;}.n
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 61 6d 65 73 20 62 6f 75 6e 63 65 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 2d 69 6e 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 30 25 29 3b 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 25 29 3b 66 69 6c 74 65 72 3a 6f 70 61 63 69 74 79 28 31 30 30 25 29 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 73 6c Data Ascii: ames bounce{from{transform:translateY(-100%);filter:opacity(0%);}to{transform:translateY(0%);filter:opacity(100%);}} @keyframes slide-in{from{transform:translateX(-100%);filter:opacity(0%);}to{transform:translateX(0%);filter:opacity(100%);}} @keyframes sl
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 3a 31 3b 7d 2e 6e 73 2d 6f 69 39 6c 6c 2d 65 2d 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 7d 2e 6e 73 2d 6f 69 39 6c 6c 2d 65 2d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 23 66 66 66 20 30 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 25 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 6f 69 39 6c 6c 2d 65 2d 31 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 32 39 39 35 30 37 36 32 31 33 34 36 39 36 31 31 35 32 Data Ascii: :1;}.ns-oi9ll-e-6{font-family:"Roboto",Roboto,Arial,sans-serif;}.ns-oi9ll-e-7{background-image:linear-gradient(0deg,#fff 0%,transparent 0%);white-space:nowrap;}.ns-oi9ll-e-10{background-image:url(https://tpc.googlesyndication.com/simgad/299507621346961152
2024-01-15 13:24:43 UTC	1252	IN	Data Raw: 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 3d 3e 62 26 26 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 71 26 26 30 3c 71 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 77 28 29 3f 75 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 76 28 22 43 68 72 6f 6d 65 22 29 7c 7c 76 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 77 28 29 Data Ascii: me(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(b=f.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function w(){return g?!!q&&0<q.brands.length:!1}function x(){return w()?u("Chromium"):(v("Chrome")\|\|v("CriOS"))&&!(w()
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 3d 22 2b 63 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 22 26 22 2b 62 2b 22 3d 22 3b 6c 65 74 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 6e 29 3b 30 3e 72 3f 63 3d 61 2b 6e 2b 63 3a 28 72 2b 3d 6e 2e 6c 65 6e 67 74 68 2c 6e 3d 61 2e 69 6e 64 65 78 4f 66 28 22 26 22 2c 72 29 2c 63 3d 30 3c 3d 6e 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 2b 61 2e 73 75 62 73 74 72 69 6e 67 28 6e 29 3a 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 2b 63 29 7d 72 65 74 75 72 6e 20 36 45 34 3c 63 2e 6c 65 6e 67 74 68 3f 76 6f 69 64 20 30 21 3d 3d 64 3f 4f 28 61 2c 62 2c 64 2c 76 6f 69 64 20 30 2c 65 29 3a 61 3a 63 7d 3b 76 61 72 20 50 3d 77 69 6e 64 6f 77 3b 63 6f 6e 73 74 20 51 3d 5b 48 2c 49 2c 4b 2c 4a 2c 47 2c 46 28 22 6d 61 72 6b 65 74 22 29 2c 46 28 22 69 74 6d Data Ascii: ="+c);else{var n="&"+b+"=";let r=a.indexOf(n);0>r?c=a+n+c:(r+=n.length,n=a.indexOf("&",r),c=0<=n?a.substring(0,r)+c+a.substring(n):a.substring(0,r)+c)}return 6E4<c.length?void 0!==d?O(a,b,d,void 0,e):a:c};var P=window;const Q=[H,I,K,J,G,F("market"),F("itm
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 62 61 29 7b 76 61 72 20 62 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 53 29 7b 53 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 66 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 53 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 62 64 65 69 64 3d 28 5b 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 53 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 63 61 28 61 29 7b 61 26 26 56 26 26 57 28 29 26 26 28 56 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f Data Ascii: >{var a;if(a=ba){var b;if(null===S){S="";try{a="";try{a=f.top.location.hash}catch(c){a=f.location.hash}a&&(S=(b=a.match(/\bdeid=([\d,]+)/))?b[1]:"")}catch(c){}}b=S;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function ca(a){a&&V&&W()&&(V.clearMarks(`goo
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 61 64 22 2c 65 61 2c 21 31 29 7d 3b 77 69 6e 64 6f 77 2e 62 67 7a 3d 61 3d 3e 7b 69 66 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 7b 76 61 72 20 62 3d 4f 28 61 2e 68 72 65 66 2c 22 62 67 22 2c 22 31 30 22 29 3b 76 61 72 20 63 3d 52 28 29 3b 69 66 28 21 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 29 7b 76 61 72 20 64 3d 4e 28 62 2c 51 29 3b 64 3d 3d 3d 43 26 26 63 28 62 29 3b 62 3d 64 7d 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 76 61 72 20 65 3d 62 3b 65 6c 73 65 20 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 65 3d 62 3b 65 6c 73 65 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 62 3a 7b 74 72 79 7b 65 3d 6e 65 77 20 55 52 4c 28 62 29 7d 63 61 74 63 68 28 6e 29 7b 65 3d 22 68 74 74 70 73 3a Data Ascii: ad",ea,!1)};window.bgz=a=>{if(a=document.getElementById(a)){var b=O(a.href,"bg","10");var c=R();if(!(b instanceof A)){var d=N(b,Q);d===C&&c(b);b=d}if(b instanceof A)var e=b;else if(b instanceof A)e=b;else{b=String(b);b:{try{e=new URL(b)}catch(n){e="https:
2024-01-15 13:24:44 UTC	1252	IN	Data Raw: 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 3d 6d 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 3d 62 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 62 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 64 61 3f 21 21 75 26 26 30 3c 75 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 42 28 29 7b 72 65 74 75 72 6e 20 7a 28 29 3f 76 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 7a 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 Data Ascii: -1!=b.indexOf(a)):!1:!1}function x(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function z(){return da?!!u&&0<u.brands.length:!1}function B(){return z()?v("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(z()?0:x("Edge"))\|\|x("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.5	50717	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:45 UTC	1583	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325078563&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&_ee=1&tfd=6832 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:45 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.5	50721	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:45 UTC	852	OUT	GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:46 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:45 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-__Lc3y8pMxrWfeQXECCWsQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 37 63 36 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7c65if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4d 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.M),reject:g(this.o)}};e.prototype.M=function(g){if(g===this)this.o(new TypeErr
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 6c 28 77 28 7a 29 29 7d 63 61 74 63 68 28 47 29 7b 6e 28 47 29 7d 7d 3a 79 7d 76 61 72 20 6c 2c 6e 2c 72 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 29 7b 6c 3d 77 3b 6e 3d 79 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 Data Ascii: l(w(z))}catch(G){n(G)}}:y}var l,n,r=new e(function(w,y){l=w;n=y});this.kb(k(g,l),k(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.kb=function(g,h){function k(){switch(l.g){case 1:g(l.i);break;case 2:h(l.i);break;defa
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 66 28 21 71 61 28 6b 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 62 3b 63 61 28 6b 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 69 66 Data Ascii: ion c(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===l}function d(k){if(!qa(k,f)){var l=new b;ca(k,f,{value:l})}}function e(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return l(n)})}if
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 55 3f 6c 2e 55 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 55 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6d 61 3a 74 68 69 73 5b 31 5d 2e 6d 61 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 55 29 2c 74 68 69 73 5b 31 5d 2e 6d 61 2e 6e 65 78 74 3d 6c 2e 55 2c 74 68 69 73 5b 31 5d 2e 6d 61 3d 6c 2e 55 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: 0],k[1])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.U?l.U.value=k:(l.U={next:this[1],ma:this[1].ma,head:this[1],key:h,value:k},l.list.push(l.U),this[1].ma.next=l.U,this[1].ma=l.U,this.size++);return thi
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 70 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 Data Ascii: \|-Infinity===b\|\|0===b)return b;var c=Math.floor(Math.abs(b));return 0>b?-c:c}});p("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push(b[d]);return c}});p("Object.is",function(a){return a?a:function(b,c){return b===c?0
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 Data Ascii: pe[Symbol.iterator]=b.prototype.values;b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 6c 3d 3d 64 7c 7c 64 3e 65 29 64 3d 65 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: l==d\|\|d>e)d=e;d=Number(d);0>d&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fi
2024-01-15 13:24:46 UTC	1656	IN	Data Raw: 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 44 61 2c 48 61 2c 4d 61 2c 51 61 2c 54 61 2c 56 61 2c 57 61 2c 58 61 2c 24 61 2c 6d 62 2c 73 62 2c 72 62 2c 77 62 2c 79 62 2c 78 62 2c 7a 62 2c 41 62 2c 45 62 2c 57 62 2c 5a 62 2c 24 62 2c 62 63 2c 65 63 2c 63 63 2c 64 63 2c 66 63 2c 67 63 2c 6a 63 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 Data Ascii: 9*Math.random()>>>0);}catch(e){_._DumpException(e)}try{var Da,Ha,Ma,Qa,Ta,Va,Wa,Xa,$a,mb,sb,rb,wb,yb,xb,zb,Ab,Eb,Wb,Zb,$b,bc,ec,cc,dc,fc,gc,jc;_.ya=function(a){_.t.setTimeout(function(){throw a;},0)};_.za=function(){var a=_.t.navigator;return a&&(a=a.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.5	50726	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaSg4zHizPyZZW0-KuYP840tSLcBVkjl-c0CG-wzVfUDMgu1PfJf-_x4DuhilA82OjwXqMQwTf0-HqYZ0AGBO4Poe2yXEQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:46 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:46 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.5	50735	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	1008	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	1173	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 148 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUXZcSkdqm3SS33krqDPRAS0U; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aNnoeUyg6ArrA7uaPUXZcSkdqm3SS33krqDPRAS0U; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70dd9a210592-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:46 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-01-15 13:24:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.5	50736	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	1006	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	1171	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 5 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=agnoeUSkTsuAutosiaUYpwGWJN3UQv6qZa2PRAMZai; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=agnoeUSkTsuAutosiaUYpwGWJN3UQv6qZa2PRAMZai; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70dd5f1d3988-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:46 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-01-15 13:24:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.5	50739	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	779	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmSTDwt9l1q1_zfjzXusC15-xLqElAFaLN4lRG3GU0Kt19Jv_r5XLJToimzGJBuE27SxUYLqn5KD1lpxb08iEGukFKbNDWFuBeVV HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=65A5321E5DB2FE1C61614D25BLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Mon, 15 Jan 2024 13:24:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.5	50728	34.237.132.177	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	772	OUT	GET /CookieSyncAdX?google_gid=CAESENoQvShuFmYAxY_g8zYxFwA&google_cver=1&google_push=AXcoOmRGPhaRkdW-5noDQ29WO8myrSXoTNTSFOMBjKp5UdUZGNPva3IDPB9lRXzkyTDu_u4hrLqyBJQEpT7QZl9Czjto_mLSCVXL6Zln HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	128	IN	HTTP/1.1 204 No Content Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.5	50732	34.237.132.177	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	772	OUT	GET /CookieSyncAdX?google_gid=CAESENoQvShuFmYAxY_g8zYxFwA&google_cver=1&google_push=AXcoOmT1fscSJpInLvMtM25stHAE4eyen3OEig17UK5QdTqvHV2BJXATNxKObbrVVL5XlHh2yIjFtw0wvmVbN9qeQw3TVdMJX_GWrsWv HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	128	IN	HTTP/1.1 204 No Content Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.5	50731	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	862	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:24:46 UTC	488	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo&google_hm=82nPL-gDAe41xcnm3Ha0dg Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.5	50740	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	778	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmTn9eVpy14MXGk_dExzxp5GC6SOe9qyB9WTXmQtWtMMysp1DNpLyZupIsFZ3VSKeU8nKLh6FSm463pTbQpYhoyrgk5kQ0gsH5E HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	277	IN	HTTP/1.1 204 No Content Set-Cookie: b=65A5321EFD370CDA819C147DBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Date: Mon, 15 Jan 2024 13:24:46 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.5	50737	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	866	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmQavkCXRN6T-tQpfQALC0v0io53FZK15wAAJS2_oNoe-hPxeogIzIO5obwMoSvg3Ga6InZuy_m0vkOC-_Gic4Cvg9EqFl1vs5Sa HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSABKAIyCwiI6a_ggPbKPBAFOAE.
2024-01-15 13:24:46 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI1OrI_-v1yjwQBRgFIAIoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:46 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.5	50745	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	3215	OUT	GET /pagead/adview?ai=Ct9ezGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE4wFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfj0uUe7cIbsotBFCdQ4ZZ4DzMRuNRq4QSgID_UeOCZ6o6fGisHYNMAE8ILHpM0EiAXJz5fFSZIFBAgEGAGSBQQIBRgEoAYugAfZx3qoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBCnuQXSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WN-w2_6-34MDmgmjAWh0dHBzOi8vd3d3LmljaXMuY29tL2V4cGxvcmUvYWJvdXQvP2NtcGlkPURTQyU3Q0lDSVMlN0NDSExFRy0yMDIzLTA4MTYtR0xPQkFMLUJyYW5kX1Bvd2VyaW5nX1Byb2dyZXNzJnNmaWQ9NzAxNEcwMDAwMDFvR3U0UUFFJnBsYWNlbWVudD1teWxvdmVseWJsdWVza3kuY29tJnRhcmdldD2ACgHICwGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDuBPkA9gTDYgUBNAVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=iiuBgqjeOlQ&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOyGAE&template_id=484&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:46 UTC	1209	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x76371619ca0a59370000000000000000","2":"0xe1892f1000ab92870000000000000000","3":"0xd4416ed955b2cfbd0000000000000000","4":"0xec7f187deffee7530000000000000000","5":"0xc3d08ef2e4a02d7a0000000000000000"},"debug_key":"6747890747433205397","debug_reporting":true,"destination":"https://icis.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1071733775"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"15789507991564936529"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:46 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.5	50738	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	866	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmR-j4hh_95gwON9ls589CFfcje7uT58V2DD1lIH9lkpk57Ftkgml53S_Q_jSzedNi1kmHSxZgqHguLF1YNovQ0pooRXeltbXc5B HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAEYBSABKAIyCwiI6a_ggPbKPBAFOAE.
2024-01-15 13:24:46 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIqNf1_-v1yjwQBRgFIAIoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:46 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:46 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.5	50744	35.236.220.17	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	762	OUT	GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmTr_oCoE_Oxasl-Qr1eZ6qwU_dQ93wP1v-V0I_G7SfDLSnuZ496WS51_ZFewAUUtMpD-FpDnDJ6QvyabiFB-JplDHu21XCCn6U HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:46 UTC	1034	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 15 Jan 2024 13:24:46 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: suid=690F5FB948B2412881DA26E47E140F91; Path=/; domain=simpli.fi; Expires=Wed, 15-Jan-25 13:24:46 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=690F5FB948B2412881DA26E47E140F91; Path=/; domain=simpli.fi; Expires=Wed, 15-Jan-25 13:24:46 GMT; Secure; Location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTr_oCoE_Oxasl-Qr1eZ6qwU_dQ93wP1v-V0I_G7SfDLSnuZ496WS51_ZFewAUUtMpD-FpDnDJ6QvyabiFB-JplDHu21XCCn6U Expires: Sun, 14 Jan 2024 13:24:46 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-15 13:24:46 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.5	50749	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	2697	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:46 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 23 67 6f 6f 67 6c 65 5f 73 63 61 6c 69 6e 67 5f 64 69 76 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 2c 31 2e 31 32 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 36 31 30 34 30 31 33 30 31 2c 21 31 29 2c 64 61 5c 78 33 64 61 61 28 35 37 32 34 31 37 33 39 32 2c 21 30 29 3b 76 61 72 20 75 3b 63 6f 6e 73 74 20 65 61 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 75 5c 78 33 64 65 61 3f 65 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 72 65 74 75 72 6e 20 63 61 3f 75 3f 75 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 5c 78 33 64 5c 78 33 65 62 5c 78 32 36 5c 78 32 36 2d 31 21 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 5c 78 33 64 62 2e 75 73 65 Data Ascii: 610401301,!1),da\x3daa(572417392,!0);var u;const ea\x3dq.navigator;u\x3dea?ea.userAgentData\|\|null:null;function fa(a){return ca?u?u.brands.some(({brand:b})\x3d\x3eb\x26\x26-1!\x3db.indexOf(a)):!1:!1}function w(a){var b;a:{if(b\x3dq.navigator)if(b\x3db.use
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 6c 65 74 20 73 61 2c 74 61 5c 78 33 64 21 64 61 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 5c 78 33 64 61 5b 41 5d 7c 30 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e Data Ascii: a\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}let sa,ta\x3d!da;function ua(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d\x3da[A]\|0;if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 36 28 61 5b 41 5d 7c 30 29 5c 78 32 36 32 3f 61 3a 46 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 78 33 64 5c 78 33 64 64 2c 65 2c 66 29 3b 65 6c 73 65 20 69 66 28 42 28 61 29 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 6b 20 69 6e 20 61 29 67 5b 6b 5d 5c 78 33 64 45 61 28 61 5b 6b 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 61 5c 78 33 64 67 7d 65 6c 73 65 20 61 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 64 7c 7c 63 3f 61 5b 41 5d 7c 30 3a 30 3b 64 5c 78 33 64 64 3f 21 21 28 67 5c 78 32 36 33 32 29 3a 76 6f 69 64 20 30 3b 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 Data Ascii: 26(a[A]\|0)\x262?a:Fa(a,b,c,void 0!\x3d\x3dd,e,f);else if(B(a)){const g\x3d{};for(let k in a)g[k]\x3dEa(a[k],b,c,d,e,f);a\x3dg}else a\x3db(a,d);return a}}function Fa(a,b,c,d,e,f){const g\x3dd\|\|c?a[A]\|0:0;d\x3dd?!!(g\x2632):void 0;a\x3dArray.prototype.slice
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 62 7c 5c 78 33 64 36 34 3b 76 61 72 20 64 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 28 2d 2d 64 2c 42 28 63 5b 64 5d 29 29 29 7b 62 7c 5c 78 33 64 32 35 36 3b 63 5c 78 33 64 64 2d 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 5c 78 33 63 5c 78 33 64 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 78 33 64 62 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 63 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 61 5b 41 5d 5c 78 33 64 62 7d 74 68 69 73 2e 6a 5c 78 33 64 61 7d 74 6f 4a 53 4f 4e 28 29 7b 69 66 28 73 61 29 76 61 72 20 61 5c 78 33 64 4a 61 28 74 68 69 73 2c 74 68 69 73 2e 6a 2c 21 31 29 3b 65 6c 73 65 20 61 5c 78 33 64 46 61 28 74 68 69 73 2e 6a 2c 47 61 2c 76 6f 69 64 Data Ascii: b\|\x3d64;var d\x3dc.length;if(d\x26\x26(--d,B(c[d]))){b\|\x3d256;c\x3dd-(+!!(b\x26512)-1);if(1024\x3c\x3dc)throw Error();b\x3db\x26-16760833\|(c\x261023)\x3c\x3c14}}a[A]\x3db}this.j\x3da}toJSON(){if(sa)var a\x3dJa(this,this.j,!1);else a\x3dFa(this.j,Ga,void
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 36 5c 78 32 36 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 73 69 7a 65 29 61 5c 78 33 64 6e 75 6c 6c 3b 61 21 5c 78 33 64 6b 5c 78 32 36 5c 78 32 36 28 63 5c 78 33 64 21 30 29 7d 6e 75 6c 6c 21 5c 78 33 64 61 3f 66 5b 76 5d 5c 78 33 64 61 3a 63 5c 78 33 64 21 30 7d 69 66 28 63 29 7b 66 6f 72 28 6c 65 74 20 79 20 69 6e 20 66 29 7b 74 5c 78 33 64 66 3b 62 72 65 61 6b 20 61 7d 74 5c 78 33 64 6e 75 6c 6c 7d 7d 74 21 5c 78 33 64 6d 5c 78 32 36 5c 78 32 36 28 70 5c 78 33 64 21 30 29 3b 68 2d 2d 7d 66 6f 72 28 65 5c 78 33 64 2b 21 21 28 65 5c 78 32 36 35 31 32 29 2d 31 3b 30 5c 78 33 63 68 3b 68 2d 2d 29 7b 76 5c 78 33 64 68 2d 31 3b 6d 5c 78 33 64 62 5b 76 5d 3b 69 66 28 21 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 6d 7c 7c 21 6c 61 5c 78 32 36 5c 78 32 36 75 Data Ascii: 26\x260\x3d\x3d\x3da.size)a\x3dnull;a!\x3dk\x26\x26(c\x3d!0)}null!\x3da?f[v]\x3da:c\x3d!0}if(c){for(let y in f){t\x3df;break a}t\x3dnull}}t!\x3dm\x26\x26(p\x3d!0);h--}for(e\x3d+!!(e\x26512)-1;0\x3ch;h--){v\x3dh-1;m\x3db[v];if(!(null\x3d\x3dm\|\|!la\x26\x26u
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 20 61 2e 73 3b 62 5c 78 33 64 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 5c 78 33 64 62 7d 3b 76 61 72 20 53 61 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 5c 78 33 64 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 5c 78 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 54 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 30 5c Data Ascii: a.s;b\x3dnew a;return a.s\x3db};var Sa\x3dRegExp(\x22^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?\x3d[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$\x22);function Ta(a,b,c,d){for(var e\x3dc.length;0\
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 5c 78 32 32 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 5c 78 32 32 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 62 28 61 2c 62 5c 78 33 64 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 5c 78 33 64 6e 75 6c 6c 2c 64 5c 78 33 64 21 31 2c 65 5c 78 33 64 21 31 29 7b 62 62 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 62 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 5c 78 33 64 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 Data Ascii: 0))):a.addEventListener(\x22DOMContentLoaded\x22,b)};function ab(a,b\x3ddocument){return b.createElement(String(a).toLowerCase())};function Q(a,b,c\x3dnull,d\x3d!1,e\x3d!1){bb(a,b,c,!1,d,e)}function bb(a,b,c,d,e,f\x3d!1){a.google_image_requests\|\|(a.google
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 2e 67 5c 78 33 64 7b 7d 7d 7d 3b 76 61 72 20 67 62 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 5c 78 33 64 65 62 28 64 62 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 32 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 5c 78 32 32 29 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 5c 78 33 64 5c 78 32 32 5c 78 32 32 3b 66 6f 72 28 6c 65 74 20 63 5c 78 33 64 30 3b 63 5c 78 33 63 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 Data Ascii: .g\x3d{}}};var gb\x3dclass extends hb{constructor(){super();var a\x3deb(db,document.currentScript);a\x3da\x26\x26a.getAttribute(\x22data-jc-flags\x22)\|\|\x22\x22;try{const b\x3dJSON.parse(a)[0];a\x3d\x22\x22;for(let c\x3d0;c\x3cb.length;c++)a+\x3dString.fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.5	50751	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	2707	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 23 67 6f 6f 67 6c 65 5f 73 63 61 6c 69 6e 67 5f 64 69 76 20 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 2c 31 2e 31 32 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 32 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3cstyle\x3e#google_scaling_div {-webkit-transform: scale(1.12,1.12);-moz-transform: scale(1.12
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 36 31 30 34 30 31 33 30 31 2c 21 31 29 2c 64 61 5c 78 33 64 61 61 28 35 37 32 34 31 37 33 39 32 2c 21 30 29 3b 76 61 72 20 75 3b 63 6f 6e 73 74 20 65 61 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 75 5c 78 33 64 65 61 3f 65 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 72 65 74 75 72 6e 20 63 61 3f 75 3f 75 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 28 7b 62 72 61 6e 64 3a 62 7d 29 5c 78 33 64 5c 78 33 65 62 5c 78 32 36 5c 78 32 36 2d 31 21 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3b 61 3a 7b 69 66 28 62 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 62 5c 78 33 64 62 2e 75 73 65 Data Ascii: 610401301,!1),da\x3daa(572417392,!0);var u;const ea\x3dq.navigator;u\x3dea?ea.userAgentData\|\|null:null;function fa(a){return ca?u?u.brands.some(({brand:b})\x3d\x3eb\x26\x26-1!\x3db.indexOf(a)):!1:!1}function w(a){var b;a:{if(b\x3dq.navigator)if(b\x3db.use
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 5c 78 32 36 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 78 32 36 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 78 33 64 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 7d 6c 65 74 20 73 61 2c 74 61 5c 78 33 64 21 64 61 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 5c 78 33 64 61 5b 41 5d 7c 30 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e Data Ascii: a\x26\x26\x22object\x22\x3d\x3d\x3dtypeof a\x26\x26!Array.isArray(a)\x26\x26a.constructor\x3d\x3d\x3dObject}let sa,ta\x3d!da;function ua(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d\x3da[A]\|0;if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 36 28 61 5b 41 5d 7c 30 29 5c 78 32 36 32 3f 61 3a 46 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 5c 78 33 64 5c 78 33 64 64 2c 65 2c 66 29 3b 65 6c 73 65 20 69 66 28 42 28 61 29 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 7b 7d 3b 66 6f 72 28 6c 65 74 20 6b 20 69 6e 20 61 29 67 5b 6b 5d 5c 78 33 64 45 61 28 61 5b 6b 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 61 5c 78 33 64 67 7d 65 6c 73 65 20 61 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 63 6f 6e 73 74 20 67 5c 78 33 64 64 7c 7c 63 3f 61 5b 41 5d 7c 30 3a 30 3b 64 5c 78 33 64 64 3f 21 21 28 67 5c 78 32 36 33 32 29 3a 76 6f 69 64 20 30 3b 61 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 Data Ascii: 26(a[A]\|0)\x262?a:Fa(a,b,c,void 0!\x3d\x3dd,e,f);else if(B(a)){const g\x3d{};for(let k in a)g[k]\x3dEa(a[k],b,c,d,e,f);a\x3dg}else a\x3db(a,d);return a}}function Fa(a,b,c,d,e,f){const g\x3dd\|\|c?a[A]\|0:0;d\x3dd?!!(g\x2632):void 0;a\x3dArray.prototype.slice
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 62 7c 5c 78 33 64 36 34 3b 76 61 72 20 64 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 28 2d 2d 64 2c 42 28 63 5b 64 5d 29 29 29 7b 62 7c 5c 78 33 64 32 35 36 3b 63 5c 78 33 64 64 2d 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 3b 69 66 28 31 30 32 34 5c 78 33 63 5c 78 33 64 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 62 5c 78 33 64 62 5c 78 32 36 2d 31 36 37 36 30 38 33 33 7c 28 63 5c 78 32 36 31 30 32 33 29 5c 78 33 63 5c 78 33 63 31 34 7d 7d 61 5b 41 5d 5c 78 33 64 62 7d 74 68 69 73 2e 6a 5c 78 33 64 61 7d 74 6f 4a 53 4f 4e 28 29 7b 69 66 28 73 61 29 76 61 72 20 61 5c 78 33 64 4a 61 28 74 68 69 73 2c 74 68 69 73 2e 6a 2c 21 31 29 3b 65 6c 73 65 20 61 5c 78 33 64 46 61 28 74 68 69 73 2e 6a 2c 47 61 2c 76 6f 69 64 Data Ascii: b\|\x3d64;var d\x3dc.length;if(d\x26\x26(--d,B(c[d]))){b\|\x3d256;c\x3dd-(+!!(b\x26512)-1);if(1024\x3c\x3dc)throw Error();b\x3db\x26-16760833\|(c\x261023)\x3c\x3c14}}a[A]\x3db}this.j\x3da}toJSON(){if(sa)var a\x3dJa(this,this.j,!1);else a\x3dFa(this.j,Ga,void
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 36 5c 78 32 36 30 5c 78 33 64 5c 78 33 64 5c 78 33 64 61 2e 73 69 7a 65 29 61 5c 78 33 64 6e 75 6c 6c 3b 61 21 5c 78 33 64 6b 5c 78 32 36 5c 78 32 36 28 63 5c 78 33 64 21 30 29 7d 6e 75 6c 6c 21 5c 78 33 64 61 3f 66 5b 76 5d 5c 78 33 64 61 3a 63 5c 78 33 64 21 30 7d 69 66 28 63 29 7b 66 6f 72 28 6c 65 74 20 79 20 69 6e 20 66 29 7b 74 5c 78 33 64 66 3b 62 72 65 61 6b 20 61 7d 74 5c 78 33 64 6e 75 6c 6c 7d 7d 74 21 5c 78 33 64 6d 5c 78 32 36 5c 78 32 36 28 70 5c 78 33 64 21 30 29 3b 68 2d 2d 7d 66 6f 72 28 65 5c 78 33 64 2b 21 21 28 65 5c 78 32 36 35 31 32 29 2d 31 3b 30 5c 78 33 63 68 3b 68 2d 2d 29 7b 76 5c 78 33 64 68 2d 31 3b 6d 5c 78 33 64 62 5b 76 5d 3b 69 66 28 21 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 6d 7c 7c 21 6c 61 5c 78 32 36 5c 78 32 36 75 Data Ascii: 26\x260\x3d\x3d\x3da.size)a\x3dnull;a!\x3dk\x26\x26(c\x3d!0)}null!\x3da?f[v]\x3da:c\x3d!0}if(c){for(let y in f){t\x3df;break a}t\x3dnull}}t!\x3dm\x26\x26(p\x3d!0);h--}for(e\x3d+!!(e\x26512)-1;0\x3ch;h--){v\x3dh-1;m\x3db[v];if(!(null\x3d\x3dm\|\|!la\x26\x26u
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 20 61 2e 73 3b 62 5c 78 33 64 6e 65 77 20 61 3b 72 65 74 75 72 6e 20 61 2e 73 5c 78 33 64 62 7d 3b 76 61 72 20 53 61 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 5c 78 33 64 5b 5c 5c 5c 5c 5c 5c 5c 5c 2f 3f 23 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 5c 5c 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 5c 5c 5c 73 5c 5c 5c 5c 53 5d 2a 29 29 3f 24 5c 78 32 32 29 3b 66 75 6e 63 74 69 6f 6e 20 54 61 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 5c 78 33 64 63 2e 6c 65 6e 67 74 68 3b 30 5c Data Ascii: a.s;b\x3dnew a;return a.s\x3db};var Sa\x3dRegExp(\x22^(?:([^:/?#.]+):)?(?://(?:([^\\\\\\\\/?#])@)?([^\\\\\\\\/?#]?)(?::([0-9]+))?(?\x3d[\\\\\\\\/?#]\|$))?([^?#]+)?(?:\\\\?([^#]))?(?:#([\\\\s\\\\S]))?$\x22);function Ta(a,b,c,d){for(var e\x3dc.length;0\
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 5c 78 32 32 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 5c 78 32 32 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 62 28 61 2c 62 5c 78 33 64 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 5c 78 33 64 6e 75 6c 6c 2c 64 5c 78 33 64 21 31 2c 65 5c 78 33 64 21 31 29 7b 62 62 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 62 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 5c 78 33 64 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 Data Ascii: 0))):a.addEventListener(\x22DOMContentLoaded\x22,b)};function ab(a,b\x3ddocument){return b.createElement(String(a).toLowerCase())};function Q(a,b,c\x3dnull,d\x3d!1,e\x3d!1){bb(a,b,c,!1,d,e)}function bb(a,b,c,d,e,f\x3d!1){a.google_image_requests\|\|(a.google
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 2e 67 5c 78 33 64 7b 7d 7d 7d 3b 76 61 72 20 67 62 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 68 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 5c 78 33 64 65 62 28 64 62 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 5c 78 32 32 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 5c 78 32 32 29 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 5c 78 33 64 5c 78 32 32 5c 78 32 32 3b 66 6f 72 28 6c 65 74 20 63 5c 78 33 64 30 3b 63 5c 78 33 63 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 5c 78 33 64 53 74 72 69 6e 67 2e 66 72 Data Ascii: .g\x3d{}}};var gb\x3dclass extends hb{constructor(){super();var a\x3deb(db,document.currentScript);a\x3da\x26\x26a.getAttribute(\x22data-jc-flags\x22)\|\|\x22\x22;try{const b\x3dJSON.parse(a)[0];a\x3d\x22\x22;for(let c\x3d0;c\x3cb.length;c++)a+\x3dString.fr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.5	50747	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	2717	OUT	GET /pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 62 6f 64 79 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 61 64 5f 69 66 72 61 6d 65 20 7b 62 6f 72 64 65 72 3a 20 30 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 77 69 64 74 68 3a 20 33 33 36 70 78 3b 68 65 69 67 68 74 3a 20 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 20 35 30 25 3b 6d 61 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>body {margin: 0;padding: 0;}#ad_iframe {border: 0px;vertical-align: bottom;width: 336px;height: 280px;position: absolute;left: 50%;ma
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 Data Ascii: !doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/script\x3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 ma
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 5c 78 33 64 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 72 65 74 75 72 6e 20 63 61 3f 21 21 75 5c 78 32 36 5c 78 32 36 30 5c 78 33 63 75 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 29 7b 72 65 74 75 72 6e 20 78 28 29 3f 66 61 28 5c 78 32 32 43 68 72 6f 6d 69 75 6d 5c 78 32 32 29 3a 28 77 28 5c 78 32 32 43 68 72 6f 6d 65 5c 78 32 32 29 7c 7c 77 28 5c 78 32 32 43 72 69 4f 53 5c 78 32 32 29 29 5c 78 32 36 5c 78 32 36 21 28 78 28 29 3f 30 3a 77 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 77 28 5c 78 32 32 53 69 6c 6b 5c 78 32 32 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 69 61 5b 5c 78 32 32 20 5c 78 32 32 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 69 61 5b 5c Data Ascii: \x3db.indexOf(a)};function x(){return ca?!!u\x26\x260\x3cu.brands.length:!1}function ha(){return x()?fa(\x22Chromium\x22):(w(\x22Chrome\x22)\|\|w(\x22CriOS\x22))\x26\x26!(x()?0:w(\x22Edge\x22))\|\|w(\x22Silk\x22)};function ia(a){ia[\x22 \x22](a);return a}ia[\
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 33 64 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 45 3b 63 6f 6e 73 74 20 76 61 5c 78 33 64 5b 5d 3b 76 61 5b 41 5d 5c 78 33 64 35 35 3b 45 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 76 61 29 3b 63 6c 61 73 73 20 77 61 7b 7d 63 6c 61 73 73 20 78 61 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 77 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 78 61 29 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 69 66 28 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 5c 78 33 64 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 5c 78 32 32 6f 62 6a 65 63 74 Data Ascii: 3dd\|1;return!0}var E;const va\x3d[];va[A]\x3d55;E\x3dObject.freeze(va);class wa{}class xa{}Object.freeze(new wa);Object.freeze(new xa);function Aa(a){if(\x22boolean\x22!\x3d\x3dtypeof a){var b\x3dtypeof a;throw Error(`Expected boolean but got ${\x22object
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 6b 2b 2b 29 61 5b 6b 5d 5c 78 33 64 45 61 28 61 5b 6b 5d 2c 62 2c 63 2c 64 2c 65 2c 66 29 3b 63 5c 78 32 36 5c 78 32 36 63 28 67 2c 61 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 76 5c 78 33 64 5c 78 33 64 5c 78 33 64 70 61 3f 61 2e 74 6f 4a 53 4f 4e 28 29 3a 44 61 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 6a 3b 6c 65 74 20 65 5c 78 33 64 64 5b 41 5d 3b 69 66 28 65 5c 78 32 36 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 48 61 28 64 2c 65 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 5c 78 33 64 6f 61 28 62 29 3b 69 66 28 63 5c 78 33 65 5c 78 33 Data Ascii: k++)a[k]\x3dEa(a[k],b,c,d,e,f);c\x26\x26c(g,a);return a}function Ga(a){return a.v\x3d\x3d\x3dpa?a.toJSON():Da(a)};function G(a,b,c){const d\x3da.j;let e\x3dd[A];if(e\x262)throw Error();Ha(d,e,b,c);return a}function Ha(a,b,c,d){const e\x3doa(b);if(c\x3e\x3
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 74 75 72 6e 20 61 7d 7d 3b 20 49 2e 70 72 6f 74 6f 74 79 70 65 2e 76 5c 78 33 64 70 61 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 74 68 69 73 2e 6a 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 76 61 72 20 65 5c 78 33 64 28 63 3f 61 2e 6a 3a 62 29 5b 41 5d 2c 66 5c 78 33 64 6f 61 28 65 29 2c 67 5c 78 33 64 21 31 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 74 61 29 7b 69 66 28 21 63 29 7b 62 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 29 3b 76 61 72 20 6b 3b Data Ascii: turn a}}; I.prototype.v\x3dpa;I.prototype.toString\x3dfunction(){return Ja(this,this.j,!1).toString()}; function Ja(a,b,c){const d\x3da.constructor.B;var e\x3d(c?a.j:b)[A],f\x3doa(e),g\x3d!1;if(d\x26\x26ta){if(!c){b\x3dArray.prototype.slice.call(b);var k;
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 78 33 64 5c 78 33 64 5c 78 33 64 6d 2e 73 69 7a 65 29 29 62 72 65 61 6b 3b 72 5c 78 33 64 21 30 7d 69 66 28 21 70 5c 78 32 36 5c 78 32 36 21 72 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 46 3b 67 3f 46 5c 78 33 64 62 3a 46 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 2c 30 2c 68 29 3b 62 5c 78 33 64 46 3b 67 5c 78 32 36 5c 78 32 36 28 62 2e 6c 65 6e 67 74 68 5c 78 33 64 68 29 3b 74 5c 78 32 36 5c 78 32 36 62 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 4b 61 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 49 7b 7d 3b 76 61 72 20 4a 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 5c 78 33 64 21 31 29 7b 74 68 69 73 2e 6b 65 79 5c 78 33 64 61 3b 74 68 Data Ascii: x3d\x3d\x3dm.size))break;r\x3d!0}if(!p\x26\x26!r)return b;var F;g?F\x3db:F\x3dArray.prototype.slice.call(b,0,h);b\x3dF;g\x26\x26(b.length\x3dh);t\x26\x26b.push(t);return b};var Ka\x3dclass extends I{};var J\x3dclass{constructor(a,b\x3d!1){this.key\x3da;th
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 78 33 63 64 3b 29 7b 76 61 72 20 66 5c 78 33 64 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 66 28 33 38 5c 78 33 64 5c 78 33 64 66 7c 7c 36 33 5c 78 33 64 5c 78 33 64 66 29 69 66 28 66 5c 78 33 64 61 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2b 65 29 2c 21 66 7c 7c 36 31 5c 78 33 64 5c 78 33 64 66 7c 7c 33 38 5c 78 33 64 5c 78 33 64 66 7c 7c 33 35 5c 78 33 64 5c 78 33 64 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 5c 78 33 64 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 55 61 5c 78 33 64 2f 23 7c 24 2f 2c 56 61 5c 78 33 64 2f 5b 3f 5c 78 32 36 5d 28 24 7c 23 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 6c 65 74 20 62 5c 78 33 64 71 2c 63 5c 78 33 64 30 3b 66 6f 72 28 3b 62 5c 78 32 36 5c 78 32 36 34 30 5c 78 33 65 63 2b 2b 5c 78 32 36 Data Ascii: x3cd;){var f\x3da.charCodeAt(b-1);if(38\x3d\x3df\|\|63\x3d\x3df)if(f\x3da.charCodeAt(b+e),!f\|\|61\x3d\x3df\|\|38\x3d\x3df\|\|35\x3d\x3df)return b;b+\x3de+1}return-1}var Ua\x3d/#\|$/,Va\x3d/[?\x26]($\|#)/;function Wa(a){let b\x3dq,c\x3d0;for(;b\x26\x2640\x3ec++\x26
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 78 32 32 49 4d 47 5c 78 32 32 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 65 29 7b 63 6f 6e 73 74 20 6b 5c 78 33 64 68 5c 78 33 64 5c 78 33 65 7b 63 5c 78 32 36 5c 78 32 36 63 28 68 29 3b 69 66 28 65 29 7b 68 5c 78 33 64 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3b 63 6f 6e 73 74 20 6c 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 68 2c 67 2c 76 6f 69 64 20 30 29 3b 30 5c 78 33 63 5c 78 33 64 6c 5c 78 32 36 5c 78 32 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 68 2c 6c 2c 31 29 7d 52 61 28 67 2c 5c 78 32 32 6c 6f 61 64 5c 78 32 32 2c 6b 29 3b 52 61 28 67 2c 5c 78 32 32 65 72 72 6f 72 5c 78 32 32 2c 6b 29 7d 3b 4e 28 67 2c Data Ascii: x22IMG\x22,a.document);if(c\|\|e){const k\x3dh\x3d\x3e{c\x26\x26c(h);if(e){h\x3da.google_image_requests;const l\x3dArray.prototype.indexOf.call(h,g,void 0);0\x3c\x3dl\x26\x26Array.prototype.splice.call(h,l,1)}Ra(g,\x22load\x22,k);Ra(g,\x22error\x22,k)};N(g,
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 5c 5c 75 30 30 30 37 5c 5c 75 30 30 30 33 5c 5c 75 30 30 30 37 5c 5c 62 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 34 5c 5c 75 30 30 30 36 5c 5c 75 30 30 30 35 5c 5c 75 30 30 30 33 5c 78 32 32 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 5c 78 33 64 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 66 62 3b 63 6c 61 73 73 20 6d 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 5c 78 33 64 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 5c 78 33 64 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 5c 78 33 64 62 2e 6d 65 73 73 61 67 65 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 68 69 73 2e 69 64 5c 78 33 64 62 2e 69 64 7c 7c 5c 78 32 32 6a 73 65 72 72 6f 72 5c 78 32 32 3b Data Ascii: \\u0007\\u0003\\u0007\\b\\u0004\\u0004\\u0006\\u0005\\u0003\x22.charCodeAt(c%10));this.g\x3dJSON.parse(a)}catch(b){}}},fb;class mb{constructor(a,b){this.error\x3da;this.context\x3db.context;this.msg\x3db.message\|\|\x22\x22;this.id\x3db.id\|\|\x22jserror\x22;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.5	50748	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	3126	OUT	GET /pagead/adview?ai=Ce4exGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOEBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo8ypXbEa-0q_r05PjBAUi8gMjg8UhifmJlhFgQsWejc4hczTZPpXwATfrJGZgwKIBfXs34gHkgUECAQYAZIFBAgFGASgBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJWmh0dHBzOi8vb3ZlcmhlYWRkb29yaGlnaGNvdW50cnkuY29tL2dhcmFnZS1kb29yLXJlcGxhY2VtZW50LWluLWFzaGV2aWxsZS8_c291cmNlPW9oZGdvb2dsZYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA9gTDYgUBNAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGACyGAUYNyIBAA&sigh=HOZIVsRCNws&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:46 UTC	1226	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x77cb9221bb873f380000000000000000","2":"0xf7537ab5dbbd8ad20000000000000000","3":"0xd18ff16b6714e77e0000000000000000","4":"0xabd9a90cd8b6c9ac0000000000000000","5":"0x1d9277f4458f2d890000000000000000"},"debug_key":"7126999792489411957","debug_reporting":true,"destination":"https://overheaddoorhighcountry.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["744339661"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"7742318996531965729"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:46 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.5	50750	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	3400	OUT	GET /pagead/adview?ai=CXuyxGzKlZdeiKMLDxtYP6uqP6AWarfGydNPs3sTFEdvZHhACIO34qSAoCGDJhqCKpKTgEaABj_H8_gLIAQaoAwHIAwKqBOQBT9AVyXWxtHf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8ZNJSRJylkUqSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYbe38oSegTj2NU9B6QqHwWQSOrduGFdvUNGf4dITZWqQWQjwn-xNKziKHipBkUnX9718COAq8YwATK6cD3tASIBYGCsLxLkgUECAQYAZIFBAgFGASgBjeAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-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&sigh=kIQsiU4-sHA&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1208	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xce75f8629f85660e0000000000000000","2":"0x4427632a5f783a7d0000000000000000","3":"0x1f9bf1cd1995cc340000000000000000","4":"0xfd3abb05a8d8c95b0000000000000000","5":"0x9d9f34b1fdb72450000000000000000"},"debug_key":"9154466801568644784","debug_reporting":true,"destination":"https://getapp.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["803158159"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"5300845691177937265"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:46 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.5	50758	104.18.24.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	1068	OUT	GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=agnoeUSkTsuAutosiaUYpwGWJN3UQv6qZa2PRAMZai
2024-01-15 13:24:47 UTC	797	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aGntuJoNIvapmVrCI2OCd9Vc98833gvfX5lUJGWxQQMDJtBtkNUaFLmZaPZbdtufXDLiLGBhVbyT4S0jtTDtUH18KL; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aGntuJoNIvapmVrCI2OCd9Vc98833gvfX5lUJGWxQQMDJtBtkNUaFLmZaPZbdtufXDLiLGBhVbyT4S0jtTDtUH18KL; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:46 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70e16d1f5b04-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.5	50759	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:46 UTC	3076	OUT	GET /pagead/adview?ai=CLkKmGzKlZdeiKMLDxtYP6uqP6AXBtMyqdc-AkIHKDdex9I-wARADIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9AFoCGxtXf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8ZlJSR0YtCMwSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYVXlNpSegTj2NU9B6QMyx1QCOrduH1ctEHFP4EQxY3qAWQjwn-xNKzkcPCxRgUnX9717CKJqUVwASl_-jGwgOIBdPRofkvkgUECAQYAZIFBAgFGASgBjeAB-e0lMUBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJOGh0dHBzOi8vYmVzdHNlYXJjaGVzLm5ldC9pbmRleC5waHA_cmdpZD0xMjIyNTYmc3ViPWdjbGlkgAoByAsBogwIKgYKBKy6sQLaDBAKChCg4Lv99emLjjASAgED2BMMiBQD0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=RRpTeptrg1E&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1217	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xa7dcc8f1697a0d5d0000000000000000","2":"0xf71b6e1dfbf5544d0000000000000000","3":"0x42d9e7fff2b71c380000000000000000","4":"0x392ff4eaccfd05da0000000000000000","5":"0xd4321ae33412a9610000000000000000"},"debug_key":"13583948170152711705","debug_reporting":true,"destination":"https://bestsearches.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["972914409"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"11482730033660204273"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.5	50761	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	1236	OUT	POST /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 10664 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=6yzty5mqq4q2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZVy1Bkls2miXYv7rz4BGpH7RdLLbV0-nKuDKzFyshBfLtvfOd6-DJkiz58-erfblEZYKg2ARn-bQu2cICY; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:47 UTC	10664	OUT	Data Raw: 0a 18 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 12 a4 0f 30 33 41 46 63 57 65 41 34 63 4c 58 47 36 49 6b 5f 77 31 67 53 51 4f 4d 7a 6e 74 63 49 4c 50 35 7a 59 37 61 2d 49 61 56 57 46 45 37 2d 39 6b 64 77 37 77 79 39 61 4f 6d 2d 4a 47 65 2d 61 59 61 4c 67 45 78 52 48 53 48 48 4c 44 4a 6f 35 71 5f 6e 38 34 41 5f 34 31 71 66 4d 4a 4c 6d 30 51 73 4d 5f 37 72 6d 4c 38 32 46 6c 79 73 42 7a 6f 5f 52 39 4f 63 71 34 66 65 34 5a 77 4c 4f 48 70 77 30 37 74 6b 51 6d 43 72 30 71 74 61 74 37 47 75 43 54 65 61 34 74 58 7a 6d 50 39 4d 68 67 4b 68 61 79 54 44 77 30 62 50 50 67 6a 5a 72 43 7a 32 38 51 39 63 46 57 50 49 49 70 47 4e 38 31 6e 78 72 68 52 4f 66 72 67 36 74 61 56 57 6b 47 72 4c 7a 57 71 46 57 70 53 47 6f 4c 73 6d 6b 38 6b 38 6e 46 Data Ascii: Ya-Cd6PbRI5ktAHEhm9JuKEu03AFcWeA4cLXG6Ik_w1gSQOMzntcILP5zY7a-IaVWFE7-9kdw7wy9aOm-JGe-aYaLgExRHSHHLDJo5q_n84A_41qfMJLm0QsM_7rmL82FlysBzo_R9Ocq4fe4ZwLOHpw07tkQmCr0qtat7GuCTea4tXzmP9MhgKhayTDw0bPPgjZrCz28Q9cFWPIIpGN81nxrhROfrg6taVWkGrLzWqFWpSGoLsmk8k8nF
2024-01-15 13:24:47 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Mon, 15 Jan 2024 13:24:47 GMT Expires: Mon, 15 Jan 2024 13:24:47 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZX9sdzDNKPq2YU-vWNZLZexiYdbOPhW7yjR-CQ5K03k3wgp3ztZmnhdaGQCVmGhZjnCX6jTP-PlZ26lllo;Path=/recaptcha;Expires=Sat, 13-Jul-2024 13:24:47 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	556	IN	Data Raw: 61 37 33 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 49 57 48 44 4f 53 2d 31 6f 36 48 45 5a 42 37 57 47 4b 6e 49 50 42 6a 48 41 57 57 42 64 67 37 74 51 58 58 37 64 4b 30 74 68 50 42 47 54 54 6c 4f 6c 6f 6f 71 6c 31 58 4d 4b 37 58 76 52 50 5a 45 6b 5f 38 67 58 53 72 41 67 39 74 54 68 41 49 43 42 67 4b 38 76 32 4f 32 75 30 78 61 5f 42 47 4d 69 68 78 71 61 4c 4c 71 42 65 49 5f 51 51 30 35 76 4e 4b 33 31 54 32 43 4c 4f 70 75 50 34 43 72 6d 79 77 57 43 33 53 6e 4c 44 5f 5f 47 54 76 37 50 5f 37 45 4e 36 72 58 54 6e 56 7a 53 5a 6e 30 36 70 47 57 42 69 73 7a 57 72 72 4e 66 6b 64 68 6e 42 6b 65 62 66 7a 73 65 70 72 49 79 66 2d 31 5a 61 36 6a 4c 5a 44 65 58 50 42 75 6d 35 4d 51 4a 41 37 7a 5f 42 57 4f 6e 48 35 50 37 37 7a 4d 76 54 Data Ascii: a73)]}'["rresp","03AFcWeA7IWHDOS-1o6HEZB7WGKnIPBjHAWWBdg7tQXX7dK0thPBGTTlOlooql1XMK7XvRPZEk_8gXSrAg9tThAICBgK8v2O2u0xa_BGMihxqaLLqBeI_QQ05vNK31T2CLOpuP4CrmywWC3SnLD__GTv7P_7EN6rXTnVzSZn06pGWBiszWrrNfkdhnBkebfzseprIyf-1Za6jLZDeXPBum5MQJA7z_BWOnH5P77zMvT
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 72 42 4c 38 6d 55 49 47 7a 59 54 61 76 61 72 50 4b 35 42 43 30 4f 76 6a 62 46 4c 49 61 37 65 33 67 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 22 2c 22 22 2c 22 54 56 6c 35 63 47 55 7a 56 30 4a 4f 55 32 74 4d 59 6d 39 33 55 6a 64 71 56 7a 68 72 57 58 45 72 64 6d 6b 79 62 6e 42 45 53 6e 5a 72 55 48 6f 77 53 31 70 59 55 6a 56 61 5a 30 4e 4a 4e 43 74 31 55 46 42 55 53 6e 41 31 4e 7a 52 52 65 6e 70 52 61 47 68 46 52 6a 52 Data Ascii: rBL8mUIGzYTavarPK5BC0OvjbFLIa7e3g",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz","","TVl5cGUzV0JOU2tMYm93UjdqVzhrWXErdmkybnBESnZrUHowS1pYUjVaZ0NJNCt1UFBUSnA1NzRRenpRaGhFRjR
2024-01-15 13:24:47 UTC	874	IN	Data Raw: 57 45 4d 79 63 57 39 71 54 79 74 43 4f 58 6f 35 4e 58 4a 70 62 33 5a 44 57 48 64 7a 62 48 5a 43 62 57 4e 76 62 7a 4a 59 56 58 6c 77 61 55 68 71 55 6d 64 56 62 6b 68 30 52 69 74 44 51 56 70 55 56 57 70 42 53 32 4e 4f 4d 6d 6c 35 54 7a 42 36 63 32 6c 69 65 48 52 61 56 58 4d 33 61 56 52 71 54 32 52 7a 65 44 64 6c 4d 45 63 30 61 47 74 79 59 6b 56 43 54 46 5a 46 57 46 55 77 4f 46 4e 54 61 6b 74 45 5a 6b 74 4e 4d 48 6c 31 59 55 56 44 53 58 41 33 4c 7a 64 4d 4e 54 46 59 62 45 56 70 5a 57 46 30 62 45 70 6e 55 6e 52 4b 55 47 4e 31 61 54 52 51 62 44 6c 69 51 33 59 35 59 56 55 30 55 47 6c 77 54 43 74 52 52 48 4a 42 55 43 38 33 61 56 6c 53 53 53 38 7a 65 45 52 34 4e 6b 4e 48 4e 30 74 75 65 6c 52 5a 52 7a 52 31 4f 45 56 58 55 46 4e 70 61 6b 64 50 52 7a 63 77 55 45 59 Data Ascii: WEMycW9qTytCOXo5NXJpb3ZDWHdzbHZCbWNvbzJYVXlwaUhqUmdVbkh0RitDQVpUVWpBS2NOMml5TzB6c2lieHRaVXM3aVRqT2RzeDdlMEc0aGtyYkVCTFZFWFUwOFNTaktEZktNMHl1YUVDSXA3LzdMNTFYbEVpZWF0bEpnUnRKUGN1aTRQbDliQ3Y5YVU0UGlwTCtRRHJBUC83aVlSSS8zeER4NkNHN0tuelRZRzR1OEVXUFNpakdPRzcwUEY
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 31 36 37 64 0d 0a 63 45 46 4d 5a 44 49 7a 61 32 46 6d 64 54 6b 76 52 30 39 7a 4e 46 5a 6b 64 54 56 30 52 30 35 30 52 31 52 76 54 54 64 61 5a 32 5a 50 62 47 56 48 65 47 74 32 55 31 46 75 63 6b 64 43 61 30 31 6b 62 57 70 6d 51 31 56 5a 63 46 64 32 53 56 4e 71 4c 32 56 6a 55 6b 56 36 53 6c 42 4b 51 7a 68 48 57 48 6c 72 62 6c 6c 57 64 32 68 6f 5a 46 6c 6a 64 6d 4a 49 53 48 63 7a 52 55 56 61 52 58 68 6f 52 44 5a 4b 51 55 6c 33 61 48 4e 73 62 55 6c 46 53 45 78 75 59 79 39 35 64 31 6f 33 55 32 78 45 61 6d 67 32 54 45 46 6a 4f 56 70 34 64 7a 59 31 4d 79 39 68 4d 31 5a 50 4e 6d 68 6a 4d 30 35 4c 54 32 4a 79 61 45 35 50 53 6d 4e 4d 62 45 56 79 54 45 38 31 61 33 46 6f 57 6b 46 71 51 57 4a 69 5a 30 46 4c 53 47 4e 43 63 7a 46 6e 63 55 38 79 54 58 6f 31 53 6d 78 33 59 Data Ascii: 167dcEFMZDIza2FmdTkvR09zNFZkdTV0R050R1RvTTdaZ2ZPbGVHeGt2U1FuckdCa01kbWpmQ1VZcFd2SVNqL2VjUkV6SlBKQzhHWHlrbllWd2hoZFljdmJISHczRUVaRXhoRDZKQUl3aHNsbUlFSExuYy95d1o3U2xEamg2TEFjOVp4dzY1My9hM1ZPNmhjM05LT2JyaE5PSmNMbEVyTE81a3FoWkFqQWJiZ0FLSGNCczFncU8yTXo1Smx3Y
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 67 79 61 58 68 79 52 7a 41 34 62 33 6c 69 51 55 4d 76 56 58 51 79 62 6b 5a 76 55 56 68 79 4d 6d 4a 45 62 55 64 76 52 55 52 46 62 6a 46 4c 52 47 4e 6a 4d 6e 4e 4a 59 30 31 33 4d 57 56 4f 4f 46 46 42 53 6a 41 30 4d 57 4a 69 62 6e 56 69 55 45 5a 51 4d 30 46 6b 54 6e 64 56 63 44 5a 76 4d 56 5a 4d 4e 48 52 59 62 6c 70 4f 64 46 46 4c 53 57 4a 49 51 6a 56 68 55 58 42 4f 61 33 68 44 59 32 67 30 61 7a 68 34 61 6c 6c 4d 4e 7a 52 76 5a 6b 64 49 64 56 4e 6d 4c 32 5a 36 4d 33 68 4d 57 6a 6b 34 4d 7a 4e 48 56 57 74 31 61 6b 64 6a 64 32 5a 35 57 46 4a 4a 4c 7a 4a 6d 4d 44 52 42 4e 45 4a 56 5a 6b 74 6b 64 6e 4e 4a 63 44 64 4e 62 6d 45 35 53 47 6c 4b 55 7a 68 6b 53 55 6c 59 4e 44 52 55 65 54 52 57 59 57 64 49 5a 54 45 7a 4e 32 31 52 4d 6c 6f 33 4d 6d 5a 4b 5a 6e 6f 76 53 Data Ascii: gyaXhyRzA4b3liQUMvVXQybkZvUVhyMmJEbUdvRURFbjFLRGNjMnNJY013MWVOOFFBSjA0MWJibnViUEZQM0FkTndVcDZvMVZMNHRYblpOdFFLSWJIQjVhUXBOa3hDY2g0azh4allMNzRvZkdIdVNmL2Z6M3hMWjk4MzNHVWt1akdjd2Z5WFJJLzJmMDRBNEJVZktkdnNJcDdNbmE5SGlKUzhkSUlYNDRUeTRWYWdIZTEzN21RMlo3MmZKZnovS
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 5a 58 62 6d 56 47 63 30 56 6d 61 69 39 74 52 33 68 6a 62 48 4a 75 51 6d 52 68 56 44 42 73 65 6e 56 49 62 56 41 77 51 32 5a 68 56 6b 70 4b 51 69 74 71 4e 48 42 49 59 7a 4e 52 55 6d 77 79 57 47 4d 32 56 58 49 31 4b 30 56 50 59 57 4a 35 53 45 4e 4a 57 6b 6c 54 64 33 52 69 4d 31 5a 34 62 31 68 78 61 30 39 36 52 57 64 4c 63 6d 46 36 62 33 45 7a 62 46 49 7a 4e 32 5a 74 62 46 52 73 53 6c 46 47 65 45 52 33 52 6b 56 71 55 46 68 35 65 57 4e 47 62 6e 59 77 56 48 4e 51 63 44 46 36 4e 46 64 72 52 44 52 47 4d 45 39 6d 52 55 68 6c 65 57 35 56 57 54 64 6b 52 48 52 58 4e 32 4e 6e 5a 30 31 45 57 47 70 68 5a 30 63 34 53 32 64 52 56 56 5a 68 63 55 5a 51 54 32 64 4e 4d 30 70 34 59 6a 45 33 55 6b 52 4d 52 57 4e 58 65 55 56 6c 64 7a 64 50 55 7a 64 4e 4e 48 6c 50 65 47 46 6c 53 Data Ascii: ZXbmVGc0Vmai9tR3hjbHJuQmRhVDBsenVIbVAwQ2ZhVkpKQitqNHBIYzNRUmwyWGM2VXI1K0VPYWJ5SENJWklTd3RiM1Z4b1hxa096RWdLcmF6b3EzbFIzN2ZtbFRsSlFGeER3RkVqUFh5eWNGbnYwVHNQcDF6NFdrRDRGME9mRUhleW5VWTdkRHRXN2NnZ01EWGphZ0c4S2dRVVZhcUZQT2dNM0p4YjE3UkRMRWNXeUVldzdPUzdNNHlPeGFlS
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 31 50 61 56 4a 43 4e 58 70 47 4e 58 56 71 63 56 6c 31 53 44 5a 57 61 6d 55 35 5a 32 4e 4c 4f 56 49 78 4e 56 68 77 59 31 42 32 56 6a 5a 4c 53 32 4e 73 62 31 55 33 53 45 34 35 53 32 39 34 52 47 30 30 4e 32 73 35 4d 33 4a 45 54 33 4a 32 64 55 70 44 65 45 46 7a 59 6e 70 4b 51 6a 42 50 53 55 74 43 5a 30 6c 6a 55 6a 42 51 4e 31 56 4b 56 6c 68 4a 4e 31 6c 77 65 6d 35 76 63 79 74 54 4d 44 42 52 51 33 4e 32 53 56 52 4b 59 7a 5a 4f 4e 58 68 69 59 7a 64 78 53 56 4a 31 62 48 5a 6b 55 7a 51 72 62 6b 46 75 57 48 4e 4a 61 45 68 59 55 32 6c 4e 63 79 74 61 59 6a 5a 36 55 6a 52 4d 4d 6e 6f 78 62 6c 4a 59 55 6d 78 55 4e 33 46 75 4e 32 45 30 57 55 31 77 4b 32 4a 35 62 47 31 56 4b 32 46 71 55 7a 42 46 63 30 64 70 5a 56 6c 73 4e 57 52 31 4f 54 6c 52 4d 6b 39 4b 56 55 4e 46 54 Data Ascii: 1PaVJCNXpGNXVqcVl1SDZWamU5Z2NLOVIxNVhwY1B2VjZLS2Nsb1U3SE45S294RG00N2s5M3JET3J2dUpDeEFzYnpKQjBPSUtCZ0ljUjBQN1VKVlhJN1lwem5vcytTMDBRQ3N2SVRKYzZONXhiYzdxSVJ1bHZkUzQrbkFuWHNJaEhYU2lNcytaYjZ6UjRMMnoxblJYUmxUN3FuN2E0WU1wK2J5bG1VK2FqUzBFc0dpZVlsNWR1OTlRMk9KVUNFT
2024-01-15 13:24:47 UTC	757	IN	Data Raw: 68 33 59 6e 4a 32 63 55 35 6c 59 32 56 6d 61 33 42 5a 62 43 74 53 53 6d 64 4d 65 57 70 4f 62 47 56 54 57 48 70 31 4d 30 51 30 62 54 52 47 54 45 34 76 52 56 6c 6f 53 44 68 57 62 55 4e 54 4c 31 52 59 51 58 52 30 65 46 52 4e 63 44 56 33 4e 6b 73 78 52 30 5a 71 59 31 70 5a 5a 32 39 6e 4d 32 67 76 56 6d 78 7a 52 54 52 4d 54 47 31 36 61 44 46 47 55 44 52 32 62 57 56 4a 51 57 73 78 4c 31 4e 70 63 47 46 77 64 6e 64 58 52 47 4a 32 54 57 5a 6a 4c 31 51 78 56 57 74 58 57 47 78 7a 4d 58 70 35 64 6b 46 49 61 43 73 79 4e 6a 68 75 64 6d 51 30 4d 55 59 72 64 48 5a 76 4b 32 4a 70 57 6c 70 74 4d 6b 74 7a 65 55 59 34 61 47 64 77 61 6b 35 30 56 48 5a 4a 4e 57 6b 35 51 33 5a 73 65 48 5a 46 56 6a 46 43 51 6e 68 59 54 30 39 42 61 79 74 6d 59 55 73 34 64 6e 42 68 61 58 46 36 61 Data Ascii: h3YnJ2cU5lY2Vma3BZbCtSSmdMeWpObGVTWHp1M0Q0bTRGTE4vRVloSDhWbUNTL1RYQXR0eFRNcDV3NksxR0ZqY1pZZ29nM2gvVmxzRTRMTG16aDFGUDR2bWVJQWsxL1NpcGFwdndXRGJ2TWZjL1QxVWtXWGxzMXp5dkFIaCsyNjhudmQ0MUYrdHZvK2JpWlptMktzeUY4aGdwak50VHZJNWk5Q3ZseHZFVjFCQnhYT09BaytmYUs4dnBhaXF6a
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 31 30 65 34 0d 0a 30 39 4a 5a 58 64 42 54 30 52 61 5a 47 56 6f 62 7a 42 43 5a 6e 4a 46 54 6b 74 55 4c 30 78 73 61 48 6f 79 4e 6e 68 42 57 54 4d 77 57 6b 6c 77 55 45 31 4f 57 56 6b 33 54 47 78 46 4e 6b 46 33 57 45 31 61 52 44 64 69 51 6d 4e 32 56 33 4a 76 4e 6c 6c 49 63 56 51 34 63 58 4e 44 65 47 78 33 54 55 46 4d 4e 7a 56 50 4f 55 67 35 64 55 68 6a 53 57 51 72 5a 55 6c 7a 55 6a 46 42 59 6b 4e 6d 4e 58 56 4d 61 45 74 54 65 6a 63 33 51 7a 5a 4e 64 44 56 33 56 47 30 32 61 58 56 79 51 6e 4d 30 64 47 31 33 4d 6d 5a 73 62 6b 39 6d 61 7a 68 77 4e 6d 5a 78 59 6a 64 44 4c 33 6c 45 5a 47 46 55 4d 33 45 79 62 55 4d 31 63 6a 6b 76 4d 6e 5a 53 55 57 5a 45 53 55 52 43 54 47 31 68 61 46 4a 48 62 44 4a 71 4f 58 70 6f 57 6e 70 7a 59 33 4a 78 53 6b 68 73 53 30 4a 56 4d 45 Data Ascii: 10e409JZXdBT0RaZGVobzBCZnJFTktUL0xsaHoyNnhBWTMwWklwUE1OWVk3TGxFNkF3WE1aRDdiQmN2V3JvNllIcVQ4cXNDeGx3TUFMNzVPOUg5dUhjSWQrZUlzUjFBYkNmNXVMaEtTejc3QzZNdDV3VG02aXVyQnM0dG13MmZsbk9mazhwNmZxYjdDL3lEZGFUM3EybUM1cjkvMnZSUWZESURCTG1haFJHbDJqOXpoWnpzY3JxSkhsS0JVME

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.5	50746	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	779	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:47 UTC	642	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 228 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=6D3ZpLGavi7shxnwoBEq; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:47 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:47 GMT
2024-01-15 13:24:47 UTC	228	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 6f 6f 67 6c 65 61 64 78 2f 3f 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 44 6c 42 74 6d 33 58 46 35 43 76 5f 6f 79 73 53 4d 62 39 5f 59 51 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 64 5f 47 38 53 5a 46 4d 47 67 57 47 57 62 44 47 69 4d 6c 6e 47 6d 61 6d 36 67 43 52 49 79 55 6b 44 31 37 31 7a 65 5a 31 6f 4f 64 36 66 48 77 76 51 42 73 5f 34 6e 38 5a 59 78 65 51 75 58 4e 78 32 54 4a 56 75 78 59 4b 42 70 6d 62 57 62 6a 55 41 4d 45 46 51 6a 71 37 76 63 50 66 35 44 77 4d 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.5	50757	104.18.24.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	1069	OUT	GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aNnoeUyg6ArrA7uaPUXZcSkdqm3SS33krqDPRAS0U
2024-01-15 13:24:47 UTC	809	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=annt6ZaoZdUQdR2Hp9uswmN6m7okc5qZaAZaISg9PmW1UN5EiBJtogWVjFSNaY55uXuA2H9Qwa6lAF4ITA2cgLItDKH9RhDp; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:47 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=annt6ZaoZdUQdR2Hp9uswmN6m7okc5qZaAZaISg9PmW1UN5EiBJtogWVjFSNaY55uXuA2H9Qwa6lAF4ITA2cgLItDKH9RhDp; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:47 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70e26c92823e-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.5	50764	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	862	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmRP7oEenP2bLB8uL4-ej4aZ-pQp8DKIdq5hUie18zO8-2ShzV6AB5zinpnjToCYEM5jTXoe5iIDV0GzxJDTK8pyRDAerNtrYBnK HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:24:47 UTC	488	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmRP7oEenP2bLB8uL4-ej4aZ-pQp8DKIdq5hUie18zO8-2ShzV6AB5zinpnjToCYEM5jTXoe5iIDV0GzxJDTK8pyRDAerNtrYBnK&google_hm=82nPL-gDAe41xcnm3Ha0dg Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.5	50767	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	1607	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325078563&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=2&tfd=8276 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:47 UTC	129	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4d 62 6c 32 5f 36 2d 33 34 4d 44 46 58 57 69 30 51 51 64 37 39 34 4e 6e 51 26 5f 65 74 3d 34 32 33 35 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4a 65 63 32 76 36 2d 33 34 4d 44 46 63 4b 68 30 51 51 64 61 76 55 44 58 51 26 5f 65 74 3d 33 39 32 Data Ascii: en=ad_impression&ep.query_id=CMbl2_6-34MDFXWi0QQd794NnQ&_et=4235en=ad_impression&ep.query_id=CJec2v6-34MDFcKh0QQdavUDXQ&_et=392
2024-01-15 13:24:47 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.5	50762	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	1435	OUT	GET /f/AGSKWxWfkZh5qMI1Rld1ftbbYo8earoS2QVb9jwqw1RiUU_Zh2JYfuqhKW1PNdA-HOH4UteUb4h6gC-Nk3MeFbhq1iA988Cmo_p0qDxMxLugBKtiYsJPDp4ZHKDoOJ7LczZe1vUTmLjxoA==?fccs=W1siQUtzUm9sOXo4TW9ucEt5dUlibHVhMjJFdXNuUDNPZFlDd3pyZVdHbGFLYi1uNnoxQi1OQ3djdTVZcFdVazJRaWdQWDI2cWtkUlBkajI0MjRGbWhJNXhVYlNwYWxJOE1wd2pjYUk2RUUxV0tCV3oxOXBQTE9UdnV6T1pqWk8wRXNjWkE2Z2tURW1WOFducXNXM2xwaDZMdlpNQTFoYi0xOHJnPT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwODUsNzQ3MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:47 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Qyll4tVNguOhcVG_WmnVAQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 32 39 34 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 68 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 2945if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Sn=function(a){for(var b=_.hc.apply(1,
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6a 6f 28 64 29 3b 74 68 69 73 2e 69 3d 6e 65 77 20 5f 2e 49 6e 28 64 2c 6e 65 77 20 5f 2e 4c 67 28 5f 2e 7a 6b 28 74 68 69 73 2e 67 29 29 29 7d 3b 0a 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 6b 6f 28 74 68 69 73 2e 68 2c 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 6b 6f 28 74 68 69 73 2e 68 2c 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 6f 28 74 68 69 73 2e 68 2c 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 63 3d 74 68 69 73 2e 69 3b 61 3d 5f 2e 44 28 74 68 69 73 2e 67 2c 5f 2e 70 65 2c 31 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 Data Ascii: .location.hostname;this.h=new jo(d);this.i=new _.In(d,new _.Lg(_.zk(this.g)))};mo.prototype.start=function(a,b){switch(a){case 1:ko(this.h,1);break;case 3:ko(this.h,3);break;case 2:ko(this.h,2);break;default:var c=this.i;a=_.D(this.g,_.pe,1);var d=this.g
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 6c 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6e 6f 7d 2c 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 73 6f 28 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 6f 28 61 2c 31 29 7d 2c 61 29 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 31 3d 3d 3d 66 3f 30 3d 3d 3d 65 3f 75 6f 28 61 2c 32 29 3a 75 6f 28 61 2c 33 29 3a 63 2e 6e 6f 74 69 66 79 28 65 29 7d 2c 61 29 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 3d 3d 3d 61 2e 67 26 26 28 61 2e 67 3d 62 2c 61 2e 68 2e 67 28 62 29 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: l;this.h=new no},vo=function(a,b){for(var c=new so(b.map(function(e){return e.g()}),function(){uo(a,1)},a),d=0;d<b.length;d++)b[d].addListener(function(e,f){1===f?0===e?uo(a,2):uo(a,3):c.notify(e)},a)},uo=function(a,b){null===a.g&&(a.g=b,a.h.g(b))},wo=fun
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 6f 28 61 2e 43 2c 61 2e 69 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 65 6c 73 65 20 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 3b 0a 4f 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 52 6f 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 31 29 7d 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 71 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 69 3d 61 3b 74 68 69 73 2e 6c 3d 62 3b 74 68 69 73 2e 41 3d 63 7d 3b 5f 2e 41 28 53 6f 2c 71 6f 29 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: o(a.C,a.i,b,c)}catch(d){Po(a,a.l,b,c)}else Po(a,a.l,b,c)};Oo.prototype.h=function(){var a=this;Ro(this,function(){ro(a,0)},function(){ro(a,1)})};var So=function(a,b,c,d,e){qo.call(this,d,e);this.i=a;this.l=b;this.A=c};_.A(So,qo);So.prototype.g=function()
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 3b 76 61 72 20 63 3d 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3b 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 61 2e 67 26 26 61 2e 68 2e 67 28 61 2e 67 2e 74 65 73 74 28 65 29 2c 65 2c 64 29 3b 63 26 26 63 28 64 2c 65 2c 66 29 7d 7d 2c 59 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 29 7d 3b 76 61 72 20 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 68 3d 6e 65 77 20 5f 2e 67 65 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 62 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 7c 7c 21 64 7c 7c 22 53 63 72 69 70 74 20 65 72 72 6f 72 22 21 3d 3d 65 26 Data Ascii: ;var c=_.t.onerror;_.t.onerror=function(d,e,f){a.g&&a.h.g(a.g.test(e),e,d);c&&c(d,e,f)}},Yo=function(a,b){a.h.addEventListener(b)};var Vo=function(){this.g=new Map;this.h=new _.ge(document)},bp=function(a,b){Yo(b,function(c,d,e){c\|\|!d\|\|"Script error"!==e&
2024-01-15 13:24:47 UTC	1629	IN	Data Raw: 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 33 42 68 5a 32 56 68 5a 43 39 71 63 79 39 73 61 57 52 68 63 69 35 71 63 7a 39 6d 59 32 52 63 64 54 41 77 4d 32 52 30 63 6e 56 6c 49 6c 30 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 6d 59 58 5a 70 59 32 39 75 4c 6d 6c 6a 62 79 4a 64 4c 44 45 77 4d 43 77 31 4c 46 74 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 6d 64 57 35 6b 61 57 35 6e 59 32 68 76 61 57 4e 6c 63 32 31 6c 63 33 4e 68 5a 32 56 7a 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 76 5a 69 39 42 52 31 4e 4c 56 33 68 57 53 30 Data Ascii: lc3luZGljYXRpb24uY29tL3BhZ2VhZC9qcy9saWRhci5qcz9mY2RcdTAwM2R0cnVlIl0sW251bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9mYXZpY29uLmljbyJdLDEwMCw1LFtudWxsLG51bGwsbnVsbCwiaHR0cHM6Ly9mdW5kaW5nY2hvaWNlc21lc3NhZ2VzLmdvb2dsZS5jb20vZi9BR1NLV3hWS0
2024-01-15 13:24:47 UTC	799	IN	Data Raw: 4e 31 41 31 59 7a 42 31 59 56 4e 78 4f 57 31 50 52 6e 46 31 62 44 46 56 4c 56 5a 53 62 45 34 33 56 6d 4a 54 64 48 52 54 53 44 6c 33 58 48 55 77 4d 44 4e 6b 58 48 55 77 4d 44 4e 6b 49 6c 30 73 57 32 35 31 62 47 77 73 57 7a 64 64 58 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 5a 6b 4d 44 68 6d 4e 47 46 6c 4e 6d 5a 6d 59 6a 42 6b 5a 44 6b 69 4c 47 35 31 62 47 77 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 79 61 57 4a 31 64 47 39 79 55 32 56 79 64 6d 6c 75 5a 31 64 6c 59 6c 4e Data Ascii: N1A1YzB1YVNxOW1PRnF1bDFVLVZSbE43VmJTdHRTSDl3XHUwMDNkXHUwMDNkIl0sW251bGwsWzddXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsImZkMDhmNGFlNmZmYjBkZDkiLG51bGwsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnRyaWJ1dG9yU2VydmluZ1dlYlN
2024-01-15 13:24:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.5	50772	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaSJ2lqKw2CcEgCScZLDYapoiIGxJwNNUpqTn0R-r8BAsQGw15fmMzYdIia5UQ2QJlaucfjQU9mY6krnRnPZZINE6rxRKg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:47 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.5	50771	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	2056	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378038567;dc_ver=99.292;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1892844450;ord=sbrk40;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI-tjZ_r7fgwMVj7zRBB0jIwXQEAEYASAAEgJxT_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE%26sig%3DAOD64_2cMVrnYOZ9MSKq-FMOtnFYcp9EeQ%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=1,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=a;stc=1;asnm=1;sttr=83;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 33 39 36 37 39 39 35 36 38 32 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 48 7a 4b 6c 5a 62 61 48 4a 4d 48 5a 6f 50 77 50 6f 6f 47 68 79 41 51 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_3967995682"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZbaHJMHZoPwPooGhyAQ"\x3e');(function() {var m = document.createEle
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 Data Ascii: he-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelect
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 50 61 53 79 6f 43 5f 33 34 4d 44 46 63 45 73 69 41 6b 64 6f 6b 41 49 53 51 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 76 74 51 78 64 47 49 62 62 72 55 6a 49 5a 6c 7a 59 4e 62 67 70 37 6f 68 52 5a 31 41 78 50 6a 39 59 6b 7a 2d 51 64 30 46 74 75 32 71 6e 31 55 36 79 4e 59 45 67 37 61 69 53 78 46 6c 6a 35 37 43 7a 65 35 55 75 73 62 61 76 4e 78 6a 6e 4a 53 78 4f 64 69 45 49 39 48 62 50 5a 46 53 30 61 66 76 6d 67 61 5f 52 69 36 5f 37 76 72 6b 7a 4b 35 42 53 69 78 68 4c 46 75 44 6a 32 57 42 63 71 39 48 77 56 62 62 5f 32 72 6e 46 42 38 65 Data Ascii: 22 id\x3d\x22img_anch_CPaSyoC_34MDFcEsiAkdokAISQ\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjsvtQxdGIbbrUjIZlzYNbgp7ohRZ1AxPj9Ykz-Qd0Ftu2qn1U6yNYEg7aiSxFlj57Cze5UusbavNxjnJSxOdiEI9HbPZFS0afvmga_Ri6_7vrkzK5BSixhLFuDj2WBcq9HwVbb_2rnFB8e
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 66 36 2d 33 34 4d 44 67 41 6f 42 6d 41 73 42 79 41 73 42 67 41 77 42 6f 67 77 49 4b 67 59 4b 42 4b 79 36 73 51 4c 61 44 42 45 4b 43 78 43 51 37 2d 57 39 69 5a 33 6b 33 75 6b 42 45 67 49 42 41 36 6f 4e 41 6c 56 54 79 41 30 42 32 42 4d 4e 30 42 55 42 2d 42 59 42 67 42 63 42 25 32 36 61 73 65 25 33 44 32 25 32 36 67 63 6c 69 64 25 33 44 45 41 49 61 49 51 6f 62 43 68 4d 49 2d 74 6a 5a 5f 72 37 66 67 77 4d 56 6a 37 7a 52 42 42 30 6a 49 77 58 51 45 41 45 59 41 53 41 41 45 67 4a 78 54 5f 44 5f 42 77 45 25 32 36 6e 75 6d 25 33 44 31 25 32 36 63 69 64 25 33 44 43 41 51 53 4f 77 41 76 48 68 66 5f 4c 74 67 37 30 62 4f 76 42 72 62 57 71 64 39 6c 46 41 67 72 35 2d 35 39 4d 4a 74 57 2d 30 72 78 56 6e 65 56 42 54 52 46 5a 4b 7a 55 36 4b 53 62 75 6f 45 4b 72 34 43 35 51 Data Ascii: f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI-tjZ_r7fgwMVj7zRBB0jIwXQEAEYASAAEgJxT_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 5c 78 33 64 5b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 5c 78 32 36 5c 78 32 36 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 73 65 6c 66 5c 78 32 36 5c 78 32 36 73 65 6c 66 Data Ascii: dArray.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a){a\x3d[\x22object\x22\x3d\x3dtypeof globalThis\x26\x26globalThis,a,\x22object\x22\x3d\x3dtypeof window\x26\x26window,\x22object\x22\x3d\x3dtypeof self\x26\x26self
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 69 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 5c 78 33 64 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 5c 78 32 36 5c 78 32 36 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 5c 78 33 64 62 5b 63 5d 3b 61 2e 41 5c 78 33 64 62 2e 70 72 6f 74 6f 74 79 70 65 7d 76 61 72 20 6a 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 Data Ascii: if(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var d\x3dObject.getOwnPropertyDescriptor(b,c);d\x26\x26Object.defineProperty(a,c,d)}else a[c]\x3db[c];a.A\x3db.prototype}var ja\x3d\x22function\x22\x3d\x3dtypeof Obje
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 73 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 5c 78 32 36 5c 78 32 36 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 5c 78 32 36 5c 78 32 36 2d 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 7d 7d 29 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 Data Ascii: ssion\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){return a?a:function(b){return\x22number\x22!\x3d\x3dtypeof b?!1:!isNaN(b)\x26\x26Infinity!\x3d\x3db\x26\x26-Infinity!\x3d\x3db}});/* Copyright The Closure Library A
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 3a 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 71 61 5c 78 33 64 21 6e 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 72 61 5c 78 33 64 21 77 2c 73 61 5c 78 33 64 21 77 3b 76 61 72 20 45 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 5c Data Ascii: :A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefined\x22!\x3d\x3dtypeof Uint8Array,qa\x3d!na\x26\x26\x22function\x22\x3d\x3d\x3dtypeof btoa;var ra\x3d!w,sa\x3d!w;var E\x3d\x22function\x22\x3d\x3d\x3dtypeof Symbol\
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 72 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 47 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 2c 41 61 5c 78 33 64 5b 5d 3b 47 28 41 61 2c 35 35 29 3b 4d 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 41 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 Data Ascii: r K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;G(a,d\|1);return!0}var M,Aa\x3d[];G(Aa,55);M\x3dObject.freeze(Aa);Object.freeze(new fu
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 61 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 7a 61 7c 7c 21 4c 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 70 61 5c 78 32 36 5c 78 32 36 6e 75 6c 6c 21 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 Data Ascii: a(b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);case \x22boolean\x22:return a?1:0;case \x22object\x22:if(a){if(Array.isArray(a))return za\|\|!L(a,void 0,9999)?a:void 0;if(pa\x26\x26null!\x3da\x26\x26a instanceof Uint

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.5	50765	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	898	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmRvcp0a0a1NMIez4Jgo0_n-CT-3H86h4GJdXiQf5S7SCvZd88vd-ktwY72MIdPmD04TdNyBwwGltCxVVPAo41KdQt1VjDbSBu58 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsIqNf1_-v1yjwQBRgFIAIoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:24:47 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:47 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIpPKUjOz1yjwQBRgFIAMoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:47 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:47 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.5	50779	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	3056	OUT	GET /pagead/adview?ai=CJ8T1GzKlZdeiKMLDxtYP6uqP6AW_r5TQba-LrbawEbCQHxAEIO34qSAoCGDJhqCKpKTgEaABnfbRmgLIAQaoAwHIAwKqBPABT9AkiRixs3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8WRryEPWupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxzCFIhywyrmtOQV3XYp2QrosypTLFP70K9qk5d9hBrvOBFFtuOrAOr5t6rXw3568Gst111zwJVSfPlTvfrBialvYP6ejYmwASGo6-CkwSIBdnk6vlGkgUECAQYAZIFBAgFGASgBjeAB8uJruUBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJFmh0dHBzOi8vZ29zcXVlZXplLmNvbS-ACgHICwGiDAgqBgoErLqxAtoMEQoLENCG8NyWrZ_F5AESAgED2BMNiBQB0BUBmBYBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=AO3cPbE8ZPE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1212	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xd050ad239917bd240000000000000000","2":"0x477541ac67aaed9a0000000000000000","3":"0x84c3e42bb9a1c6dd0000000000000000","4":"0xeafba4775d5168cf0000000000000000","5":"0x2397c09bc88fbd4d0000000000000000"},"debug_key":"2832574546057491459","debug_reporting":true,"destination":"https://gosqueeze.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["592739101"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"6658178565639272097"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.5	50776	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	3076	OUT	GET /pagead/adview?ai=Cr71_GzKlZdeiKMLDxtYP6uqP6AXEqsuSdbrB3anMDo_ljMzlBBAFIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBN8BT9B66gCxsnf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LK8UQozgfUupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxHcSfCKet-k4wekLABcpmnBlyBditmwWtktdwt_Vfsvemqhy0Ynrl-M3eEdBU0dC-sUuP_4MAEzpi-9-UDiAXSj6CwBpIFBAgEGAGSBQQIBRgEoAZmgAfPx9hqqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJRGh0dHBzOi8vaGVsaS5saWZlL2ZpbHRlcj9rZXl3b3JkPWtpdGUlMjAlMjYlMjBzdGF5JTIwcGFja2FnZXMmcGFnZT0xgAoByAsBogwIKgYKBKy6sQLaDBAKChDQ65n7ouz37yQSAgED2BMMiBQB0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRhmIgEA&sigh=qjq6ImCA6r8&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1209	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x51630f55b9fa615d0000000000000000","2":"0x13475edac693a8440000000000000000","3":"0x6494477efb290bb20000000000000000","4":"0x2a7903177bea863e0000000000000000","5":"0xb0145bac6028fd340000000000000000"},"debug_key":"12903080191145436432","debug_reporting":true,"destination":"https://heli.life","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["849992729"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"5375611177856760913"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.5	50781	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	3072	OUT	GET /pagead/adview?ai=CU8neGzKlZdeiKMLDxtYP6uqP6AX36JutdZfavOHqEryC2IHwBRAGIO34qSAoCGDJhqCKpKTgEaAB6f31zwPIAQaoAwHIAwKqBOQBT9AhmRexsHf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ77Yi1pz3LC8Y1JSQg6kjkwSu6W9CygVjVCH-40JMtU-F2PrwTi4DxbB7aHlKQnTQN6XNoHyNfoxJRxLUmnQAxIo-m5nSWzVOIiye_NTQyPaduffgQpZPOTDf9p3niWFRrsCdYVDVJtSegTj2NU9B6QnE2ZQSOrduGYNYFZF_5fPgE4qAWQjwn-xNKzyr7VyhgUnX97193NdvsWwASHnLuEyAOIBYPQxecukgUECAQYAZIFBAgFGASgBjeAB_2LnMEBqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJN2h0dHBzOi8vaXJlc3VsdHMuY29tL2NydWlzZXM_cmdpZD0xMTcxMDUmc3ViPWdjbGlkJnNsPTWACgHICwGiDAgqBgoErLqxAtoMEQoLEOD1uNaUi9vFkQESAgED2BML0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYALIYBRg3IgEA&sigh=iLgN0jsqfr4&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1209	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xa7dcc8f1697a0d5d0000000000000000","2":"0x29775accf1c2f1f80000000000000000","3":"0x7018e083b146c1480000000000000000","4":"0xc8ee26239de260b80000000000000000","5":"0xd4321ae33412a9610000000000000000"},"debug_key":"2483161391694488212","debug_reporting":true,"destination":"https://iresults.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["972914409"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"68212358766762177"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.5	50788	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	2049	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=64749615;ord=o09itk;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMImZeXgL_fgwMVnI7RBB3q6ATUEAEYASAAEgL7o_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbwGAE%26sig%3DAOD64_0egs2PjaWlFnf9Zk_0Y-BRe9bc9Q%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=8;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:47 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 36 39 38 31 30 32 34 36 34 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 48 7a 4b 6c 5a 5a 33 71 4e 4a 33 61 6f 50 77 50 75 71 43 70 6f 41 73 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_698102464"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZZ3qNJ3aoPwPuqCpoAs"\x3e');(function() {var m = document.createElem
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: e-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelecto
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 4e 33 31 32 6f 43 5f 33 34 4d 44 46 52 30 74 69 41 6b 64 4f 6c 41 4b 74 41 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 74 58 53 64 66 42 68 78 67 53 58 2d 48 7a 50 73 6d 78 41 5f 45 4d 48 6d 6e 43 44 33 6c 55 41 7a 50 4b 77 74 59 63 51 38 38 4a 30 78 4b 57 77 67 6e 69 47 61 4f 31 48 69 32 73 75 65 39 37 65 51 39 75 31 4e 73 37 30 69 64 70 43 43 30 50 33 58 31 78 71 6c 61 44 6a 4a 72 4a 5a 47 31 71 43 49 79 6d 69 55 42 63 71 66 74 79 52 55 58 63 51 4e 77 6e 4f 4e 6b 67 33 31 73 36 47 56 45 64 65 32 4b 4a 56 4d 73 53 72 30 6d 67 6e 32 74 Data Ascii: 2 id\x3d\x22img_anch_CN312oC_34MDFR0tiAkdOlAKtA\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjstXSdfBhxgSX-HzPsmxA_EMHmnCD3lUAzPKwtYcQ88J0xKWwgniGaO1Hi2sue97eQ9u1Ns70idpCC0P3X1xqlaDjJrJZG1qCIymiUBcqftyRUXcQNwnONkg31s6GVEde2KJVMsSr0mgn2t
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 4f 57 67 4c 5f 66 67 77 4f 41 43 67 47 59 43 77 48 49 43 77 47 41 44 41 47 69 44 41 67 71 42 67 6f 45 72 4c 71 78 41 74 6f 4d 45 41 6f 4b 45 49 44 6b 68 64 37 4e 39 74 54 69 50 42 49 43 41 51 4f 71 44 51 4a 56 55 38 67 4e 41 64 67 54 44 64 41 56 41 66 67 57 41 59 41 58 41 51 25 32 36 61 73 65 25 33 44 32 25 32 36 67 63 6c 69 64 25 33 44 45 41 49 61 49 51 6f 62 43 68 4d 49 6d 5a 65 58 67 4c 5f 66 67 77 4d 56 6e 49 37 52 42 42 33 71 36 41 54 55 45 41 45 59 41 53 41 41 45 67 4c 37 6f 5f 44 5f 42 77 45 25 32 36 6e 75 6d 25 33 44 31 25 32 36 63 69 64 25 33 44 43 41 51 53 4f 77 41 76 48 68 66 5f 6a 2d 54 49 41 7a 48 2d 4e 63 41 73 38 64 50 71 35 2d 4e 47 72 76 32 4b 6d 67 4c 36 41 78 59 39 76 58 70 76 4d 57 55 39 36 54 58 66 34 44 35 49 4f 51 68 62 4b 44 42 55 Data Ascii: OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMImZeXgL_fgwMVnI7RBB3q6ATUEAEYASAAEgL7o_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 64 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 5c 78 33 64 5b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 5c 78 32 36 5c 78 32 36 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 73 65 6c 66 5c 78 32 36 5c 78 32 36 Data Ascii: d\x3dArray.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a){a\x3d[\x22object\x22\x3d\x3dtypeof globalThis\x26\x26globalThis,a,\x22object\x22\x3d\x3dtypeof window\x26\x26window,\x22object\x22\x3d\x3dtypeof self\x26\x26
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 33 64 61 3b 69 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 5c 78 33 64 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 5c 78 32 36 5c 78 32 36 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 5c 78 33 64 62 5b 63 5d 3b 61 2e 41 5c 78 33 64 62 2e 70 72 6f 74 6f 74 79 70 65 7d 76 61 72 20 6a 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 Data Ascii: 3da;if(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var d\x3dObject.getOwnPropertyDescriptor(b,c);d\x26\x26Object.defineProperty(a,c,d)}else a[c]\x3db[c];a.A\x3db.prototype}var ja\x3d\x22function\x22\x3d\x3dtypeof
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 78 70 72 65 73 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 5c 78 32 36 5c 78 32 36 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 5c 78 32 36 5c 78 32 36 2d 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 7d 7d 29 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 Data Ascii: xpression\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){return a?a:function(b){return\x22number\x22!\x3d\x3dtypeof b?!1:!isNaN(b)\x26\x26Infinity!\x3d\x3db\x26\x26-Infinity!\x3d\x3db}});/* Copyright The Closure Libra
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 78 32 32 29 3a 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 71 61 5c 78 33 64 21 6e 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 72 61 5c 78 33 64 21 77 2c 73 61 5c 78 33 64 21 77 3b 76 61 72 20 45 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 53 79 6d Data Ascii: x22):A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefined\x22!\x3d\x3dtypeof Uint8Array,qa\x3d!na\x26\x26\x22function\x22\x3d\x3d\x3dtypeof btoa;var ra\x3d!w,sa\x3d!w;var E\x3d\x22function\x22\x3d\x3d\x3dtypeof Sym
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 74 7d 76 61 72 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 47 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 2c 41 61 5c 78 33 64 5b 5d 3b 47 28 41 61 2c 35 35 29 3b 4d 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 41 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 Data Ascii: t}var K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;G(a,d\|1);return!0}var M,Aa\x3d[];G(Aa,55);M\x3dObject.freeze(Aa);Object.freeze(ne
2024-01-15 13:24:47 UTC	1252	IN	Data Raw: 72 6e 20 46 61 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 7a 61 7c 7c 21 4c 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 70 61 5c 78 32 36 5c 78 32 36 6e 75 6c 6c 21 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 Data Ascii: rn Fa(b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);case \x22boolean\x22:return a?1:0;case \x22object\x22:if(a){if(Array.isArray(a))return za\|\|!L(a,void 0,9999)?a:void 0;if(pa\x26\x26null!\x3da\x26\x26a instanceof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.5	50785	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	3067	OUT	GET /pagead/adview?ai=CUZeUGzKlZdeiKMLDxtYP6uqP6AWAuoODdaTp-c3_EGQQByDt-KkgKAhgyYagiqSk4BGgAbj0s_wDyAEGqAMByAMCqgTjAU_QfdQbsbF3_07tvWxJGrGu-udw4nO-OVBxPw3ZnobEUCD2RsNhzVmUTQQZPhkGKh-kgJB_tsrylAgk9nQClWpQKZhC5n6jc8Se-2Itac9ywvGTSUliBsxYKErulvQsoFY1Qh_uNCTLVPhdj68E4uA8Wwe2h5SkJ00DelzaB8jX6MSUcS1Jp0AMSKPpuZ0ls1TiIsnvzU0Mj2nbn34EKWTzkw3_ad54lhUa7AnWIFwaqKgPxoY82jPbqpYcnOSzgl10hQ-_gwpOGC1-p6-pHaQr_sjGG42tqlUVNp1xbVrA90ghwASukt2enQSIBanvpNJHkgUECAQYAZIFBAgFGASgBjeAB7CLzAOoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBCb8irSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDmgk0aHR0cHM6Ly9pbmZvLmNhbGxtYy5jb20vY3AtaGVhbHRoY2FyZS1zYWZlLWhvc3BpdGFsc4AKAcgLAaIMCCoGCgSsurEC2gwRCgsQ4LX9iJH10pj_ARICAQPYEw2IFAfQFQGYFgGAFwGyFxwKGggAEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgAshgFGDciAQA&sigh=1n5cF9XVNoA&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:47 UTC	1212	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x1745ec5366dfdb5c0000000000000000","2":"0xc3f2d7866f7592f00000000000000000","3":"0x18b6e986885f4b3e0000000000000000","4":"0xb00180a9b18204420000000000000000","5":"0x7e05d67bd0ca4d2a0000000000000000"},"debug_key":"13175684135055022206","debug_reporting":true,"destination":"https://callmc.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1066203704"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"10330433683787828225"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.5	50768	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	780	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:48 UTC	643	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 229 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&s=2 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:47 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:47 GMT
2024-01-15 13:24:48 UTC	229	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 6f 6f 67 6c 65 61 64 78 2f 3f 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 44 6c 42 74 6d 33 58 46 35 43 76 5f 6f 79 73 53 4d 62 39 5f 59 51 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 33 61 7a 35 6c 72 58 48 59 68 53 70 7a 49 4b 61 62 46 74 71 4f 4e 54 55 6c 32 72 74 79 36 4a 30 36 75 65 68 47 4a 58 38 50 63 5f 43 47 56 72 4e 33 78 50 32 38 5f 78 52 31 47 30 7a 76 61 34 4f 38 49 55 76 77 79 55 45 78 4d 4d 32 4d 4f 33 56 32 67 54 54 39 55 48 64 33 4b 63 6b 41 32 35 53 55 26 61 6d 70 3b 73 3d 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&s=2">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.5	50794	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaQ49kEI_P3bXk8gYm36a4mevpybFm-yJtZ0jJppBDYBL-C_D2h3cR-35KydukMreaGF4KjxVSBLrXBmzdvXK0GH4uGfdg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:47 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.5	50793	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	2059	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378470415;dc_ver=99.292;dc_eid=40004001;sz=300x250;u_sd=1;gdpr=0;nel=1;dc_adk=2095948214;ord=z3ghd5;click=https%3A%2F%2Fadclick.g.doubleclick.net%2Faclk%3Fsa%3Dl%26ai%3DCs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIgtiXgL_fgwMV_oN3AR2GGgY5EAEYASAAEgJvv_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlmGAE%26sig%3DAOD64_02e9gsl6i-jkDtMLHrPNvFtOpCcA%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=2,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=psDjw-_x5;cmpl=8;gcsr=m;stc=1;sttr=9;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:48 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:48 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 32 36 30 31 36 33 38 31 34 35 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 48 7a 4b 6c 5a 63 69 57 4f 5f 79 55 6f 50 4d 50 68 4c 69 79 75 41 51 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_2601638145"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_HzKlZciWO_yUoPMPhLiyuAQ"\x3e');(function() {var m = document.createEle
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 Data Ascii: he-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelect
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 32 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 49 69 69 34 59 43 5f 33 34 4d 44 46 58 77 4b 61 41 67 64 42 4a 77 4d 52 77 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 74 68 54 31 52 53 50 47 6a 50 48 36 54 44 45 57 47 62 75 6b 50 37 6e 74 4e 79 5a 4d 49 39 79 53 63 69 50 37 37 58 6c 6f 4b 4f 63 68 45 63 72 7a 4d 68 74 31 6a 4e 71 52 5f 51 49 47 4f 72 43 45 77 53 4b 32 5f 52 65 41 6f 73 37 43 30 53 44 36 35 48 69 5a 74 71 70 61 41 65 6e 44 65 47 41 46 2d 5a 37 66 6b 4e 4e 4f 38 4d 4b 6f 59 69 62 5f 61 4e 53 66 4a 54 61 75 4e 48 4a 53 31 5f 4a 72 76 61 34 67 6f 65 79 7a 30 32 2d 6f Data Ascii: 22 id\x3d\x22img_anch_CIii4YC_34MDFXwKaAgdBJwMRw\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjsthT1RSPGjPH6TDEWGbukP7ntNyZMI9ySciP77XloKOchEcrzMht1jNqR_QIGOrCEwSK2_ReAos7C0SD65HiZtqpaAenDeGAF-Z7fkNNO8MKoYib_aNSfJTauNHJS1_Jrva4goeyz02-o
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 66 67 77 4f 41 43 67 47 59 43 77 48 49 43 77 47 41 44 41 47 69 44 41 67 71 42 67 6f 45 72 4c 71 78 41 74 6f 4d 45 41 6f 4b 45 4f 43 71 2d 4e 71 58 68 64 71 55 51 78 49 43 41 51 4f 71 44 51 4a 56 55 38 67 4e 41 64 67 54 44 64 41 56 41 66 67 57 41 59 41 58 41 51 25 32 36 61 73 65 25 33 44 32 25 32 36 67 63 6c 69 64 25 33 44 45 41 49 61 49 51 6f 62 43 68 4d 49 67 74 69 58 67 4c 5f 66 67 77 4d 56 5f 6f 4e 33 41 52 32 47 47 67 59 35 45 41 45 59 41 53 41 41 45 67 4a 76 76 5f 44 5f 42 77 45 25 32 36 6e 75 6d 25 33 44 31 25 32 36 63 69 64 25 33 44 43 41 51 53 4f 77 41 76 48 68 66 5f 5f 69 66 32 44 44 31 4f 50 6b 6a 49 59 39 41 50 37 4c 7a 35 73 6d 76 49 69 33 42 71 61 39 55 61 62 45 54 75 56 31 6c 74 77 77 43 72 65 70 33 51 55 73 54 61 41 67 57 66 5f 6e 44 57 76 Data Ascii: fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ%26ase%3D2%26gclid%3DEAIaIQobChMIgtiXgL_fgwMV_oN3AR2GGgY5EAEYASAAEgJvv_D_BwE%26num%3D1%26cid%3DCAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWv
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 5c 78 33 64 5b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 5c 78 32 36 5c 78 32 36 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 73 65 6c 66 5c 78 32 36 5c 78 32 36 73 65 6c 66 2c Data Ascii: Array.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a){a\x3d[\x22object\x22\x3d\x3dtypeof globalThis\x26\x26globalThis,a,\x22object\x22\x3d\x3dtypeof window\x26\x26window,\x22object\x22\x3d\x3dtypeof self\x26\x26self,
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 5c 78 33 64 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 5c 78 32 36 5c 78 32 36 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 5c 78 33 64 62 5b 63 5d 3b 61 2e 41 5c 78 33 64 62 2e 70 72 6f 74 6f 74 79 70 65 7d 76 61 72 20 6a 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: f(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var d\x3dObject.getOwnPropertyDescriptor(b,c);d\x26\x26Object.defineProperty(a,c,d)}else a[c]\x3db[c];a.A\x3db.prototype}var ja\x3d\x22function\x22\x3d\x3dtypeof Objec
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 5c 78 32 36 5c 78 32 36 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 5c 78 32 36 5c 78 32 36 2d 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 7d 7d 29 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 Data Ascii: sion\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){return a?a:function(b){return\x22number\x22!\x3d\x3dtypeof b?!1:!isNaN(b)\x26\x26Infinity!\x3d\x3db\x26\x26-Infinity!\x3d\x3db}});/* Copyright The Closure Library Au
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 71 61 5c 78 33 64 21 6e 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 72 61 5c 78 33 64 21 77 2c 73 61 5c 78 33 64 21 77 3b 76 61 72 20 45 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 5c 78 Data Ascii: A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefined\x22!\x3d\x3dtypeof Uint8Array,qa\x3d!na\x26\x26\x22function\x22\x3d\x3d\x3dtypeof btoa;var ra\x3d!w,sa\x3d!w;var E\x3d\x22function\x22\x3d\x3d\x3dtypeof Symbol\x
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 47 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 2c 41 61 5c 78 33 64 5b 5d 3b 47 28 41 61 2c 35 35 29 3b 4d 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 41 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 6e Data Ascii: K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;G(a,d\|1);return!0}var M,Aa\x3d[];G(Aa,55);M\x3dObject.freeze(Aa);Object.freeze(new fun
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 7a 61 7c 7c 21 4c 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 70 61 5c 78 32 36 5c 78 32 36 6e 75 6c 6c 21 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 Data Ascii: (b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);case \x22boolean\x22:return a?1:0;case \x22object\x22:if(a){if(Array.isArray(a))return za\|\|!L(a,void 0,9999)?a:void 0;if(pa\x26\x26null!\x3da\x26\x26a instanceof Uint8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.5	50791	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	3126	OUT	GET /pagead/adview?ai=CAKlEGzKlZdeiKMLDxtYP6uqP6AX_3ZeTdbOqzKOqEpT8o_T5QRAIIO34qSAoCGDJhqCKpKTgEaABl6mB-gPIAQaoAwHIAwKqBN8BT9AX5RWxvnf_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz2_K8S0c3FjXupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RxZKQavKet-k4wekLBkdA6mBlyBdmQq8xxdtfwo61TsvbWqhy0Ynpl7JXSEdBU0dC_jHtGI2cAEn5WFosUEiAXGyZjxTZIFBAgEGAGSBQQIBRgEoAY3gAfR1v4FqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQm_Iq0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj35tn-vt-DA5oJYGh0dHBzOi8vd3d3LnN0aWNrZXJnaWFudC5jb20vc3RpY2tlcnM_dXRtX3NvdXJjZT1nb29nbGUmdXRtX21lZGl1bT1kaXNwbGF5JnV0bV9jYW1wYWlnbj1uc2QtMjAyNIAKAcgLAaIMCCoGCgSsurEC2gwQCgoQkOixlteXhpdrEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGACyGAUYNyIBAA&sigh=LDCt-O8zRNc&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLxGAE&template_id=492&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:48 UTC	1216	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x52703ccc854722100000000000000000","2":"0xf3c211ebe5afb6600000000000000000","3":"0x352b7613bbeab2330000000000000000","4":"0x9e6a97c8b65263890000000000000000","5":"0x9e98fa2f589525260000000000000000"},"debug_key":"7368099344823075762","debug_reporting":true,"destination":"https://stickergiant.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1061180567"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"7309816727122156049"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:47 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.5	50790	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaRKomDjAz7NvI4aS8Mv1jqx9HLUPxkHIRbnYL_Do-ss2YY_PcqRqaVfvCR7eMeo25QvSlFPq-MwvvG_wTYUmZ5gOuW5JQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:48 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:48 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.5	50798	216.239.34.21	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:47 UTC	346	OUT	GET /v4/pixie? HTTP/1.1 Host: jelly.mdhv.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:48 UTC	353	IN	HTTP/1.1 307 Temporary Redirect Content-Type: text/html; charset=utf-8 Location: https://ads.stickyadstv.com/user-registering?dataProviderId=513&userId=37ca99fe-a80f-474f-ae83-d69874b7ce6f X-Cloud-Trace-Context: c5ae97778cf4e6a856e1e716bb67e8cc Date: Mon, 15 Jan 2024 13:24:48 GMT Server: Google Frontend Content-Length: 147 Connection: close
2024-01-15 13:24:48 UTC	147	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 35 31 33 26 61 6d 70 3b 75 73 65 72 49 64 3d 33 37 63 61 39 39 66 65 2d 61 38 30 66 2d 34 37 34 66 2d 61 65 38 33 2d 64 36 39 38 37 34 62 37 63 65 36 66 22 3e 54 65 6d 70 6f 72 61 72 79 20 52 65 64 69 72 65 63 74 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=513&userId=37ca99fe-a80f-474f-ae83-d69874b7ce6f">Temporary Redirect</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.5	50799	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	2022	OUT	GET /pagead/adview?ai=C8ScdGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTkAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOLUDTgdaidrG6m8H-9ELIjRB_1He7nRxw-t0wVE1ZLPtTc3XLaaV8AEzcOcvrsEiAXenqyZTZIFBAgEGAGSBQQIBRgEoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwUQqOacAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY_qbZ_r7fgwOaCdIBaHR0cHM6Ly9hZC5kb3VibGVjbGljay5uZXQvc2VhcmNoYWRzL2xpbmsvY2xpY2s_JmRzX2FfY2lkPTEzNTA0OTEyMiZkc19hX2NhaWQ9JmRzX2FfYWdpZD0mZHNfYV9maWlkPSZkc19hX2xpZD0mZHNfYV9leHRpZD0mJmRzX2VfYWRpZD0wJmRzX2VfbWF0Y2h0eXBlPXNlYXJjaCZkc19lX2RldmljZT1jJmRzX2VfbmV0d29yaz0mJmRzX3VybF92PTImZHNfZGVzdF91cmw9gAoByAsBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=m9gW4MOP4wY&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkGGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:48 UTC	1213	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"2326034238032910412","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"17306139310271888977"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.5	50808	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	1063	OUT	OPTIONS /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:48 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.5	50809	142.251.16.148	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	607	OUT	GET /simgad/772535680019461723 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:48 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 67012 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 19:25:09 GMT Expires: Fri, 10 Jan 2025 19:25:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 16:15:09 GMT Content-Type: image/jpeg Age: 323979 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:48 UTC	429	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 Data Ascii: 1966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb Data Ascii: &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 Data Ascii: XQKFA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 43 03 64 5b 44 1a a8 64 55 50 c9 26 cc e5 2d 66 53 d7 ea dd 5b b2 7f af 37 91 db ed b4 86 d5 17 04 d1 d9 6f aa 29 74 e4 86 eb 7b b2 de 61 da 25 35 7a eb aa 5d 0d 34 9b 96 a2 a0 9d 95 59 57 98 12 6e 2a 93 8f 42 38 cc d4 9a 48 4c 43 ba dd 4e cd a6 26 2b 47 b0 4a 73 4f d9 36 e8 3b cf fd 65 c3 ac da d9 99 b6 cb 5a ad 96 f2 a3 a2 23 cd bf 89 53 35 a6 4a 59 73 ca 7c c0 8f 8a d3 d3 99 40 7b 8a 57 15 2b 27 c1 f7 d4 7f 10 30 17 1a fb a2 d5 ef f4 13 e0 9e a9 f7 c6 d0 9e 6a b8 fc 30 93 83 73 75 a9 f7 03 69 ad 7b 1d 3a da 2a b7 c8 7d 2f 5f 5e 20 ea 24 ca c0 f1 c7 d7 fc fd 61 35 fb 5f 4c bc df b2 3a ed 1f 79 e7 1e f8 ce 3e 71 c1 a7 73 f3 0d df d2 ba 4b 98 d9 e3 00 fe 29 cb 6c f2 2f 49 c2 f8 67 15 a1 64 a7 00 db f8 63 e8 7d b0 ab b5 b9 ba da a3 11 de b0 58 2b 94 6c a6 Data Ascii: Cd[DdUP&-fS[7o)t{a%5z]4YWnB8HLCN&+GJsO6;eZ#S5JYs\|@{W+'0j0sui{:}/_^ $a5_L:y>qsK)l/Igdc}X+l
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 9d 9b 66 9d b0 30 96 de 60 e9 d0 33 d9 7c 36 c5 3c 2d e8 4a a3 fa 19 e4 8e 69 3e f7 7c d6 00 00 00 00 00 22 d7 86 fe 85 b8 ac 0f d6 cf a5 9f 1b b7 44 ce e1 59 df 23 85 03 75 f3 f5 5b 65 a2 8e 35 6d e3 9f 5b 70 dc 5c a2 bc 30 9e 42 5a 61 6d 8d c3 6d 33 d3 3e 93 c3 9d 86 bb 04 cd 86 70 91 c6 1a f6 a8 a9 5b 23 b5 5b 77 8d de 57 0d 63 db 3d b7 4f b7 60 a2 55 da 8f 5d 63 8c 3c 6c 85 84 49 e9 7f a6 2c 56 72 6d d6 7b 20 ba ad ba 64 9a 2d be 2a ad 8c 1e 86 49 29 b3 89 05 9c 7a af cb 79 67 f9 bb db 64 bd b5 50 45 35 ae 6f 2a d6 62 2f 56 be 50 07 a3 25 59 6b 24 6f d3 b6 52 5e b7 37 2f 29 33 ed c7 3c e3 d6 55 ce a9 52 72 06 4a 38 47 b5 66 e7 5b bc 0d 1e c0 1e 82 de ac 3e a5 79 59 07 70 84 00 00 00 03 a6 3f 70 7c dc 02 c0 3e 22 fd 3c 75 7c d7 da 80 00 00 00 00 00 00 Data Ascii: f0`3\|6<-Ji>\|"DY#u[e5m[p\0BZamm3>p[#[wWc=O`U]c<lI,Vrm{ d-I)zygdPE5ob/VP%Yk$oR^7/)3<URrJ8Gf[>yYp?p\|>"<u\|
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: 7a 81 83 af 0c 5e 9c 38 7a 04 38 7e 9c 1f 40 2a 7e 9c 53 c4 22 72 7a 15 4f a7 14 4c 7a f8 47 a9 00 04 00 a2 00 43 08 8a 22 20 29 29 e1 28 2e 53 14 e9 99 43 19 24 bc 06 29 94 29 19 35 23 44 90 5d 33 b8 72 65 41 cc 29 5c 46 33 24 94 52 ce 1d 7f 32 7d 1c f0 f1 c7 f1 a6 c8 48 77 65 6c 2c cf f6 06 f2 60 c4 ee a4 4c d5 78 c7 2e 65 64 08 ff 00 c7 c5 d2 49 64 8b 19 2a d8 c1 60 3c 53 c7 e6 41 47 b1 74 d9 23 84 9b f8 ff 00 21 53 c8 4f 2f 5d 6a d9 5b 3c c3 e8 16 73 11 c7 94 8f 50 f1 d2 4f 5d b3 42 b9 1a 04 8e 68 a9 96 76 b2 dc 6d 26 e3 cf 94 33 82 04 7c 88 cc bb 92 8f 06 e9 b8 40 88 b5 34 83 c5 5e ac ce 1d c1 31 d9 0a 9e 3f fd f4 7d 7d 7a 08 f5 1e 18 07 a0 00 f8 8c 1d 38 61 11 13 94 40 0d c3 fa cc 6e 28 1e 2e 18 bc 39 7a 70 e9 88 f1 44 87 85 0e 86 14 87 82 02 73 79 Data Ascii: z^8z8~@~S"rzOLzGC" ))(.SC$))5#D]3reA)\F3$R2}Hwel,`Lx.edId`<SAGt#!SO/]j[<sPO]Bhvm&3\|@4^1?}}z8a@n(.9zpDsy
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: ac fb 39 26 d2 2c 58 30 76 f9 84 3d 5a 41 29 4f 12 12 2e 20 2a 4c 58 38 aa 56 bc 36 2a d4 71 21 da 57 61 a3 22 e5 60 23 d5 8d 56 0e b8 c1 93 e8 28 e5 52 4b ec 42 c5 80 20 07 8f 63 51 9a 2b f6 4a b3 78 d1 c1 a6 5c b7 89 7a c6 56 c8 d6 7d d4 b5 3a 51 da 18 fe 3d 89 a4 65 66 18 a6 d9 ea cc 50 59 89 62 d0 4c 63 2c aa d6 0a ed c5 36 76 5e 3c f1 09 c7 cb c9 b5 f1 20 f1 76 eb 94 c8 45 92 3b f1 1b be 3b 7a 66 ed e3 e0 d2 9b 47 1a a5 e4 63 9f dd 4f 1d 32 c9 d2 11 72 4e 9f fd 22 ac 25 e0 80 8f 1e 09 80 de 42 bd 0e a9 4c cc 87 f0 b5 f2 17 23 99 73 94 ce d0 55 2f 35 f9 65 1e 9e 39 a9 db 0f 41 ea 20 21 c7 cc 06 46 3f c0 8c 0c 5b 70 3f f2 eb 00 28 30 70 8b 92 42 32 59 d2 92 33 e8 96 65 37 16 42 b5 3c a4 3b 96 0d 24 58 a1 08 b3 9f b5 43 d7 19 40 b1 89 93 41 9d 55 b3 37 Data Ascii: 9&,X0v=ZA)O. LX8V6q!Wa"`#V(RKB cQ+Jx\zV}:Q=efPYbLc,6v^< vE;;zfGcO2rN"%BL#sU/5e9A !F?[p?(0pB2Y3e7B<;$XC@AU7
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: ef 15 8f 87 bb 3d 88 51 ce 42 67 32 fa 7e 28 64 a3 f1 8a 8e ce de 2e ca 83 62 23 30 cd 72 98 88 28 63 d9 94 8a 4e fb 94 2c 46 4f ed 91 d0 cb 46 4b 98 52 ba cd 48 91 b4 aa 56 e9 d8 d7 b8 be 55 82 f0 32 35 a8 07 0f 26 61 e5 cd 44 48 a8 51 fe 96 6a 7e fa 33 16 d2 dc bd 4f 1c 54 ef 37 f2 59 2b 33 d7 a5 a7 e7 e4 cb 3f 62 86 c8 53 ea da 6f 37 46 6d b2 5c cc d3 29 0a 6e 30 b2 d8 8f 65 ae 37 bf bb c8 13 d7 0a c5 5d ca 79 16 c0 5c 54 85 fa c2 be 00 a3 5c 6f 2e 72 d5 c9 79 d8 cc e1 8c 2e b2 2f 6e 19 4b fa 13 e9 27 e0 37 11 0e bc 5b ff 00 8f 88 2e 27 0f 01 40 56 00 0e 2b e3 03 22 aa 9d 55 2f 42 f9 62 3c 2f 4e 1c dc 3f 5e 18 a7 31 7a 0f 08 00 00 b1 4d d4 9e 67 84 a0 53 19 c1 48 02 42 14 fc 3a e6 4c cb 38 f1 94 be 59 85 61 0e 01 8c 4e 14 c2 72 b7 3a 3e 52 4e 8c df 81 Data Ascii: =QBg2~(d.b#0r(cN,FOFKRHVU25&aDHQj~3OT7Y+3?bSo7Fm\)n0e7]y\T\o.ry./nK'7[.'@V+"U/Bb</N?^1zMgSHB:L8YaNr:>RN
2024-01-15 13:24:48 UTC	1252	IN	Data Raw: a6 1f eb 83 d2 01 e8 e0 75 fd 81 e9 e0 70 03 9d 3a f0 a1 c0 27 5e 78 44 38 21 d7 86 20 00 f0 07 a0 88 80 87 ac 04 38 71 e1 ba 08 08 1b af 40 f0 88 75 0f 07 50 31 07 87 01 f2 ca 91 3c 22 02 51 32 69 01 4c 29 08 38 f0 89 9c 37 31 84 48 46 c0 9a 86 01 78 dc c4 33 43 a6 62 b9 32 42 ba 86 49 4e 24 90 10 57 4b ca e3 35 d1 58 0c 60 48 8a 14 5d 2a 9b 26 86 01 2c 60 31 64 91 54 59 34 14 68 f3 a2 68 1d 04 ce e5 c4 3b 42 36 45 b3 16 87 33 9b 1d 6c c7 67 0a d8 e8 2f 53 33 a6 f2 b1 0b b4 98 20 f9 66 9e 9b 6a 53 32 74 65 88 e4 e6 48 cd cc 44 14 17 28 75 b6 7a 2d 5c 8c fb ca fb 5d a3 4c 4a d6 61 6a 90 d0 14 da aa 70 55 19 0a ca b7 28 0a eb 68 0a 15 1e 99 31 56 ba a6 d4 e0 9e 0f 97 b8 b0 65 43 c6 ef 63 5e d7 6b b2 75 cc 8f 0d 45 5d 48 5c 58 73 98 e6 ae 34 7b 6f 9d b1 5d Data Ascii: up:'^xD8! 8q@uP1<"Q2iL)871HFx3Cb2BIN$WK5X`H]*&,`1dTY4hh;B6E3lg/S3 fjS2teHD(uz-\]LJajpU(h1VeCc^kuE]H\Xs4{o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.5	50803	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	3703	OUT	GET /pagead/adview?ai=CX7KwHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgVutct5LFzgH4lF86oNvvJV8xQTy0qSXaMz_24KabfFTBfdOPRymwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBDdkhPSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfjloC_34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQgOSF3s321OI8EgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=4Zthy4nKjpU&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbwGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:48 UTC	1213	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"17843311764351282146","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"1176996243111455089"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.5	50806	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	3713	OUT	GET /pagead/adview?ai=CKamzHjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTmAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCsVVLlEadT9xLiDq_Q0wlxqUudcaj0kiYGxFxbR8Ntl3kOlyGV2cwATNw5y-uwSIBd6erJlNkgUECAQYAZIFBAgFGASgBhGAB4rj1j-oB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAPIHBBDz7xTSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKSkl4C_34MDmgnSAWh0dHBzOi8vYWQuZG91YmxlY2xpY2submV0L3NlYXJjaGFkcy9saW5rL2NsaWNrPyZkc19hX2NpZD0xMzUwNDkxMjImZHNfYV9jYWlkPSZkc19hX2FnaWQ9JmRzX2FfZmlpZD0mZHNfYV9saWQ9JmRzX2FfZXh0aWQ9JiZkc19lX2FkaWQ9MCZkc19lX21hdGNodHlwZT1zZWFyY2gmZHNfZV9kZXZpY2U9YyZkc19lX25ldHdvcms9JiZkc191cmxfdj0yJmRzX2Rlc3RfdXJsPYAKAcgLAaIMCCoGCgSsurEC2gwQCgoQ4Kr42peF2pRDEgIBA9gTDdAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=k2h-fgPqf5U&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlmGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:48 UTC	1213	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"14466869307484473853","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"6121826738948774321"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:48 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.5	50801	13.107.213.57	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	596	OUT	GET /native-to-display/sdk.js HTTP/1.1 Host: adsdk.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	656	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:48 GMT Content-Type: application/javascript Content-Length: 96328 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Mon, 08 Jan 2024 22:48:38 GMT ETag: 0x8DC109BF43EA7FE x-ms-request-id: 4e2d8e8c-f01e-010c-44a5-46c17b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240115T132448Z-ha78rpvqqx1h3b0zc0v3dazn1000000002cg00000000surv X-Cache: TCP_HIT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600, stale-while-revalidate=86400 Accept-Ranges: bytes
2024-01-15 13:24:49 UTC	15728	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 3d 7b 38 35 37 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 69 76 3a 28 29 3d 3e 6b 65 2c 63 78 3a 28 29 3d 3e 79 65 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 69 6e 73 65 72 74 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3b 6e 3d 30 3d 3d 3d 74 2e 74 61 67 73 2e 6c 65 6e 67 74 68 3f 74 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 3f 74 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3a 74 2e 70 72 65 70 65 6e 64 3f 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 66 69 72 73 74 43 68 69 6c 64 3a 74 2e Data Ascii: (()=>{var e,t,n,r,i={8572:(e,t,n)=>{"use strict";n.d(t,{iv:()=>ke,cx:()=>ye});var r=function(){function e(e){var t=this;this._insertTag=function(e){var n;n=0===t.tags.length?t.insertionPoint?t.insertionPoint.nextSibling:t.prepend?t.container.firstChild:t.
2024-01-15 13:24:49 UTC	16384	IN	Data Raw: 75 6c 6c 21 3d 28 65 3d 65 2e 5f 5f 29 26 26 6e 75 6c 6c 21 3d 65 2e 5f 5f 63 29 7b 66 6f 72 28 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 6e 75 6c 6c 2c 74 3d 30 3b 74 3c 65 2e 5f 5f 6b 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 6e 3d 65 2e 5f 5f 6b 5b 74 5d 29 26 26 6e 75 6c 6c 21 3d 6e 2e 5f 5f 65 29 7b 65 2e 5f 5f 65 3d 65 2e 5f 5f 63 2e 62 61 73 65 3d 6e 2e 5f 5f 65 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6b 28 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 77 28 65 29 7b 28 21 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 21 30 29 26 26 6f 2e 70 75 73 68 28 65 29 26 26 21 78 2e 5f 5f 72 2b 2b 7c 7c 73 21 3d 3d 69 2e 64 65 62 6f 75 6e 63 65 52 65 6e 64 65 72 69 6e 67 29 26 26 28 28 73 3d 69 2e 64 65 62 6f 75 6e 63 65 52 65 6e 64 Data Ascii: ull!=(e=e.__)&&null!=e.__c){for(e.__e=e.__c.base=null,t=0;t<e.__k.length;t++)if(null!=(n=e.__k[t])&&null!=n.__e){e.__e=e.__c.base=n.__e;break}return k(e)}}function w(e){(!e.__d&&(e.__d=!0)&&o.push(e)&&!x.__r++\|\|s!==i.debounceRendering)&&((s=i.debounceRend
2024-01-15 13:24:49 UTC	16384	IN	Data Raw: 76 61 72 20 74 3d 66 28 65 29 2e 74 6f 48 73 6c 28 29 2c 6e 3d 74 2e 68 3b 72 65 74 75 72 6e 5b 66 28 65 29 2c 66 28 7b 68 3a 28 6e 2b 37 32 29 25 33 36 30 2c 73 3a 74 2e 73 2c 6c 3a 74 2e 6c 7d 29 2c 66 28 7b 68 3a 28 6e 2b 32 31 36 29 25 33 36 30 2c 73 3a 74 2e 73 2c 6c 3a 74 2e 6c 7d 29 5d 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 2c 74 2c 6e 29 7b 74 3d 74 7c 7c 36 2c 6e 3d 6e 7c 7c 33 30 3b 76 61 72 20 72 3d 66 28 65 29 2e 74 6f 48 73 6c 28 29 2c 69 3d 33 36 30 2f 6e 2c 61 3d 5b 66 28 65 29 5d 3b 66 6f 72 28 72 2e 68 3d 28 72 2e 68 2d 28 69 2a 74 3e 3e 31 29 2b 37 32 30 29 25 33 36 30 3b 2d 2d 74 3b 29 72 2e 68 3d 28 72 2e 68 2b 69 29 25 33 36 30 2c 61 2e 70 75 73 68 28 66 28 72 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c Data Ascii: var t=f(e).toHsl(),n=t.h;return[f(e),f({h:(n+72)%360,s:t.s,l:t.l}),f({h:(n+216)%360,s:t.s,l:t.l})]}function P(e,t,n){t=t\|\|6,n=n\|\|30;var r=f(e).toHsl(),i=360/n,a=[f(e)];for(r.h=(r.h-(i*t>>1)+720)%360;--t;)r.h=(r.h+i)%360,a.push(f(r));return a}function E(e,
2024-01-15 13:24:49 UTC	16384	IN	Data Raw: 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 2d 31 5d 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 6f 6e 73 74 20 72 3d 7b 72 61 6e 64 6f 6d 55 55 49 44 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 26 26 63 72 79 70 74 6f 2e 72 61 6e 64 6f 6d 55 55 49 44 2e 62 69 6e 64 28 63 72 79 70 74 6f 29 7d 3b 6c 65 74 20 69 3b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 21 69 26 26 28 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 63 72 79 70 74 6f 26 26 63 72 79 70 74 6f 2e 67 65 74 Data Ascii: indow.location.ancestorOrigins.length-1]:window.location.href}const r={randomUUID:"undefined"!=typeof crypto&&crypto.randomUUID&&crypto.randomUUID.bind(crypto)};let i;const a=new Uint8Array(16);function s(){if(!i&&(i="undefined"!=typeof crypto&&crypto.get
2024-01-15 13:24:49 UTC	16384	IN	Data Raw: 73 3a 20 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 61 6c 6c 3b 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 66 69 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 3a 68 6f 76 65 72 20 70 61 74 68 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 30 30 38 66 61 38 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 60 2c 21 6c 26 26 41 2e 69 76 60 0a 20 20 20 20 20 20 Data Ascii: s: 4px; pointer-events: all; path { transition: fill 0.2s ease-in-out; } &:hover path { fill: #008fa8; } `,!l&&A.iv`
2024-01-15 13:24:49 UTC	15064	IN	Data Raw: 70 74 69 6f 6e 3a 69 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 64 61 74 61 2d 74 65 73 74 69 64 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 5d 27 29 7d 3b 74 68 69 73 2e 72 65 6e 64 65 72 65 64 4c 61 79 6f 75 74 3d 7b 74 69 74 6c 65 3a 7b 72 65 6e 64 65 72 65 64 3a 21 21 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 61 2e 74 69 74 6c 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 69 6e 6e 65 72 54 65 78 74 29 2c 6f 76 65 72 66 6c 6f 77 3a 61 2e 74 69 74 6c 65 3f 74 68 69 73 2e 67 65 74 4f 76 65 72 66 6c 6f 77 54 65 78 74 42 6c 6f 63 6b 28 61 2e 74 69 74 6c 65 29 3a 76 6f 69 64 20 30 2c 69 73 46 61 6c 6c 62 61 63 6b 3a 42 6f 6f 6c 65 61 6e 28 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 6c 61 79 6f 75 74 42 Data Ascii: ption:i.querySelector('[data-testid="description"]')};this.renderedLayout={title:{rendered:!!(null===(e=a.title)\|\|void 0===e?void 0:e.innerText),overflow:a.title?this.getOverflowTextBlock(a.title):void 0,isFallback:Boolean(null===(n=null===(t=this.layoutB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.5	50802	151.101.193.108	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:48 UTC	810	OUT	GET /v/s/240/trk.js HTTP/1.1 Host: cdn.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Gg9z13ZdGa1bTmn_Ejy2PbuMjw3CNlj1HnaCT2MC4n3wMe3bJhVcc7HMN6Wb7iemA9XoRSotxq4NJZNf2OHxiCN30z9ztQB8OM3gUyT-ud8.; uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa
2024-01-15 13:24:48 UTC	595	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82359 Content-Type: application/x-javascript ETag: "ccac3ab7f323b8743d099010fcce15a4:1700057206.383562" Last-Modified: Wed, 15 Nov 2023 14:06:46 GMT Server: AkamaiNetStorage Cache-Control: max-age=31536000 Expires: Thu, 28 Nov 2024 10:30:01 GMT Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 15 Jan 2024 13:24:48 GMT Age: 4071288 X-Served-By: cache-lga21953-LGA, cache-ewr18140-EWR X-Cache: HIT, HIT X-Cache-Hits: 95, 1 X-Timer: S1705325089.829534,VS0,VE1 Vary: Accept-Encoding
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 5f 6c 6e 74 76 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 5f 6c 6e 74 76 3d 7b 7d 7d 5f 6c 6e 74 76 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 5f 72 65 28 48 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 48 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 7b 76 61 72 20 49 3d 48 2e 63 68 61 72 43 6f 64 65 41 74 28 70 29 3b 69 66 28 49 3e 3d 39 37 26 26 49 3c 3d 31 30 39 7c 7c 49 3e 3d 36 35 26 26 49 3c 3d 37 37 29 7b 49 2b 3d 31 33 7d 65 6c 73 65 7b 69 66 28 49 3e 3d 31 31 30 26 26 49 3c 3d 31 32 32 7c 7c 49 3e 3d 37 38 26 26 49 3c 3d 39 30 29 7b 49 2d 3d 31 33 7d 7d 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 49 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 Data Ascii: if(typeof _lntv=='undefined'){_lntv={}}_lntv.s=function(){function __re(H){var e="";for(var p=0;p<H.length;p++){var I=H.charCodeAt(p);if(I>=97&&I<=109\|\|I>=65&&I<=77){I+=13}else{if(I>=110&&I<=122\|\|I>=78&&I<=90){I-=13}}e+=String.fromCharCode(I)}return e}var
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 3a 68 7d 2c 6e 61 76 69 67 61 74 6f 72 3a 7b 75 73 65 72 41 67 65 6e 74 3a 69 7d 2c 45 72 72 6f 72 3a 7b 7d 7d 3b 68 62 2e 74 6f 70 3d 68 62 3b 68 62 2e 70 61 72 65 6e 74 3d 68 62 7d 65 6c 73 65 7b 68 62 3d 77 69 6e 64 6f 77 3b 69 62 3d 64 6f 63 75 6d 65 6e 74 7d 5f 6c 6e 74 76 2e 24 77 6e 64 3d 68 62 3b 76 61 72 20 6a 62 2c 6b 62 2c 6c 62 3d 7b 7d 2c 6d 62 3d 5b 5d 2c 6e 62 3d 5b 5d 2c 6f 62 3d 5b 5d 2c 70 62 3d 6a 2c 71 62 2c 72 62 2c 73 62 3d 6b 2c 74 62 3d 6c 3b 76 61 72 20 75 62 3d 5f 6c 6e 74 76 3b 75 62 2e 62 61 73 65 3d 73 62 3b 69 66 28 21 75 62 2e 73 63 73 29 7b 75 62 2e 73 63 73 3d 5b 5d 3b 75 62 2e 73 69 3d 6d 3b 75 62 2e 69 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 75 62 2e 72 71 73 3d 5b 5d 3b 75 62 2e 74 73 3d 7b Data Ascii: :h},navigator:{userAgent:i},Error:{}};hb.top=hb;hb.parent=hb}else{hb=window;ib=document}_lntv.$wnd=hb;var jb,kb,lb={},mb=[],nb=[],ob=[],pb=j,qb,rb,sb=k,tb=l;var ub=_lntv;ub.base=sb;if(!ub.scs){ub.scs=[];ub.si=m;ub.it=(new Date).getTime();ub.rqs=[];ub.ts={
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 62 2e 69 6e 64 65 78 4f 66 28 51 29 21 3d 2d 31 7c 7c 28 62 2e 69 6e 64 65 78 4f 66 28 52 29 21 3d 2d 31 7c 7c 62 2e 69 6e 64 65 78 4f 66 28 53 29 21 3d 2d 31 29 29 7b 66 3d 74 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 54 29 21 3d 2d 31 29 7b 66 3d 55 7d 65 6c 73 65 20 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 56 29 21 3d 2d 31 29 7b 66 3d 57 7d 65 6c 73 65 20 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 58 29 21 3d 2d 31 29 7b 66 3d 59 7d 65 6c 73 65 7b 66 3d 77 7d 5f 6c 6e 74 76 2e 75 61 3d 64 3b 5f 6c 6e 74 76 2e 70 6c 74 3d 66 3b 72 65 74 75 72 6e 20 64 7d 7d 3b 6d 62 5b 71 5d 3d 7b 27 63 68 72 6f 6d 65 35 32 27 3a 6a 2c 27 65 64 67 65 31 35 27 3a 6f 2c 27 67 65 63 6b 6f 34 30 27 3a 76 2c 27 Data Ascii: b.indexOf(Q)!=-1\|\|(b.indexOf(R)!=-1\|\|b.indexOf(S)!=-1)){f=t}else if(b.indexOf(T)!=-1){f=U}else if(b.indexOf(V)!=-1){f=W}else if(navigator.userAgent.indexOf(X)!=-1){f=Y}else{f=w}_lntv.ua=d;_lntv.plt=f;return d}};mb[q]={'chrome52':j,'edge15':o,'gecko40':v,'
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 56 69 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 6b 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 70 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 66 28 61 2c 62 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 29 7b 61 2e 62 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 67 28 61 2c 62 29 7b 61 2e 61 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 68 28 61 2c 62 29 7b 61 2e 64 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 68 28 61 2c 62 29 7b 61 2e 66 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 69 28 61 2c 62 29 7b 61 2e 69 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 63 28 61 29 7b 6b 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 42 Data Ascii: unction Vi(){}function mk(){}function tk(){}function Kp(){}function Af(a,b){}function H(a,b){a.b=b}function I(a,b){a.c=b}function Fg(a,b){a.a=b}function lh(a,b){a.d=b}function mh(a,b){a.f=b}function ni(a,b){a.i=b}function Bc(a){kc=a}function B
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 6f 6e 20 68 62 28 61 29 7b 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 51 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 54 70 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6b 7d 0a 66 75 6e 63 74 69 6f 6e 20 4c 70 28 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 70 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 71 7d 0a 66 75 6e 63 74 69 6f 6e 20 59 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 2a 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 20 48 66 28 29 7c 7c 61 2e 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 63 28 29 7b 72 65 74 75 72 6e 20 43 28 6e 63 2e 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 70 28 29 7b 72 65 74 75 72 6e 20 75 Data Ascii: on hb(a){A.call(this,a)}function Qp(){return this.b}function Tp(){return this.k}function Lp(){return false}function Vp(a){return a.g.q}function Yf(a){return a.a*a.b}function C(a){return Hf()\|\|a.a}function yc(){return C(nc.c)}function Mp(){return u
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 2e 61 3d 73 6a 3b 74 68 69 73 2e 66 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 6a 28 29 7b 50 6a 28 74 68 69 73 29 3b 74 68 69 73 2e 72 62 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 5f 6a 28 29 7b 5f 6a 3d 78 6e 3b 21 21 28 71 6b 28 29 2c 70 6b 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 67 28 29 7b 76 67 3d 78 6e 3b 75 67 3d 6e 65 77 20 24 66 28 35 2c 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 76 6b 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 52 6e 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 66 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 66 2b 27 5f 27 2b 61 2e 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 76 61 72 20 62 3b 62 3d 5f 66 28 29 3b 61 2e 63 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 6e 28 64 2c 61 2c 62 29 7b 76 61 72 20 63 3d 61 3b 64 5b 63 5d 3d 62 7d Data Ascii: .a=sj;this.f=a}function Sj(){Pj(this);this.rb()}function _j(){_j=xn;!!(qk(),pk)}function vg(){vg=xn;ug=new $f(5,5)}function vk(a,b){return Rn(a,b)}function mf(a){return a.f+'_'+a.b}function J(a){var b;b=_f();a.c=b}function Gn(d,a,b){var c=a;d[c]=b}
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 20 61 2e 24 48 7c 7c 28 61 2e 24 48 3d 2b 2b 74 6f 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 56 28 61 29 7b 61 2e 64 3f 5a 28 61 2e 67 29 3a 24 28 61 2e 67 29 3b 4e 66 28 54 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 6a 28 29 7b 46 6a 28 29 3b 43 6a 28 28 44 62 28 29 2c 24 77 6e 64 29 29 3b 44 6a 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 57 63 28 61 2c 62 2c 63 29 7b 56 63 28 29 3b 55 63 2e 51 28 61 2c 62 2c 63 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 63 28 61 2c 62 2c 63 2c 64 29 7b 56 63 28 29 3b 55 63 2e 52 28 61 2c 62 2c 63 2c 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 6e 28 63 2c 61 2c 62 29 7b 63 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 6e 28 63 2c 61 29 7b 76 61 72 20 62 3d 61 3b 72 65 74 75 72 6e 20 63 5b 62 5d Data Ascii: a.$H\|\|(a.$H=++to)}function V(a){a.d?Z(a.g):$(a.g);Nf(T,a)}function Nj(){Fj();Cj((Db(),$wnd));Dj()}function Wc(a,b,c){Vc();Uc.Q(a,b,c)}function Xc(a,b,c,d){Vc();Uc.R(a,b,c,d)}function Dn(c,a,b){c.postMessage(a,b)}function Fn(c,a){var b=a;return c[b]
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 61 2c 62 29 7b 61 2e 62 3d 62 3b 62 21 3d 6e 75 6c 6c 26 26 73 6f 28 62 2c 43 70 2c 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 63 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 30 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 67 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 38 38 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 31 37 35 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 28 61 29 7b 74 68 69 73 2e 61 3d 61 3b 68 62 2e 63 61 6c 6c 28 74 68 69 73 2c 32 30 32 29 7d 0a 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){a.b=b;b!=null&&so(b,Cp,a)}function Nc(a){this.a=a;hb.call(this,180)}function Hg(a){this.a=a;hb.call(this,188)}function he(a){this.a=a;hb.call(this,175)}function Fe(a){this.a=a;hb.call(this,201)}function Ge(a){this.a=a;hb.call(this,202)}function
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 7b 76 61 72 20 62 3b 62 3d 4f 6e 28 61 29 3b 56 6e 28 61 2c 62 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4d 69 28 61 29 7b 69 66 28 61 2e 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 2e 61 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 66 28 29 7b 69 66 28 6b 63 29 7b 72 65 74 75 72 6e 20 6b 63 2e 56 28 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 3b 72 65 74 75 72 6e 20 61 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 65 28 61 29 7b 61 26 26 28 55 28 29 2c 53 3d 61 2c 64 62 28 29 2c 75 6e 64 65 66 69 6e 65 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 71 6b 28 29 7b 71 6b 3d 78 6e 3b 76 61 72 20 61 3b 21 73 6b 28 29 Data Ascii: {var b;b=On(a);Vn(a,b);return b}function Mi(a){if(a.b){return a.c.a}return null}function pf(){if(kc){return kc.V()}return null}function Hn(a,b){var c=b;return a[c]!==undefined}function Ce(a){a&&(U(),S=a,db(),undefined)}function qk(){qk=xn;var a;!sk()
2024-01-15 13:24:48 UTC	1371	IN	Data Raw: 29 3b 4d 66 28 45 6a 2c 63 29 3b 6c 63 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 66 28 61 2c 62 29 7b 76 61 72 20 63 3b 63 3d 4c 66 28 61 2c 62 29 3b 63 21 3d 2d 31 26 26 61 2e 73 70 6c 69 63 65 28 63 2c 31 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 41 64 28 61 29 7b 76 61 72 20 62 3b 62 3d 27 27 2b 61 3b 4c 66 28 78 64 2c 62 29 21 3d 2d 31 7c 7c 4d 66 28 78 64 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 53 69 28 61 29 7b 76 61 72 20 62 3b 69 66 28 61 2e 62 29 7b 62 3d 65 6a 28 61 2e 63 29 3b 21 21 62 26 26 6b 69 28 61 2e 68 2c 36 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 48 28 61 2c 5f 66 28 29 29 3b 69 66 28 21 61 2e 61 29 7b 61 2e 61 3d 74 72 75 65 3b 49 28 61 2c 61 2e 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6b 6a 28 61 2c 62 29 7b 69 66 28 61 2e Data Ascii: );Mf(Ej,c);lc=a}function Nf(a,b){var c;c=Lf(a,b);c!=-1&&a.splice(c,1)}function Ad(a){var b;b=''+a;Lf(xd,b)!=-1\|\|Mf(xd,b)}function Si(a){var b;if(a.b){b=ej(a.c);!!b&&ki(a.h,6)}}function D(a){H(a,_f());if(!a.a){a.a=true;I(a,a.b)}}function kj(a,b){if(a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.5	50821	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1080	OUT	GET /f/AGSKWxVKB93Tml1uC9vJox75u9TawBJUr9ExabBbmPW4Ea8KznkPZhryQWE3PeX1sJVhW1jrSpQ8GNdibWHwpWjQZ-9DcFoywTKMPBMmcvJijYd9UB1vxyVhNQRhN_f0PJlj3k3-piu_hlMQYoVyT6s1LJq7t9cbopRTpfahfHGx0ESk5mSloAO6oUVGUyEN/_/myfreepaysitebanner./img-ads./ads/default_/advert./adverserve. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:49 UTC	1605	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-HoB7d5pn3_NSdbdjHtjFqw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:49 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 63 30 30 32 32 34 64 65 2d 64 64 34 62 2d 34 39 62 34 2d 38 34 33 33 2d 31 30 61 64 32 39 37 33 38 33 32 35 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['c00224de-dd4b-49b4-8433-10ad29738325'] = true;
2024-01-15 13:24:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.5	50786	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	818	OUT	GET /usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=6D3ZpLGavi7shxnwoBEq
2024-01-15 13:24:49 UTC	657	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 239 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&google_hm=NkQzWnBMR2F2aTdzaHhud29CRXE= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=6D3ZpLGavi7shxnwoBEq; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:49 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:49 GMT
2024-01-15 13:24:49 UTC	239	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 64 5f 47 38 53 5a 46 4d 47 67 57 47 57 62 44 47 69 4d 6c 6e 47 6d 61 6d 36 67 43 52 49 79 55 6b 44 31 37 31 7a 65 5a 31 6f 4f 64 36 66 48 77 76 51 42 73 5f 34 6e 38 5a 59 78 65 51 75 58 4e 78 32 54 4a 56 75 78 59 4b 42 70 6d 62 57 62 6a 55 41 4d 45 46 51 6a 71 37 76 63 50 66 35 44 77 4d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 4e 6b 51 7a 57 6e 42 4d 52 32 46 32 61 54 64 7a 61 48 68 75 64 32 39 43 52 58 45 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&google_hm=NkQzWnBMR2F2aTdzaHhud29CRXE=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.5	50818	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	3082	OUT	GET /pagead/interaction/?ai=ChN0oGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOQBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo46rfCOrduH4E-VZEP4hEw5fmQWQjwn-xNKztJParSkUnX97173rEvsRwATfrJGZgwKIBfXs34gHoAY3gAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDsQlPWCIGEl69iYAKAZgLAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA6oNAlVTyA0B2BMNiBQE0BUB-BYBgBcBshgFGDciAQA&sigh=gillTeOFMiI&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLx&label=window_focus&gqid=GzKlZf3EJ9bNoPMPrp-HiA8&qqid=CJec2v6-34MDFcKh0QQdavUDXQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.5	50810	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	3127	OUT	GET /pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.5	50820	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	858	OUT	POST /el/AGSKWxV7T-Wr5EXDgpzPf35copHYdTFyb5uxhPQIcvDgE28QZU0B2HMghaUR0Lk8ANyXoNqoK0uE2HrTMXSFnMR48Mo4yM8HrXCAyJj56mzAzEYde6GW1CfGlDHydPFJXwp7qdemPNhUEA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 38 37 32 32 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325087221,null,null,[[1,1]]]
2024-01-15 13:24:49 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Tcu5s6YowHMl83EaP3hPtA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.5	50812	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1822	OUT	GET /pagead/interaction/?ai=CKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=rZ-VKM24ENg&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkG&label=window_focus&gqid=GzKlZb6BJ9u0oPMPqPeFuAw&qqid=CPrY2f6-34MDFY-80QQdIyMF0A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.5	50822	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	858	OUT	POST /el/AGSKWxV7T-Wr5EXDgpzPf35copHYdTFyb5uxhPQIcvDgE28QZU0B2HMghaUR0Lk8ANyXoNqoK0uE2HrTMXSFnMR48Mo4yM8HrXCAyJj56mzAzEYde6GW1CfGlDHydPFJXwp7qdemPNhUEA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 38 37 32 35 33 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325087253,null,null,[[2,1]]]
2024-01-15 13:24:49 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-6BfiOR4WEYGQz2RiShiI6Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.5	50831	35.236.220.17	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	865	OUT	GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmQHOZq5Aox_zySiWkCILkbOlCXRnQ5Hx_GWTAhbtyK_WW53gnL3FyCmySb4McVk1EWBUAWA5CwMohYlx0786Qizad0nlCn-Zauf0QdtEfSR00pky_4GV7Bo49ZFoZzyvw6Yp8769qswpuxhSzA2wLVGtCA HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=690F5FB948B2412881DA26E47E140F91
2024-01-15 13:24:49 UTC	822	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmQHOZq5Aox_zySiWkCILkbOlCXRnQ5Hx_GWTAhbtyK_WW53gnL3FyCmySb4McVk1EWBUAWA5CwMohYlx0786Qizad0nlCn-Zauf0QdtEfSR00pky_4GV7Bo49ZFoZzyvw6Yp8769qswpuxhSzA2wLVGtCA Expires: Sun, 14 Jan 2024 13:24:49 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-15 13:24:49 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.5	50827	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1070	OUT	OPTIONS /pcs/view?xai=AKAOjsvg1N6z8jNkJ-iD11K7MLtb1gKIvQX8lIWfWxcwdxi1o2xElQ_4aMn1exGLHLIHG8tsoafUMMBio1ad7xc6X2dcwO51lVUJWqWARB4c_Gy_wEXT1MFOb9icYw4-bUmKx5dtmY2ZBvq5EYxNHYYb0VHKB4VDyyaNOl4JawE_vBVhUpaXuKsmBHnaOgP1041PnHY&sai=AMfl-YQk210HL2hCAr0Q7gt-wL90U_LN6Jj6fXpYzcOC7IiI20-O7aGlKP8wXfNlesEbUCYzwyF7IIZCALqA2_0o_1jRe5WFo1olUuEoag&sig=Cg0ArKJSzPuZq_a6W0iqEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.44536&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.5	50832	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	953	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmStzJQQ9mHnmOHnZq9U6UOen-1zBIEdgPMnsM1-SOD9WLggwLJAndGucEdppEhTr9Mfm7wGlnn0q-SAFSCTywoHQSXc9GIjTaj3sFzauifIc60500SaafxMdbpL8O4egAISNk5PgAJGBTGTDJCR2JN2rE8 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsIpPKUjOz1yjwQBRgFIAMoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:24:49 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIoqnKm-z1yjwQBRgFIAQoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:49 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.5	50829	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	916	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmQA22W9PHHVcPt-rd1JHBkm5wPdjeFC36VHj7NrENCvWzsqK23YfTdLfE7PQscs5RBJiwlpVZZv5mYRzdNWY2zuuxC1KJGhYSB5Mi-RwuwAbuzn9ev5vUOliHZfVe5NbB9JwH68svzksz351ubmupyWmw HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:24:49 UTC	542	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmQA22W9PHHVcPt-rd1JHBkm5wPdjeFC36VHj7NrENCvWzsqK23YfTdLfE7PQscs5RBJiwlpVZZv5mYRzdNWY2zuuxC1KJGhYSB5Mi-RwuwAbuzn9ev5vUOliHZfVe5NbB9JwH68svzksz351ubmupyWmw&google_hm=82nPL-gDAe41xcnm3Ha0dg Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.5	50836	74.119.119.150	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	962	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQVvuK12lNK_6xFvirPlNuLvinJElQtI34ruZ-lH_LUp-y_6PKu6RRLt9FFo2qwcpN0Uv1XvbyEXjx8TSSoE6WnbW0ezSqyDkQZXo5UYj0CBuguzPS-ikZGJe5SZLsq3iOziJ0_eEhDKRBmANQQrtDaAg&google_gid=CAESEGNkQuhMYcUM4e65x_gmwzw&google_cver=1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:48 GMT server: Kestrel cache-control: no-cache expires: Mon, 15 Jan 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 229580 strict-transport-security: max-age=31536000; preload; connection: close
2024-01-15 13:24:49 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.5	50833	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	819	OUT	GET /usersync/googleadx/?google_cver=1&google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&s=2 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4
2024-01-15 13:24:49 UTC	658	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 240 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:49 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:49 GMT
2024-01-15 13:24:49 UTC	240	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 54 33 61 7a 35 6c 72 58 48 59 68 53 70 7a 49 4b 61 62 46 74 71 4f 4e 54 55 6c 32 72 74 79 36 4a 30 36 75 65 68 47 4a 58 38 50 63 5f 43 47 56 72 4e 33 78 50 32 38 5f 78 52 31 47 30 7a 76 61 34 4f 38 49 55 76 77 79 55 45 78 4d 4d 32 4d 4f 33 56 32 67 54 54 39 55 48 64 33 4b 63 6b 41 32 35 53 55 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 61 48 4a 54 52 45 78 50 57 6a 42 59 54 6b 64 4f 65 48 64 55 54 47 30 79 52 6a 51 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.5	50839	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1120	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=annt6ZaoZdUQdR2Hp9uswmN6m7okc5qZaAZaISg9PmW1UN5EiBJtogWVjFSNaY55uXuA2H9Qwa6lAF4ITA2cgLItDKH9RhDp
2024-01-15 13:24:49 UTC	821	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aentAZcu4YUdmqcn62NoCWZampWgkNfBFle6anmXWZdMh3tJrEUse0qvppQrZalr465PfkwidT5dXoQJMpqGFMTvIQWZaQjZbgcDUW; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:49 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aentAZcu4YUdmqcn62NoCWZampWgkNfBFle6anmXWZdMh3tJrEUse0qvppQrZalr465PfkwidT5dXoQJMpqGFMTvIQWZaQjZbgcDUW; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:49 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70f21d28584e-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:49 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.5	50825	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1070	OUT	OPTIONS /pcs/view?xai=AKAOjsseqmXD1v08E_jskxvswY9xDNrxoCl_8e8g5CwufYBHHiYW4CpFUlAw7bux5UvThEZRDr0pKFUsorvipRHnfGS1yIrO1E9evU3kJhRMQwG1vZmn249CR6IxUBVRHYbeQKKCz6Bs9j4Iu5KjEhwQZVBQeEi2RBJc8etX1dH3VhURenZGvBjPC2HkehCvd8qnPWA&sai=AMfl-YRzLcR00jcxgW5WBF8rEeUJyu1oxOogOpITeAxJBMAVjBcI6hRURc-xqKa_psiW9ocRT-H6r1pnh9sLWlv6v0Ic8a5jLioRndBTFQ&sig=Cg0ArKJSzC9aAgxeY8YCEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=2&dett=2&cstd=0&cisv=r20240109.55193&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:49 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.5	50847	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	3039	OUT	GET /pagead/interaction/?ai=Cj6lWDDKlZe3KD573xtYPmNek2ALUnfD5XO_GsfWkC9CQgOyQAhABIO34qSBgyYagiqSk4BGgAc3x9uICyAEJqAMByAPLBKoE5QFP0BFXg4lgna-w0PkSmMmMOvxv7N7w-r3prYC62LKNZFf_gHaxTDGZxQWV8Lxb-i09qscoEcVdTUreVUOg5RRcPwAKqynnYWT8uTk1yk-zZofALByuELY072eZJ5FESVP7Z9BLVvKuMRAqNnuNpuaAjL3_B1JiXP4cd-D7fi0TXF6lLBcCebutpA5PNZj67kw3K4gIh7yiIVJKd1Lmvo2rGkaxGM86zOFAqGClrYAPR4dc00zlIivPHpXLrGHTJqvai6LMPqsVJljYmDymJ5HVfl2k3gbxXnnhoXun-eXFf-4B41uGwATfrJGZgwKIBfXs34gHoAYugAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WJPJrfe-34MDsQlPWCIGEl69iYAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ0Mz6v8mdvYHaARICAQOqDQJVU8gNAbgT5APYEw2IFATQFQH4FgGAFwE&sigh=VvqEmS3nzQw&cid=CAQSOwAvHhf__wP1IbJn8PfBHlgNF0f7Vt40ZeiM8Kt4AiF8PUrt26MKqbD8_gZbfhvggePRosHlA-5wufQ5&label=window_focus&gqid=DDKlZYPcDoywoPMP9seBaA&qqid=CO2Arve-34MDFZ670QQdmCsJKw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325066&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325066532&bpp=1&bdt=599&idt=464&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=474 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.5	50849	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	1399	OUT	GET /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	1592	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0x2e2fcb200d3575b90000000000000000"},"debug_key":"10694840419615302544","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"4818730155682171348"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:49 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:49 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.5	50824	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	3142	OUT	GET /pagead/interaction/?ai=CkVexDjKlZaT_BarPxtYP7c6n0ATPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QCQ1c9we9znuw7ZX_C6GXVyWfvQcc5xeMAhbxUYLFHgdUl3bznhIe33TStACF5PoekjRtY0QsJUj1JiQgAMAN9isldvnCzo5FDz0ouSWcWoN_g-zxjk1ZkXL52-bA8MdXTqqLwgJGFIfPH8LRQaamgc7Smngf4AuXxiChAYyezZkN_ifUiSZiJnvvn9dFB8Kqn78g7puxjsjYZbPtTvf_nmWDw8ngdI_iE8NVHT8o3ji5aWgDDgt9er4FWhlqT6B7zPer8Zh2Xe-2eL3kXhgpHHM00r8cHlwAN4RAJjWIu2AJw8T0UN3hwATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYm4ee-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKENCdldCbkYiiORICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=-sfwA0KlPoc&cid=CAQSOwAvHhf_8_eN_zXAS_R4-LKrWekAEgCwxQy5cDa4O8foiBmOFEfeTvinm9Cp5w90iBCMw7cFUk2FHAv4&label=window_focus&gqid=DjKlZeqZBaGpoPMP2KqjgA8&qqid=CKS-nvi-34MDFaqn0QQdbecJSg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=3&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=1&fsb=1&dtd=759 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:49 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.5	50840	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	898	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmTNAt0EFWd6px1rjLl20h0kQXf4xMWuBExUymJnFxfOLmmGZ2DIuZ28EP6qcitzqQNZ7NFsRnq8sCzKvjeXzu-STfFHlVw3bX7Y HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsIpPKUjOz1yjwQBRgFIAMoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:24:49 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:49 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI8OP4oOz1yjwQBRgFIAQoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:49 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:49 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.5	50845	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:49 UTC	3194	OUT	GET /pagead/interaction/?ai=C714aDjKlZe7yBb6dxtYP9o6r6Avzg-Sudanlvd6fEWQQASDt-KkgYMmGoIqkpOARoAHOhqbAAsgBCakCnF5Mi3Zfsj6oAwHIA5sEqgSMAk_QKj8D6nkMHvvJl6UPd2I1r0oSBD0SDVI6qtY5-TYllVIUAuMl5ID-2tUl0_AiiKjTWcD1MI_MgsGw0dbaoEdB0TGMStqycJ8dsRRK6dkB6VRcDsR-uS5n_T-LlPBowGRtkkBv1yVhc9V9gMx3q8qPexru6_F9BAzcc_Td_gzIrwWSJz5t5PwalZ68ydicX79OslGPclixBwMSmZWBOfv6r3qT-WMEyQqwUC8gc2Nxqc2WO5gsddCqgia_YW0_I-8NKNmqVQtGV4NKtzy-yJV2neRXV4c4MsKJkiQqj_OTdCp732xnf9hQcUBYTpszzxQNpkafnpqhVKNZGPZlZ7sguPLPdycCYiEkm6jABPKiysioBOAEA4gFspHCgEqQBgGgBkyAB5r52b8BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYmvud-L7fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBOV_qIW0BMA2BMNiBQF2BQB0BUB-BYBgBcB&sigh=yyoMu8lH2Xk&cid=CAQSOwAvHhf_wPBaE5IrSf5SVnjTZgH9-XtVGBmjHKHRbqt0X5m5pSYDZgNvJmTLjTu8WfxfYHVRRgLSuwLr&label=window_focus&gqid=DjKlZcSRBbeToPMP4auMoA0&qqid=CO6xnvi-34MDFb6O0QQddscKvQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280&nras=4&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=2&fsb=1&dtd=782 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:50 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.5	50857	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	3187	OUT	GET /pagead/interaction/?ai=Cqkk-DjKlZdacBMaE3rsPo_aXcJPVw6x19e79jfgQZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0BXg-a8gg-p6kuTeeOzAH37dI1s4hCmWLu4viZWkA3NFVp-FH2RkciWB9AGEzjiB4KiPsciz2_nNgxxfS1MrpLyvM-FlDYkz3ig7FmmcLqqH5h70SWTFHDWG_zaeS5ZYoTvhdSZDpbQ1yaVTxkdp3JM-q5x0VhMiPm8H73oVHsMNg92uejSSZC_k48azZiq9Jaq-eFstQkJZgUHPpjwTWZaekyyEc0sqOrk1nXGcEkkJwrRpbhC-HZ0gVNeLxFtR2Xy2WXHY_BU5uVNcVT3YiXShFW1YuDfplVjGrdsnyVJNZblhYrXXdjCL7RdCqiNQXNdR7fP6LkFVRxEfMe0iojGljiBheRcNRMAEqPDRp6AE4AQDiAWcx_SJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljaqJz4vt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=477fF8LZsZk&cid=CAQSOwAvHhf_Yzt-0B1SUl9v-ssMEkHXlCYXZF4-Gt-YzJGkJxMs2geZoNt-RnRMM4tgT0AzNmrBUbgZy4_e&label=window_focus&gqid=DjKlZcK7A-m2oPMPzYOxyAQ&qqid=CNbbnPi-34MDFUaCdwEdI_sFDg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325068&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-nav-secondary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325067912&bpp=1&bdt=1979&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280%2C360x280%2C360x280&nras=5&correlator=2458750656016&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325067&ga_hid=242083310&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=396&eid=44759876%2C44759927%2C44759837%2C31080334%2C44795922%2C95321958%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnG0zLb3TmmUAstJ_tdEDCSnAHy68Mfho0IgTyr7H6bUnuvInE5XCDkXGriwfX16uQyddkxf95SmV9KWduwRS9n65w&pvsid=2440681032623962&tmod=1915430328&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=3&fsb=1&dtd=793 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:50 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.5	50853	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1082	OUT	OPTIONS /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1327&vt=11&dtpt=1325&dett=2&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:50 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:50 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.5	50816	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	870	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmQ8ogzHaMw7e9DcIX0MAeg91mlimq91PEwhHhGvl_AXvH80qUFfoVe_wo5m-03edH0l1UbhNF_V1nFTzRIMyywHT-I2baj1_CPs1EFeo6r8Mgnb_Y193jbUeeau7_oyGliPNE3nNkUeCSIF1VdcJqIl_Cc HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4
2024-01-15 13:24:51 UTC	713	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 295 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQ8ogzHaMw7e9DcIX0MAeg91mlimq91PEwhHhGvl_AXvH80qUFfoVe_wo5m-03edH0l1UbhNF_V1nFTzRIMyywHT-I2baj1_CPs1EFeo6r8Mgnb_Y193jbUeeau7_oyGliPNE3nNkUeCSIF1VdcJqIl_Cc&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:51 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:51 GMT
2024-01-15 13:24:51 UTC	295	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 38 6f 67 7a 48 61 4d 77 37 65 39 44 63 49 58 30 4d 41 65 67 39 31 6d 6c 69 6d 71 39 31 50 45 77 68 48 68 47 76 6c 5f 41 58 76 48 38 30 71 55 46 66 6f 56 65 5f 77 6f 35 6d 2d 30 33 65 64 48 30 6c 31 55 62 68 4e 46 5f 56 31 6e 46 54 7a 52 49 4d 79 79 77 48 54 2d 49 32 62 61 6a 31 5f 43 50 73 31 45 46 65 6f 36 72 38 4d 67 6e 62 5f 59 31 39 33 6a 62 55 65 65 61 75 37 5f 6f 79 47 6c 69 50 4e 45 33 6e 4e 6b 55 65 43 53 49 46 31 56 64 63 4a 71 49 6c 5f 43 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 61 48 Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQ8ogzHaMw7e9DcIX0MAeg91mlimq91PEwhHhGvl_AXvH80qUFfoVe_wo5m-03edH0l1UbhNF_V1nFTzRIMyywHT-I2baj1_CPs1EFeo6r8Mgnb_Y193jbUeeau7_oyGliPNE3nNkUeCSIF1VdcJqIl_Cc&google_hm=aH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.5	50867	68.67.160.26	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	6112	OUT	GET /rd_log?an_audit=0&referrer=http%3A%2F%2Fmylovelybluesky.com&e=wqT_3QKKBOgKAgAAAwDWAAUBCJ7klK0GEJzMlqLW36fvPhgAKjYJKsPOqMBbpT8RPsurK1PQpD8ZexSuR-F6hD8hPg0SACkRJAAxERuwMMa_5QM4tQFAtV5I4wNQuomKtgFYv7E9YABon6RUeIbMBYABAYoBA1VTRJIBAQbwUpgBrAKgAfoBqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEVMS1teWxvdmVseWJsdWVza3kuY29t2ALwBuACoqgx6gIaaHR0cDovL215bG92NiYA8IGAAwCIAwGQAwCYAwmgAwGqAwDAA9gEyAMA2APHj5sB4AMA6AMA-AMDgAQAkgQEL3VhcJgEAKgEALIEDAgAEAAYACAAMAA4ALgEAMAEAMgEANoEAggB4AQB8AS6iYq2AYgFAZgFAKAF4Ojy3PyH79t9wAUAyQUAAAAAAADwP9IFCQkABQw8AADYBQHgBQHwBZHTBfoFBAFcKJAGAJgGALgGAMEGCSQs8D_QBsKNBNoGFgoQCRIZAQGLZOAGAfIGAggAgAcBiAcAoAcByAeGzAXSBw0JESgBJgjaBwYBXqgYAOAHAOoHAggA8Ae1kusCiggCEACVCAAAgD-YCAHACPAG0ggGCAAQABgA&s=49bdb1dedf780d44633a3e97e71eb6e87ffaf977&bdref=http%3A%2F%2Fmylovelybluesky.com%2F&bdtop=true&bdifs=2&bstk=http%3A%2F%2Fmylovelybluesky.com%2F,https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fgdpr%3D0%26client%3Dca-pub-6163292317333011%26output%3Dhtml%26h%3D280%26adk%3D279133150%26adf%3D3186213915%26pi%3Dt.aa~a.2657635577~rp.4%26w%3D360%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1705325085%26rafmt%3D1%26to%3Dqs%26pwprc%3D6034854619%26format%3D360x280%26url%3Dhttp%253A%252F%252Fmylovelybluesky.com%252F%2523genesis-sidebar-primary%26ea%3D0%26host%3Dca-host-pub-2644536267352236%26fwr%3D0%26pra%3D3%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26fa%3D40%26dt%3D1705325085003%26bpp%3D1%26bdt%3D6698%26idt%3D-M%26shv%3Dr20240109%26mjsv%3Dm202401080101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D4dba28c46c56e006%253AT%253D1705325037%253ART%253D1705325037%253AS%253DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ%26gpic%3DUID%253D00000db762a073bf%253AT%253D1705325037%253ART%253D1705325037%253AS%253DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA%26prev_fmts%3D0x0%252C750x450%252C1200x280%252C360x280%252C360x280%26nras%3D5%26correlator%3D1063240671184%26frm%3D20%26pv%3D1%26ga_vid%3D449002724.1705325034%26ga_sid%3D1705325081%26ga_hid%3D11741920%26ga_fc%3D1%26u_tz%3D60%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26adx%3D842%26ady%3D3867%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D582%26eid%3D44759875%252C44759926%252C44759837%252C95320238%252C31079437%252C31080262%252C31080334%252C44795922%252C95322184%252C95321627%252C95322162%252C31078668%252C31078670%26oid%3D2%26psts%3DAOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%252CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ%26pvsid%3D3866483433305748%26tmod%3D347032164%26uas%3D0%26nvt%3D1%26topics%3D1%26tps%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257Cs%257C%26abl%3DNS%26fu%3D128%26bc%3D23%26bz%3D1%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D7%26uci%3Da!7%26btvi%3D4%26fsb%3D1%26dtd%3D650,https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fgdpr%3D0%26client%3Dca-pub-6163292317333011%26output%3Dhtml%26h%3D280%26adk%3D279133150%26adf%3D3186213915%26pi%3Dt.aa~a.2657635577~rp.4%26w%3D360%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1705325085%26rafmt%3D1%26to%3Dqs%26pwprc%3D6034854619%26format%3D360x280%26url%3Dhttp%253A%252F%252Fmylovelybluesky.com%252F%2523genesis-sidebar-primary%26ea%3D0%26host%3Dca-host-pub-2644536267352236%26fwr%3D0%26pra%3D3%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26fa%3D40%26dt%3D1705325085003%26bpp%3D1%26bdt%3D6698%26idt%3D-M%26shv%3Dr20240109%26mjsv%3Dm202401080101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie%3DID%253D4dba28c46c56e006%253AT%253D1705325037%253ART%253D1705325037%253AS%253DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ%26gpic%3DUID%253D00000db762a073bf%253AT%253D1705325037%253ART%253D1705325037%253AS%253DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA%26prev_fmts%3D0x0%252C750x450%252C1200x280%252C360x280%252C360x280%26nras%3D5%26correlator%3D1063240671184%26frm%3D20%26pv%3D1%26ga_vid%3D449002724.1705325034%26ga_sid%3D1705325081%26ga_hid%3D11741920%26ga_fc%3D1%26u_tz%3D60%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26adx%3D842%26ady%3D3867%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D582%26eid%3D44759875%252C44759926%252C44759837%252C95320238%252C31079437%252C31080262%252C31080334%252C44795922%252C95322184%252C95321627%252C95322162%252C31078668%252C31078670%26oid%3D2%26psts%3DAOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%252CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ%26pvsid%3D3866483433305748%26tmod%3D347032164%26uas%3D0%26nvt%3D1%26topics%3D1%26tps%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257Cs%257C%26abl%3DNS%26fu%3D128%26bc%3D23%26bz%3D1%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D7%26uci%3Da!7%26btvi%3D4%26fsb%3D1%26dtd%3D650& HTTP/1.1 Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=Gg9z13ZdGa1bTmn_Ejy2PbuMjw3CNlj1HnaCT2MC4n3wMe3bJhVcc7HMN6Wb7iemA9XoRSotxq4NJZNf2OHxiCN30z9ztQB8OM3gUyT-ud8.; uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa
2024-01-15 13:24:50 UTC	1141	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=QbhcQJweSlIZorf__tPXyXGcP8ZN8T3ppMP-HScdl9HKa-OXWVIzNA-aVaov5zfOMin_KioTArKYfZOEPKZjKBYZG7Aej2rfZhvXXQ0-mDI.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 22f21744-9dc5-44d8-a402-31d6d77058e5 Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:50 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.5	50883	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:50 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:50 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.5	50859	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1500	OUT	GET /f/AGSKWxWQqS2yiGgR2Yo4v0aJ5CxhgyfYWixvBV9JiZp7PXmpsgn5VnqI7iifOJq5tHk0tZqwPlTGZEx9kjnTv7xf6wx1r5eRb41iKb8HgbZ9zmqguF-4Jd2tI8sclaCIn2ilMmH3u39S5w==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:50 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:50 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-0n0K3graTObi3jOZ5VwsTg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:50 UTC	1629	IN	Data Raw: 62 38 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 50 41 2c 5f 2e Data Ascii: b8dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var PA=function(a){this.j=_.v(a)};_.A(PA,_.
2024-01-15 13:24:50 UTC	1335	IN	Data Raw: 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 65 6c 5c 2f 41 47 53 4b 57 78 57 79 73 58 48 75 43 43 48 6b 34 65 6f 52 66 38 59 42 6e 2d 70 4a 56 31 4e 69 4f 78 56 41 4d 70 4a 2d 63 61 4f 6a 6d 55 79 2d 4c 52 6a 45 69 52 55 63 36 5f 50 6d 34 79 76 4c 32 6a 6b 5f 72 4a 54 57 51 62 54 37 56 35 67 45 31 6c 34 33 73 48 43 70 35 2d 36 43 72 51 31 57 72 4c 7a 73 34 63 58 76 59 63 77 5a 52 35 46 77 31 4e 6d 7a 6e 50 4d 6e 66 70 53 63 66 6f 6b 37 66 50 55 32 49 71 47 30 4f 51 30 7a 46 77 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 3f 64 6d 69 64 5c 5c 5c 5c 75 30 30 33 64 35 33 Data Ascii: null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/el\/AGSKWxWysXHuCCHk4eoRf8YBn-pJV1NiOxVAMpJ-caOjmUy-LRjEiRUc6_Pm4yvL2jk_rJTWQbT7V5gE1l43sHCp5-6CrQ1WrLzs4cXvYcwZR5Fw1NmznPMnfpScfok7fPU2IqG0OQ0zFw\\\\u003d\\\\u003d?dmid\\\\u003d53
2024-01-15 13:24:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.5	50854	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	858	OUT	POST /el/AGSKWxV7T-Wr5EXDgpzPf35copHYdTFyb5uxhPQIcvDgE28QZU0B2HMghaUR0Lk8ANyXoNqoK0uE2HrTMXSFnMR48Mo4yM8HrXCAyJj56mzAzEYde6GW1CfGlDHydPFJXwp7qdemPNhUEA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:50 UTC	76	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 38 38 35 30 33 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325088503,null,null,[null,[1]]]
2024-01-15 13:24:51 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:51 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-5cmMkrPFKccY2AFTgZvmIA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.5	50868	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1406	OUT	GET /pcs/view?xai=AKAOjsvg1N6z8jNkJ-iD11K7MLtb1gKIvQX8lIWfWxcwdxi1o2xElQ_4aMn1exGLHLIHG8tsoafUMMBio1ad7xc6X2dcwO51lVUJWqWARB4c_Gy_wEXT1MFOb9icYw4-bUmKx5dtmY2ZBvq5EYxNHYYb0VHKB4VDyyaNOl4JawE_vBVhUpaXuKsmBHnaOgP1041PnHY&sai=AMfl-YQk210HL2hCAr0Q7gt-wL90U_LN6Jj6fXpYzcOC7IiI20-O7aGlKP8wXfNlesEbUCYzwyF7IIZCALqA2_0o_1jRe5WFo1olUuEoag&sig=Cg0ArKJSzPuZq_a6W0iqEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.44536&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:51 UTC	1592	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"2062399075309438108","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"15309460845978198626"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:51 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.5	50887	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	796	OUT	GET /pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmSmX24QfWOL999h_VmewD0O33B13XD0wosc1Y2mL7slAtTL_xo_fMxFJv-T-K27VHV13CXe8f9uTAl3VpYOALsLriqODv2FXxzo&google_hm=82nPL-gDAe41xcnm3Ha0dg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:50 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:50 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.5	50884	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	792	OUT	GET /pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTr_oCoE_Oxasl-Qr1eZ6qwU_dQ93wP1v-V0I_G7SfDLSnuZ496WS51_ZFewAUUtMpD-FpDnDJ6QvyabiFB-JplDHu21XCCn6U HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:50 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:50 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.5	50864	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1842	OUT	GET /pagead/interaction/?ai=CpXR_DDKlZeqJAdjkvPIPm--EkAaarfGydNPs3sTFEdvZHhABIO34qSBgyYagiqSk4BGgAY_x_P4CyAEJqAMByAPLBKoE5QFP0PsVEi3-Hi02QTPbbB1k0s6-0ITMjLQQ73YJXp2HvSsv7d8zoClZhnQTjDfPb9VNTQSj_gQ4xqIa1oe_1e_kyFHEDJ_XbYuulXE8GKqhV4gIBEeOWcmJeI1Oweumf-baZ3Tl-oR2uzM0RgdCBV6_x99xK1xQ8AHSx3Qv0szsVcS6kTMZ2MO9QkD1EWCw2OKfdN2kcK0stz55CakoNAxgj8hju6YWwZNXps8PwyBZ76iRstmSHuoK7qp8K3yhQ-I8EzVFspszPnRuUBoTgxt8lqdRh04Ikf37nVIjOOMT30qsPXvuwATK6cD3tASIBYGCsLxLoAYugAfruPWDAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WIuMn_e-34MDsQkLBNN1UEDOPIAKAZgLAcgLAYAMAaIMCCoGCgSsurEC2gwRCgsQ4OK6t9TVyv_5ARICAQOqDQJVU8gNAbgT5APYEw2IFAXQFQH4FgGAFwE&sigh=Wq94U4s43bw&cid=CAQSOwAvHhf_aX2g2C93hQ0qLJpBKTnMtOTNdBUv1RgJqI5HdVeZp05SLIpVMT7Z8sB-aHFQctgoBgz8Dx1F&label=window_focus&gqid=DDKlZegt7LWg8w_OwZxQ&qqid=COq_n_e-34MDFVgyTwgdmzcBYg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:51 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.5	50888	104.18.24.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	879	OUT	GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTe7rzdkotIdYQf9Log4yQWYGh6TFO26rW9Pa45WwOKm_8upnsXyBd6DFFQ27sIxWBljGborhf_sB7KN3nJ3ZdqwuRdDTKtkUU%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aentAZcu4YUdmqcn62NoCWZampWgkNfBFle6anmXWZdMh3tJrEUse0qvppQrZalr465PfkwidT5dXoQJMpqGFMTvIQWZaQjZbgcDUW
2024-01-15 13:24:51 UTC	813	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:51 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aKntAZcxNeTgBeZdwQyuT79SYpSuhi7dihE3K9EGxirmmdv2AWSOPpNnYFStUumatdepJ33poEJkLs6pScMr1OCL4kYghgAesS; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:50 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aKntAZcxNeTgBeZdwQyuT79SYpSuhi7dihE3K9EGxirmmdv2AWSOPpNnYFStUumatdepJ33poEJkLs6pScMr1OCL4kYghgAesS; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:50 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70fa0ee63901-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.5	50855	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	858	OUT	POST /el/AGSKWxV7T-Wr5EXDgpzPf35copHYdTFyb5uxhPQIcvDgE28QZU0B2HMghaUR0Lk8ANyXoNqoK0uE2HrTMXSFnMR48Mo4yM8HrXCAyJj56mzAzEYde6GW1CfGlDHydPFJXwp7qdemPNhUEA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:50 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 38 38 35 30 36 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325088506,null,null,[[3,1]]]
2024-01-15 13:24:51 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:51 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-vVDxBZ0Qn-YlreHNPcJoYA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.5	50886	172.253.62.106	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZX9sdzDNKPq2YU-vWNZLZexiYdbOPhW7yjR-CQ5K03k3wgp3ztZmnhdaGQCVmGhZjnCX6jTP-PlZ26lllo; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:50 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Mon, 15 Jan 2024 13:24:50 GMT Expires: Mon, 15 Jan 2024 13:24:50 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:50 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-01-15 13:24:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.5	50882	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	895	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACgaV4n6JqYAM6N8lQAAAAAAA&expiration=1705411486&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmSIWwpu2d7EpxSLlpMRX10KM9Xopn2_Sur4228ZcKnFRdBnBEQe3iVp8YxsoRqmqHnArJQYl_rQsNSMydqu2JD6JPffspjvAElw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:50 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:50 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.5	50881	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1406	OUT	GET /pcs/view?xai=AKAOjsseqmXD1v08E_jskxvswY9xDNrxoCl_8e8g5CwufYBHHiYW4CpFUlAw7bux5UvThEZRDr0pKFUsorvipRHnfGS1yIrO1E9evU3kJhRMQwG1vZmn249CR6IxUBVRHYbeQKKCz6Bs9j4Iu5KjEhwQZVBQeEi2RBJc8etX1dH3VhURenZGvBjPC2HkehCvd8qnPWA&sai=AMfl-YRzLcR00jcxgW5WBF8rEeUJyu1oxOogOpITeAxJBMAVjBcI6hRURc-xqKa_psiW9ocRT-H6r1pnh9sLWlv6v0Ic8a5jLioRndBTFQ&sig=Cg0ArKJSzC9aAgxeY8YCEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=2&dett=2&cstd=0&cisv=r20240109.55193&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:51 UTC	1592	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0xd96b035d0917cd8d0000000000000000"},"debug_key":"14496257935930725575","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"8783065495522048721"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:51 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.5	50893	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	1418	OUT	GET /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1327&vt=11&dtpt=1325&dett=2&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:51 UTC	1593	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0x2e2fcb200d3575b90000000000000000"},"debug_key":"15163338925175040119","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"15714099250738396014"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:51 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:24:51 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:24:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.5	50889	104.18.24.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:50 UTC	881	OUT	GET /z/i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmRm1qM9p0tC76dlqFpqkpOK9E8AxFDhd0NxIjEP8n9Uuri1ThNAAcqKgUaYZOSVJVCokMomiGc9xN9AskUFe2gBABCTA5MEucqB%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aentAZcu4YUdmqcn62NoCWZampWgkNfBFle6anmXWZdMh3tJrEUse0qvppQrZalr465PfkwidT5dXoQJMpqGFMTvIQWZaQjZbgcDUW
2024-01-15 13:24:51 UTC	827	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:50 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aantAZcx2eNlSE0U7aqv61HVDt5fhMhZalIZbgDeBX2JZasTZbFLAGoSFG8mbxmYZcrEmQ6ZbDxYI5HMZdZaqalqEPJS58GQ2QQhgA8mJ; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:50 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aantAZcx2eNlSE0U7aqv61HVDt5fhMhZalIZbgDeBX2JZasTZbFLAGoSFG8mbxmYZcrEmQ6ZbDxYI5HMZdZaqalqEPJS58GQ2QQhgA8mJ; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:50 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e70fa0ea3821b-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.5	50894	68.67.160.26	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:51 UTC	2304	OUT	POST /vevent?an_audit=0&referrer=http%3A%2F%2Fmylovelybluesky.com&e=wqT_3QK2B-i2AwAAAwDWAAUBCJ7klK0GEJzMlqLW36fvPhgAKjYJKsPOqMBbpT8RPsurK1PQpD8ZexSuR-F6hD8hPg0SACkRJAAxERuwMMa_5QM4tQFAtV5I4wNQuomKtgFYv7E9YABon6RUeIbMBYABAYoBA1VTRJIBAQbwUpgB0AKgAZgCqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEVMS1teWxvdmVseWJsdWVza3kuY29t2ALwBuACoqgx6gIaaHR0cDovL215bG92NiYAVIADAIgDAZADAJgDCaADAaoDqAMKwgIBMCxzOi8vd3d3LmJpbmcBUPBVL2FwaS92MS9tZWRpYXRpb24vdHJhY2tpbmc_YWRVbml0PTM5MTQ2NiZhdUlkPTI5MmRjZDQyLTdkNjctNGRjMy1iMTU2LTQ1ZWMxNWVkNTBlNCZiaWQBK2QmYmlkZGVySWQ9NCZjbUV4cElkPUxWMSZvQTJYABhwdWJsaXNoBSkkMTYyNjQ1MzMwJgE3ADKObQC4cnR5cGU9bnVybCZ0YWdJZD03OTU0Mzc0JnRyYWZmaWNHcm91cD1rbmFxZV8zYyYNFghTdWIJGRh6emYlM0FrDR_0FwFfZXJkaHJmZ1lyaXJ5WTEmYWlkPSR7QVVDVElPTl9JRH0SBTEyMDg1GhM0NTMwMjMzMDg2MzI3NDk4MjY4IgkzODE4NDY3MTQqBGJpbmc6NFUyVmhjbU5vUVdRak9EQXpNek15TlRZMU9UazVORFFqT0RBek16TTBNek01TmpjM05ERT3AA9gEyAMA2APHj5sB4AMA6AMA-AMDgAQAkgQEL3VhcJgEAKgEALIEDAgAEAAYACAAMAA4ALgEAMAEAMgEANoEAggB4AQB8AS6iYq2AYgFAZgFAKAF4Ojy3PyH79t9wAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFkdMF-gUECAAQAJAGAJgGALgGAMEGBSIwAPA_0AbCjQTaBhYKEAkSGQF0EAAYAOAGAfIGAggAgAcBiAcAoAcByAeGzAXSBw0JESgBJgzaBwYIBQms4AcA6gcCCADwB7WS6wKKCAIQAJUIAACAP5gIAcAI8AbSCAkI____PxACGAA.&s=5c243fc8fe0ce722930fdb791692d9512e9f6aed&type=nv&nvt=5&jm=1003&px=12&py=0&bw=336&bh=176&sid=3192103561994549331&vd=ct~0\|rr~0&sv=240&tv=view7-1hs&ua=chrome52&pl=win&x=v&tag_id=7954374&sw=1280&sh=1024&pw=360&ph=280&ww=360&wh=280&ft=3 HTTP/1.1 Host: nym1-ib.adnxs.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa; XANDR_PANID=QbhcQJweSlIZorf__tPXyXGcP8ZN8T3ppMP-HScdl9HKa-OXWVIzNA-aVaov5zfOMin_KioTArKYfZOEPKZjKBYZG7Aej2rfZhvXXQ0-mDI.
2024-01-15 13:24:51 UTC	1175	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=HgJfLJPBTPS7JovVkt3-q77vGTh4WpAzpSdmCZeLdEAYvFjgJcGDzcs6ETQMIFND7DGVAZVl6datEhcCeqqNEXBUbygw9Pz5C5UslhNQ73Y.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 58b1229b-0a94-44f0-94a5-cf44d63376bd Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.5	50896	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:52 UTC	1499	OUT	GET /f/AGSKWxVwep65JERDlvgZS-9zEFP0Y7jezEacLi9se01p48_mMxJc8XFZnVS1_r8HdR5C1r-6I7qHADrcSribS9pP3vTfSgVDHSkgHoaQpon5f8aPR6OHgHnTYTX_lNT_p_pGUAb6sBIbTQ==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:52 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:52 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-wE7aT65h0hYLJpvDbDzejw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:52 UTC	1629	IN	Data Raw: 64 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 4d 6e 2c 5f 2e Data Ascii: d16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Mn=function(a){this.j=_.v(a)};_.A(Mn,_.
2024-01-15 13:24:52 UTC	1629	IN	Data Raw: 71 77 2f 6d 3d 63 6f 6f 6b 69 65 5f 72 65 66 72 65 73 68 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 37 2c 5c 78 32 32 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 5c 5c 5c 78 32 32 2c 5c 5c 5c 78 32 32 41 4b 73 52 6f 6c 5f 32 32 56 79 67 62 48 5a 45 58 77 49 35 4a 6d 6a 52 5a 6c 78 37 31 57 62 64 4f 6d 33 6a 58 5f 4d 6c 56 44 7a 7a 37 73 6f 64 66 39 65 49 64 53 70 36 44 32 73 4e 39 36 32 44 57 68 5a 44 34 46 72 62 4d 57 72 44 4f 75 56 50 6f 59 45 4c 41 77 71 61 67 4c 4e 5a 71 44 67 7a 69 78 39 45 6e 73 53 75 4c 39 31 52 37 7a 4f 49 38 51 7a 33 4b 39 52 69 66 59 51 Data Ascii: qw/m=cookie_refresh_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b7,\x22\x5b\x5bnull,\\\x22mylovelybluesky.com\\\x22,\\\x22AKsRol_22VygbHZEXwI5JmjRZlx71WbdOm3jX_MlVDzz7sodf9eIdSp6D2sN962DWhZD4FrbMWrDOuVPoYELAwqagLNZqDgzix9EnsSuL91R7zOI8Qz3K9RifYQ
2024-01-15 13:24:52 UTC	99	IN	Data Raw: 52 44 5f 54 66 50 55 34 31 41 66 39 4c 64 6d 6c 51 50 51 55 64 4d 5a 7a 4e 30 57 53 50 2d 58 32 30 6e 68 6c 4f 49 4e 76 34 77 62 41 76 53 46 68 63 47 41 79 38 53 63 6a 63 48 4c 52 71 62 68 34 59 4f 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 27 29 3b 7d 0d 0a Data Ascii: RD_TfPU41Af9LdmlQPQUdMZzN0WSP-X20nhlOINv4wbAvSFhcGAy8ScjcHLRqbh4YOQ\\u003d\\u003d\x22\x5d\x5d');}
2024-01-15 13:24:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.5	50843	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:52 UTC	815	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmR4fFUYTwL_PPAMnLJqq0VJvSkjUNxgPjTO_qUCgIoHJFqujAI5T93-7eLhIlX6cBSKNT4ZpS4FULjWPFxqXzsg0AmZNIj3yjiS HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4
2024-01-15 13:24:52 UTC	658	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 240 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmR4fFUYTwL_PPAMnLJqq0VJvSkjUNxgPjTO_qUCgIoHJFqujAI5T93-7eLhIlX6cBSKNT4ZpS4FULjWPFxqXzsg0AmZNIj3yjiS&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:24:52 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:24:52 GMT
2024-01-15 13:24:52 UTC	240	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 52 34 66 46 55 59 54 77 4c 5f 50 50 41 4d 6e 4c 4a 71 71 30 56 4a 76 53 6b 6a 55 4e 78 67 50 6a 54 4f 5f 71 55 43 67 49 6f 48 4a 46 71 75 6a 41 49 35 54 39 33 2d 37 65 4c 68 49 6c 58 36 63 42 53 4b 4e 54 34 5a 70 53 34 46 55 4c 6a 57 50 46 78 71 58 7a 73 67 30 41 6d 5a 4e 49 6a 33 79 6a 69 53 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 61 48 4a 54 52 45 78 50 57 6a 42 59 54 6b 64 4f 65 48 64 55 54 47 30 79 52 6a 51 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmR4fFUYTwL_PPAMnLJqq0VJvSkjUNxgPjTO_qUCgIoHJFqujAI5T93-7eLhIlX6cBSKNT4ZpS4FULjWPFxqXzsg0AmZNIj3yjiS&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.5	50906	216.239.38.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:52 UTC	1619	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325078563&gcd=11l1l1l1l1&dma=0&tcfd=10000&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=3&tfd=14195 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 258 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:52 UTC	258	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 50 72 59 32 66 36 2d 33 34 4d 44 46 59 2d 38 30 51 51 64 49 79 4d 46 30 41 26 5f 65 74 3d 31 30 32 33 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4a 6d 58 6c 34 43 5f 33 34 4d 44 46 5a 79 4f 30 51 51 64 36 75 67 45 31 41 26 5f 65 74 3d 31 38 30 37 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 49 4c 59 6c 34 43 5f 33 34 4d 44 46 66 36 44 64 77 45 64 68 68 6f 47 4f 51 26 5f 65 74 3d 35 37 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4c 48 31 6f 49 43 5f 33 34 4d 44 46 55 79 37 30 51 51 64 33 33 34 4e 55 41 26 5f 65 74 Data Ascii: en=ad_impression&ep.query_id=CPrY2f6-34MDFY-80QQdIyMF0A&_et=1023en=ad_impression&ep.query_id=CJmXl4C_34MDFZyO0QQd6ugE1A&_et=1807en=ad_impression&ep.query_id=CILYl4C_34MDFf6DdwEdhhoGOQ&_et=57en=ad_impression&ep.query_id=CLH1oIC_34MDFUy70QQd334NUA&_et
2024-01-15 13:24:53 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.5	50911	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:52 UTC	860	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmTtj-J0ASOjeM_vXHQWXN2alj92a_XNICpb_jtl1QdyQujDXJX1SqFWZoi0H707zRv6SHczXhGpyJToXSRM1rteplQtNwsfNA HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:24:53 UTC	486	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:53 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtj-J0ASOjeM_vXHQWXN2alj92a_XNICpb_jtl1QdyQujDXJX1SqFWZoi0H707zRv6SHczXhGpyJToXSRM1rteplQtNwsfNA&google_hm=82nPL-gDAe41xcnm3Ha0dg Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.5	50908	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.5	50914	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	897	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmTUQhf5xjfgbt2wY0kIXOrtzBmfvUB5L_g34SWMAxAqUBnlYSQGyFqUKWwpTkJaWyWJ_Th981OxI5I7LsNXUCwoQcu7LKxCi5A HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsI8OP4oOz1yjwQBRgFIAQoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:24:53 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:24:53 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:24:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI1vmQwOz1yjwQBRgFIAUoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:24:53 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:24:53 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.5	50913	35.236.220.17	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	809	OUT	GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmRx9fT50cXuGaFpq8-K6rMJYT5BO1Y-dFW2Z7vh-IUo3bYI8knlDk3kqAYsvdoaJgI_L_7p1VsqJpHL0DBFrhB_O-yuWu_nAcA HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=690F5FB948B2412881DA26E47E140F91
2024-01-15 13:24:53 UTC	766	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 15 Jan 2024 13:24:53 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmRx9fT50cXuGaFpq8-K6rMJYT5BO1Y-dFW2Z7vh-IUo3bYI8knlDk3kqAYsvdoaJgI_L_7p1VsqJpHL0DBFrhB_O-yuWu_nAcA Expires: Sun, 14 Jan 2024 13:24:53 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-15 13:24:53 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.5	50919	68.67.160.26	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	2855	OUT	GET /it?an_audit=0&referrer=http%3A%2F%2Fmylovelybluesky.com&e=wqT_3QK2B-i2AwAAAwDWAAUBCJ7klK0GEJzMlqLW36fvPhgAKjYJKsPOqMBbpT8RPsurK1PQpD8ZexSuR-F6hD8hPg0SACkRJAAxERuwMMa_5QM4tQFAtV5I4wNQuomKtgFYv7E9YABon6RUeIbMBYABAYoBA1VTRJIBAQbwUpgB0AKgAZgCqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEVMS1teWxvdmVseWJsdWVza3kuY29t2ALwBuACoqgx6gIaaHR0cDovL215bG92NiYAVIADAIgDAZADAJgDCaADAaoDqAMKwgIBMCxzOi8vd3d3LmJpbmcBUPBVL2FwaS92MS9tZWRpYXRpb24vdHJhY2tpbmc_YWRVbml0PTM5MTQ2NiZhdUlkPTI5MmRjZDQyLTdkNjctNGRjMy1iMTU2LTQ1ZWMxNWVkNTBlNCZiaWQBK2QmYmlkZGVySWQ9NCZjbUV4cElkPUxWMSZvQTJYABhwdWJsaXNoBSkkMTYyNjQ1MzMwJgE3ADKObQC4cnR5cGU9bnVybCZ0YWdJZD03OTU0Mzc0JnRyYWZmaWNHcm91cD1rbmFxZV8zYyYNFghTdWIJGRh6emYlM0FrDR_0FwFfZXJkaHJmZ1lyaXJ5WTEmYWlkPSR7QVVDVElPTl9JRH0SBTEyMDg1GhM0NTMwMjMzMDg2MzI3NDk4MjY4IgkzODE4NDY3MTQqBGJpbmc6NFUyVmhjbU5vUVdRak9EQXpNek15TlRZMU9UazVORFFqT0RBek16TTBNek01TmpjM05ERT3AA9gEyAMA2APHj5sB4AMA6AMA-AMDgAQAkgQEL3VhcJgEAKgEALIEDAgAEAAYACAAMAA4ALgEAMAEAMgEANoEAggB4AQB8AS6iYq2AYgFAZgFAKAF4Ojy3PyH79t9wAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFkdMF-gUECAAQAJAGAJgGALgGAMEGBSIwAPA_0AbCjQTaBhYKEAkSGQF0EAAYAOAGAfIGAggAgAcBiAcAoAcByAeGzAXSBw0JESgBJgzaBwYIBQms4AcA6gcCCADwB7WS6wKKCAIQAJUIAACAP5gIAcAI8AbSCAkI____PxACGAA.&s=5c243fc8fe0ce722930fdb791692d9512e9f6aed&pp=ZaUyHgAN9zEE0btMAA1-3zBY4AunwDpQiGELgw&ppt=1&pubclick=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCJjvuHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNoBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevw3DOzP8v7adOOX75rlKAEaZXMaYfZtpKR8rUc0m3QT-_3mEZpPf_b3iABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1gIdq2Va6t0TjcskUwrGIAeY4wBw%26client%3Dca-pub-6163292317333011%26adurl%3D&cbvp=2 HTTP/1.1 Host: nym1-ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r+AGa; XANDR_PANID=HgJfLJPBTPS7JovVkt3-q77vGTh4WpAzpSdmCZeLdEAYvFjgJcGDzcs6ETQMIFND7DGVAZVl6datEhcCeqqNEXBUbygw9Pz5C5UslhNQ73Y.
2024-01-15 13:24:53 UTC	1141	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=H22Y2GpJcZSUB3t9oIkV3p7T7HnfvzHHXFOz68L883EAcJIZJ9G_D3Rr7aHvHQNRYdNuQgSXkOIchREJ8vJoZVynkvE04J8uNUno2Yms8nU.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: 903704c8-55ca-4e14-9cf6-7bd71ec7d697 Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:53 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 567.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.5	50920	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	859	OUT	POST /el/AGSKWxWEeY_7fzwdUdja467n4kIOdNCm2AzeL0G5pb3JuI-I6xDIHtfT4eB7Rjxiv8TiWFb39y-hluWAi0V7QTJ3n5vC8FMIWBqonnZFIMfcbSEym8x_woQZBDFcfqciotbYcJP0QWGtzQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:53 UTC	166	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 30 39 31 39 30 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 38 36 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325091909,null,null,null,null,null,null,null,null,null,null,null,[[1,186,"mylovelybluesky.com","mylovelybluesky.com",3]]]
2024-01-15 13:24:53 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:53 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-zo0onoGN0laWSsyNLKA8hA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.5	50918	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	3350	OUT	GET /pagead/adview?ai=CBLasHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNcBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevgXLvXj2LF8rawwpMMAsEp6J0OyIWSMKT5UyN9_U3axOnHuD7yWOABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwOACgH6CwIIAYAMAdAVAYAXAbIXGgoYEhRwdWItNjE2MzI5MjMxNzMzMzAxMRgA&sigh=Xx-nEW_pcKI&uach_m=%5BUACH%5D&cid=CAQSOwAvHhf_9NAQ_m9izwKV3fyEZK_UF5pBxIMbh5zIjxlr6KtNXPfWSMNeYtvpXYfYrd37MBi7MebbZTRjGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:53 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:53 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.5	50915	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	817	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmRQvqnsHmlzqj4-T2TITOUL1y59SmTx7B5_DRd9jArckWnxvNeYiHD6VG0_Vyisnbp0DHicKpt6UqxtzwEGhzDakpjWCs-Jow HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=65A5321EFD370CDA819C147DBLIS
2024-01-15 13:24:53 UTC	670	IN	HTTP/1.1 307 Temporary Redirect Location: https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRQvqnsHmlzqj4-T2TITOUL1y59SmTx7B5_DRd9jArckWnxvNeYiHD6VG0_Vyisnbp0DHicKpt6UqxtzwEGhzDakpjWCs-Jow&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS Set-Cookie: b=65A5321EFD370CDA819C147DBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Mon, 15 Jan 2024 13:24:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.5	50921	172.253.63.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	858	OUT	POST /el/AGSKWxV7T-Wr5EXDgpzPf35copHYdTFyb5uxhPQIcvDgE28QZU0B2HMghaUR0Lk8ANyXoNqoK0uE2HrTMXSFnMR48Mo4yM8HrXCAyJj56mzAzEYde6GW1CfGlDHydPFJXwp7qdemPNhUEA== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:53 UTC	63	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 30 2c 6e 75 6c 6c 2c 31 5d 5d 2c 31 37 30 35 33 32 35 30 39 31 39 31 32 5d Data Ascii: [null,null,null,null,null,null,null,[[0,null,1]],1705325091912]
2024-01-15 13:24:53 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:53 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-zJM9vt4w9CHfd0qlLL5nhQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.5	50926	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	796	OUT	GET /pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmRP7oEenP2bLB8uL4-ej4aZ-pQp8DKIdq5hUie18zO8-2ShzV6AB5zinpnjToCYEM5jTXoe5iIDV0GzxJDTK8pyRDAerNtrYBnK&google_hm=82nPL-gDAe41xcnm3Ha0dg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.5	50929	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	802	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQIJVymrisTvq3NhL-ezDUJdmE24nSJTzs56erMwQJw1qFuwikvPCckM7tXc7kepqtBHxvaw5MK4XlaDHpDevsGPirMl_KQkGeR HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.5	50930	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	872	OUT	GET /pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSBo6FKjlLIWLW0now7E1QVSA0WvCbbLiA9PAjYB_iazxU-wIZ5sZakfprMQGOQc-N6Eblsi4HU8sag6hDpAqsC-f6835KBOWVY HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.5	50935	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:53 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.5	50931	142.251.111.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	360	OUT	GET /simgad/772535680019461723 HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:53 UTC	823	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 67012 X-Content-Type-Options: nosniff Allow-Fenced-Frame-Automatic-Beacons: true X-DNS-Prefetch-Control: off Server: sffe X-XSS-Protection: 0 Date: Thu, 11 Jan 2024 19:13:57 GMT Expires: Fri, 10 Jan 2025 19:13:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 06 Dec 2023 16:15:09 GMT Content-Type: image/jpeg Age: 324656 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:53 UTC	429	IN	Data Raw: ff d8 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 6d 6e 64 00 00 02 54 00 00 00 70 64 6d 64 64 00 00 02 Data Ascii: XICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@dmndTpdmdd
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 12 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f3 51 00 01 00 00 00 01 16 cc 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 Data Ascii: 1966-2.1sRGB IEC61966-2.1XYZ QXYZ XYZ o8XYZ bXYZ $descIEC http://www.iec.chIEC http://www.iec.ch
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: cf 0f ec 10 09 10 26 10 43 10 61 10 7e 10 9b 10 b9 10 d7 10 f5 11 13 11 31 11 4f 11 6d 11 8c 11 aa 11 c9 11 e8 12 07 12 26 12 45 12 64 12 84 12 a3 12 c3 12 e3 13 03 13 23 13 43 13 63 13 83 13 a4 13 c5 13 e5 14 06 14 27 14 49 14 6a 14 8b 14 ad 14 ce 14 f0 15 12 15 34 15 56 15 78 15 9b 15 bd 15 e0 16 03 16 26 16 49 16 6c 16 8f 16 b2 16 d6 16 fa 17 1d 17 41 17 65 17 89 17 ae 17 d2 17 f7 18 1b 18 40 18 65 18 8a 18 af 18 d5 18 fa 19 20 19 45 19 6b 19 91 19 b7 19 dd 1a 04 1a 2a 1a 51 1a 77 1a 9e 1a c5 1a ec 1b 14 1b 3b 1b 63 1b 8a 1b b2 1b da 1c 02 1c 2a 1c 52 1c 7b 1c a3 1c cc 1c f5 1d 1e 1d 47 1d 70 1d 99 1d c3 1d ec 1e 16 1e 40 1e 6a 1e 94 1e be 1e e9 1f 13 1f 3e 1f 69 1f 94 1f bf 1f ea 20 15 20 41 20 6c 20 98 20 c4 20 f0 21 1c 21 48 21 75 21 a1 21 ce 21 fb Data Ascii: &Ca~1Om&Ed#Cc'Ij4Vx&IlAe@e EkQw;cR{Gp@j>i A l !!H!u!!!
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: 58 c3 d4 c4 51 c4 ce c5 4b c5 c8 c6 46 c6 c3 c7 41 c7 bf c8 3d c8 bc c9 3a c9 b9 ca 38 ca b7 cb 36 cb b6 cc 35 cc b5 cd 35 cd b5 ce 36 ce b6 cf 37 cf b8 d0 39 d0 ba d1 3c d1 be d2 3f d2 c1 d3 44 d3 c6 d4 49 d4 cb d5 4e d5 d1 d6 55 d6 d8 d7 5c d7 e0 d8 64 d8 e8 d9 6c d9 f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff ee 00 21 41 64 6f 62 65 00 64 40 00 00 00 01 03 00 10 03 02 03 06 00 Data Ascii: XQKFA=:8655679<?DINU\dlv)6DScs2F[p(@Xr4Pm8Ww)Km!Adobed@
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: 43 03 64 5b 44 1a a8 64 55 50 c9 26 cc e5 2d 66 53 d7 ea dd 5b b2 7f af 37 91 db ed b4 86 d5 17 04 d1 d9 6f aa 29 74 e4 86 eb 7b b2 de 61 da 25 35 7a eb aa 5d 0d 34 9b 96 a2 a0 9d 95 59 57 98 12 6e 2a 93 8f 42 38 cc d4 9a 48 4c 43 ba dd 4e cd a6 26 2b 47 b0 4a 73 4f d9 36 e8 3b cf fd 65 c3 ac da d9 99 b6 cb 5a ad 96 f2 a3 a2 23 cd bf 89 53 35 a6 4a 59 73 ca 7c c0 8f 8a d3 d3 99 40 7b 8a 57 15 2b 27 c1 f7 d4 7f 10 30 17 1a fb a2 d5 ef f4 13 e0 9e a9 f7 c6 d0 9e 6a b8 fc 30 93 83 73 75 a9 f7 03 69 ad 7b 1d 3a da 2a b7 c8 7d 2f 5f 5e 20 ea 24 ca c0 f1 c7 d7 fc fd 61 35 fb 5f 4c bc df b2 3a ed 1f 79 e7 1e f8 ce 3e 71 c1 a7 73 f3 0d df d2 ba 4b 98 d9 e3 00 fe 29 cb 6c f2 2f 49 c2 f8 67 15 a1 64 a7 00 db f8 63 e8 7d b0 ab b5 b9 ba da a3 11 de b0 58 2b 94 6c a6 Data Ascii: Cd[DdUP&-fS[7o)t{a%5z]4YWnB8HLCN&+GJsO6;eZ#S5JYs\|@{W+'0j0sui{:}/_^ $a5_L:y>qsK)l/Igdc}X+l
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: 9d 9b 66 9d b0 30 96 de 60 e9 d0 33 d9 7c 36 c5 3c 2d e8 4a a3 fa 19 e4 8e 69 3e f7 7c d6 00 00 00 00 00 22 d7 86 fe 85 b8 ac 0f d6 cf a5 9f 1b b7 44 ce e1 59 df 23 85 03 75 f3 f5 5b 65 a2 8e 35 6d e3 9f 5b 70 dc 5c a2 bc 30 9e 42 5a 61 6d 8d c3 6d 33 d3 3e 93 c3 9d 86 bb 04 cd 86 70 91 c6 1a f6 a8 a9 5b 23 b5 5b 77 8d de 57 0d 63 db 3d b7 4f b7 60 a2 55 da 8f 5d 63 8c 3c 6c 85 84 49 e9 7f a6 2c 56 72 6d d6 7b 20 ba ad ba 64 9a 2d be 2a ad 8c 1e 86 49 29 b3 89 05 9c 7a af cb 79 67 f9 bb db 64 bd b5 50 45 35 ae 6f 2a d6 62 2f 56 be 50 07 a3 25 59 6b 24 6f d3 b6 52 5e b7 37 2f 29 33 ed c7 3c e3 d6 55 ce a9 52 72 06 4a 38 47 b5 66 e7 5b bc 0d 1e c0 1e 82 de ac 3e a5 79 59 07 70 84 00 00 00 03 a6 3f 70 7c dc 02 c0 3e 22 fd 3c 75 7c d7 da 80 00 00 00 00 00 00 Data Ascii: f0`3\|6<-Ji>\|"DY#u[e5m[p\0BZamm3>p[#[wWc=O`U]c<lI,Vrm{ d-I)zygdPE5ob/VP%Yk$oR^7/)3<URrJ8Gf[>yYp?p\|>"<u\|
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: 7a 81 83 af 0c 5e 9c 38 7a 04 38 7e 9c 1f 40 2a 7e 9c 53 c4 22 72 7a 15 4f a7 14 4c 7a f8 47 a9 00 04 00 a2 00 43 08 8a 22 20 29 29 e1 28 2e 53 14 e9 99 43 19 24 bc 06 29 94 29 19 35 23 44 90 5d 33 b8 72 65 41 cc 29 5c 46 33 24 94 52 ce 1d 7f 32 7d 1c f0 f1 c7 f1 a6 c8 48 77 65 6c 2c cf f6 06 f2 60 c4 ee a4 4c d5 78 c7 2e 65 64 08 ff 00 c7 c5 d2 49 64 8b 19 2a d8 c1 60 3c 53 c7 e6 41 47 b1 74 d9 23 84 9b f8 ff 00 21 53 c8 4f 2f 5d 6a d9 5b 3c c3 e8 16 73 11 c7 94 8f 50 f1 d2 4f 5d b3 42 b9 1a 04 8e 68 a9 96 76 b2 dc 6d 26 e3 cf 94 33 82 04 7c 88 cc bb 92 8f 06 e9 b8 40 88 b5 34 83 c5 5e ac ce 1d c1 31 d9 0a 9e 3f fd f4 7d 7d 7a 08 f5 1e 18 07 a0 00 f8 8c 1d 38 61 11 13 94 40 0d c3 fa cc 6e 28 1e 2e 18 bc 39 7a 70 e9 88 f1 44 87 85 0e 86 14 87 82 02 73 79 Data Ascii: z^8z8~@~S"rzOLzGC" ))(.SC$))5#D]3reA)\F3$R2}Hwel,`Lx.edId`<SAGt#!SO/]j[<sPO]Bhvm&3\|@4^1?}}z8a@n(.9zpDsy
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: ac fb 39 26 d2 2c 58 30 76 f9 84 3d 5a 41 29 4f 12 12 2e 20 2a 4c 58 38 aa 56 bc 36 2a d4 71 21 da 57 61 a3 22 e5 60 23 d5 8d 56 0e b8 c1 93 e8 28 e5 52 4b ec 42 c5 80 20 07 8f 63 51 9a 2b f6 4a b3 78 d1 c1 a6 5c b7 89 7a c6 56 c8 d6 7d d4 b5 3a 51 da 18 fe 3d 89 a4 65 66 18 a6 d9 ea cc 50 59 89 62 d0 4c 63 2c aa d6 0a ed c5 36 76 5e 3c f1 09 c7 cb c9 b5 f1 20 f1 76 eb 94 c8 45 92 3b f1 1b be 3b 7a 66 ed e3 e0 d2 9b 47 1a a5 e4 63 9f dd 4f 1d 32 c9 d2 11 72 4e 9f fd 22 ac 25 e0 80 8f 1e 09 80 de 42 bd 0e a9 4c cc 87 f0 b5 f2 17 23 99 73 94 ce d0 55 2f 35 f9 65 1e 9e 39 a9 db 0f 41 ea 20 21 c7 cc 06 46 3f c0 8c 0c 5b 70 3f f2 eb 00 28 30 70 8b 92 42 32 59 d2 92 33 e8 96 65 37 16 42 b5 3c a4 3b 96 0d 24 58 a1 08 b3 9f b5 43 d7 19 40 b1 89 93 41 9d 55 b3 37 Data Ascii: 9&,X0v=ZA)O. LX8V6q!Wa"`#V(RKB cQ+Jx\zV}:Q=efPYbLc,6v^< vE;;zfGcO2rN"%BL#sU/5e9A !F?[p?(0pB2Y3e7B<;$XC@AU7
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: ef 15 8f 87 bb 3d 88 51 ce 42 67 32 fa 7e 28 64 a3 f1 8a 8e ce de 2e ca 83 62 23 30 cd 72 98 88 28 63 d9 94 8a 4e fb 94 2c 46 4f ed 91 d0 cb 46 4b 98 52 ba cd 48 91 b4 aa 56 e9 d8 d7 b8 be 55 82 f0 32 35 a8 07 0f 26 61 e5 cd 44 48 a8 51 fe 96 6a 7e fa 33 16 d2 dc bd 4f 1c 54 ef 37 f2 59 2b 33 d7 a5 a7 e7 e4 cb 3f 62 86 c8 53 ea da 6f 37 46 6d b2 5c cc d3 29 0a 6e 30 b2 d8 8f 65 ae 37 bf bb c8 13 d7 0a c5 5d ca 79 16 c0 5c 54 85 fa c2 be 00 a3 5c 6f 2e 72 d5 c9 79 d8 cc e1 8c 2e b2 2f 6e 19 4b fa 13 e9 27 e0 37 11 0e bc 5b ff 00 8f 88 2e 27 0f 01 40 56 00 0e 2b e3 03 22 aa 9d 55 2f 42 f9 62 3c 2f 4e 1c dc 3f 5e 18 a7 31 7a 0f 08 00 00 b1 4d d4 9e 67 84 a0 53 19 c1 48 02 42 14 fc 3a e6 4c cb 38 f1 94 be 59 85 61 0e 01 8c 4e 14 c2 72 b7 3a 3e 52 4e 8c df 81 Data Ascii: =QBg2~(d.b#0r(cN,FOFKRHVU25&aDHQj~3OT7Y+3?bSo7Fm\)n0e7]y\T\o.ry./nK'7[.'@V+"U/Bb</N?^1zMgSHB:L8YaNr:>RN
2024-01-15 13:24:53 UTC	1252	IN	Data Raw: a6 1f eb 83 d2 01 e8 e0 75 fd 81 e9 e0 70 03 9d 3a f0 a1 c0 27 5e 78 44 38 21 d7 86 20 00 f0 07 a0 88 80 87 ac 04 38 71 e1 ba 08 08 1b af 40 f0 88 75 0f 07 50 31 07 87 01 f2 ca 91 3c 22 02 51 32 69 01 4c 29 08 38 f0 89 9c 37 31 84 48 46 c0 9a 86 01 78 dc c4 33 43 a6 62 b9 32 42 ba 86 49 4e 24 90 10 57 4b ca e3 35 d1 58 0c 60 48 8a 14 5d 2a 9b 26 86 01 2c 60 31 64 91 54 59 34 14 68 f3 a2 68 1d 04 ce e5 c4 3b 42 36 45 b3 16 87 33 9b 1d 6c c7 67 0a d8 e8 2f 53 33 a6 f2 b1 0b b4 98 20 f9 66 9e 9b 6a 53 32 74 65 88 e4 e6 48 cd cc 44 14 17 28 75 b6 7a 2d 5c 8c fb ca fb 5d a3 4c 4a d6 61 6a 90 d0 14 da aa 70 55 19 0a ca b7 28 0a eb 68 0a 15 1e 99 31 56 ba a6 d4 e0 9e 0f 97 b8 b0 65 43 c6 ef 63 5e d7 6b b2 75 cc 8f 0d 45 5d 48 5c 58 73 98 e6 ae 34 7b 6f 9d b1 5d Data Ascii: up:'^xD8! 8q@uP1<"Q2iL)871HFx3Cb2BIN$WK5X`H]*&,`1dTY4hh;B6E3lg/S3 fjS2teHD(uz-\]LJajpU(h1VeCc^kuE]H\Xs4{o]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.5	50945	74.119.119.150	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	713	OUT	GET /dis/usersync.aspx?r=4&p=14&cp=google&cu=1&url=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3Dcjp%26google_hm%3D%40%40CRITEO_USERID%40%40%26google_push%3DAXcoOmQVvuK12lNK_6xFvirPlNuLvinJElQtI34ruZ-lH_LUp-y_6PKu6RRLt9FFo2qwcpN0Uv1XvbyEXjx8TSSoE6WnbW0ezSqyDkQZXo5UYj0CBuguzPS-ikZGJe5SZLsq3iOziJ0_eEhDKRBmANQQrtDaAg&google_gid=CAESEGNkQuhMYcUM4e65x_gmwzw&google_cver=1 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:54 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Mon, 15 Jan 2024 13:24:53 GMT server: Kestrel cache-control: no-cache expires: Mon, 15 Jan 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 385023 strict-transport-security: max-age=31536000; preload; connection: close
2024-01-15 13:24:54 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.5	50946	35.186.253.211	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:53 UTC	531	OUT	GET /sync/prebid?gdpr=0&gdpr_consent=&r=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D1595%26userId%3D%24%7BUID%7D HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=36d50231-3ae1-475e-ae61-a3b737c8700a\|1705325057
2024-01-15 13:24:54 UTC	448	IN	HTTP/1.1 302 Found Cache-Control: private, max-age=0, no-cache, must-revalidate Content-Type: text/html; charset=utf-8 Location: https://ads.stickyadstv.com/user-registering?dataProviderId=1595&userId=dca7b2a7-2af9-4b40-9f3b-ab4ad2b4817a P3p: CP="CUR ADM OUR NOR STA NID" Pragma: no-cache Date: Mon, 15 Jan 2024 13:24:54 GMT Content-Length: 135 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:54 UTC	135	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 31 35 39 35 26 61 6d 70 3b 75 73 65 72 49 64 3d 64 63 61 37 62 32 61 37 2d 32 61 66 39 2d 34 62 34 30 2d 39 66 33 62 2d 61 62 34 61 64 32 62 34 38 31 37 61 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=1595&userId=dca7b2a7-2af9-4b40-9f3b-ab4ad2b4817a">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.5	50951	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	1126	OUT	GET /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=1&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:54 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.5	50959	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:54 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:54 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.5	50956	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	850	OUT	GET /pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmQA22W9PHHVcPt-rd1JHBkm5wPdjeFC36VHj7NrENCvWzsqK23YfTdLfE7PQscs5RBJiwlpVZZv5mYRzdNWY2zuuxC1KJGhYSB5Mi-RwuwAbuzn9ev5vUOliHZfVe5NbB9JwH68svzksz351ubmupyWmw&google_hm=82nPL-gDAe41xcnm3Ha0dg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:54 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:54 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.5	50962	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	848	OUT	GET /pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmQHOZq5Aox_zySiWkCILkbOlCXRnQ5Hx_GWTAhbtyK_WW53gnL3FyCmySb4McVk1EWBUAWA5CwMohYlx0786Qizad0nlCn-Zauf0QdtEfSR00pky_4GV7Bo49ZFoZzyvw6Yp8769qswpuxhSzA2wLVGtCA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:54 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:54 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.5	50964	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	1145	OUT	GET /pcs/view?xai=AKAOjsvkUYTKD93gCX0Xl8BY2tad6aSKkI16kzY4WhqT2YhwI7mlbwa-589QI80Q_HCkDuelgj7KF3zHp1vxaoIS-ZahZihyvgB2VS--5u469g1JyjFg4TEPwkM4rl9enDqbvP7pSVrWC0Ldm3CKMtHnIAhYXkooPQ7-esygCsi8t1NnRZfdIZHkDH53yZtRox1I1Ro&sai=AMfl-YRqDKr3APBowGwdATbaD0qffHNuxxZSxiWaAyomXwFvwEi5SGzQPrVf7dUl0e1KEZ4Z3_Qe615s0OXbn8n5QUfI5j_ey7qK7I3Zjw&sig=Cg0ArKJSzCX0TwP5fhtnEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1327&vt=11&dtpt=1325&dett=2&cstd=0&cisv=r20240109.43412&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.5	50961	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	788	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmT3az5lrXHYhSpzIKabFtqONTUl2rty6J06uehGJX8Pc_CGVrN3xP28_xR1G0zva4O8IUvwyUExMM2MO3V2gTT9UHd3KckA25SU&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.5	50967	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	1133	OUT	GET /pcs/view?xai=AKAOjsvg1N6z8jNkJ-iD11K7MLtb1gKIvQX8lIWfWxcwdxi1o2xElQ_4aMn1exGLHLIHG8tsoafUMMBio1ad7xc6X2dcwO51lVUJWqWARB4c_Gy_wEXT1MFOb9icYw4-bUmKx5dtmY2ZBvq5EYxNHYYb0VHKB4VDyyaNOl4JawE_vBVhUpaXuKsmBHnaOgP1041PnHY&sai=AMfl-YQk210HL2hCAr0Q7gt-wL90U_LN6Jj6fXpYzcOC7IiI20-O7aGlKP8wXfNlesEbUCYzwyF7IIZCALqA2_0o_1jRe5WFo1olUuEoag&sig=Cg0ArKJSzPuZq_a6W0iqEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=2&cbvp=2&dett=2&cstd=0&cisv=r20240109.44536&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:54 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.5	50979	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.5	50965	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	985	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmSWGuPQul1BJa9NdAmM39uyeXisRxZ_PCez1cqIGquzMuqcR_j_VZMxK82TXArHLkcEHhJnVzKq0vnUL9vhMzltdZ0sxp6oLu0%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aKntAZcxNeTgBeZdwQyuT79SYpSuhi7dihE3K9EGxirmmdv2AWSOPpNnYFStUumatdepJ33poEJkLs6pScMr1OCL4kYghgAesS; ANON_ID_old=aKntAZcxNeTgBeZdwQyuT79SYpSuhi7dihE3K9EGxirmmdv2AWSOPpNnYFStUumatdepJ33poEJkLs6pScMr1OCL4kYghgAesS
2024-01-15 13:24:55 UTC	821	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:24:55 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=afntAZcmge06ousnA6NvPC9WoheeOUPZbOiYepqNY4aAOaUQKsG4QsdZaXWCZaUKnZbocIgC3QZc36vtaEMSSq3PT1qMWO3XVMPJ57; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:55 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=afntAZcmge06ousnA6NvPC9WoheeOUPZbOiYepqNY4aAOaUQKsG4QsdZaXWCZaUKnZbocIgC3QZc36vtaEMSSq3PT1qMWO3XVMPJ57; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:24:55 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e71143de97fc4-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:24:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.5	50960	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:54 UTC	787	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmRd_G8SZFMGgWGWbDGiMlnGmam6gCRIyUkD171zeZ1oOd6fHwvQBs_4n8ZYxeQuXNx2TJVuxYKBpmbWbjUAMEFQjq7vcPf5DwM&google_hm=NkQzWnBMR2F2aTdzaHhud29CRXE= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.5	50981	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.5	50973	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmR0eEZeu1eoKWXu8ClmtLE-D7LavDnr2MLhNFT0QMkdFcdkZvPa8nr99yzRoOwA8gduVD5tp-6NYFMhqJbg_3Z1ITlzUHvzcaE HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.5	50963	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1133	OUT	GET /pcs/view?xai=AKAOjsseqmXD1v08E_jskxvswY9xDNrxoCl_8e8g5CwufYBHHiYW4CpFUlAw7bux5UvThEZRDr0pKFUsorvipRHnfGS1yIrO1E9evU3kJhRMQwG1vZmn249CR6IxUBVRHYbeQKKCz6Bs9j4Iu5KjEhwQZVBQeEi2RBJc8etX1dH3VhURenZGvBjPC2HkehCvd8qnPWA&sai=AMfl-YRzLcR00jcxgW5WBF8rEeUJyu1oxOogOpITeAxJBMAVjBcI6hRURc-xqKa_psiW9ocRT-H6r1pnh9sLWlv6v0Ic8a5jLioRndBTFQ&sig=Cg0ArKJSzC9aAgxeY8YCEAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=1&cbvp=2&dett=2&cstd=0&cisv=r20240109.55193&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:55 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.5	50978	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.5	50977	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.5	50982	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.5	50980	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.5	50986	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	872	OUT	GET /pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSrEGajDc8cuZCwLV5lPHFtiKEraLgfzKNAiNtDNBCx4AS0SIIOP3Y9DuuAF3VAS-2R5GsgVTwrnGjH0I6gNp7VlqkN8skRgYdw HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.5	50985	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	894	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAAB9JqIIl7qPwMJzhhVAAAAAAA&expiration=1705411490&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmReeph4lcMuO0rNAoBcDloxbJYZXOEvk8tZygEqrnXr8j8lZtrhNkiGMcOlzcXvdiB-U7GIysXT-IRM77SJ58MgfY-3oVgFTrQ HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.5	50989	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.5	50988	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	949	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACjsqaDTbSNwMQU4-jAAAAAAA&expiration=1705411490&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmTpIzaHZOc6iEf2o5M1jGQDhjYgV4abrGxWksE-HSsCdnc1qedcq8n14qqmJtRh78qQ8PpLw2ZY0efNCq4ml62AHCrwVFSqkPUfND9MA1_H4OWE3OTJrQ280rXX0osgErpNTsnpncrrcc7DFgFLG5SAgg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.5	50990	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.5	50993	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	843	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmQ8ogzHaMw7e9DcIX0MAeg91mlimq91PEwhHhGvl_AXvH80qUFfoVe_wo5m-03edH0l1UbhNF_V1nFTzRIMyywHT-I2baj1_CPs1EFeo6r8Mgnb_Y193jbUeeau7_oyGliPNE3nNkUeCSIF1VdcJqIl_Cc&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.5	50996	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.5	50997	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3505	OUT	GET /pagead/interaction/?ai=CLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=SX-h4_0Wx8k&cid=CAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbw&label=window_focus&gqid=HjKlZfWeLfqKoPMP-fqM8Aw&qqid=CJmXl4C_34MDFZyO0QQd6ugE1A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.5	50999	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3515	OUT	GET /pagead/interaction/?ai=Cs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=x-4FA4XAVbA&cid=CAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlm&label=window_focus&gqid=HjKlZdLxLarJoPMPxeWR8A0&qqid=CILYl4C_34MDFf6DdwEdhhoGOQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.5	51000	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	788	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmR4fFUYTwL_PPAMnLJqq0VJvSkjUNxgPjTO_qUCgIoHJFqujAI5T93-7eLhIlX6cBSKNT4ZpS4FULjWPFxqXzsg0AmZNIj3yjiS&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.5	51002	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3369	OUT	GET /pagead/interaction/?ai=CJjvuHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNoBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevw3DOzP8v7adOOX75rlKAEaZXMaYfZtpKR8rUc0m3QT-_3mEZpPf_b3iABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwP6CwIIAYAMAdAVAYAXAQ&sigh=HQqXEYrfVDI&cid=CAQSOwAvHhf_9NAQ_m9izwKV3fyEZK_UF5pBxIMbh5zIjxlr6KtNXPfWSMNeYtvpXYfYrd37MBi7MebbZTRj&label=window_focus&gqid=HjKlZYrxNs2YoPMP8ve82Ao&qqid=CLH1oIC_34MDFUy70QQd334NUA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.5	51001	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3082	OUT	GET /pagead/interaction/?ai=ChN0oGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOQBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo46rfCOrduH4E-VZEP4hEw5fmQWQjwn-xNKztJParSkUnX97173rEvsRwATfrJGZgwKIBfXs34gHoAY3gAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDsQlPWCIGEl69iYAKAZgLAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA6oNAlVTyA0B2BMNiBQE0BUB-BYBgBcBshgFGDciAQA&sigh=gillTeOFMiI&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLx&label=window_focus&gqid=GzKlZf3EJ9bNoPMPrp-HiA8&qqid=CJec2v6-34MDFcKh0QQdavUDXQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:55 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.5	50998	68.67.181.211	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	2608	OUT	GET /it?an_audit=0&referrer=http%3A%2F%2Fmylovelybluesky.com&e=wqT_3QK2B-i2AwAAAwDWAAUBCJ7klK0GEJzMlqLW36fvPhgAKjYJKsPOqMBbpT8RPsurK1PQpD8ZexSuR-F6hD8hPg0SACkRJAAxERuwMMa_5QM4tQFAtV5I4wNQuomKtgFYv7E9YABon6RUeIbMBYABAYoBA1VTRJIBAQbwUpgB0AKgAZgCqAEBsAEAuAEBwAEFyAEC0AEA2AEA4AEA8AEA-gEVMS1teWxvdmVseWJsdWVza3kuY29t2ALwBuACoqgx6gIaaHR0cDovL215bG92NiYAVIADAIgDAZADAJgDCaADAaoDqAMKwgIBMCxzOi8vd3d3LmJpbmcBUPBVL2FwaS92MS9tZWRpYXRpb24vdHJhY2tpbmc_YWRVbml0PTM5MTQ2NiZhdUlkPTI5MmRjZDQyLTdkNjctNGRjMy1iMTU2LTQ1ZWMxNWVkNTBlNCZiaWQBK2QmYmlkZGVySWQ9NCZjbUV4cElkPUxWMSZvQTJYABhwdWJsaXNoBSkkMTYyNjQ1MzMwJgE3ADKObQC4cnR5cGU9bnVybCZ0YWdJZD03OTU0Mzc0JnRyYWZmaWNHcm91cD1rbmFxZV8zYyYNFghTdWIJGRh6emYlM0FrDR_0FwFfZXJkaHJmZ1lyaXJ5WTEmYWlkPSR7QVVDVElPTl9JRH0SBTEyMDg1GhM0NTMwMjMzMDg2MzI3NDk4MjY4IgkzODE4NDY3MTQqBGJpbmc6NFUyVmhjbU5vUVdRak9EQXpNek15TlRZMU9UazVORFFqT0RBek16TTBNek01TmpjM05ERT3AA9gEyAMA2APHj5sB4AMA6AMA-AMDgAQAkgQEL3VhcJgEAKgEALIEDAgAEAAYACAAMAA4ALgEAMAEAMgEANoEAggB4AQB8AS6iYq2AYgFAZgFAKAF4Ojy3PyH79t9wAUAyQUAAAAAAADwP9IFCQkAAAAAAAAAANgFAeAFAfAFkdMF-gUECAAQAJAGAJgGALgGAMEGBSIwAPA_0AbCjQTaBhYKEAkSGQF0EAAYAOAGAfIGAggAgAcBiAcAoAcByAeGzAXSBw0JESgBJgzaBwYIBQms4AcA6gcCCADwB7WS6wKKCAIQAJUIAACAP5gIAcAI8AbSCAkI____PxACGAA.&s=5c243fc8fe0ce722930fdb791692d9512e9f6aed&pp=ZaUyHgAN9zEE0btMAA1-3zBY4AunwDpQiGELgw&ppt=1&pubclick=https://adclick.g.doubleclick.net/aclk%3Fsa%3DL%26ai%3DCJjvuHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNoBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevw3DOzP8v7adOOX75rlKAEaZXMaYfZtpKR8rUc0m3QT-_3mEZpPf_b3iABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwP6CwIIAYAMAdAVAYAXAQ%26num%3D1%26sig%3DAOD64_1gIdq2Va6t0TjcskUwrGIAeY4wBw%26client%3Dca-pub-6163292317333011%26adurl%3D&cbvp=2 HTTP/1.1 Host: nym1-ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=727555877560728591; anj=dTM7k!M41.D>6NRF']wIg2HaNDhb3d!A#Eo(<j<dINiYhTyXnfi8FW/jQ!bCj_`Yk1/[[!5<GGziFYnsg^y4wfhx5P(j#iP(Md+>)fy)r*+AGa; XANDR_PANID=1LUGdF0gV92_AiwdOI_MH6PTgxh42uHzqQMGKcit5_y9ko9eTLa4j1YO_IR48jqT-GuRaFVqb1C6JzToKzPjpr8Ic9vieiyC0qPrLm8DPkY.
2024-01-15 13:24:55 UTC	1141	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Mon, 15 Jan 2024 13:24:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Set-Cookie: XANDR_PANID=VfVgcr4uh1ncQreABfzi-DFsXvNGDvyCPkQ0fC3xpqnXwpJ9JnK3pB41PVEyPB8-TlPNPVPHs_d3P9X8XXaxj_yAopg0V4UvmDk6499mGAI.; SameSite=None; Path=/; Max-Age=314496000; Domain=.adnxs.com; Secure; Partitioned AN-X-Request-Uuid: b03feb43-1f06-4758-8f1d-9b5627b9eaf1 Set-Cookie: uuid2=727555877560728591; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 14-Apr-2024 13:24:55 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 102.165.48.42; 102.165.48.42; 584.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.5	51003	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	794	OUT	GET /pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtj-J0ASOjeM_vXHQWXN2alj92a_XNICpb_jtl1QdyQujDXJX1SqFWZoi0H707zRv6SHczXhGpyJToXSRM1rteplQtNwsfNA&google_hm=82nPL-gDAe41xcnm3Ha0dg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.5	51004	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	870	OUT	GET /pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmS02cfc3YoX5Ze0ZRBF_ur_qZBrtCrgkts1LgiQ8a9IXvsclsk3RcR4qF8R-suGteR2wSI94yOfjjulWZO6QFQWYm83rzOikA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.5	51006	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQMe6yedC9x7ONOqxW_EfrAC7YmR56mdWKhHdrPd1epL1YDbJ_iIertI1e1K5OqFqRPy1-0uStYHtE5qiqSiftBk4zocVw1_0s HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:55 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:55 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.5	51007	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	933	OUT	GET /pixel?google_nid=blismobile&google_push=AXcoOmRQvqnsHmlzqj4-T2TITOUL1y59SmTx7B5_DRd9jArckWnxvNeYiHD6VG0_Vyisnbp0DHicKpt6UqxtzwEGhzDakpjWCs-Jow&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:56 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:56 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.5	51008	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	3127	OUT	GET /pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:56 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.5	51010	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	792	OUT	GET /pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmRx9fT50cXuGaFpq8-K6rMJYT5BO1Y-dFW2Z7vh-IUo3bYI8knlDk3kqAYsvdoaJgI_L_7p1VsqJpHL0DBFrhB_O-yuWu_nAcA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:56 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:56 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.5	51015	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	1822	OUT	GET /pagead/interaction/?ai=CKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=rZ-VKM24ENg&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkG&label=window_focus&gqid=GzKlZb6BJ9u0oPMPqPeFuAw&qqid=CPrY2f6-34MDFY-80QQdIyMF0A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:56 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.5	51016	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:55 UTC	894	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACgaV4n6JrAwN5bq-WAAAAAAA&expiration=1705411493&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmRovthUn9ad--FF3COqSWNtOau0e11oyFP4n2OT66zCHvYuLKeOikdgz_u_toRs8XLkEZduoXImTbtfgrVsWpFt0yiN9_OGKxY HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:56 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:56 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.5	51019	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:56 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:24:56 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:24:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:24:56 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.5	51032	157.240.229.1	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:57 UTC	404	OUT	GET /zh_CN/all.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:57 UTC	1760	IN	HTTP/1.1 302 Found Vary: Accept-Encoding Location: https://www.facebook.net/login/?next=https%3A%2F%2Fconnect.facebook.net%2Fzh_CN%2Fall.js reporting-endpoints: content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: autoplay=(), clipboard-read=(), clipboard-write=(), display-capture=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=() permissions-policy: accelerometer=(), ambient-light-sensor=(), bluetooth=(), camera=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=() cross-origin-opener-policy: same-origin-allow-popups X-Content-Type-Options: nosniff X-XSS-Protection: 0 X-Frame-Options: DENY origin-agent-cluster: ?0 Strict-Transport-Security: max-age=31536000; preload; includeSubDomains Content-Type: text/html; charset="utf-8" X-FB-Debug: cm/VovyJZyMD7fFc0FFyAdvN9N/mBcB+GRipibxVJIiRqEWzk3SVGjQRRPMNLvBu0oefbE33MR/wR5z12xVVqg== Date: Mon, 15 Jan 2024 13:24:57 GMT Alt-Svc: h3=":443"; ma=86400 Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.5	51033	216.239.36.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:57 UTC	1590	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325096141&_gaz=1&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EA&_s=1&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=page_view&_ee=1&tfd=1025 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:58 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:24:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.5	51034	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:57 UTC	2339	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&adk=1812271804&adf=3025194257&lmt=1705325096&plat=2%3A16777216%2C3%3A16%2C4%3A16%2C9%3A134250504%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&pra=5&wgl=1&easpi=0&asro=0&aslmt=0.4&asamt=-1&asedf=0&asefa=1&aseiel=1~2~4~6&aslcwct=150&asacwct=25&itsi=0&dt=1705325096593&bpp=16&bdt=559&idt=111&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&nras=1&correlator=5149972078852&frm=20&pv=2&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=150 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:58 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:58 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:58 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 5c 78 33 64 20 5c 78 32 37 72 32 30 32 34 30 31 30 39 5c 78 32 37 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 5c 78 33 64 5b 5d 3b 5c 78 33 63 2f 73 63 Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml\x3e\x3chead\x3e\x3cscript\x3evar jscVersion \x3d \x27r20240109\x27;\x3c/script\x3e\x3cscript\x3evar google_casm\x3d[];\x3c/sc
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 33 65 5c 78 33 63 2f 68 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 74 6f 70 4d 61 72 67 69 6e 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 77 69 64 74 68 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 20 6d 61 72 67 69 6e 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 67 6f 6f 67 6c 65 5f 73 63 61 6c 69 6e 67 5f 64 69 76 5c 78 32 32 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 5c 78 33 65 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 5c 78 33 64 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 5c 78 33 63 2f 73 63 72 69 70 74 5c 78 33 65 5c 78 33 63 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 5c 78 33 64 5c Data Ascii: 3e\x3c/head\x3e\x3cbody leftMargin\x3d\x220\x22 topMargin\x3d\x220\x22 marginwidth\x3d\x220\x22 marginheight\x3d\x220\x22\x3e\x3cdiv id\x3d\x22google_scaling_div\x22\x3e\x3cscript\x3ewindow.dicnf \x3d {ebrpfa: true,};\x3c/script\x3e\x3cscript data-jc\x3d\
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 69 75 6d 5c 78 32 32 29 3a 28 77 28 5c 78 32 32 43 68 72 6f 6d 65 5c 78 32 32 29 7c 7c 77 28 5c 78 32 32 43 72 69 4f 53 5c 78 32 32 29 29 5c 78 32 36 5c 78 32 36 21 28 78 28 29 3f 30 3a 77 28 5c 78 32 32 45 64 67 65 5c 78 32 32 29 29 7c 7c 77 28 5c 78 32 32 53 69 6c 6b 5c 78 32 32 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 69 61 5b 5c 78 32 32 20 5c 78 32 32 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 69 61 5b 5c 78 32 32 20 5c 78 32 32 5d 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 21 77 28 5c 78 32 32 41 6e 64 72 6f 69 64 5c 78 32 32 29 7c 7c 68 61 28 29 3b 68 61 28 29 3b 77 28 5c 78 32 32 53 61 66 61 72 69 5c 78 32 32 29 5c 78 32 36 5c 78 32 36 28 68 61 28 29 7c 7c 28 78 28 29 3f 30 3a 77 28 5c 78 32 32 43 6f 61 73 74 5c 78 32 32 29 29 Data Ascii: ium\x22):(w(\x22Chrome\x22)\|\|w(\x22CriOS\x22))\x26\x26!(x()?0:w(\x22Edge\x22))\|\|w(\x22Silk\x22)};function ia(a){ia[\x22 \x22](a);return a}ia[\x22 \x22]\x3dfunction(){};!w(\x22Android\x22)\|\|ha();ha();w(\x22Safari\x22)\x26\x26(ha()\|\|(x()?0:w(\x22Coast\x22))
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 78 61 29 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 29 7b 69 66 28 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 5c 78 33 64 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 21 5c 78 33 64 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 5c 78 32 32 61 72 72 61 79 5c 78 32 32 3a 62 3a 5c 78 32 32 6e 75 6c 6c 5c 78 32 32 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 42 61 3b 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 44 Data Ascii: Object.freeze(new xa);function Aa(a){if(\x22boolean\x22!\x3d\x3dtypeof a){var b\x3dtypeof a;throw Error(`Expected boolean but got ${\x22object\x22!\x3db?b:a?Array.isArray(a)?\x22array\x22:b:\x22null\x22}: ${a}`);}return a};let Ba;function Ca(a,b){return D
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 6a 3b 6c 65 74 20 65 5c 78 33 64 64 5b 41 5d 3b 69 66 28 65 5c 78 32 36 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 48 61 28 64 2c 65 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 5c 78 33 64 6f 61 28 62 29 3b 69 66 28 63 5c 78 33 65 5c 78 33 64 65 29 7b 6c 65 74 20 66 2c 67 5c 78 33 64 62 3b 69 66 28 62 5c 78 32 36 32 35 36 29 66 5c 78 33 64 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 5c 78 33 64 5c 78 33 64 64 29 72 65 74 75 72 6e 3b 66 5c 78 33 64 61 5b 65 2b 28 2b 21 21 28 62 5c 78 32 36 35 31 32 29 2d 31 29 5d 5c 78 33 64 7b 7d 3b 67 7c Data Ascii: ;function G(a,b,c){const d\x3da.j;let e\x3dd[A];if(e\x262)throw Error();Ha(d,e,b,c);return a}function Ha(a,b,c,d){const e\x3doa(b);if(c\x3e\x3de){let f,g\x3db;if(b\x26256)f\x3da[a.length-1];else{if(null\x3d\x3dd)return;f\x3da[e+(+!!(b\x26512)-1)]\x3d{};g\|
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 4a 61 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 78 33 64 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 42 3b 76 61 72 20 65 5c 78 33 64 28 63 3f 61 2e 6a 3a 62 29 5b 41 5d 2c 66 5c 78 33 64 6f 61 28 65 29 2c 67 5c 78 33 64 21 31 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 74 61 29 7b 69 66 28 21 63 29 7b 62 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 29 3b 76 61 72 20 6b 3b 69 66 28 62 2e 6c 65 6e 67 74 68 5c 78 32 36 5c 78 32 36 42 28 6b 5c 78 33 64 62 5b 62 2e 6c 65 6e 67 74 68 2d 31 5d 29 29 66 6f 72 28 67 5c 78 33 64 30 3b 67 5c 78 33 63 64 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 69 66 28 64 5b 67 5d 5c 78 33 65 5c 78 33 64 66 29 7b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 5b 62 2e 6c 65 6e 67 74 68 2d Data Ascii: Ja(a,b,c){const d\x3da.constructor.B;var e\x3d(c?a.j:b)[A],f\x3doa(e),g\x3d!1;if(d\x26\x26ta){if(!c){b\x3dArray.prototype.slice.call(b);var k;if(b.length\x26\x26B(k\x3db[b.length-1]))for(g\x3d0;g\x3cd.length;g++)if(d[g]\x3e\x3df){Object.assign(b[b.length-
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 5c 78 33 64 46 3b 67 5c 78 32 36 5c 78 32 36 28 62 2e 6c 65 6e 67 74 68 5c 78 33 64 68 29 3b 74 5c 78 32 36 5c 78 32 36 62 2e 70 75 73 68 28 74 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 4b 61 5c 78 33 64 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 49 7b 7d 3b 76 61 72 20 4a 5c 78 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 5c 78 33 64 21 31 29 7b 74 68 69 73 2e 6b 65 79 5c 78 33 64 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 5c 78 33 64 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 5c 78 33 64 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 7d 7d 3b 76 61 72 20 4c 61 5c 78 33 64 6e 65 77 20 4a 28 5c 78 32 32 31 30 30 30 30 30 5c 78 32 32 29 2c 4d 61 5c 78 33 64 6e 65 77 20 4a 28 5c 78 32 32 34 35 33 36 38 32 35 39 Data Ascii: \x3dF;g\x26\x26(b.length\x3dh);t\x26\x26b.push(t);return b};var Ka\x3dclass extends I{};var J\x3dclass{constructor(a,b\x3d!1){this.key\x3da;this.defaultValue\x3db;this.valueType\x3d\x22boolean\x22}};var La\x3dnew J(\x22100000\x22),Ma\x3dnew J(\x2245368259
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 33 64 66 7c 7c 33 35 5c 78 33 64 5c 78 33 64 66 29 72 65 74 75 72 6e 20 62 3b 62 2b 5c 78 33 64 65 2b 31 7d 72 65 74 75 72 6e 2d 31 7d 76 61 72 20 55 61 5c 78 33 64 2f 23 7c 24 2f 2c 56 61 5c 78 33 64 2f 5b 3f 5c 78 32 36 5d 28 24 7c 23 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 6c 65 74 20 62 5c 78 33 64 71 2c 63 5c 78 33 64 30 3b 66 6f 72 28 3b 62 5c 78 32 36 5c 78 32 36 34 30 5c 78 33 65 63 2b 2b 5c 78 32 36 5c 78 32 36 21 61 28 62 29 3b 29 61 3a 7b 74 72 79 7b 63 6f 6e 73 74 20 64 5c 78 33 64 62 2e 70 61 72 65 6e 74 3b 69 66 28 64 5c 78 32 36 5c 78 32 36 64 21 5c 78 33 64 62 29 7b 62 5c 78 33 64 64 3b 62 72 65 61 6b 20 61 7d 7d 63 61 74 63 68 7b 7d 62 5c 78 33 64 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 29 7b 69 66 28 21 67 6c Data Ascii: 3df\|\|35\x3d\x3df)return b;b+\x3de+1}return-1}var Ua\x3d/#\|$/,Va\x3d/[?\x26]($\|#)/;function Wa(a){let b\x3dq,c\x3d0;for(;b\x26\x2640\x3ec++\x26\x26!a(b);)a:{try{const d\x3db.parent;if(d\x26\x26d!\x3db){b\x3dd;break a}}catch{}b\x3dnull}}function Xa(){if(!gl
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 68 2c 67 2c 76 6f 69 64 20 30 29 3b 30 5c 78 33 63 5c 78 33 64 6c 5c 78 32 36 5c 78 32 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 68 2c 6c 2c 31 29 7d 52 61 28 67 2c 5c 78 32 32 6c 6f 61 64 5c 78 32 32 2c 6b 29 3b 52 61 28 67 2c 5c 78 32 32 65 72 72 6f 72 5c 78 32 32 2c 6b 29 7d 3b 4e 28 67 2c 5c 78 32 32 6c 6f 61 64 5c 78 32 32 2c 6b 29 3b 4e 28 67 2c 5c 78 32 32 65 72 72 6f 72 5c 78 32 32 2c 6b 29 7d 64 5c 78 32 36 5c 78 32 36 28 67 2e 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 5c 78 33 64 5c 78 32 32 6e 6f 2d 72 65 66 65 72 72 65 72 5c 78 32 32 29 3b 66 5c 78 32 36 5c 78 32 36 28 67 2e 61 74 74 72 69 62 75 74 69 6f 6e 53 72 Data Ascii: Array.prototype.indexOf.call(h,g,void 0);0\x3c\x3dl\x26\x26Array.prototype.splice.call(h,l,1)}Ra(g,\x22load\x22,k);Ra(g,\x22error\x22,k)};N(g,\x22load\x22,k);N(g,\x22error\x22,k)}d\x26\x26(g.referrerPolicy\x3d\x22no-referrer\x22);f\x26\x26(g.attributionSr
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 29 7b 7d 7d 7d 2c 66 62 3b 63 6c 61 73 73 20 6d 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 5c 78 33 64 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 5c 78 33 64 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 5c 78 33 64 62 2e 6d 65 73 73 61 67 65 7c 7c 5c 78 32 32 5c 78 32 32 3b 74 68 69 73 2e 69 64 5c 78 33 64 62 2e 69 64 7c 7c 5c 78 32 32 6a 73 65 72 72 6f 72 5c 78 32 32 3b 74 68 69 73 2e 6d 65 74 61 5c 78 33 64 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 6e 62 5c 78 33 64 52 65 67 45 78 70 28 5c 78 32 32 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 5c 78 32 32 Data Ascii: ){}}},fb;class mb{constructor(a,b){this.error\x3da;this.context\x3db.context;this.msg\x3db.message\|\|\x22\x22;this.id\x3db.id\|\|\x22jserror\x22;this.meta\x3d{}}};const nb\x3dRegExp(\x22^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)\x22

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.5	51036	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:57 UTC	2211	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:58 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:58 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:58 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 61 6c 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 48 54 4d 4c 2c 42 4f 44 59 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 23 6d 79 73 2d 77 72 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 Data Ascii: 8000<!DOCTYPE html><html lang=all><head><meta charset="UTF-8"><script>var jscVersion = 'r20240109';</script><script>var google_casm=[];</script><style>HTML,BODY{height:100%;width:100%;margin:0;padding:0;overflow:hidden;}#mys-wrapper{height:100%;width:10
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 33 36 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 31 30 39 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 6e 75 6c 6c 21 3d 3d Data Ascii: n:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:relative;overflow:hidden;z-index:0;}</style><script data-jc="36" data-jc-version="r20240109">(function(){(function(e){function c(){null!==
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 32 38 30 70 78 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 65 2d 30 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 47 6f 6f 67 6c 65 20 53 61 6e 73 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 65 2d 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 32 38 30 70 78 3b 77 69 64 74 68 3a 31 32 30 30 70 78 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 65 2d 32 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f Data Ascii: 280px;}.ns-rd92u-e-0{box-sizing:border-box;font-family:Google Sans;height:100%;width:100%;}.ns-rd92u-e-1{box-sizing:border-box;display:flex;flex-direction:column;height:280px;width:1200px;}.ns-rd92u-e-2{box-sizing:border-box;display:flex;flex-direction:co
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 65 2d 31 34 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 39 2e 32 70 78 3b 6d 61 78 2d 68 65 69 67 68 74 3a 35 30 2e 34 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 Data Ascii: ;width:100%;height:56px;display:flex;flex-direction:row;align-items:center;padding:0 10px;}.ns-rd92u-e-14{box-sizing:border-box;flex-direction:row;width:100%;min-height:39.2px;max-height:50.4px;display:flex;align-items:stretch;justify-content:space-betwee
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 34 32 38 35 66 34 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 38 35 66 34 3b 7d 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 32 38 35 66 34 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 6d 6f 6e 6f 5f 74 65 78 74 5f 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 63 6f 6c 6f 72 3a 23 34 32 38 35 66 34 3b 7d 31 30 30 25 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 73 20 68 69 64 65 5f 62 75 74 74 6f 6e 5f 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 7d 20 40 6b 65 79 66 72 61 6d 65 Data Ascii: r:#fff;color:#4285f4;border:1px solid #4285f4;}100%{background-color:#4285f4;color:#fff;border:1px solid #fff;}} @keyframes mono_text_animation{0%{color:#4285f4;}100%{color:#fff;}} @keyframes hide_button_animation{0%{opacity:1;}100%{opacity:0;}} @keyframe
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 7d 2e 6e 73 2d 72 64 39 32 75 2d 6c 2d 62 6c 75 65 2d 73 71 75 61 72 65 20 2e 6e 6f 72 6d 61 6c 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 63 65 30 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 6c 2d 62 6c 75 65 2d 73 71 75 61 72 65 20 2e 6e 6f 72 6d 61 6c 2d 62 75 74 74 6f 6e 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 34 32 38 35 66 34 3b 7d 2e 6e 73 2d 72 64 39 32 75 2d 6c 2d 62 6c 75 65 2d 73 71 75 61 72 65 20 2e 6d 61 70 2d 77 69 74 68 2d 63 74 61 20 2e 6e 6f 72 6d 61 6c 2d 62 75 74 74 6f 6e 7b Data Ascii: portant;animation-delay:0s !important;}}.ns-rd92u-l-blue-square .normal-button{background-color:#fff;box-shadow:none;border:1px solid #dadce0;}.ns-rd92u-l-blue-square .normal-button span{color:#4285f4;}.ns-rd92u-l-blue-square .map-with-cta .normal-button{
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 79 4e 43 41 79 4e 43 49 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 45 79 49 44 4a 44 4f 43 34 78 4d 79 41 79 49 44 55 67 4e 53 34 78 4d 79 41 31 49 44 6c 6a 4d 43 41 31 4c 6a 49 31 49 44 63 67 4d 54 4d 67 4e 79 41 78 4d 33 4d 33 4c 54 63 75 4e 7a 55 67 4e 79 30 78 4d 32 4d 77 4c 54 4d 75 4f 44 63 74 4d 79 34 78 4d 79 30 33 4c 54 63 74 4e 33 70 74 4d 43 41 35 4c 6a 56 6a 4c 54 45 75 4d 7a 67 67 4d 43 30 79 4c 6a 55 74 4d 53 34 78 4d 69 30 79 4c 6a 55 74 4d 69 34 31 63 7a 45 75 4d 54 49 74 4d 69 34 31 49 44 49 75 4e 53 30 79 4c 6a 55 67 4d 69 34 31 49 44 45 75 4d 54 49 67 4d 69 34 31 Data Ascii: z0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCI+PHBhdGggZD0iTTEyIDJDOC4xMyAyIDUgNS4xMyA1IDljMCA1LjI1IDcgMTMgNyAxM3M3LTcuNzUgNy0xM2MwLTMuODctMy4xMy03LTctN3ptMCA5LjVjLTEuMzggMC0yLjUtMS4xMi0yLjUtMi41czEuMTItMi41IDIuNS0yLjUgMi41IDEuMTIgMi41
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 64 33 64 79 35 33 4d 79 35 76 63 6d 63 76 4d 6a 41 77 4d 43 39 7a 64 6d 63 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4f 43 41 30 4f 43 49 2b 50 48 42 68 64 47 67 67 5a 44 30 69 54 54 51 7a 4c 6a 51 78 49 44 49 79 4c 6a 55 35 62 43 30 78 4f 43 30 78 4f 47 4d 74 4c 6a 63 34 4c 53 34 33 4f 43 30 79 4c 6a 41 31 4c 53 34 33 4f 43 30 79 4c 6a 67 79 49 44 42 73 4c 54 45 34 49 44 45 34 59 79 30 75 4e 7a 67 75 4e 7a 67 74 4c 6a 63 34 49 44 49 75 4d 44 55 67 4d 43 41 79 4c 6a 67 7a 62 44 45 34 49 44 45 33 4c 6a 6b 35 64 69 34 77 4d 57 4d 75 4e 7a 67 75 4e 7a 67 67 4d 69 34 77 4e 53 34 33 4f 43 41 79 4c 6a 67 7a 49 44 42 73 4d 54 67 74 4d 54 Data Ascii: l;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCA0OCA0OCI+PHBhdGggZD0iTTQzLjQxIDIyLjU5bC0xOC0xOGMtLjc4LS43OC0yLjA1LS43OC0yLjgyIDBsLTE4IDE4Yy0uNzguNzgtLjc4IDIuMDUgMCAyLjgzbDE4IDE3Ljk5di4wMWMuNzguNzggMi4wNS43OCAyLjgzIDBsMTgtMT
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 68 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 6c 3d 66 2c 6d 3d 30 3b 6d 3c 6b 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 69 66 28 6c 3d 6c 5b 6b 5b 6d 5d 5d 2c 6e 75 6c 6c 3d 3d 6c 29 7b 68 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 68 3d 6c 7d 76 61 72 20 70 3d 68 26 26 68 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 70 3f 70 3a 21 31 3b 76 61 72 20 71 3b 63 6f 6e 73 74 20 74 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 71 3d 74 3f 74 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: cense-Identifier: Apache-2.0 */ var f=this\|\|self;var g,h;a:{for(var k=["CLOSURE_FLAGS"],l=f,m=0;m<k.length;m++)if(l=l[k[m]],null==l){h=null;break a}h=l}var p=h&&h[610401301];g=null!=p?p:!1;var q;const t=f.navigator;q=t?t.userAgentData\|\|null:null;function
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 46 28 22 68 74 74 70 22 29 2c 49 3d 46 28 22 68 74 74 70 73 22 29 2c 4a 3d 46 28 22 66 74 70 22 29 2c 4b 3d 46 28 22 6d 61 69 6c 74 6f 22 29 3b 63 6f 6e 73 74 20 4c 3d 5b 46 28 22 64 61 74 61 22 29 2c 48 2c 49 2c 4b 2c 4a 2c 47 5d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 3d 4c 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 29 72 65 74 75 72 6e 20 61 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 63 29 7b 63 6f 6e 73 74 20 64 3d 62 5b 63 5d 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 26 26 64 2e 6a 28 61 29 29 72 65 74 75 72 6e 20 6e 65 77 20 41 28 61 2c 42 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 3d 4c 29 7b 72 65 74 75 72 6e 20 4d 28 61 2c 62 29 7c 7c 43 7d 3b 76 61 72 20 4f 3d 28 61 2c 62 Data Ascii: F("http"),I=F("https"),J=F("ftp"),K=F("mailto");const L=[F("data"),H,I,K,J,G];function M(a,b=L){if(a instanceof A)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof E&&d.j(a))return new A(a,B)}}function N(a,b=L){return M(a,b)\|\|C};var O=(a,b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.5	51039	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	2223	OUT	GET /pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:58 UTC	599	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:58 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:58 UTC	653	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 31 30 39 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 Data Ascii: 8000<!DOCTYPE html><html lang=en><head><meta charset="UTF-8"><link rel="preload" href="https://www.gstatic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019" as="script"><script>var jscVersion = 'r20240109';</script><script>var
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 76 69 73 69 74 65 64 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 68 6f 76 65 72 2c 2e 6d 79 73 2d 77 72 61 70 70 65 72 20 41 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 7d 5b 64 69 72 3d 72 74 6c 5d 20 2e 66 6c 69 70 2d 6f 6e 2d 72 74 6c 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 2c 31 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 63 65 6e 74 65 72 3b 7d 23 6d 79 73 2d 63 6f 6e 74 65 6e 74 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: display:none;}.mys-wrapper A,.mys-wrapper A:visited,.mys-wrapper A:hover,.mys-wrapper A:active{color:inherit;cursor:pointer;text-decoration:inherit;}[dir=rtl] .flip-on-rtl{transform:scale(-1,1);transform-origin:center;}#mys-content{flex-shrink:0;position:
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 69 63 2e 63 6f 6d 2f 6d 79 73 69 64 69 61 2f 34 62 30 65 66 39 64 66 61 38 33 35 32 35 65 30 36 30 37 66 34 32 31 31 39 63 30 33 34 64 32 33 2e 6a 73 3f 74 61 67 3d 63 6c 69 65 6e 74 5f 66 61 73 74 5f 65 6e 67 69 6e 65 5f 32 30 31 39 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 70 63 6a 6c 77 22 20 78 2d 70 68 61 73 65 3d 22 61 73 73 65 6d 62 6c 65 22 3e 2e 6e 73 2d 70 63 6a 6c 77 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 37 35 30 70 78 3b Data Ascii: ic.com/mysidia/4b0ef9dfa83525e0607f42119c034d23.js?tag=client_fast_engine_2019"></script><style data-nl="stacked_layout" data-ns="ns-pcjlw" x-phase="assemble">.ns-pcjlw-l-stacked_layout{opacity:.01;position:absolute;top:0;left:0;display:block;width:750px;
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 65 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 39 35 2e 30 33 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 32 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 33 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 35 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 36 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 38 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 39 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 31 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 Data Ascii: ex;min-height:95.03px;width:100%;position:relative;}.ns-pcjlw-e-5,.ns-pcjlw-e-20,.ns-pcjlw-e-35,.ns-pcjlw-e-50,.ns-pcjlw-e-66,.ns-pcjlw-e-81,.ns-pcjlw-e-96,.ns-pcjlw-e-111{box-sizing:border-box;display:flex;flex-direction:column;flex:1 1 auto;justify-cont
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 38 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 7d 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 32 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 34 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 35 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 37 32 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 38 37 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 32 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 37 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 Data Ascii: ,.ns-pcjlw-e-85,.ns-pcjlw-e-100,.ns-pcjlw-e-115{font-weight:700;line-height:1.2;min-height:1.3em;text-overflow:ellipsis;}.ns-pcjlw-e-11,.ns-pcjlw-e-26,.ns-pcjlw-e-41,.ns-pcjlw-e-56,.ns-pcjlw-e-72,.ns-pcjlw-e-87,.ns-pcjlw-e-102,.ns-pcjlw-e-117{box-sizing:b
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 76 2d 30 20 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 76 2d 30 20 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 6e 6c 3d 22 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 22 20 64 61 74 61 2d 6e 73 3d 22 6e 73 2d 70 63 6a 6c 77 22 20 78 2d 70 68 61 73 65 3d 22 64 65 63 6f 72 61 74 65 22 3e 2e 6e 73 2d 70 63 6a 6c 77 2d 6c 2d 73 74 61 63 6b 65 64 5f 6c 61 79 6f 75 74 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7d 2e 74 69 74 6c 65 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: 5,.ns-pcjlw-v-0 .ns-pcjlw-e-100,.ns-pcjlw-v-0 .ns-pcjlw-e-115{font-size:18px;display:block;}</style><style data-nl="stacked_layout" data-ns="ns-pcjlw" x-phase="decorate">.ns-pcjlw-l-stacked_layout{opacity:1;position:relative;}.title:hover{text-decoration:
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 65 2d 37 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 37 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 37 37 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 38 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 39 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 39 32 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 35 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 30 37 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 32 30 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 32 32 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 31 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 32 36 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 34 31 2c 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 35 36 Data Ascii: e-71,.ns-pcjlw-e-75,.ns-pcjlw-e-77,.ns-pcjlw-e-86,.ns-pcjlw-e-90,.ns-pcjlw-e-92,.ns-pcjlw-e-101,.ns-pcjlw-e-105,.ns-pcjlw-e-107,.ns-pcjlw-e-116,.ns-pcjlw-e-120,.ns-pcjlw-e-122{white-space:nowrap;}.ns-pcjlw-e-11,.ns-pcjlw-e-26,.ns-pcjlw-e-41,.ns-pcjlw-e-56
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 31 37 39 39 39 35 36 35 34 38 37 34 35 37 35 30 32 36 39 33 2f 31 34 37 36 33 30 30 34 36 35 38 31 31 37 37 38 39 35 33 37 29 3b 7d 2e 6e 73 2d 70 63 6a 6c 77 2d 65 2d 36 35 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 63 63 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 Data Ascii: -repeat:no-repeat;background-size:contain;background-position:center;cursor:pointer;background-image:url(https://tpc.googlesyndication.com/simgad/17999565487457502693/14763004658117789537);}.ns-pcjlw-e-65{background-color:#cccccc;background-repeat:no-repe
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 2c 62 29 7b 61 3a 7b 76 61 72 20 63 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 64 3d 6d 2c 65 3d 30 3b 65 3c 63 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 64 3d 64 5b 63 5b 65 5d 5d 2c 6e 75 6c 6c 3d 3d 64 29 7b 63 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 63 3d 64 7d 61 3d 63 26 26 63 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 2c Data Ascii: Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],null==d){c=null;break a}c=d}a=c&&c[a];return null!=a?a:b}function ba(a,
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 2e 73 72 63 3d 6e 75 6c 6c 3b 61 2e 6f 3d 6e 75 6c 6c 7d 3b 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 29 7b 6c 65 74 20 62 3d 30 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 62 2b 2b 7d 63 6f 6e 73 74 20 6b 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 6c 65 74 20 63 2c 64 3b 66 6f 72 28 6c 65 74 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d Data Ascii: .src=null;a.o=null};function ja(a){let b=0;for(const c in a)b++}const ka="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");function la(a,b){let c,d;for(let e=1;e<arguments.length;e++){d=arguments[e]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.5	51040	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	1245	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=alrjcjeq8qxb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZX9sdzDNKPq2YU-vWNZLZexiYdbOPhW7yjR-CQ5K03k3wgp3ztZmnhdaGQCVmGhZjnCX6jTP-PlZ26lllo; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:58 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:58 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-3H1udm7jrBJZUjXPvMd44g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:58 UTC	361	IN	Data Raw: 32 61 36 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2a67<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 Data Ascii: boto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF,
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 Data Ascii: font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-sty
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a Data Ascii: to/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d Data Ascii: * vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 6d 37 6a 72 42 4a 5a 55 6a 58 50 76 4d 64 34 34 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 27 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 33 48 31 75 64 Data Ascii: m7jrBJZUjXPvMd44g" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com/recaptcha/api2/';</script><script type="text/javascript" src="https://www.gstatic.com/recaptcha/releases/Ya-Cd6PbRI5ktAHEhm9JuKEu/recaptcha__en.js" nonce="3H1ud
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 76 62 35 59 71 5a 54 37 2d 30 77 6c 73 5a 47 7a 35 4b 37 35 6d 78 52 42 36 6c 53 41 66 72 54 30 46 36 62 33 72 51 36 6f 6c 48 45 61 35 4d 65 42 59 70 32 62 6e 48 49 43 6c 39 6e 6a 48 72 77 6a 79 49 4b 4c 6b 64 41 5a 42 32 6e 47 7a 34 4e 57 44 4f 61 50 65 52 58 68 66 4e 41 37 4e 54 39 76 4a 39 4f 34 4e 64 50 35 30 76 6c 69 42 2d 69 50 6e 6e 51 61 59 64 77 46 38 37 58 6c 45 69 4f 48 70 66 35 77 39 36 73 34 79 75 58 64 68 76 79 50 38 48 78 58 45 39 35 61 35 38 34 35 43 34 77 57 78 73 4b 4d 53 4c 58 65 39 39 4f 64 67 47 71 38 36 68 58 4a 75 64 55 39 4b 6a 31 43 37 50 5f 54 44 39 70 45 55 63 42 66 64 76 30 49 65 67 39 6e 32 4d 31 77 36 45 55 6d 67 33 51 34 64 69 70 66 38 48 64 2d 55 57 69 75 34 65 49 47 43 42 65 61 69 44 41 4b 51 34 64 34 62 6f 62 7a 66 37 4d Data Ascii: vb5YqZT7-0wlsZGz5K75mxRB6lSAfrT0F6b3rQ6olHEa5MeBYp2bnHICl9njHrwjyIKLkdAZB2nGz4NWDOaPeRXhfNA7NT9vJ9O4NdP50vliB-iPnnQaYdwF87XlEiOHpf5w96s4yuXdhvyP8HxXE95a5845C4wWxsKMSLXe99OdgGq86hXJudU9Kj1C7P_TD9pEUcBfdv0Ieg9n2M1w6EUmg3Q4dipf8Hd-UWiu4eIGCBeaiDAKQ4d4bobzf7M
2024-01-15 13:24:58 UTC	1252	IN	Data Raw: 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 54 56 6c 35 62 6e 6f 35 62 55 56 45 55 6e 42 71 62 6e 46 53 4f 56 59 78 63 46 56 50 52 33 41 79 51 6d 52 76 56 53 39 61 4d 79 74 50 4e 6b 39 53 54 56 4e 58 61 46 70 59 56 45 74 61 62 47 78 6a 62 48 4e 51 55 56 4e 6d 64 45 4a 47 64 31 68 6b 56 47 68 6b 65 54 6c 34 57 57 6c 58 61 48 6f 34 53 6d 31 31 52 6d 31 6e 52 6c 56 4f 55 6e 68 7a 57 57 74 31 51 6e 4e 68 5a 6b 4a 55 4d 47 78 6e 56 53 39 50 61 47 31 69 5a 6a 51 78 4e 47 Data Ascii: x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz\x22,\x22\x22,\x22TVl5bno5bUVEUnBqbnFSOVYxcFVPR3AyQmRvVS9aMytPNk9STVNXaFpYVEtabGxjbHNQUVNmdEJGd1hkVGhkeTl4WWlXaHo4Sm11Rm1nRlVOUnhzWWt1QnNhZkJUMGxnVS9PaG1iZjQxNG
2024-01-15 13:24:58 UTC	486	IN	Data Raw: 6f 57 6e 64 48 64 54 46 72 53 46 5a 73 62 48 70 46 54 45 68 36 51 33 68 77 53 6e 4a 36 57 45 68 71 55 47 56 43 4f 45 30 77 5a 7a 51 77 54 6b 46 4e 51 55 78 52 57 54 42 57 4f 55 70 73 63 47 5a 34 62 47 4a 36 53 6b 38 32 62 31 42 79 62 47 70 36 5a 6b 4e 32 5a 30 46 71 5a 33 55 79 56 44 68 4a 52 44 4e 6d 57 6e 5a 30 5a 31 70 75 4b 32 4d 32 53 79 39 7a 64 55 74 4b 63 7a 46 45 59 33 4a 6b 55 31 56 6d 53 30 68 30 52 53 73 7a 63 6b 6c 50 62 6a 6c 4a 52 48 55 76 4c 31 41 79 65 56 64 56 53 58 5a 6c 54 47 52 4c 61 30 35 6f 5a 55 56 48 59 56 56 55 64 57 56 56 5a 31 6c 76 64 55 52 31 64 6c 49 76 65 56 64 6f 51 6e 63 30 4f 54 6b 76 52 48 68 4c 4d 46 56 61 5a 55 35 49 64 54 52 47 61 6a 4e 61 62 6c 6c 5a 61 48 41 7a 56 55 78 31 51 6c 41 31 54 33 4e 56 52 56 52 50 59 58 Data Ascii: oWndHdTFrSFZsbHpFTEh6Q3hwSnJ6WEhqUGVCOE0wZzQwTkFNQUxRWTBWOUpscGZ4bGJ6Sk82b1BybGp6ZkN2Z0FqZ3UyVDhJRDNmWnZ0Z1puK2M2Sy9zdUtKczFEY3JkU1VmS0h0RSszcklPbjlJRHUvL1AyeVdVSXZlTGRLa05oZUVHYVVUdWVVZ1lvdUR1dlIveVdoQnc0OTkvRHhLMFVaZU5IdTRGajNabllZaHAzVUx1QlA1T3NVRVRPYX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.5	51038	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	591	OUT	OPTIONS /wp-json/wordpress-popular-posts/v2/widget?is_single=0 HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-requested-with,x-wp-nonce Origin: http://mylovelybluesky.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:24:59 UTC	1035	IN	HTTP/1.1 200 OK Connection: close x-powered-by: PHP/8.0.30 x-dns-prefetch-control: on content-type: application/json; charset=UTF-8 x-robots-tag: noindex link: <https://mylovelybluesky.com/wp-json/>; rel="https://api.w.org/" x-content-type-options: nosniff access-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link access-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type allow: POST x-litespeed-tag: 8bb_HTTP.200 access-control-allow-origin: http://mylovelybluesky.com access-control-allow-methods: OPTIONS, GET, POST, PUT, PATCH, DELETE access-control-allow-credentials: true vary: Origin,User-Agent x-litespeed-cache-control: no-cache content-length: 333 date: Mon, 15 Jan 2024 13:24:59 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:24:59 UTC	333	IN	Data Raw: 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 22 77 6f 72 64 70 72 65 73 73 2d 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 5c 2f 76 32 22 2c 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 6d 65 74 68 6f 64 73 22 3a 5b 22 50 4f 53 54 22 5d 2c 22 61 72 67 73 22 3a 7b 22 69 73 5f 73 69 6e 67 6c 65 22 3a 7b 22 74 79 70 65 22 3a 22 69 6e 74 65 67 65 72 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 22 6c 61 6e 67 22 3a 7b 22 74 79 70 65 22 3a 22 73 74 72 69 6e 67 22 2c 22 64 65 66 61 75 6c 74 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 7d 7d 5d 2c 22 5f 6c 69 6e 6b 73 22 3a 7b 22 73 65 6c 66 22 3a 5b 7b 22 68 72 65 66 22 3a 22 68 74 Data Ascii: {"namespace":"wordpress-popular-posts\/v2","methods":["POST"],"endpoints":[{"methods":["POST"],"args":{"is_single":{"type":"integer","default":null,"required":false},"lang":{"type":"string","default":null,"required":false}}}],"_links":{"self":[{"href":"ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.5	51042	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	3082	OUT	GET /pagead/interaction/?ai=ChN0oGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOQBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo46rfCOrduH4E-VZEP4hEw5fmQWQjwn-xNKztJParSkUnX97173rEvsRwATfrJGZgwKIBfXs34gHoAY3gAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDsQlPWCIGEl69iYAKAZgLAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA6oNAlVTyA0B2BMNiBQE0BUB-BYBgBcBshgFGDciAQA&sigh=gillTeOFMiI&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLx&label=window_focus&gqid=GzKlZf3EJ9bNoPMPrp-HiA8&qqid=CJec2v6-34MDFcKh0QQdavUDXQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.5	51044	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	3127	OUT	GET /pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.5	51043	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:58 UTC	3505	OUT	GET /pagead/interaction/?ai=CLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=SX-h4_0Wx8k&cid=CAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbw&label=window_focus&gqid=HjKlZfWeLfqKoPMP-fqM8Aw&qqid=CJmXl4C_34MDFZyO0QQd6ugE1A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.5	51045	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:59 UTC	3515	OUT	GET /pagead/interaction/?ai=Cs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=x-4FA4XAVbA&cid=CAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlm&label=window_focus&gqid=HjKlZdLxLarJoPMPxeWR8A0&qqid=CILYl4C_34MDFf6DdwEdhhoGOQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.5	51048	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:59 UTC	852	OUT	GET /i/ca-pub-6163292317333011?ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:59 UTC	1656	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:24:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pxO103AeW5N244tSXcjtnA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 37 63 36 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 7c65if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 5f 2e 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=_.ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4d 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4d 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 Data Ascii: this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function g(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:g(this.M),reject:g(this.o)}};e.prototype.M=function(g){if(g===this)this.o(new TypeErr
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 6c 28 77 28 7a 29 29 7d 63 61 74 63 68 28 47 29 7b 6e 28 47 29 7d 7d 3a 79 7d 76 61 72 20 6c 2c 6e 2c 72 3d 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 77 2c 79 29 7b 6c 3d 77 3b 6e 3d 79 7d 29 3b 74 68 69 73 2e 6b 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 67 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 69 29 3b 62 72 65 61 6b 3b 64 65 66 61 Data Ascii: l(w(z))}catch(G){n(G)}}:y}var l,n,r=new e(function(w,y){l=w;n=y});this.kb(k(g,l),k(h,n));return r};e.prototype.catch=function(g){return this.then(void 0,g)};e.prototype.kb=function(g,h){function k(){switch(l.g){case 1:g(l.i);break;case 2:h(l.i);break;defa
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 69 6f 6e 20 63 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 69 66 28 21 71 61 28 6b 2c 66 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 62 3b 63 61 28 6b 2c 66 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6c 28 6e 29 7d 29 7d 69 66 Data Ascii: ion c(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===l}function d(k){if(!qa(k,f)){var l=new b;ca(k,f,{value:l})}}function e(k){var l=Object[k];l&&(Object[k]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return l(n)})}if
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 30 5d 2c 6b 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 55 3f 6c 2e 55 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 55 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 6d 61 3a 74 68 69 73 5b 31 5d 2e 6d 61 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 55 29 2c 74 68 69 73 5b 31 5d 2e 6d 61 2e 6e 65 78 74 3d 6c 2e 55 2c 74 68 69 73 5b 31 5d 2e 6d 61 3d 6c 2e 55 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: 0],k[1])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.U?l.U.value=k:(l.U={next:this[1],ma:this[1].ma,head:this[1],key:h,value:k},l.list.push(l.U),this[1].ma.next=l.U,this[1].ma=l.U,this.size++);return thi
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 7c 2d 49 6e 66 69 6e 69 74 79 3d 3d 3d 62 7c 7c 30 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 76 61 72 20 63 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 61 62 73 28 62 29 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 29 3b 70 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 71 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 0a 70 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 Data Ascii: \|-Infinity===b\|\|0===b)return b;var c=Math.floor(Math.abs(b));return 0>b?-c:c}});p("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)qa(b,d)&&c.push(b[d]);return c}});p("Object.is",function(a){return a?a:function(b,c){return b===c?0
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 29 3b 70 28 22 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 21 3d 3d 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 26 26 49 6e 66 69 6e 69 74 79 21 3d 3d 62 Data Ascii: pe[Symbol.iterator]=b.prototype.values;b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b});p("Number.isFinite",function(a){return a?a:function(b){return"number"!==typeof b?!1:!isNaN(b)&&Infinity!==b
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 6c 3d 3d 64 7c 7c 64 3e 65 29 64 3d 65 3b 64 3d 4e 75 6d 62 65 72 28 64 29 3b 30 3e 64 26 26 28 64 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 65 2b 64 29 29 3b 66 6f 72 28 63 3d 4e 75 6d 62 65 72 28 63 7c 7c 30 29 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 62 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 29 3b 76 61 72 20 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7d 3b 70 28 22 49 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 70 28 22 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 Data Ascii: l==d\|\|d>e)d=e;d=Number(d);0>d&&(d=Math.max(0,e+d));for(c=Number(c\|\|0);c<d;c++)this[c]=b;return this}});var ta=function(a){return a?a:Array.prototype.fill};p("Int8Array.prototype.fill",ta);p("Uint8Array.prototype.fill",ta);p("Uint8ClampedArray.prototype.fi
2024-01-15 13:24:59 UTC	1656	IN	Data Raw: 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 44 61 2c 48 61 2c 4d 61 2c 51 61 2c 54 61 2c 56 61 2c 57 61 2c 58 61 2c 24 61 2c 6d 62 2c 73 62 2c 72 62 2c 77 62 2c 79 62 2c 78 62 2c 7a 62 2c 41 62 2c 45 62 2c 57 62 2c 5a 62 2c 24 62 2c 62 63 2c 65 63 2c 63 63 2c 64 63 2c 66 63 2c 67 63 2c 6a 63 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 74 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 Data Ascii: 9*Math.random()>>>0);}catch(e){_._DumpException(e)}try{var Da,Ha,Ma,Qa,Ta,Va,Wa,Xa,$a,mb,sb,rb,wb,yb,xb,zb,Ab,Eb,Wb,Zb,$b,bc,ec,cc,dc,fc,gc,jc;_.ya=function(a){_.t.setTimeout(function(){throw a;},0)};_.za=function(){var a=_.t.navigator;return a&&(a=a.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.5	51050	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:59 UTC	3369	OUT	GET /pagead/interaction/?ai=CJjvuHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNoBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevw3DOzP8v7adOOX75rlKAEaZXMaYfZtpKR8rUc0m3QT-_3mEZpPf_b3iABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwP6CwIIAYAMAdAVAYAXAQ&sigh=HQqXEYrfVDI&cid=CAQSOwAvHhf_9NAQ_m9izwKV3fyEZK_UF5pBxIMbh5zIjxlr6KtNXPfWSMNeYtvpXYfYrd37MBi7MebbZTRj&label=window_focus&gqid=HjKlZYrxNs2YoPMP8ve82Ao&qqid=CLH1oIC_34MDFUy70QQd334NUA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.5	51052	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:59 UTC	1822	OUT	GET /pagead/interaction/?ai=CKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=rZ-VKM24ENg&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkG&label=window_focus&gqid=GzKlZb6BJ9u0oPMPqPeFuAw&qqid=CPrY2f6-34MDFY-80QQdIyMF0A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:24:59 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:24:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.5	51055	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:24:59 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaQUEnpSyFsqHERGcuBimu3ySZh27lillfmGuGWY-wPw9dFchYauIExVDm19l24ogm9o81tq_iemEjcuHN2pv-Y-Kf06WA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:24:59 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:24:59 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.5	51058	52.2.60.235	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	933	OUT	GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmTb8M6WaBdVD-tiaORcKUKHq8ie2PBxXFkO-m-1AEVtWcxzqhi_F34lwh_hNBlOsJS5mKNPfzcZPb5MaEY9f8XCOJLBLaeyuA HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=9PBZdF5b1RpmXb5; matchfreewheel=5
2024-01-15 13:25:00 UTC	878	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:24:59 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmTb8M6WaBdVD-tiaORcKUKHq8ie2PBxXFkO-m-1AEVtWcxzqhi_F34lwh_hNBlOsJS5mKNPfzcZPb5MaEY9f8XCOJLBLaeyuA Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-0ee200914c1d99f6e@us-east-1d@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=9PBZdF5b1RpmXb5; Domain=.w55c.net; Expires=Sat, 15-Feb-2025 13:25:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=5; Domain=.w55c.net; Expires=Wed, 14-Feb-2024 13:25:00 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.5	51062	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	3193	OUT	GET /pagead/interaction/?ai=CFf0PKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEurptLX5ARABIO34qSBgyYagiqSk4BGgAZLM7PECyAEJqAMByAPLBKoE9wFP0AUrt2pKV0TQz4meDbq3gqBTmzB0Czgtei0xhNc1p3gbN616RxE3mZdqnO6i0hbKQxIHGHjJiWm7SIWbPHgMA3GgMLsX1GnzcfIYdOCmWEfAQWyjlh6R_Kol6qQxyTHTZs3cdvQFo7z32Oml3hTqXimBA6EquJibHrQI72m-X4IQuMj1XOheSWhb7w11VocQw8VwjSiFcqQlYrFyp1M5caCR98ALmGgSogNc5aomoz-SjawzO4easQUwtXjRVqNK1lFev8haX5aAxHqI39Kg2sHesGqbv2KlLD2gqGYemTFYIqqsLjDetby_fipIeMiZdAFz63QswAT96_78iwSIBYWZvuNGoAYugAfWs5OOAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqXz4W_34MDsQknip_hVqkMaIAKAZgLAcgLAeALAYAMAaIMCCoGCgSsurEC2gwQCgoQ4JqcyLa39rh7EgIBA6oNAlVTyA0BohNWCjkIA0ABUggKBhIECAEQAWi6lLOORHIjEiEgAigBOAJAhZm-40ZYAWj-__________8BcAKAAQGYAQMaGQoXY2EtcHViLTYxNjMyOTIzMTczMzMwMTG4E4gE2BMK0BUBmBYB-BYBgBcB&sigh=C6ADlGvm9oo&cid=CAQSOwAvHhf_Oc0BdNyVM9Ng2e6hqlFcLj8n6p81Wx-81tbul3xuivjxRRb-15pxi-Zw86ILoR6uONeRjYVH&label=window_focus&gqid=KjKlZYqnCb2VoPMP8LeXwA8&qqid=CIHKz4W_34MDFUqh0QQdz58Brw&bgload=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:00 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.5	51067	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	3189	OUT	GET /pagead/interaction/?ai=CFf0PKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEurptLX5ARABIO34qSBgyYagiqSk4BGgAZLM7PECyAEJqAMByAPLBKoE9wFP0AUrt2pKV0TQz4meDbq3gqBTmzB0Czgtei0xhNc1p3gbN616RxE3mZdqnO6i0hbKQxIHGHjJiWm7SIWbPHgMA3GgMLsX1GnzcfIYdOCmWEfAQWyjlh6R_Kol6qQxyTHTZs3cdvQFo7z32Oml3hTqXimBA6EquJibHrQI72m-X4IQuMj1XOheSWhb7w11VocQw8VwjSiFcqQlYrFyp1M5caCR98ALmGgSogNc5aomoz-SjawzO4easQUwtXjRVqNK1lFev8haX5aAxHqI39Kg2sHesGqbv2KlLD2gqGYemTFYIqqsLjDetby_fipIeMiZdAFz63QswAT96_78iwSIBYWZvuNGoAYugAfWs5OOAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqXz4W_34MDsQknip_hVqkMaIAKAZgLAcgLAeALAYAMAaIMCCoGCgSsurEC2gwQCgoQ4JqcyLa39rh7EgIBA6oNAlVTyA0BohNWCjkIA0ABUggKBhIECAEQAWi6lLOORHIjEiEgAigBOAJAhZm-40ZYAWj-__________8BcAKAAQGYAQMaGQoXY2EtcHViLTYxNjMyOTIzMTczMzMwMTG4E4gE2BMK0BUBmBYB-BYBgBcB&sigh=C6ADlGvm9oo&cid=CAQSOwAvHhf_Oc0BdNyVM9Ng2e6hqlFcLj8n6p81Wx-81tbul3xuivjxRRb-15pxi-Zw86ILoR6uONeRjYVH&label=window_focus&gqid=KjKlZYqnCb2VoPMP8LeXwA8&qqid=CIHKz4W_34MDFUqh0QQdz58Brw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:00 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.5	51068	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	897	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmSegmnKW4xt5mi8P_dPtNdqLs1hgDCiyUskewZxxzECN_eOpPV1DozueTMlLwAu_FTfDMvVwrMPtxAx2gHnFq4Dn82NkJaQcV0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsI1vmQwOz1yjwQBRgFIAUoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:25:00 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:25:00 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:25:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI7rTsiO31yjwQBRgFIAYoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:25:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:25:00 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.5	51069	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	993	OUT	GET /ads/measurement/l?ebcid=ALh7CaSmrIRR3L5WGdkOCbzmoDeZdtHi_SR-a6Q5E4b_R6aGKHSdW6RWvjAznjctqC44oVM_TRb_JnJoBmwzGB7Ol_87S0eLbQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:00 UTC	314	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:00 GMT Server: jumble_frontend_server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.5	51070	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	817	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmRsyfmssQvlfgCMIxYiuCM7UJGGFPYm6LjzV82_59PxamG4vKclbfhCb5E95v9kpy0_Y0v8nTaJTVy06HW1c7aGcKF82arnvA HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=65A5321EFD370CDA819C147DBLIS
2024-01-15 13:25:00 UTC	670	IN	HTTP/1.1 307 Temporary Redirect Location: https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRsyfmssQvlfgCMIxYiuCM7UJGGFPYm6LjzV82_59PxamG4vKclbfhCb5E95v9kpy0_Y0v8nTaJTVy06HW1c7aGcKF82arnvA&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS Set-Cookie: b=65A5321EFD370CDA819C147DBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Mon, 15 Jan 2024 13:25:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.5	51076	35.236.220.17	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	864	OUT	GET /gp_match?google_gid=CAESEDR0t2F5SJu0dFXYBoaFU34&google_cver=1&google_push=AXcoOmTKWZ3yMf-3_CsEXUqjAdlIV_5gFGzWhnooUcJ8VlTI6sCXsUWxg9WBixS_Y77eZusjVUhr3Xu3sCcuwGMLYI7ITQ4BTuZDWmml_bwNLtn_KLhsquxail4EYcn9cKpeU0IJgs0DWedPcGEYslaCA3PzLA HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=690F5FB948B2412881DA26E47E140F91
2024-01-15 13:25:00 UTC	821	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Mon, 15 Jan 2024 13:25:00 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTKWZ3yMf-3_CsEXUqjAdlIV_5gFGzWhnooUcJ8VlTI6sCXsUWxg9WBixS_Y77eZusjVUhr3Xu3sCcuwGMLYI7ITQ4BTuZDWmml_bwNLtn_KLhsquxail4EYcn9cKpeU0IJgs0DWedPcGEYslaCA3PzLA Expires: Sun, 14 Jan 2024 13:25:00 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-01-15 13:25:00 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.5	51075	52.2.60.235	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	1005	OUT	GET /ping_match.gif?ei=GOOGLE&rurl=https%3A%2F%2Fcm.g.doubleclick.net%2Fpixel%3Fgoogle_nid%3D9675309%26google_hm%3D_wfivefivec64esc_&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmQ4WbFLt-sFxBPeC-_jGKwAZ-LP2OfZdU90EnhnXFClUZ7Q6-JlFc7F5LWqS8suZCs_GBHINfgMevKYodH_maJZBV2mLPcYfqzK-AlE9s6nmpHYi8kXwSklwA0gzVU0sFLlx6o1YrZ38PkZswVQEHweQg8 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=9PBZdF5b1RpmXb5; matchfreewheel=5; matchgoogle=5
2024-01-15 13:25:00 UTC	935	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Mon, 15 Jan 2024 13:25:00 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmQ4WbFLt-sFxBPeC-_jGKwAZ-LP2OfZdU90EnhnXFClUZ7Q6-JlFc7F5LWqS8suZCs_GBHINfgMevKYodH_maJZBV2mLPcYfqzK-AlE9s6nmpHYi8kXwSklwA0gzVU0sFLlx6o1YrZ38PkZswVQEHweQg8 Pragma: no-cache Server: PingMatch/v2.0.30-795-gb641a57#rel-ec2-master i-06e716fa32722a1c7@us-east-1e@dxedge-app-us-east-1-prod-asg Set-Cookie: wfivefivec=9PBZdF5b1RpmXb5; Domain=.w55c.net; Expires=Sat, 15-Feb-2025 13:25:00 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchgoogle=5; Domain=.w55c.net; Expires=Wed, 14-Feb-2024 13:25:00 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.5	51078	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	874	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmRsCKk1AGngUx3OjQPwUkO0pcy8ZdI0fQU8sffR5EvQxMDVeylmTt7WRWsQkqlQAZAqf3TLxUqLhL59jo-n6wZgLUoZn_MmnG5c8t99F157kyCuaklMAsUU1Ppwed5vpYaEr5rhF-7tCjXbPmz-kSmfqvI HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=65A5321EFD370CDA819C147DBLIS
2024-01-15 13:25:00 UTC	727	IN	HTTP/1.1 307 Temporary Redirect Location: https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmRsCKk1AGngUx3OjQPwUkO0pcy8ZdI0fQU8sffR5EvQxMDVeylmTt7WRWsQkqlQAZAqf3TLxUqLhL59jo-n6wZgLUoZn_MmnG5c8t99F157kyCuaklMAsUU1Ppwed5vpYaEr5rhF-7tCjXbPmz-kSmfqvI&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS Set-Cookie: b=65A5321EFD370CDA819C147DBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Mon, 15 Jan 2024 13:25:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.5	51077	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	953	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmSQ0XTMpo5_XHgxddD6bgP1GgdYlPLUIp2ylrCFO9Pmr6DmGaLNsJZ-XP6-gjoBHgTB7vkTounnWQYH533bXrCpXh8IulP0eoskEuYH_BlsX3-e_GY7JcYsNS7I3yB3mPk55NJ12MOxPOym3g4RAIW7Fc4 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsI1vmQwOz1yjwQBRgFIAUoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:25:00 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:25:00 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:25:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI4KPaiu31yjwQBRgFIAYoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:25:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:25:00 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.5	51081	142.251.163.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:00 UTC	967	OUT	GET /vt/data=bXOBwiJXKKI7g5taTceMJenIJcTphA_lUhkL9vRh8YHAQ-ETWx5nCpTcctH9safIePlOI2Qw3UXjf5PK0WYNDak HTTP/1.1 Host: mts0.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:01 UTC	473	IN	HTTP/1.1 400 Bad Request Content-Security-Policy: script-src 'none'; object-src 'none'; base-uri 'none' X-Content-Type-Options: nosniff x-server-version-bin: CggIBBCn7YGtBg== Date: Mon, 15 Jan 2024 13:25:01 GMT Content-Type: text/html; charset=UTF-8 Server: scaffolding on HTTPServer2 Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Server-Timing: gfet4t7; dur=9 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:01 UTC	779	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-01-15 13:25:01 UTC	776	IN	Data Raw: 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c Data Ascii: epeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.5	51082	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	1435	OUT	GET /f/AGSKWxUq6HsiqIFqhbT0iB-oiIrIl3Q1IZpJoWax3QHPZULmqwMHctVAUGZTcln25SC_tcMBMqSOOOr_Vr3xpdNbsAJAKjRBoui_CHvRpLp3ls-nPj3pUPCd3PeDHUR-u3KGJvJHNkTpiw==?fccs=W1siQUtzUm9sXzIyVnlnYkhaRVh3STVKbWpSWmx4NzFXYmRPbTNqWF9NbFZEeno3c29kZjllSWRTcDZEMnNOOTYyRFdoWkQ0RnJiTVdyRE91VlBvWUVMQXdxYWdMTlpxRGd6aXg5RW5zU3VMOTFSN3pPSThRejNLOVJpZllRTkM1TUp6UFJFS2U5ZWJob1podXcwcXpZaWxzS3QxczJQTWFUOVJ3PT0iXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsWzE3MDUzMjUwOTksNzc5MDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbN11dLCJodHRwOi8vbXlsb3ZlbHlibHVlc2t5LmNvbS8iLG51bGwsW1s4LCIxNW1McHpyd0xyQSJdLFs5LCJlbi1VUyJdLFsxOCwiW1tbMF1dXSJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:01 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:01 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-1zJmrtuAr2GArrFklbytbQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 32 39 35 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5f 2e 68 63 2e 61 70 70 6c 79 28 31 2c Data Ascii: 295dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Sn=function(a){for(var b=_.hc.apply(1,
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6a 6f 28 64 29 3b 74 68 69 73 2e 69 3d 6e 65 77 20 5f 2e 49 6e 28 64 2c 6e 65 77 20 5f 2e 4c 67 28 5f 2e 7a 6b 28 74 68 69 73 2e 67 29 29 29 7d 3b 0a 6d 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 31 3a 6b 6f 28 74 68 69 73 2e 68 2c 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 6b 6f 28 74 68 69 73 2e 68 2c 33 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 6b 6f 28 74 68 69 73 2e 68 2c 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 61 72 20 63 3d 74 68 69 73 2e 69 3b 61 3d 5f 2e 44 28 74 68 69 73 2e 67 2c 5f 2e 70 65 2c 31 29 3b 76 61 72 20 64 3d 74 68 69 73 2e 67 Data Ascii: .location.hostname;this.h=new jo(d);this.i=new _.In(d,new _.Lg(_.zk(this.g)))};mo.prototype.start=function(a,b){switch(a){case 1:ko(this.h,1);break;case 3:ko(this.h,3);break;case 2:ko(this.h,2);break;default:var c=this.i;a=_.D(this.g,_.pe,1);var d=this.g
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 6c 3b 74 68 69 73 2e 68 3d 6e 65 77 20 6e 6f 7d 2c 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 6e 65 77 20 73 6f 28 62 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 67 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 75 6f 28 61 2c 31 29 7d 2c 61 29 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 62 5b 64 5d 2e 61 64 64 4c 69 73 74 65 6e 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 31 3d 3d 3d 66 3f 30 3d 3d 3d 65 3f 75 6f 28 61 2c 32 29 3a 75 6f 28 61 2c 33 29 3a 63 2e 6e 6f 74 69 66 79 28 65 29 7d 2c 61 29 7d 2c 75 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 3d 3d 3d 61 2e 67 26 26 28 61 2e 67 3d 62 2c 61 2e 68 2e 67 28 62 29 29 7d 2c 77 6f 3d 66 75 6e Data Ascii: l;this.h=new no},vo=function(a,b){for(var c=new so(b.map(function(e){return e.g()}),function(){uo(a,1)},a),d=0;d<b.length;d++)b[d].addListener(function(e,f){1===f?0===e?uo(a,2):uo(a,3):c.notify(e)},a)},uo=function(a,b){null===a.g&&(a.g=b,a.h.g(b))},wo=fun
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 6f 28 61 2e 43 2c 61 2e 69 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 65 6c 73 65 20 50 6f 28 61 2c 61 2e 6c 2c 62 2c 63 29 7d 3b 0a 4f 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 52 6f 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 6f 28 61 2c 31 29 7d 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 71 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 65 29 3b 74 68 69 73 2e 69 3d 61 3b 74 68 69 73 2e 6c 3d 62 3b 74 68 69 73 2e 41 3d 63 7d 3b 5f 2e 41 28 53 6f 2c 71 6f 29 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: o(a.C,a.i,b,c)}catch(d){Po(a,a.l,b,c)}else Po(a,a.l,b,c)};Oo.prototype.h=function(){var a=this;Ro(this,function(){ro(a,0)},function(){ro(a,1)})};var So=function(a,b,c,d,e){qo.call(this,d,e);this.i=a;this.l=b;this.A=c};_.A(So,qo);So.prototype.g=function()
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 3b 76 61 72 20 63 3d 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3b 5f 2e 74 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 61 2e 67 26 26 61 2e 68 2e 67 28 61 2e 67 2e 74 65 73 74 28 65 29 2c 65 2c 64 29 3b 63 26 26 63 28 64 2c 65 2c 66 29 7d 7d 2c 59 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 68 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 29 7d 3b 76 61 72 20 56 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 68 3d 6e 65 77 20 5f 2e 67 65 28 64 6f 63 75 6d 65 6e 74 29 7d 2c 62 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 6f 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 63 7c 7c 21 64 7c 7c 22 53 63 72 69 70 74 20 65 72 72 6f 72 22 21 3d 3d 65 26 Data Ascii: ;var c=_.t.onerror;_.t.onerror=function(d,e,f){a.g&&a.h.g(a.g.test(e),e,d);c&&c(d,e,f)}},Yo=function(a,b){a.h.addEventListener(b)};var Vo=function(){this.g=new Map;this.h=new _.ge(document)},bp=function(a,b){Yo(b,function(c,d,e){c\|\|!d\|\|"Script error"!==e&
2024-01-15 13:25:01 UTC	1629	IN	Data Raw: 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 5a 58 4e 35 62 6d 52 70 59 32 46 30 61 57 39 75 4c 6d 4e 76 62 53 39 77 59 57 64 6c 59 57 51 76 62 33 4e 6b 4c 6d 70 7a 50 32 5a 6a 5a 46 78 31 4d 44 41 7a 5a 48 52 79 64 57 55 69 58 53 78 62 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 61 57 4e 76 49 6c 30 73 4d 54 41 77 4c 44 55 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 Data Ascii: sbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2dsZXN5bmRpY2F0aW9uLmNvbS9wYWdlYWQvb3NkLmpzP2ZjZFx1MDAzZHRydWUiXSxbbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL2Zhdmljb24uaWNvIl0sMTAwLDUsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZX
2024-01-15 13:25:01 UTC	823	IN	Data Raw: 4e 6d 78 59 61 46 42 6c 59 57 78 76 65 45 56 50 65 56 4d 78 4e 48 70 47 61 48 4a 6f 55 6c 49 31 65 55 4a 4e 61 32 68 6e 4e 44 5a 70 64 6d 4a 55 54 55 51 35 58 7a 64 78 57 44 68 61 56 57 6c 6b 52 44 52 42 58 48 55 77 4d 44 4e 6b 58 48 55 77 4d 44 4e 6b 49 6c 30 73 57 32 35 31 62 47 77 73 57 7a 64 64 58 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 49 6d 5a 6b 4d 44 68 6d 4e 47 46 6c 4e 6d 5a 6d 59 6a 42 6b 5a 44 6b 69 4c 47 35 31 62 47 77 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 5a 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 Data Ascii: NmxYaFBlYWxveEVPeVMxNHpGaHJoUlI1eUJNa2hnNDZpdmJUTUQ5XzdxWDhaVWlkRDRBXHUwMDNkXHUwMDNkIl0sW251bGwsWzddXSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsImZkMDhmNGFlNmZmYjBkZDkiLG51bGwsW251bGwsbnVsbCxudWxsLCJodHRwczovL2Z1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnR
2024-01-15 13:25:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.5	51084	172.253.115.103	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	1235	OUT	POST /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7788 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk&co=aHR0cDovL215bG92ZWx5Ymx1ZXNreS5jb206ODA.&hl=en&v=Ya-Cd6PbRI5ktAHEhm9JuKEu&size=invisible&cb=alrjcjeq8qxb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZX9sdzDNKPq2YU-vWNZLZexiYdbOPhW7yjR-CQ5K03k3wgp3ztZmnhdaGQCVmGhZjnCX6jTP-PlZ26lllo; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:01 UTC	7788	OUT	Data Raw: 0a 18 59 61 2d 43 64 36 50 62 52 49 35 6b 74 41 48 45 68 6d 39 4a 75 4b 45 75 12 a4 0f 30 33 41 46 63 57 65 41 37 78 68 4f 6a 57 38 49 51 53 55 4c 6a 65 47 32 32 6b 4d 34 6a 67 37 6e 2d 39 69 56 33 45 32 6b 61 67 72 49 6a 61 63 6a 53 38 55 47 46 47 6e 69 4e 32 34 4c 65 38 45 30 47 4f 2d 76 46 64 66 73 69 77 4d 41 4d 33 67 64 47 61 77 56 75 37 79 71 52 52 69 73 53 73 4c 70 62 74 65 44 6b 39 4b 4a 62 64 32 59 78 5a 79 58 4e 43 5f 69 2d 68 78 6b 42 39 69 63 4e 6b 45 44 6b 35 4d 4d 52 69 7a 61 43 48 44 39 31 49 59 44 77 79 38 57 65 58 47 63 6a 33 32 61 73 49 56 63 6c 43 71 50 61 69 66 76 6b 74 78 34 46 69 45 69 57 58 34 7a 76 51 74 4e 4c 47 52 33 75 69 44 56 37 58 42 4a 51 58 66 33 6f 6d 69 51 6c 78 54 54 53 31 78 6f 31 4a 56 55 4b 6f 6d 52 45 74 63 35 72 7a Data Ascii: Ya-Cd6PbRI5ktAHEhm9JuKEu03AFcWeA7xhOjW8IQSULjeG22kM4jg7n-9iV3E2kagrIjacjS8UGFGniN24Le8E0GO-vFdfsiwMAM3gdGawVu7yqRRisSsLpbteDk9KJbd2YxZyXNC_i-hxkB9icNkEDk5MMRizaCHD91IYDwy8WeXGcj32asIVclCqPaifvktx4FiEiWX4zvQtNLGR3uiDV7XBJQXf3omiQlxTTS1xo1JVUKomREtc5rz
2024-01-15 13:25:01 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Mon, 15 Jan 2024 13:25:01 GMT Expires: Mon, 15 Jan 2024 13:25:01 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09APYnBZWDToWxmAZLFlavWtGdby7zc8-nMWhAo2lg2348MJAGV6Oysu7MRBOiIHUpJkuugkHOMt3EKBBPOHgSbDU;Path=/recaptcha;Expires=Sat, 13-Jul-2024 13:25:01 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:01 UTC	556	IN	Data Raw: 61 37 35 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 6f 59 78 4b 79 58 54 4e 41 71 6b 39 6f 64 30 54 52 59 6a 46 58 64 6d 67 56 5a 30 52 74 62 30 4e 33 61 71 42 6a 36 76 36 74 31 41 74 6b 48 37 79 4c 46 36 6f 73 6b 54 66 45 74 36 55 4b 33 42 38 63 4a 72 75 4e 5f 4b 37 5f 44 35 41 61 43 4c 4a 6c 52 66 74 42 2d 35 4a 6a 73 4d 4a 5f 78 4c 7a 53 6f 6e 47 30 7a 56 61 41 2d 6c 45 6f 4a 50 54 58 4f 61 2d 51 5a 6d 38 79 37 4d 72 4e 45 4b 77 36 34 61 68 30 45 35 59 50 61 6f 48 74 34 73 54 36 65 4a 58 6c 79 33 66 64 63 70 6b 58 5f 2d 50 63 74 50 79 5f 48 2d 77 33 37 4f 69 70 65 33 41 42 5f 41 66 48 33 65 68 33 4b 61 61 39 39 30 56 36 6b 30 62 6f 43 6c 43 47 5f 38 76 72 56 71 52 35 50 4c 72 43 73 72 6d 36 4a 72 6d 4c 7a 39 43 55 62 Data Ascii: a75)]}'["rresp","03AFcWeA5oYxKyXTNAqk9od0TRYjFXdmgVZ0Rtb0N3aqBj6v6t1AtkH7yLF6oskTfEt6UK3B8cJruN_K7_D5AaCLJlRftB-5JjsMJ_xLzSonG0zVaA-lEoJPTXOa-QZm8y7MrNEKw64ah0E5YPaoHt4sT6eJXly3fdcpkX_-PctPy_H-w37Oipe3AB_AfH3eh3Kaa990V6k0boClCG_8vrVqR5PLrCsrm6JrmLz9CUb
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 6a 59 6d 34 72 6c 73 74 49 38 56 62 48 58 57 49 47 42 38 56 6c 33 64 4a 62 58 49 56 51 4f 6e 48 49 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 72 62 6a 4a 76 64 31 42 56 4e 7a 52 4b 56 48 4e 50 64 31 52 48 64 48 6b 77 59 57 39 56 62 46 68 53 55 30 74 54 53 6d 6c 6f 51 31 64 34 51 6b 31 36 52 54 4e 68 54 46 46 7a 4c 6d 70 7a 22 2c 22 22 2c 22 54 56 6c 35 63 6a 46 31 4d 6d 39 49 61 6c 4a 74 59 7a 46 52 63 44 42 55 59 58 64 4c 63 6d 74 4c 64 58 56 54 65 56 4a 68 65 48 64 72 56 6e 63 77 54 7a 5a 32 52 45 35 49 56 6d 6c 33 4e 6b 73 77 5a 6b 4a 51 5a 6d 51 33 4c 7a 42 70 53 32 52 76 52 55 78 58 56 6d 46 Data Ascii: jYm4rlstI8VbHXWIGB8Vl3dJbXIVQOnHI",null,120,null,null,null,["bgdata","Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9rbjJvd1BVNzRKVHNPd1RHdHkwYW9VbFhSU0tTSmloQ1d4Qk16RTNhTFFzLmpz","","TVl5cjF1Mm9IalJtYzFRcDBUYXdLcmtLdXVTeVJheHdrVncwTzZ2RE5IVml3NkswZkJQZmQ3LzBpS2RvRUxXVmF
2024-01-15 13:25:01 UTC	876	IN	Data Raw: 61 47 5a 6e 4c 31 49 7a 4f 58 4e 6d 4f 55 45 30 63 58 46 57 4e 57 4e 36 62 6d 4a 68 5a 30 64 75 63 7a 64 32 4d 6e 52 58 65 57 35 6c 63 48 70 31 55 44 5a 59 4e 45 68 4c 57 69 39 50 4d 32 68 35 56 6a 52 5a 64 31 42 34 53 43 74 75 53 30 63 30 54 45 6f 76 4e 30 56 4f 56 48 68 50 5a 6b 78 70 4f 46 49 77 65 53 39 57 63 32 39 57 62 6a 6c 49 53 33 64 68 56 31 4d 7a 52 6a 64 4c 4e 58 42 53 51 32 4e 68 61 30 31 6a 4d 46 42 4a 55 79 73 32 63 53 73 33 52 30 70 58 64 55 35 55 53 31 46 73 56 6b 74 78 55 32 6c 30 65 6d 49 35 62 45 73 32 62 55 70 51 59 55 49 72 4f 48 70 49 62 47 78 34 64 6e 6c 43 51 6a 4e 50 64 6a 52 6c 61 6a 68 58 55 48 46 77 5a 7a 6c 6f 4d 32 4e 32 4e 6d 56 79 52 6d 67 78 56 46 52 4d 4b 7a 68 6b 64 58 5a 6b 54 31 46 76 64 57 6f 72 57 46 4a 58 62 6d 30 Data Ascii: aGZnL1IzOXNmOUE0cXFWNWN6bmJhZ0duczd2MnRXeW5lcHp1UDZYNEhLWi9PM2h5VjRZd1B4SCtuS0c0TEovN0VOVHhPZkxpOFIweS9Wc29WbjlIS3dhV1MzRjdLNXBSQ2Nha01jMFBJUys2cSs3R0pXdU5US1FsVktxU2l0emI5bEs2bUpQYUIrOHpIbGx4dnlCQjNPdjRlajhXUHFwZzloM2N2NmVyRmgxVFRMKzhkdXZkT1FvdWorWFJXbm0
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 31 36 38 31 0d 0a 68 77 51 54 45 72 62 56 46 4c 64 47 56 48 51 6b 64 72 51 6c 64 35 4f 55 35 70 65 56 4e 44 64 56 51 7a 54 33 46 7a 62 6b 46 5a 51 54 56 78 52 31 59 34 53 46 5a 79 55 58 4e 50 62 31 70 58 52 32 52 33 56 6a 5a 4b 55 32 39 4f 61 30 70 73 59 30 78 52 56 33 56 6a 53 45 6c 6d 65 55 70 49 51 56 5a 71 4d 46 52 56 61 48 4a 59 55 6c 5a 72 57 57 63 78 55 6b 49 77 4d 6e 52 6e 63 45 4e 48 59 6d 4a 59 64 56 52 47 4d 7a 6c 57 55 57 56 55 4c 32 39 6e 55 47 35 59 55 45 56 6e 56 47 73 78 5a 57 64 77 56 47 64 4d 54 46 46 4b 4d 6d 5a 4b 4e 7a 45 33 62 57 46 4d 53 57 39 69 62 6e 6b 33 59 6b 6c 33 55 7a 4e 73 5a 58 5a 4f 4f 57 6c 6a 63 46 55 31 4d 54 64 75 51 58 70 30 53 6a 68 35 54 6a 56 79 5a 47 39 55 57 43 39 35 61 31 64 30 4e 54 64 43 4e 69 74 46 63 57 78 Data Ascii: 1681hwQTErbVFLdGVHQkdrQld5OU5peVNDdVQzT3FzbkFZQTVxR1Y4SFZyUXNPb1pXR2R3VjZKU29Oa0psY0xRV3VjSElmeUpIQVZqMFRVaHJYUlZrWWcxUkIwMnRncENHYmJYdVRGMzlWUWVUL29nUG5YUEVnVGsxZWdwVGdMTFFKMmZKNzE3bWFMSW9ibnk3Ykl3UzNsZXZOOWljcFU1MTduQXp0Sjh5TjVyZG9UWC95a1d0NTdCNitFcWx
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 51 55 45 32 53 47 4e 34 4e 7a 56 45 55 6b 56 36 4b 30 74 31 51 57 78 48 5a 6b 64 6f 56 46 70 75 52 79 74 45 56 47 56 6a 54 47 39 75 55 45 35 73 55 58 64 75 65 57 78 53 63 55 68 49 51 55 55 72 63 44 4d 32 56 30 56 52 57 6a 68 32 4d 57 63 35 55 30 4a 32 4d 6e 4d 33 52 31 64 5a 56 57 64 35 54 31 4a 68 51 56 49 76 61 33 6c 6a 56 31 68 69 53 6d 4e 44 51 58 46 48 54 6d 35 61 4d 30 31 71 55 6e 42 4d 51 57 70 46 57 57 35 6e 63 6c 4a 6a 4f 48 42 70 4d 6b 52 69 62 6a 52 42 51 56 6c 35 5a 55 51 78 5a 6a 5a 77 52 48 4a 54 62 47 4a 61 5a 55 4a 6a 53 6d 39 4e 4d 58 52 68 4d 45 67 30 53 47 78 77 4f 47 4a 49 52 54 4e 61 5a 6c 42 50 65 57 4a 57 5a 55 46 6d 53 45 4a 4c 5a 43 39 55 4e 30 6c 32 64 30 4e 69 51 6b 46 4f 59 6d 46 59 56 6e 5a 42 57 56 4e 42 4d 54 68 35 53 55 68 Data Ascii: QUE2SGN4NzVEUkV6K0t1QWxHZkdoVFpuRytEVGVjTG9uUE5sUXdueWxScUhIQUUrcDM2V0VRWjh2MWc5U0J2MnM3R1dZVWd5T1JhQVIva3ljV1hiSmNDQXFHTm5aM01qUnBMQWpFWW5nclJjOHBpMkRibjRBQVl5ZUQxZjZwRHJTbGJaZUJjSm9NMXRhMEg0SGxwOGJIRTNaZlBPeWJWZUFmSEJLZC9UN0l2d0NiQkFOYmFYVnZBWVNBMTh5SUh
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 53 32 4e 44 4d 6e 46 44 63 46 46 4f 57 6a 46 42 5a 6b 74 50 54 55 31 79 4d 32 70 57 53 32 73 7a 59 32 4e 78 5a 6b 6b 32 4e 6c 46 33 57 54 4d 77 65 57 46 35 63 45 46 57 53 56 52 61 4c 7a 64 72 64 58 42 48 65 6b 56 51 65 6d 52 4c 52 55 38 7a 4b 31 4a 4a 55 32 74 43 52 7a 4e 6f 56 57 4e 6a 54 55 64 4a 52 58 46 30 4b 7a 6c 6e 53 47 31 30 51 58 56 72 51 33 46 58 5a 6b 31 4a 5a 55 68 71 53 45 56 50 5a 57 78 47 57 55 78 36 5a 56 4d 33 65 6c 64 49 59 6e 42 47 59 30 52 49 54 7a 64 56 64 45 46 44 4f 47 70 6b 59 7a 42 6d 56 55 70 51 5a 48 4a 54 62 55 64 58 5a 6b 30 79 52 58 42 52 62 33 68 78 51 58 67 35 53 44 4e 7a 59 31 5a 4e 61 6b 78 35 56 30 70 69 4e 54 59 77 62 6b 67 78 62 6d 74 35 62 47 6c 4b 65 58 6c 74 59 57 77 35 63 48 52 78 4d 32 74 71 61 6c 56 51 57 6e 56 Data Ascii: S2NDMnFDcFFOWjFBZktPTU1yM2pWS2szY2NxZkk2NlF3WTMweWF5cEFWSVRaLzdrdXBHekVQemRLRU8zK1JJU2tCRzNoVWNjTUdJRXF0KzlnSG10QXVrQ3FXZk1JZUhqSEVPZWxGWUx6ZVM3eldIYnBGY0RITzdVdEFDOGpkYzBmVUpQZHJTbUdXZk0yRXBRb3hxQXg5SDNzY1ZNakx5V0piNTYwbkgxbmt5bGlKeXltYWw5cHRxM2tqalVQWnV
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 4d 32 6c 4a 4d 55 55 77 4d 47 4e 75 54 32 39 42 62 56 41 34 55 45 52 4e 5a 56 64 74 4f 46 42 4f 5a 30 52 6c 55 32 68 72 4e 56 70 49 4e 48 70 6e 64 6e 6c 68 62 6d 30 79 56 57 30 78 5a 57 6f 78 4e 54 64 31 52 6d 74 6a 57 55 64 52 4c 30 56 6b 65 6d 78 61 53 6d 6c 5a 63 47 30 31 65 55 64 30 4e 48 5a 6f 62 6b 45 76 55 33 55 31 54 30 35 7a 54 6a 5a 45 4f 46 56 50 63 7a 64 5a 53 6b 70 51 62 53 74 47 64 30 5a 74 56 6a 4e 45 53 30 70 6d 61 53 39 69 56 6b 68 36 52 46 70 32 53 32 5a 73 4d 57 39 4a 55 6d 68 7a 4d 6a 42 34 5a 79 74 52 4b 32 55 76 4e 56 6f 31 65 48 68 33 65 58 4e 58 4e 32 78 53 63 6e 49 33 65 48 4e 47 63 7a 59 30 62 6b 78 30 57 6a 56 34 61 31 49 30 61 58 64 71 53 57 77 32 4b 33 68 7a 4e 31 51 31 52 46 52 45 52 6e 5a 73 52 47 70 53 64 46 49 30 56 6b 4e Data Ascii: M2lJMUUwMGNuT29BbVA4UERNZVdtOFBOZ0RlU2hrNVpINHpndnlhbm0yVW0xZWoxNTd1RmtjWUdRL0VkemxaSmlZcG01eUd0NHZobkEvU3U1T05zTjZEOFVPczdZSkpQbStGd0ZtVjNES0pmaS9iVkh6RFp2S2ZsMW9JUmhzMjB4ZytRK2UvNVo1eHh3eXNXN2xScnI3eHNGczY0bkx0WjV4a1I0aXdqSWw2K3hzN1Q1RFRERnZsRGpSdFI0VkN
2024-01-15 13:25:01 UTC	761	IN	Data Raw: 59 6b 74 6f 53 6a 56 36 56 6c 42 59 65 55 4e 77 63 7a 5a 6b 57 48 42 36 4e 47 35 57 63 31 64 70 63 7a 6c 46 52 56 56 50 4d 53 74 44 4e 58 56 58 64 6a 52 76 59 6c 52 6b 4f 55 4a 5a 52 31 56 51 54 30 30 35 54 58 70 30 64 6b 5a 31 4f 46 68 30 5a 6b 6c 4f 56 6d 52 42 4e 58 5a 31 53 47 6f 31 63 47 46 32 4e 47 55 77 61 6a 68 4b 54 48 70 43 4f 58 64 34 56 54 68 59 5a 6c 4a 6d 55 57 74 4e 55 6d 6c 4e 59 58 6b 7a 62 6e 68 52 55 6d 4a 7a 57 47 49 33 57 6c 6c 61 5a 7a 55 72 4b 7a 4a 45 51 6d 31 46 64 6b 52 31 53 33 52 58 59 6a 68 4c 52 56 4a 6f 55 6b 56 49 53 6e 4e 69 65 6d 78 6b 4d 46 49 32 52 6e 46 7a 64 33 51 32 63 30 34 32 64 7a 68 72 52 45 74 61 54 45 77 7a 56 57 56 72 64 47 68 46 4e 45 68 54 52 6e 56 72 51 32 35 59 57 6a 4e 61 64 31 59 35 65 55 68 4d 52 45 4a Data Ascii: YktoSjV6VlBYeUNwczZkWHB6NG5Wc1dpczlFRVVPMStDNXVXdjRvYlRkOUJZR1VQT005TXp0dkZ1OFh0ZklOVmRBNXZ1SGo1cGF2NGUwajhKTHpCOXd4VThYZlJmUWtNUmlNYXkzbnhRUmJzWGI3WllaZzUrKzJEQm1FdkR1S3RXYjhLRVJoUkVISnNiemxkMFI2RnFzd3Q2c042dzhrREtaTEwzVWVrdGhFNEhTRnVrQ25YWjNad1Y5eUhMREJ
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 31 31 38 65 0d 0a 43 54 45 31 59 56 57 78 32 53 45 78 42 63 6d 4a 51 53 54 56 52 57 6a 46 79 62 44 42 31 54 79 39 55 65 45 64 5a 53 57 4e 42 53 47 49 31 59 53 38 30 4e 6e 4a 44 62 7a 68 59 4e 6c 4a 46 4f 53 74 74 4f 44 4e 4f 56 30 35 7a 4d 30 78 4c 4f 54 42 48 59 58 56 31 4e 55 70 76 61 6d 68 34 56 55 63 77 59 7a 64 54 55 33 42 59 61 47 52 7a 62 44 6c 69 4e 47 63 31 59 6e 56 69 51 58 5a 44 4e 57 52 76 54 6c 46 42 53 31 68 52 56 79 39 44 4d 55 63 76 54 58 46 31 4d 56 64 6c 59 57 46 50 54 47 78 76 55 6b 74 6c 51 32 56 46 52 33 70 4e 4d 57 35 69 56 30 34 33 57 6e 64 30 62 6b 6c 76 65 44 56 4f 65 58 64 45 56 31 51 31 61 55 64 49 65 48 5a 77 4e 44 5a 6d 4d 6e 5a 33 62 32 73 35 4d 44 5a 79 61 53 38 33 61 6e 41 76 53 56 4a 4f 4f 57 4e 50 62 56 42 72 57 46 46 52 Data Ascii: 118eCTE1YVWx2SExBcmJQSTVRWjFybDB1Ty9UeEdZSWNBSGI1YS80NnJDbzhYNlJFOSttODNOV05zM0xLOTBHYXV1NUpvamh4VUcwYzdTU3BYaGRzbDliNGc1YnViQXZDNWRvTlFBS1hRVy9DMUcvTXF1MVdlYWFPTGxvUktlQ2VFR3pNMW5iV043Wnd0bklveDVOeXdEV1Q1aUdIeHZwNDZmMnZ3b2s5MDZyaS83anAvSVJOOWNPbVBrWFFR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.5	51088	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	2021	OUT	GET /pagead/adview?ai=CA76WKjKlZfzlB_SextYP34a2iAXPzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTkAU_Q3BZ6hx1PJCUg3GpkGt-C9RqqzNj6uMdvPLsMSq2JmjFQpJc7mqgceGgxOeY5MsBrG2xNANrP3xJ5DjaHAT3oHCtw0OaVqvxYVJHmQW_nsBaqMXO8fnH5rYxqHMSUDOvCOnTw6jtd64UouL7ZsTO2KIeVBAqJqpXlnjcTZzZFVmUDj6y7wLtQRYY5-EdY-VS__w4cF_25MXvkYNsVMwvIsmbq1nhqV6KOyNbfCpi7b9b35alWn9hVaBbu9z1UmYtXPbgEOJdDxoGKOMpfiJTTTQ12dYXjAEDuOf_rxea7Uwb4K8AEzcOcvrsEiAXenqyZTZIFBAgEGAGSBQQIBRgEoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQmvk-0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj27MyFv9-DA5oJ0gFodHRwczovL2FkLmRvdWJsZWNsaWNrLm5ldC9zZWFyY2hhZHMvbGluay9jbGljaz8mZHNfYV9jaWQ9MTM1MDQ5MTIyJmRzX2FfY2FpZD0mZHNfYV9hZ2lkPSZkc19hX2ZpaWQ9JmRzX2FfbGlkPSZkc19hX2V4dGlkPSYmZHNfZV9hZGlkPTAmZHNfZV9tYXRjaHR5cGU9c2VhcmNoJmRzX2VfZGV2aWNlPWMmZHNfZV9uZXR3b3JrPSYmZHNfdXJsX3Y9MiZkc19kZXN0X3VybD2ACgHICwGiDAgqBgoErLqxAtoMEQoLEOCiltiug7PWnAESAgED2BMN0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=vYn8tFPKaeE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKlGAE&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1212	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x8c22c6821ca814510000000000000000","2":"0x879c9c13f34269f10000000000000000","3":"0xa8fbb24c3d1bd9f0000000000000000","4":"0xa0dd6d21210cd47b0000000000000000","5":"0x9cd899bb28199a20000000000000000"},"debug_key":"8844861751177866989","debug_reporting":true,"destination":"https://doubleclick.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["960343049"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"5894688624649385297"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.5	51086	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3089	OUT	GET /pagead/adview?ai=CZeacKjKlZe_CE_zDxtYPm5W7QNSd8Plcm7SZp5EL0JCA7JACEAEg7fipICgIYMmGoIqkpOARoAHN8fbiAsgBBqgDAcgDAqoE4QFP0POtMOl-2_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZaD1A6QroQPWHO66y-1J88sHrLppZcUWI-P3JVo_LGi9lzgNrcX-FfCl_dsRKawsCGheujSZmkvsFgG0A0pagpwfyocqObEGH9iCu0CQmvYtaGY4qvMncqgtk9_doe4SJzqt5X01H29k9RTkFzxiRVTRzDYSKEjbAF9otBpJWkULRG8evQ4ClsgwPkzL5xRit-GH0A9lPFzABN-skZmDAogF9ezfiAeSBQQIBBgBkgUECAUYBKAGN4AHm46JnQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBDLtjvSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNXK2IW_34MDmglaaHR0cHM6Ly9vdmVyaGVhZGRvb3JoaWdoY291bnRyeS5jb20vZ2FyYWdlLWRvb3ItcmVwbGFjZW1lbnQtaW4tYXNoZXZpbGxlLz9zb3VyY2U9b2hkZ29vZ2xlgAoByAsBogwIKgYKBKy6sQLaDBEKCxCQxImWgYD-hY8BEgIBA9gTDYgUA9AVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=W5crXG-zJBA&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1227	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x77cb9221bb873f380000000000000000","2":"0xf7537ab5dbbd8ad20000000000000000","3":"0xd18ff16b6714e77e0000000000000000","4":"0xabd9a90cd8b6c9ac0000000000000000","5":"0x1d9277f4458f2d890000000000000000"},"debug_key":"10423306985747091879","debug_reporting":true,"destination":"https://overheaddoorhighcountry.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["744339661"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"2358372077060097601"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.5	51087	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	2988	OUT	GET /pagead/adview?ai=CatwZKjKlZe_CE_zDxtYPm5W7QPnFj4t087mWk6gSZBACIO34qSAoCGDJhqCKpKTgEaABi4n9vQPIAQaoAwHIAwKqBOIBT9Cal1rpfNv4cM3FSIX9BbDp8NdVGZPhUZEmr3HOJUbDyRlXK6MNfsCeEa2K8OHhNhsL4QUR7c2Jmg0SsuAtZptx_90UihmCx2XY9gPkK6YL1tndU4lMETsuDGLC00BB5MwIB-6V1OOIcnz8-kQuLeYfUwzc5Cro2Qusq7m0bJlL2RUAgQBLr4Gc6smH3zqx8xzad7hCZZn22Gtmzanz0nGo2JDeKKLv8iHdkUQ1jhIqVilCNV4-eJ4I7lZ8qyrRfTBfnwrWz0EU857FP_MsAprcyiNW8UcYQLfvkXtcSC60FMAE6aWeosgEiAXmvYqmTZIFBAgEGAGSBQQIBRgEoAY3gAfd9oJCqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQy7Y70ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljVytiFv9-DA5oJE2h0dHBzOi8veGVuZG9vLmNvbS-ACgHICwGiDAgqBgoErLqxAtoMEQoLENC-o5qf2L_NrgESAgED2BMNiBQB0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=QUrudRvCN7A&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1207	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xda47f1d2d32a8c1a0000000000000000","2":"0x9aeaff3d4ebe48e90000000000000000","3":"0xfcd96dcb0d1693110000000000000000","4":"0x3488be1e2ebfc1240000000000000000","5":"0xe2ad8261cff83d110000000000000000"},"debug_key":"75490529800689502","debug_reporting":true,"destination":"https://xendoo.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["935281803"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"8690701870728219569"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.5	51089	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3045	OUT	GET /pagead/adview?ai=CaaJnKjKlZe_CE_zDxtYPm5W7QO-WpaZ19v-wvZ0SZBADIO34qSAoCGDJhqCKpKTgEaABqOvb8ALIAQaoAwHIAwKqBOQBT9Dfl13pe9v4cM3FSIX9BbDp8NdVGZPhUZEmr3HOJUbDyRlXK6MNfsCeEa2K8OHhNhsL4QUR7c2Jmg0SsuAtZptx_90UihmCx2XY9gPkK6YL1tndU6h1Rh01DGLC00BB5MwIB-6V1OOIcnz8-kQuLeYfUwzc5Cro2Qusq7m0bJlL2RUAgQBLr4Gc6smH3zqx8xzad7hCZZn22Gtmzanz0nGo2JDeKKLv8iHdkUQ90jznt86XPAGwv1sA7lY8cbr5VqsTqj5N1bQ0pKtQOLeKC7jQ0rS6ukjx2ZjNn2On1nCesJkZwASxyZfC1QSIBaCZu_pNkgUECAQYAZIFBAgFGASgBjeAB8CUpI8BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQy7Y70ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljVytiFv9-DA5oJO2h0dHBzOi8vd3d3LmZpZWxkc2NqZHJhc2hldmlsbGUuY29tL25ldy1pbnZlbnRvcnkvaW5kZXguaHRtgAoByAsBogwIKgYKBKy6sQLaDBEKCxDwgeS3x7ntlvUBEgIBA9gTDdAVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=3DTVQI_YbiI&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1224	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xfb7e6203aba538cd0000000000000000","2":"0xddf85c61a46f70bc0000000000000000","3":"0xfb6eaaacc28326a90000000000000000","4":"0x62cab4c62b459efe0000000000000000","5":"0x4d09533a61bf159d0000000000000000"},"debug_key":"15168738662778880800","debug_reporting":true,"destination":"https://fieldscjdrasheville.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["773256616"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"10567307344982627137"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.5	51096	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	1126	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=afntAZcmge06ousnA6NvPC9WoheeOUPZbOiYepqNY4aAOaUQKsG4QsdZaXWCZaUKnZbocIgC3QZc36vtaEMSSq3PT1qMWO3XVMPJ57
2024-01-15 13:25:01 UTC	821	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:25:01 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=apnteZbRkP6i6eCno6mTrt0nAdhZairsBl6McRUCVhbO2VQvFcK1VUCQosZdCyg66pTevF4UZaTPQaGdBN4bYGfXfEZaabDanqBZbM; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:25:01 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=apnteZbRkP6i6eCno6mTrt0nAdhZairsBl6McRUCVhbO2VQvFcK1VUCQosZdCyg66pTevF4UZaTPQaGdBN4bYGfXfEZaabDanqBZbM; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:25:01 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e713c7cc8393e-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:25:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.5	51097	35.71.131.137	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	897	OUT	GET /track/cmf/google?google_gid=CAESEGUrL_9e5e7wgdQ_h2LWwiE&google_cver=1&google_push=AXcoOmST1mK8VPApCeelpoPehxwai5jxNJ_qq2c8xEZKiPA3UlgEiQN8rrPW9sbIr3bKXJS8NBexW_TaWo-dqo_SK8C4_sogtwY5u-Y HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; TDCPM=CAESFQoGZ29vZ2xlEgsI7rTsiO31yjwQBRgFIAYoAjILCIjpr-CA9so8EAU4AQ..
2024-01-15 13:25:01 UTC	643	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:25:01 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 set-cookie: TDID=baaecee9-0d90-4ef2-8354-2f6a99116284; expires=Wed, 15 Jan 2025 13:25:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsI0qSnj-31yjwQBRgFIAcoAjILCIjpr-CA9so8EAU4AQ..; expires=Wed, 15 Jan 2025 13:25:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-01-15 13:25:01 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 59 6d 46 68 5a 57 4e 6c 5a 54 6b 74 4d 47 51 35 4d 43 30 30 5a 57 59 79 4c 54 67 7a 4e 54 51 74 4d 6d 59 32 59 54 6b 35 4d 54 45 32 4d 6a 67 30 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 62 61 61 65 63 65 65 39 2d 30 64 39 30 2d 34 65 66 32 2d 38 33 35 34 2d 32 66 36 61 39 39 31 31 36 32 38 34 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.5	51090	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3021	OUT	GET /pagead/adview?ai=C68uyKjKlZe_CE_zDxtYPm5W7QPTF3KV1jsqfyIkSsJAfEAQg7fipICgIYMmGoIqkpOARoAHVlZbaAcgBBqgDAcgDAqoE8QFP0OWebOl62_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZdj2A-QrpgPWL6bB-_ZJ88sHrLppZcUWI-P3JVo_LGi9lzgNrcX-FfCl_dsRKawsCGheujSZmkvsFgG0A0pagpwfyocqObEGH9iCu0CQmvYtaGY4qvMncqgtk9_doe4SJz7xzkY2H29k9RTkFzxf0AuuzDYCKCaALClYtHM9WWY7bG6WRLQtskzbmqIc8C6_SmgdSYvOyEoiqYJcXp9Mn63d0nBHdmOpwATzh_bGxQSIBfje479NkgUECAQYAZIFBAgFGASgBjeAB5Pq6aUCqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwHyBwQQy7Y70ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljVytiFv9-DA5oJHWh0dHBzOi8vaHd5NDBza2lkZWxpdmVyeS5jb20vgAoByAsBogwIKgYKBKy6sQLaDBEKCxCAlaKrzO3y3r0BEgIBA9gTDNAVAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=2OK5DMnborE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1219	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x968645d3f0043f1a0000000000000000","2":"0xf113b4c2fdb8c030000000000000000","3":"0xf24dd6d389272c7f0000000000000000","4":"0xc8967cd77c4bcfe00000000000000000","5":"0x2f755df7f9a57fb30000000000000000"},"debug_key":"5352976522603762881","debug_reporting":true,"destination":"https://hwy40skidelivery.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["457542357"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"13610605154947057601"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.5	51092	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3362	OUT	GET /pagead/adview?ai=CxEINKjKlZe_CE_zDxtYPm5W7QJqt8bJ00-zexMUR29keEAUg7fipICgIYMmGoIqkpOARoAGP8fz-AsgBBqgDAcgDAqoE5AFP0L6lLOl92_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZdj2A-QrpgvW2d1T71BlJiwMYsLTQEHkzAgH7pXU44hyfPz6RC4t5h9TDNzkKujZC6yrubRsmUvZFQCBAEuvgZzqyYffOrHzHNp3uEJlmfbYa2bNqfPScajYkN4oou_yId2RRFOGbOy3zpc8AbC_WwDafIkOuvlWq2WxD1jctEyhujU5t4oLuNDStLrCTeC8mc2fY6fWBoWBjBDABMrpwPe0BIgFgYKwvEuSBQQIBBgBkgUECAUYBKAGN4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBDLtjvSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNXK2IW_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&sigh=paM9AEoToeE&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1208	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xce75f8629f85660e0000000000000000","2":"0x4427632a5f783a7d0000000000000000","3":"0x1f9bf1cd1995cc340000000000000000","4":"0xfd3abb05a8d8c95b0000000000000000","5":"0x9d9f34b1fdb72450000000000000000"},"debug_key":"6211906213207278829","debug_reporting":true,"destination":"https://getapp.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["803158159"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"6238107949885699937"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.5	51093	216.239.36.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	1607	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325096141&gcd=11l1l1l1l1&dma=0&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&_s=2&tfd=4490 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 121 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:01 UTC	121	OUT	Data Raw: 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 4f 5f 5f 32 49 57 5f 33 34 4d 44 46 66 79 68 30 51 51 64 6d 38 6f 4f 43 41 26 5f 65 74 3d 31 33 35 30 0d 0a 65 6e 3d 61 64 5f 69 6d 70 72 65 73 73 69 6f 6e 26 65 70 2e 71 75 65 72 79 5f 69 64 3d 43 49 48 4b 7a 34 57 5f 33 34 4d 44 46 55 71 68 30 51 51 64 7a 35 38 42 72 77 Data Ascii: en=ad_impression&ep.query_id=CO__2IW_34MDFfyh0QQdm8oOCA&_et=1350en=ad_impression&ep.query_id=CIHKz4W_34MDFUqh0QQdz58Brw
2024-01-15 13:25:01 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:25:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.5	51095	192.184.68.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	861	OUT	GET /dpixel?a=p-n5vvLvRdjg0ek&eid=0&qc_google_push=&google_gid=CAESEE_TVboCMwwo9-ZQ1OGVJrk&google_cver=1&google_push=AXcoOmTtPDhc-WmUsdaNXtFh0WHfzg25hOMBAsFnSqfZbkENZlHkg5ItukozRuyb4-l_zmqhEOtLeOKSC9CmbbPXi1K477IEWRK9Jy8 HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: d=EEYBCQH0KoEA; mc=65a531f5-d309d-de80f-655d6
2024-01-15 13:25:01 UTC	487	IN	HTTP/1.1 302 Found Date: Mon, 15 Jan 2024 13:25:01 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtPDhc-WmUsdaNXtFh0WHfzg25hOMBAsFnSqfZbkENZlHkg5ItukozRuyb4-l_zmqhEOtLeOKSC9CmbbPXi1K477IEWRK9Jy8&google_hm=82nPL-gDAe41xcnm3Ha0dg Pragma: no-cache Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.5	51102	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	2056	OUT	GET /ddm/adj/N228601.3159GOOGLE/B30810225.378038567;dc_ver=99.292;sz=728x90;u_sd=1;gdpr=0;nel=1;dc_adk=1974493702;ord=yuhjdd;click=https%3A%2F%2Fwww.googleadservices.com%2Fpagead%2Faclk%3Fsa%3DL%26ai%3DCVHmZKjKlZfzlB_SextYP34a2iAXPzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_Q3BZ6hx1PJCUg3GpkGt-C9RqqzNj6uMdvPLsMSq2JmjFQpJc7mqgceGgxOeY5MsBrG2xNANrP3xJ5DjaHAT3oHCtw0OaVqvxYVJHmQW_nsBaqMXO8fnH5rYxqHMSUDOvCOnTw6jtd64UouL7ZsTO2KIeVBAqJqpXlnjcTZzZFVmUDj6y7wLtQRYY5-EdY-VS__w4cF_25MXvkYNsVMwvIsmbq1nhqV6KOyNbfCpi7b9b35alWn9hVaBbu9z0Wm6rF7znFUBKCt0E4QArFvbLZyQRYbVVF2Shr2kfE6f5ysqyA65Aw48AEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPbszIW_34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxDgopbYroOz1pwBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI_KLNhb_fgwMVdI_RBB1fgw1REAEYASAAEgKHoPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKlGAE%26sig%3DAOD64_0ad0bt9QwfP2EILrFN3Rw5skWKKg%26client%3Dca-pub-6163292317333011%26adurl%3D;dc_rfl=1,http%3A%2F%2Fmylovelybluesky.com%2F$0;xdt=1;crlt=C-l3qWwv;cmpl=8;gcsr=a;stc=1;asnm=1;sttr=39;prcl=s HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:01 UTC	549	IN	Data Raw: 38 30 30 30 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 41 63 74 69 76 65 56 69 65 77 45 6c 65 6d 65 6e 74 22 20 27 20 2b 27 69 64 3d 22 44 66 61 56 69 73 69 62 69 6c 69 74 79 49 64 65 6e 74 69 66 69 65 72 5f 32 34 36 31 35 39 39 38 39 22 5c 78 33 65 27 29 3b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 5c 78 33 63 64 69 76 20 63 6c 61 73 73 3d 22 47 6f 6f 67 6c 65 43 72 65 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 22 20 27 20 2b 27 69 64 3d 22 67 63 63 5f 4c 54 4b 6c 5a 62 6a 61 4a 61 4f 33 6f 50 4d 50 72 71 4f 2d 32 41 77 22 5c 78 33 65 27 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 76 61 72 20 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d Data Ascii: 8000document.write('\x3cdiv class="GoogleActiveViewElement" ' +'id="DfaVisibilityIdentifier_246159989"\x3e');document.write('\x3cdiv class="GoogleCreativeContainerClass" ' +'id="gcc_LTKlZbjaJaO3oPMPrqO-2Aw"\x3e');(function() {var m = document.createElem
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 64 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 6e 75 6c 6c 21 3d 61 26 26 35 30 30 3e 63 26 26 21 62 28 61 29 3b 2b 2b 63 29 61 3d 64 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 64 29 7b 6c 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 62 2e 70 61 72 65 6e 74 3f 6e 75 6c 6c 3a 62 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 64 29 7b 69 66 28 22 49 46 52 41 4d 45 22 3d 3d 61 2e 74 61 67 4e 61 6d 65 29 64 28 61 29 3b 65 6c 73 65 7b 61 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: e-2.0 */ var h=this\|\|self;function l(a,d,b){if(a)for(var c=0;null!=a&&500>c&&!b(a);++c)a=d(a)}function m(a,d){l(a,function(b){try{return b===b.parent?null:b.parent}catch(c){}return null},d)}function n(a,d){if("IFRAME"==a.tagName)d(a);else{a=a.querySelecto
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 32 20 69 64 5c 78 33 64 5c 78 32 32 69 6d 67 5f 61 6e 63 68 5f 43 50 69 6b 6f 6f 65 5f 33 34 4d 44 46 61 4d 62 61 41 67 64 72 70 45 50 79 77 5c 78 32 32 20 68 72 65 66 5c 78 33 64 5c 78 32 32 68 74 74 70 73 3a 2f 2f 61 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 63 73 2f 63 6c 69 63 6b 3f 78 61 69 5c 78 33 64 41 4b 41 4f 6a 73 76 42 47 42 68 6d 46 49 70 33 67 30 49 71 43 4b 79 4e 64 59 4c 74 42 5a 45 4f 33 5f 50 4c 39 67 7a 47 36 37 5a 4a 64 77 5a 7a 6c 4a 5a 2d 53 4f 5f 51 4c 6c 44 51 69 35 4d 37 41 5f 56 4b 54 72 77 75 76 38 46 72 42 52 69 6a 36 72 7a 5f 5f 34 6c 45 6c 57 4f 4b 35 38 78 56 32 4a 57 37 32 64 6f 50 59 47 6d 4f 69 74 62 33 6e 30 69 49 31 6e 65 45 36 6d 4e 74 74 63 76 75 65 63 37 6a 67 43 44 31 74 59 7a 53 55 44 69 73 47 38 38 Data Ascii: 2 id\x3d\x22img_anch_CPikooe_34MDFaMbaAgdrpEPyw\x22 href\x3d\x22https://ad.doubleclick.net/pcs/click?xai\x3dAKAOjsvBGBhmFIp3g0IqCKyNdYLtBZEO3_PL9gzG67ZJdwZzlJZ-SO_QLlDQi5M7A_VKTrwuv8FrBRij6rz__4lElWOK58xV2JW72doPYGmOitb3n0iI1neE6mNttcvuec7jgCD1tYzSUDisG88
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 57 5f 33 34 4d 44 67 41 6f 42 6d 41 73 42 79 41 73 42 67 41 77 42 6f 67 77 49 4b 67 59 4b 42 4b 79 36 73 51 4c 61 44 42 45 4b 43 78 44 67 6f 70 62 59 72 6f 4f 7a 31 70 77 42 45 67 49 42 41 36 6f 4e 41 6c 56 54 79 41 30 42 32 42 4d 4e 30 42 55 42 2d 42 59 42 67 42 63 42 25 32 36 61 73 65 25 33 44 32 25 32 36 67 63 6c 69 64 25 33 44 45 41 49 61 49 51 6f 62 43 68 4d 49 5f 4b 4c 4e 68 62 5f 66 67 77 4d 56 64 49 5f 52 42 42 31 66 67 77 31 52 45 41 45 59 41 53 41 41 45 67 4b 48 6f 50 44 5f 42 77 45 25 32 36 6e 75 6d 25 33 44 31 25 32 36 63 69 64 25 33 44 43 41 51 53 4f 77 41 76 48 68 66 5f 46 51 4e 46 68 45 50 51 72 41 45 42 38 5f 44 64 76 73 6e 33 58 64 54 68 54 5a 65 36 44 75 68 4d 6e 79 7a 68 32 42 41 77 51 30 4a 35 78 61 4d 5a 71 33 48 45 43 56 4e 62 2d 76 Data Ascii: W_34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxDgopbYroOz1pwBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB%26ase%3D2%26gclid%3DEAIaIQobChMI_KLNhb_fgwMVdI_RBB1fgw1REAEYASAAEgKHoPD_BwE%26num%3D1%26cid%3DCAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-v
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 5c 78 33 64 5c 78 33 64 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 5c 78 33 64 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 5c 78 33 64 5b 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 5c 78 32 36 5c 78 32 36 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 5c 78 32 36 5c 78 32 36 77 69 6e 64 6f 77 2c 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 73 65 6c 66 5c 78 32 36 5c 78 32 36 73 65 6c 66 2c Data Ascii: Array.prototype\|\|a\x3d\x3dObject.prototype)return a;a[b]\x3dc.value;return a};function ba(a){a\x3d[\x22object\x22\x3d\x3dtypeof globalThis\x26\x26globalThis,a,\x22object\x22\x3d\x3dtypeof window\x26\x26window,\x22object\x22\x3d\x3dtypeof self\x26\x26self,
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 66 28 68 61 29 68 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 5c 78 32 32 70 72 6f 74 6f 74 79 70 65 5c 78 32 32 21 5c 78 33 64 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 5c 78 33 64 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 5c 78 32 36 5c 78 32 36 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 5c 78 33 64 62 5b 63 5d 3b 61 2e 41 5c 78 33 64 62 2e 70 72 6f 74 6f 74 79 70 65 7d 76 61 72 20 6a 61 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 4f 62 6a 65 63 Data Ascii: f(ha)ha(a,b);else for(var c in b)if(\x22prototype\x22!\x3dc)if(Object.defineProperties){var d\x3dObject.getOwnPropertyDescriptor(b,c);d\x26\x26Object.defineProperty(a,c,d)}else a[c]\x3db[c];a.A\x3db.prototype}var ja\x3d\x22function\x22\x3d\x3dtypeof Objec
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 73 69 6f 6e 5c 78 32 32 29 3b 72 65 74 75 72 6e 2d 31 21 5c 78 33 64 5c 78 33 64 74 68 69 73 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 70 28 5c 78 32 32 4e 75 6d 62 65 72 2e 69 73 46 69 6e 69 74 65 5c 78 32 32 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 3f 21 31 3a 21 69 73 4e 61 4e 28 62 29 5c 78 32 36 5c 78 32 36 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 5c 78 32 36 5c 78 32 36 2d 49 6e 66 69 6e 69 74 79 21 5c 78 33 64 5c 78 33 64 62 7d 7d 29 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 Data Ascii: sion\x22);return-1!\x3d\x3dthis.indexOf(b,c\|\|0)}});p(\x22Number.isFinite\x22,function(a){return a?a:function(b){return\x22number\x22!\x3d\x3dtypeof b?!1:!isNaN(b)\x26\x26Infinity!\x3d\x3db\x26\x26-Infinity!\x3d\x3db}});/* Copyright The Closure Library Au
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 41 28 5c 78 32 32 45 64 67 2f 5c 78 32 32 29 29 7c 7c 42 28 29 5c 78 32 36 5c 78 32 36 7a 28 5c 78 32 32 4f 70 65 72 61 5c 78 32 32 29 29 3b 76 61 72 20 6f 61 5c 78 33 64 7b 7d 2c 44 5c 78 33 64 6e 75 6c 6c 3b 76 61 72 20 70 61 5c 78 33 64 5c 78 32 32 75 6e 64 65 66 69 6e 65 64 5c 78 32 32 21 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 2c 71 61 5c 78 33 64 21 6e 61 5c 78 32 36 5c 78 32 36 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 62 74 6f 61 3b 76 61 72 20 72 61 5c 78 33 64 21 77 2c 73 61 5c 78 33 64 21 77 3b 76 61 72 20 45 5c 78 33 64 5c 78 32 32 66 75 6e 63 74 69 6f 6e 5c 78 32 32 5c 78 33 64 5c 78 33 64 5c 78 33 64 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 5c 78 Data Ascii: A(\x22Edg/\x22))\|\|B()\x26\x26z(\x22Opera\x22));var oa\x3d{},D\x3dnull;var pa\x3d\x22undefined\x22!\x3d\x3dtypeof Uint8Array,qa\x3d!na\x26\x26\x22function\x22\x3d\x3d\x3dtypeof btoa;var ra\x3d!w,sa\x3d!w;var E\x3d\x22function\x22\x3d\x3d\x3dtypeof Symbol\x
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 20 4b 2c 7a 61 5c 78 33 64 21 77 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 5c 78 33 64 46 28 61 29 3b 69 66 28 64 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 78 32 36 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 47 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 76 61 72 20 4d 2c 41 61 5c 78 33 64 5b 5d 3b 47 28 41 61 2c 35 35 29 3b 4d 5c 78 33 64 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 41 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 66 75 6e Data Ascii: K,za\x3d!w;function L(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d\x3dF(a);if(d\x261)return!0;if(!(b\x26\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;G(a,d\|1);return!0}var M,Aa\x3d[];G(Aa,55);M\x3dObject.freeze(Aa);Object.freeze(new fun
2024-01-15 13:25:01 UTC	1252	IN	Data Raw: 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 5c 78 32 32 6e 75 6d 62 65 72 5c 78 32 32 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 78 32 32 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 5c 78 32 32 6f 62 6a 65 63 74 5c 78 32 32 3a 69 66 28 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 20 7a 61 7c 7c 21 4c 28 61 2c 76 6f 69 64 20 30 2c 39 39 39 39 29 3f 61 3a 76 6f 69 64 20 30 3b 69 66 28 70 61 5c 78 32 36 5c 78 32 36 6e 75 6c 6c 21 5c 78 33 64 61 5c 78 32 36 5c 78 32 36 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 Data Ascii: (b)} function Fa(a){switch(typeof a){case \x22number\x22:return isFinite(a)?a:String(a);case \x22boolean\x22:return a?1:0;case \x22object\x22:if(a){if(Array.isArray(a))return za\|\|!L(a,void 0,9999)?a:void 0;if(pa\x26\x26null!\x3da\x26\x26a instanceof Uint8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.5	51098	34.96.105.8	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	817	OUT	GET /v1/api/sync/AdxPixel?google_gid=CAESEID20FdYjnYJueimX1zs2WI&google_cver=1&google_push=AXcoOmSXuAXQ02yhFRcDGwMMSAmvwiBMi_7MfOumNkm2KiEcZB4iwbpR7tMo9ispAVU61bb2jggHKu5HPL1HOdRHDTdSIG7RGOSV9Q HTTP/1.1 Host: tr.blismedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: b=65A5321EFD370CDA819C147DBLIS
2024-01-15 13:25:01 UTC	670	IN	HTTP/1.1 307 Temporary Redirect Location: https://cm.g.doubleclick.net/pixel?google_nid=blismobile&google_push=AXcoOmSXuAXQ02yhFRcDGwMMSAmvwiBMi_7MfOumNkm2KiEcZB4iwbpR7tMo9ispAVU61bb2jggHKu5HPL1HOdRHDTdSIG7RGOSV9Q&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS Set-Cookie: b=65A5321EFD370CDA819C147DBLIS;Version=1;Domain=blismedia.com;Path=/;Max-Age=31540000;SameSite=None;Secure Content-Length: 0 Date: Mon, 15 Jan 2024 13:25:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.5	51108	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3017	OUT	GET /pagead/adview?ai=C4ui_KjKlZe_CE_zDxtYPm5W7QL-vlNBtr4uttrARsJAfEAYg7fipICgIYMmGoIqkpOARoAGd9tGaAsgBBqgDAcgDAqoE8AFP0LzjQul52_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZaD1A6QroQPWLv_SvvRJ88sHrLppZcUWI-P3JVo_LGi9lzgNrcX-FfCl_dsRKawsCGheujSZmkvsFgG0A0pagpwfyocqObEGH9iCu0CQmvYtaGY4qvMncqgtk9_doe4SJ0KQwGk2H29k9RTkFzzsIbvQzDYDKB3PCF1ttAgzWjo8bCaGaZQosoXwuKIV4fvzQXW1QanOxF7K0O0vzZJun6PLLEkWbYjABIajr4KTBIgF2eTq-UaSBQQIBBgBkgUECAUYBKAGN4AHy4mu5QGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBDLtjvSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNXK2IW_34MDmgkWaHR0cHM6Ly9nb3NxdWVlemUuY29tL4AKAcgLAaIMCCoGCgSsurEC2gwQCgoQsIX_p-OI4PdREgIBA9gTDYgUAdAVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=vSFgy0F0qjM&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1214	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xd050ad239917bd240000000000000000","2":"0x477541ac67aaed9a0000000000000000","3":"0x84c3e42bb9a1c6dd0000000000000000","4":"0xeafba4775d5168cf0000000000000000","5":"0x2397c09bc88fbd4d0000000000000000"},"debug_key":"13057106474318192039","debug_reporting":true,"destination":"https://gosqueeze.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["592739101"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"11770994158332446801"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.5	51112	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3040	OUT	GET /pagead/adview?ai=CmiNgKjKlZe_CE_zDxtYPm5W7QMG0zKp1z4CQgcoN17H0j7ABEAcg7fipICgIYMmGoIqkpOARoAHp_fXPA8gBBqgDAcgDAqoE5AFP0KjeZ-l42_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZdj2A-QrpgvW091T4DpHQDYMYsLTQEHkzAgH7pXU44hyfPz6RC4t5h9TDNzkKujZC6yrubRsmUvZFQCBAEuvgZzqyYffOrHzHNp3uEJlmfbYa2bNqfPScajYkN4oou_yId2RRF2jQK23zpc8AbC_WwBBLOoPuvlWqxW1K1LRtFXDmlQ4t4oLuNDStLrbL8DdmM2fY6fWdoGlhh3ABKX_6MbCA4gF09Gh-S-SBQQIBBgBkgUECAUYBKAGN4AH57SUxQGoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G9gHAfIHBBDLtjvSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNXK2IW_34MDmgk4aHR0cHM6Ly9iZXN0c2VhcmNoZXMubmV0L2luZGV4LnBocD9yZ2lkPTEyMjI1NiZzdWI9Z2NsaWSACgHICwGiDAgqBgoErLqxAtoMEQoLEND6u6eojdnSjQESAgED2BMMiBQD0BUBgBcBshccChoIABIUcHViLTYxNjMyOTIzMTczMzMwMTEYAA&sigh=LGgK9FvXV-I&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:01 UTC	1216	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xa7dcc8f1697a0d5d0000000000000000","2":"0xf71b6e1dfbf5544d0000000000000000","3":"0x42d9e7fff2b71c380000000000000000","4":"0x392ff4eaccfd05da0000000000000000","5":"0xd4321ae33412a9610000000000000000"},"debug_key":"10862971971016206601","debug_reporting":true,"destination":"https://bestsearches.net","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["972914409"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"2502421654147982705"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.5	51114	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3029	OUT	GET /pagead/adview?ai=CtfwCKjKlZe_CE_zDxtYPm5W7QIC6g4N1pOn5zf8QZBAIIO34qSAoCGDJhqCKpKTgEaABuPSz_APIAQaoAwHIAwKqBOMBT9CH90fpd9v4cM3FSIX9BbDp8NdVGZPhUZEmr3HOJUbDyRlXK6MNfsCeEa2K8OHhNhsL4QUR7c2Jmg0SsuAtZptx_90UihmCx2XY9gPkK6YL1tndU58kPzsuDGLC00BB5MwIB-6V1OOIcnz8-kQuLeYfUwzc5Cro2Qusq7m0bJlL2RUAgQBLr4Gc6smH3zqx8xzad7hCZZn22Gtmzanz0nGo2JDeKKLv8iHdkURooQlsVilCNV4-eJ465BwDqyrQfT5lyEXWzwRJrfLEPxsHIJrQ3qASx0GoTZXvn22xWwb8ywLABK6S3Z6dBIgFqe-k0keSBQQIBBgBkgUECAUYBKAGN4AHsIvMA6gHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4b2AcB8gcEEMu2O9IIHwiAYRABGB8yAooCOgSAQIBASL39wTpY1crYhb_fgwOaCTRodHRwczovL2luZm8uY2FsbG1jLmNvbS9jcC1oZWFsdGhjYXJlLXNhZmUtaG9zcGl0YWxzgAoByAsBogwIKgYKBKy6sQLaDBEKCxCQ3v2PuYKhyJABEgIBA9gTDYgUB9AVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=zz3Jh9V2N50&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67kGAE&template_id=492&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	1211	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0x1745ec5366dfdb5c0000000000000000","2":"0xc3f2d7866f7592f00000000000000000","3":"0x18b6e986885f4b3e0000000000000000","4":"0xb00180a9b18204420000000000000000","5":"0x7e05d67bd0ca4d2a0000000000000000"},"debug_key":"12986347015724211333","debug_reporting":true,"destination":"https://callmc.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["1066203704"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"2964339603349531809"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.5	51110	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:01 UTC	3161	OUT	GET /pagead/adview?ai=C3UstKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEurptLX5ARABIO34qSBgyYagiqSk4BGgAZLM7PECyAEJqAMByAPLBKoE9AFP0AUrt2pKV0TQz4meDbq3gqBTmzB0Czgtei0xhNc1p3gbN616RxE3mZdqnO6i0hbKQxIHGHjJiWm7SIWbPHgMA3GgMLsX1GnzcfIYdOCmWEfAQWyjlh6R_Kol6qQxyTHTZs3cdvQFo7z32Oml3hTqXimBA6EquJibHrQI72m-X4IQuMj1XOheSWhb7w11VocQw8VwjSiFcqQlYrFyp1M5caCR98ALmGgSogNc5aomoz-SjawzO4easQUwtXjRVuFI5sOMZCV5onvFPdqHFXKiS23UIe4jskqsByUWRN4RU7PhDYS0lYJqvy0xzwVkYBh2gSKOwAT96_78iwSIBYWZvuNGkgUECAQYAZIFBAgFGASgBi6AB9azk44BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhvYBwDyBwQQ-JU90ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOljql8-Fv9-DA5oJggFodHRwczovL2J1c2luZXNzLmdvb2dsZS5jb20vdi9kZXN0eW5hdGlvbi1jYXItcmVudGFscy8wODk5MTA1NjQ1MDU3NjUyNjE2Mi9iNDMxL18_Y2FpZD0xODk5OTExODk4MSZhZ2lkPTE0MDY1Mzg2ODU0MSZnY2xpZD17Z2NsaWR9gAoByAsBogwIKgYKBKy6sQLaDBAKChDgmpzItrf2uHsSAgEDuBOIBNgTCtAVAZgWAYAXAbIXHAoaCAASFHB1Yi02MTYzMjkyMzE3MzMzMDExGAA&sigh=Rx3UazYTkqQ&uach_m=%5BUACH%5D&ase=2&nis=4&cid=CAQSOwAvHhf_Oc0BdNyVM9Ng2e6hqlFcLj8n6p81Wx-81tbul3xuivjxRRb-15pxi-Zw86ILoR6uONeRjYVHGAE&template_id=520&cbvp=2&vis=2 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xb3364092e455e8bc0000000000000000","2":"0x7defb222b84496df0000000000000000","3":"0xf169d2948f0a32db0000000000000000","4":"0x6081d0c55f5bfa400000000000000000","5":"0x26b89abaaf7dcb4f0000000000000000"},"debug_key":"5487910243665208333","debug_reporting":true,"destination":"https://google.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["775628306"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"16224707101758176481"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:01 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.5	51118	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3082	OUT	GET /pagead/interaction/?ai=ChN0oGzKlZdeiKMLDxtYP6uqP6AXUnfD5XO_GsfWkC9CQgOyQAhABIO34qSAoCGDJhqCKpKTgEaABzfH24gLIAQaoAwHIAwKqBOQBT9Amiwext3f_Tu29bEkasa7653Dic745UHE_DdmehsRQIPZGw2HNWZRNBBk-GQYqH6SAkH-2yvKUCCT2dAKValApmELmfqNzxJ6DYS0pz3XK8VZ6oDbPupDNQSDuTgkkpNqp7yX7zwS0N7ZLWO0JM8-08UeAYadjuAC-qdmHPdTo8ZdwGEqmtQ9IVuq5aCazoeEgPOzPuA-PnNifiwcpkfCT-PxoK3uX9RwLNXc1yAyrmtOQV3XYKQDEo46rfCOrduH4E-VZEP4hEw5fmQWQjwn-xNKztJParSkUnX97173rEvsRwATfrJGZgwKIBfXs34gHoAY3gAebjomdAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPfm2f6-34MDsQlPWCIGEl69iYAKAZgLAcgLAaIMCCoGCgSsurEC2gwQCgoQ8NT207K02t02EgIBA6oNAlVTyA0B2BMNiBQE0BUB-BYBgBcBshgFGDciAQA&sigh=gillTeOFMiI&cid=CAQSOwAvHhf_q9cwDEMYWCVglMzYHTk4WCpMH4qmJ1JEHHQJM5W2OzFRH6q5Mm7mVZ509xOtSBgpXf4KeoLx&label=window_focus&gqid=GzKlZf3EJ9bNoPMPrp-HiA8&qqid=CJec2v6-34MDFcKh0QQdavUDXQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=3581852648&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325081&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325079914&bpp=8&bdt=1609&idt=1644&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=4088&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=1662 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.5	51120	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3127	OUT	GET /pagead/interaction/?ai=CKs2IGzKlZYbsKfXExtYP77236Am71fGpdfnl7oWXEtvZHhABIO34qSBgtwSgAY-4hf8DyAEJqAMByAPLBKoE5gFP0E4GXgK9QC-09YRW_FKnEb8fm1Xgnj7wad9vAfH2j8d9KqfhsldI4Z6nZR4Vn_lyHXzvJGxTsnK6nWDNDvrx9uRdFUwnHRfaLQV-KkYd5DKjS4qo6NWvLBpp8fcY1TYt_DP51eCNOdXypVfXbpI6TgjTBtZrAxkcxISNCxVMicKBDJLTydNSp2mz8rCoPWfCR20n9SFFZZRemTYdgSNeN2XuIKaGpbQDU8cAui_T4O2leXaprL6bIEA6vfi2u2YpilIu1QGHfSmvIGK8zuFkiRCWWdPXgLDijZhVj78-exuv5V2ggsAE8ILHpM0EiAXJz5fFSaAGLoAH2cd6qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY37Db_r7fgwOaCSNodHRwczovL3d3dy5pY2lzLmNvbS9leHBsb3JlL2Fib3V0L7EJKNfntMS7TnSACgHICwHgCwGADAGiDAgqBgoErLqxAtoMEQoLEODhzJvBo_jm7wESAgEDqg0CTkfIDQG4E-QD2BMNiBQE0BUBmBYB-BYBgBcB&sigh=0hSWIxV9lf4&cid=CAQSOwAvHhf_ePb_uKfdiAwO-pZThza21GhyZleqevBNjBjfjszfTC2yqDnCapbdVJwwr_Qfzc1p3TFVCJOy&label=window_focus&gqid=GzKlZZ3vKNGVoPMP1bS_iAU&qqid=CMbl2_6-34MDFXWi0QQd794NnQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325082&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325079925&bpp=4&bdt=1619&idt=2307&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=2351 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.5	51141	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	1070	OUT	OPTIONS /pcs/view?xai=AKAOjsuJJzhtifYpceDyc0RRJl5mmUlFu0i8ArISNTn87dpk2LkB9BNJvb1HFkJLoj8zyUGyAMUUz_v-ZBUNviXQx7mEnWIoLaBA2qFcjIZXPhqwJBfHVYM0Z1nkIC9w7XO6jtPE6IskLaWf-xtH67FIx79k38nwjswcgFzh8YBc4REWbx1RQ-a_5tovGSQXu3zDmdo&sai=AMfl-YT3w_f069_pR9P0PGweDE0QvPepJB4lcTrdxVdsGm340ClRZlWnEkTKo4c2geI9NHBuFUDfW6xNewLtnOz7FQbemf_JLfolzYl65g&sig=Cg0ArKJSzD2isLDuxzY4EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20240109.03571&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: attribution-reporting-eligible Origin: https://googleads.g.doubleclick.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:02 UTC	675	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: attribution-reporting-eligible Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:02 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.5	51139	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	831	OUT	GET /pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmTb8M6WaBdVD-tiaORcKUKHq8ie2PBxXFkO-m-1AEVtWcxzqhi_F34lwh_hNBlOsJS5mKNPfzcZPb5MaEY9f8XCOJLBLaeyuA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.5	51137	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	950	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAACjsqaDTbTDANPRTk9AAAAAAA&expiration=1705411500&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmQelrR0_Yned384IxkGpatfGdXF0H5xIowJ-GLR6s4fvvzw4SO1bJlLC4JZbJ19skP5WxBFYni5q6a5O94Sz7jpqo659_K8DADkPdZWsTJ7iGbt93dKsDu1cXhCaEFiGsOkBiP6PjPmme1_EAOhjyfUAsg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.5	51143	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3505	OUT	GET /pagead/interaction/?ai=CLoUvHjKlZZmQLpydxtYP6tGToA3Pzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_Q6lPD97vu90mECqvKw_gGve7R4oXlpA3eXLXpzGvYtXK-SXaMJfIVyeG73cLlx6mKj_zfDU0AjvFNqE6r-4X8TZhIrfkvcy1tz6IWjUkomsrXjEIHqT7fC_g48cVqAG7Qzo9XbDr67VI9jjBdf4pGkaUoaU69A42W2Iqvocym8gCaHlJynMnpi-1waCpUkT9FPSaCxbLSndhl-vgqb7SrLDXrQkmhf3GVASbpJM_VnoyCQE9zmg0Bz3M6hrXGgRmvU0yZlvlvZ5ANKjEXfA9J4w5224qPuGomswd51d5_HT6vl2RmdQh4wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY9-OWgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEIDkhd7N9tTiPBICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=SX-h4_0Wx8k&cid=CAQSOwAvHhf_j-TIAzH-NcAs8dPq5-NGrv2KmgL6AxY9vXpvMWU96TXf4D5IOQhbKDBU7UgA6NzorcJ1anbw&label=window_focus&gqid=HjKlZfWeLfqKoPMP-fqM8Aw&qqid=CJmXl4C_34MDFZyO0QQd6ugE1A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=4276297273&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280&nras=3&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1703&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=597 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.5	51153	172.253.62.106	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	791	OUT	GET /recaptcha/api2/reload?k=6LeJMoAUAAAAACbUMPtSuirI3bekuJhTweu2XOzk HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09APYnBZWDToWxmAZLFlavWtGdby7zc8-nMWhAo2lg2348MJAGV6Oysu7MRBOiIHUpJkuugkHOMt3EKBBPOHgSbDU; NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:02 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Mon, 15 Jan 2024 13:25:02 GMT Expires: Mon, 15 Jan 2024 13:25:02 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:02 UTC	217	IN	Data Raw: 64 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: d3<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-01-15 13:25:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.5	51144	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3515	OUT	GET /pagead/interaction/?ai=Cs7p7HjKlZYLRLv6H3rsPhrWYyAPPzv6ida6FmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTpAU_QWAetWlXYxJ4P35B4S1GdnnnXiQR_g1fPK7Eee5ugT90o_0Lh0GXtwHen3m0jmdUuH51Cf6jCHivqNV7BJjW5TdXkeq83lu_1xmztvExAdHJ02eSiyGgc_TCu0QkY5Lt4kqD5BNM-5y4HdJc8LY-0ajdJe85voQNmnpkfL67G6kG7sw_69ZdP1KGLRf4SRA8GavlI_j9J3lnqoS-2O-hmSQYH_2r9Gjr0-WhZE3afTjWn2pEfjAlCfEolFwydCodXD8PI9P4Zq-GbPb9IV4Chn92ehmc6sMqcrTGfjvZbiCCTsyVcM1g_wATNw5y-uwSIBd6erJlNoAYRgAeK49Y_qAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpYpKSXgL_fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAtoMEAoKEOCq-NqXhdqUQxICAQOqDQJVU8gNAdgTDdAVAfgWAYAXAQ&sigh=x-4FA4XAVbA&cid=CAQSOwAvHhf__if2DD1OPkjIY9AP7Lz5smvIi3Bqa9UabETuV1ltwwCrep3QUsTaAgWf_nDWvu4q8kwFpAlm&label=window_focus&gqid=HjKlZdLxLarJoPMPxeWR8A0&qqid=CILYl4C_34MDFf6DdwEdhhoGOQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=907350476&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6697&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280&nras=4&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2831&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=3&fsb=1&dtd=629 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:02 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.5	51162	104.18.25.173	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	993	OUT	GET /i.match?p=b6&u=CAESECq1lDK3v6n0YL5sG2OySfo&google_cver=1&google_push=AXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4&redirect=https%3A//cm.g.doubleclick.net/pixel%3Fgoogle_nid%3Dexp%26google_push%3DAXcoOmTobVFb4-UVapVKKbSYafTNg8RojYPyOE_xWbwbAhv5Bvx1klRGhjZZPsr4Q4xJSqwJIpVg54JsgD7B4XGbmrHERvqeJjhf8z4%26google_ula%3D2786954%26google_hm%3D%24TF_USER_ID_ENC%24 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID_old=afntAZcmge06ousnA6NvPC9WoheeOUPZbOiYepqNY4aAOaUQKsG4QsdZaXWCZaUKnZbocIgC3QZc36vtaEMSSq3PT1qMWO3XVMPJ57; ANON_ID=apnteZbRkP6i6eCno6mTrt0nAdhZairsBl6McRUCVhbO2VQvFcK1VUCQosZdCyg66pTevF4UZaTPQaGdBN4bYGfXfEZaabDanqBZbM
2024-01-15 13:25:02 UTC	827	IN	HTTP/1.1 200 OK Date: Mon, 15 Jan 2024 13:25:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a3nteZbM0ing9PBmSTBpS9vRVD9hZaY8J4PZacAvE45nAxtMRZaq8E2bVFuFZcK5vuRvWIwZb4EvptEZdZcSZaIKEMqfHvMJpUyaO6Bgc; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:25:02 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a3nteZbM0ing9PBmSTBpS9vRVD9hZaY8J4PZacAvE45nAxtMRZaq8E2bVFuFZcK5vuRvWIwZb4EvptEZdZcSZaIKEMqfHvMJpUyaO6Bgc; path=/; domain=.tribalfusion.com; expires=Sun, 14-Apr-2024 13:25:02 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 845e7144b9a15790-IAD alt-svc: h3=":443"; ma=86400
2024-01-15 13:25:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.5	51140	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	894	OUT	GET /pixel?google_nid=dotomi&google_ula=17128,0&google_hm=AAAB9JqIIl7rAwMZjHwkAAAAAAA&expiration=1705411500&google_cver=1&is_secure=true&google_gid=CAESEE1R--ugZAMGezuWSDz-cmY&google_push=AXcoOmQHUJT8PIlimOu-CXh6oKF6FUegxb0mep4oqaLpPp31dfmS1uHKqXR2H7v7jgmCACjqSqRhKI_IVG0jpncC_fd4cWr6jEQ2jWY HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:02 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:02 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.5	51145	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3369	OUT	GET /pagead/interaction/?ai=CJjvuHjKlZbHuN8z2xtYP3_21gAXS4Nfgbo-ktpOTCsCNtwEQASAAYLcEggEXY2EtcHViLTYxNjMyOTIzMTczMzMwMTHIAQmoAwHIAwKqBNoBT9AF04bvTXo-0y_xyAfNR5QNIrYvpuT2U7Uk32Zi_bWVY5tuQDZ61fDMPquDUGd92pE_rRtQ0bHrd-SR8L2DXIDvNsGL84y0ugr71i3X-FdZI9u_q9XipmzI1jmCoOTe3TM1trvK5olX0_IT_Eq-6p-uqyk9-qTjVI8C7rw9gnflsfLcluh473pmE1XnyFa1kAuwUmU8NSUZ5aLPVLeZ6bYbR1zq0izLihus-USukXevw3DOzP8v7adOOX75rlKAEaZXMaYfZtpKR8rUc0m3QT-_3mEZpPf_b3iABsDSn4bIuLH48QGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggdCIBhEAEyAooCOgSAQIBASL39wTpY576ggL_fgwP6CwIIAYAMAdAVAYAXAQ&sigh=HQqXEYrfVDI&cid=CAQSOwAvHhf_9NAQ_m9izwKV3fyEZK_UF5pBxIMbh5zIjxlr6KtNXPfWSMNeYtvpXYfYrd37MBi7MebbZTRj&label=window_focus&gqid=HjKlZYrxNs2YoPMP8ve82Ao&qqid=CLH1oIC_34MDFUy70QQd334NUA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=3186213915&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325085&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-sidebar-primary&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325085003&bpp=1&bdt=6698&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C1200x280%2C360x280%2C360x280&nras=5&correlator=1063240671184&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325081&ga_hid=11741920&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3867&biw=1263&bih=907&scr_x=0&scr_y=582&eid=44759875%2C44759926%2C44759837%2C95320238%2C31079437%2C31080262%2C31080334%2C44795922%2C95322184%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&psts=AOrYGsnabHYWvkT5vP0majs43254SSS7xXZARWWWBchTeo4tJIqqi8yRcqaJu7FbYeh4RAkU5BH2LS6Q1lXV0lxVIQ%2CAOrYGsnbs3I0l54D5yh2Cpzgx-5A5Pf6FC1oa9uRCQz4zWx555i5QLX8ju1E8dMsxm6fE3yc65vzrULGGBOXF8wDUAHRfdTTReWFfPcZCp_RpxnQ_TltfiBOsWHJ7mIXWvGirlu0okjLK29OdRKTVyIY5IxKZUtEWgePj5XvlaOWqU_RcfcY1LmESxUFaP3GciqSb6QncplLIK55-daflMwvH9oBuEsjl2tTAxWLrhGMtnAr0zTv8kTZ4pVfZcKHxE2Qj6dSC8MTJRcdzui2ri_Oy-einrNI7L6ah79S93pR0JajCZ7dtEWZf6ISRYocPQ&pvsid=3866483433305748&tmod=347032164&uas=0&nvt=1&topics=1&tps=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=7&uci=a!7&btvi=4&fsb=1&dtd=650 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.5	51155	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	1075	OUT	GET /f/AGSKWxUTNZrXrKk8OpjzjOBLlourI9R2wyM3KPZmrj-SGxIzso3WZrcjLZie6radadF3OzFLJtYLKnzETKrR0i5NcC9y9tDx5wWv-tqcepIqKQVukSuw4S-5rL-BH4OiniVFSgYhmZ3x4NFq4CuhJN81OmWY6jBl0hq7sQqWWwlCwfITvwfhU2zAMGSVhRY9/_/austria_ad./prodprebidheader-/bannerfarm._textads/://adv. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:02 UTC	1605	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:02 GMT Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0XKKabQDZSwWG5734WgKQg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:02 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 30 32 63 64 30 61 33 38 2d 31 37 37 38 2d 34 38 63 36 2d 38 31 65 66 2d 34 61 65 32 39 34 32 30 63 61 39 38 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['02cd0a38-1778-48c6-81ef-4ae29420ca98'] = true;
2024-01-15 13:25:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.5	51146	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	1822	OUT	GET /pagead/interaction/?ai=CKetIGzKlZbrfJ4_5xtYPo8aUgA3Pzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_QAAhdagjKtNntVn87d5H5N95grCFHZhjqIldcfAh4qr9x60N1eiP38Th5YDvSNpp0BvpuRKyBAWGrN-yPHdStuuNRHjow5vizADtU9sU-ModOV4GRplXw-NJ5NjpdzsJlNXbf4_OKhUWjTOUVCZTahmsF0W77Ti9_WH3FiKiUu-iW8Vjq466PN1aTHf9N_Y14wjaIWGTvyAGPKKXtWLbifcCNzMSPXGxDl4HhoS47X60CW_zHnH9fJ0O9xOKWDxmPuKaqcyx9bi_2VEhLMttN_7D_398LCm3BNirgmS_-vRzilzzK4cAEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WP6m2f6-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxCQ7-W9iZ3k3ukBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=rZ-VKM24ENg&cid=CAQSOwAvHhf_Ltg70bOvBrbWqd9lFAgr5-59MJtW-0rxVneVBTRFZKzU6KSbuoEKr4C5Q_7lPhgkSuu2vKkG&label=window_focus&gqid=GzKlZb6BJ9u0oPMPqPeFuAw&qqid=CPrY2f6-34MDFY-80QQdIyMF0A&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.5	51160	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	858	OUT	POST /el/AGSKWxW9_aOJ6pkWvpProOECCB9acoW9zXAMzPhkRhzCbGOEN6YZ7pj7m31aK-7ohUZrsrGunK00PhHQL1vrTowyBKEAQvUXHFeqh1o7sERlxZaHCL9eL_WpxMOo3lZnZG2pNTg3nDF7SQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:02 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 31 30 31 33 39 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325101391,null,null,[[1,1]]]
2024-01-15 13:25:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:03 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-07X5568IW9Uk3O778HXgyw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.5	51154	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	858	OUT	POST /el/AGSKWxW9_aOJ6pkWvpProOECCB9acoW9zXAMzPhkRhzCbGOEN6YZ7pj7m31aK-7ohUZrsrGunK00PhHQL1vrTowyBKEAQvUXHFeqh1o7sERlxZaHCL9eL_WpxMOo3lZnZG2pNTg3nDF7SQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:02 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 31 30 31 34 31 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 32 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325101419,null,null,[[2,1]]]
2024-01-15 13:25:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:03 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-TQEmgiIb8gXgBFUeUpDpHg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.5	51161	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.5	51157	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	3045	OUT	GET /pagead/interaction/?ai=CRn4qKjKlZe_CE_zDxtYPm5W7QNSd8Plcm7SZp5EL0JCA7JACEAEg7fipICgIYMmGoIqkpOARoAHN8fbiAsgBBqgDAcgDAqoE5AFP0POtMOl-2_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZaD1A6QroQPWHO66y-1J88sHrLppZcUWI-P3JVo_LGi9lzgNrcX-FfCl_dsRKawsCGheujSZmkvsFgG0A0pagpwfyocqObEGH9iCu0CQmvYtaGY4qvMncqgtk9_doe4SJzqt5X01H29k9RTkFzxiRVTRjjQzuvlWqxjUHwzVtHCTgjwJt4oLuNDStLr-f9i1qc2fY6fWe-CR2BnABN-skZmDAogF9ezfiAegBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY1crYhb_fgwOxCU9YIgYSXr2JgAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQxImWgYD-hY8BEgIBA6oNAlVTyA0B2BMNiBQD0BUB-BYBgBcB&sigh=sylM6owGxs0&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67k&label=window_focus&gqid=KjKlZa3ZEq_KoPMP8Y22-A4&qqid=CO__2IW_34MDFfyh0QQdm8oOCA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.5	51163	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	801	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmSWdQlnelggeqzsGYn4RL9bgsfbgFyQIYWl_3K9de0FlDl4L9PoBle-aRC9lvZMomnO0GmPvs27-nieQa-DRR9EXNnVQFcIgCk HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.5	51138	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	871	OUT	GET /pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmSPHnfGZgS1NpL7zRJYTP1od-KTjZH1OG7RA8KRrqumnHiepjBubgwzSGuOHqzWiyIF1akEIplPFVn4JQ3FyvyGjXceNxB6C7I HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.5	51164	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:02 UTC	1822	OUT	GET /pagead/interaction/?ai=CVHmZKjKlZfzlB_SextYP34a2iAXPzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_Q3BZ6hx1PJCUg3GpkGt-C9RqqzNj6uMdvPLsMSq2JmjFQpJc7mqgceGgxOeY5MsBrG2xNANrP3xJ5DjaHAT3oHCtw0OaVqvxYVJHmQW_nsBaqMXO8fnH5rYxqHMSUDOvCOnTw6jtd64UouL7ZsTO2KIeVBAqJqpXlnjcTZzZFVmUDj6y7wLtQRYY5-EdY-VS__w4cF_25MXvkYNsVMwvIsmbq1nhqV6KOyNbfCpi7b9b35alWn9hVaBbu9z0Wm6rF7znFUBKCt0E4QArFvbLZyQRYbVVF2Shr2kfE6f5ysqyA65Aw48AEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPbszIW_34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxDgopbYroOz1pwBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=90j_1GsJxqE&cid=CAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKl&label=window_focus&gqid=KjKlZaGCB6PLoPMP3fG6gAk&qqid=CPyizYW_34MDFXSP0QQdX4MNUQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.5	51170	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	933	OUT	GET /pixel?google_nid=blismobile&google_push=AXcoOmRsyfmssQvlfgCMIxYiuCM7UJGGFPYm6LjzV82_59PxamG4vKclbfhCb5E95v9kpy0_Y0v8nTaJTVy06HW1c7aGcKF82arnvA&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.5	51172	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	857	OUT	GET /pixel?google_nid=1024&google_ula=1641347&google_hm=ODIwOTgyMzk3MTg2MjQwNzM3OQ&google_push=AXcoOmQAM6iz3S6L8BZ4luW_x_vWTBswUNOvmkN9Fm7ymub2lZeKCdXGLUEYKkROurc9Ohpw3Sn9CN5TvfUsSAqWoZe4DVyUqVJ2zeL5e8Rc6AKhtx5ZdK4kTZFPFzh86xrpcf7ipFVST3niqISjPbr2Ng3fgKM HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.5	51178	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	847	OUT	GET /pixel?google_nid=simplifi&google_hm=690F5FB948B2412881DA26E47E140F91&google_push=AXcoOmTKWZ3yMf-3_CsEXUqjAdlIV_5gFGzWhnooUcJ8VlTI6sCXsUWxg9WBixS_Y77eZusjVUhr3Xu3sCcuwGMLYI7ITQ4BTuZDWmml_bwNLtn_KLhsquxail4EYcn9cKpeU0IJgs0DWedPcGEYslaCA3PzLA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.5	51173	172.253.63.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	1406	OUT	GET /pcs/view?xai=AKAOjsuJJzhtifYpceDyc0RRJl5mmUlFu0i8ArISNTn87dpk2LkB9BNJvb1HFkJLoj8zyUGyAMUUz_v-ZBUNviXQx7mEnWIoLaBA2qFcjIZXPhqwJBfHVYM0Z1nkIC9w7XO6jtPE6IskLaWf-xtH67FIx79k38nwjswcgFzh8YBc4REWbx1RQ-a_5tovGSQXu3zDmdo&sai=AMfl-YT3w_f069_pR9P0PGweDE0QvPepJB4lcTrdxVdsGm340ClRZlWnEkTKo4c2geI9NHBuFUDfW6xNewLtnOz7FQbemf_JLfolzYl65g&sig=Cg0ArKJSzD2isLDuxzY4EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20240109.03571&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Attribution-Reporting-Eligible: event-source sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://googleads.g.doubleclick.net X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	1593	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Content-Type: image/png Attribution-Reporting-Register-Source: {"aggregation_keys":{"12":"0x8023f24a681c83b20000000000000000","16":"0xeccebb286b54586c0000000000000000","17":"0xbccb389e4d02bfca0000000000000000","18":"0x2e2fcb200d3575b90000000000000000"},"debug_key":"16256960957392969088","debug_reporting":true,"destination":["https://healthcare.gov","https://debugconversiondomain1.com","https://debugconversiondomain2.com"],"event_report_window":"345600","expiry":"1296000","filter_data":{"14":[],"21":[],"8":["8209133"]},"priority":"0","source_event_id":"10457527189981867389"} Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:03 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Wed, 14-Feb-2024 13:25:03 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 15 Jan 2024 13:25:03 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.5	51185	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	1500	OUT	GET /f/AGSKWxVoS_qbPtcehLidmaxgNKBxmXPb7-RWcP20Z_8LgnkyvdRQDIzbjoE5avXPXhOYbSfg_CHhe_DLJ-V-to9EkAJZm9WSG76vHaVfNKs2rKEDCp2JnIBT8s0fS2fsGt4lW9K3aI4FOg==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:03 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:03 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-veap0sAguDk0yRQD8e2QfQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:03 UTC	1629	IN	Data Raw: 62 38 64 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 50 41 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 50 41 2c 5f 2e Data Ascii: b8dif (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var PA=function(a){this.j=_.v(a)};_.A(PA,_.
2024-01-15 13:25:03 UTC	1335	IN	Data Raw: 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 65 6c 5c 2f 41 47 53 4b 57 78 56 42 77 54 4f 65 79 33 79 4a 68 4d 78 75 47 73 6f 78 56 65 78 63 73 6e 5a 39 30 72 52 43 6a 6e 61 75 70 73 30 35 67 44 71 50 74 65 4d 32 78 51 32 5a 31 46 72 38 47 70 52 4c 79 74 35 52 56 35 34 5f 73 45 53 75 79 4b 2d 69 4f 76 31 78 6a 6f 62 6f 37 57 4f 30 45 6b 54 78 71 4a 52 71 4a 68 58 57 33 49 6d 6b 55 59 62 6e 33 36 31 6d 54 74 39 6f 36 56 5f 68 79 65 57 67 39 30 43 6e 76 5f 63 47 50 30 5f 71 5f 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 3f 64 6d 69 64 5c 5c 5c 5c 75 30 30 33 64 35 33 Data Ascii: null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/el\/AGSKWxVBwTOey3yJhMxuGsoxVexcsnZ90rRCjnaups05gDqPteM2xQ2Z1Fr8GpRLyt5RV54_sESuyK-iOv1xjobo7WO0EkTxqJRqJhXW3ImkUYbn361mTt9o6V_hyeWg90Cnv_cGP0_q_Q\\\\u003d\\\\u003d?dmid\\\\u003d53
2024-01-15 13:25:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.5	51183	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	858	OUT	POST /el/AGSKWxW9_aOJ6pkWvpProOECCB9acoW9zXAMzPhkRhzCbGOEN6YZ7pj7m31aK-7ohUZrsrGunK00PhHQL1vrTowyBKEAQvUXHFeqh1o7sERlxZaHCL9eL_WpxMOo3lZnZG2pNTg3nDF7SQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:03 UTC	76	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 31 30 32 31 35 39 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 5b 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325102159,null,null,[null,[1]]]
2024-01-15 13:25:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:03 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-0MU3c3Lfv8cbtXBK1uUALQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.5	51184	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	858	OUT	POST /el/AGSKWxW9_aOJ6pkWvpProOECCB9acoW9zXAMzPhkRhzCbGOEN6YZ7pj7m31aK-7ohUZrsrGunK00PhHQL1vrTowyBKEAQvUXHFeqh1o7sERlxZaHCL9eL_WpxMOo3lZnZG2pNTg3nDF7SQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:03 UTC	73	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 31 30 32 31 36 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 33 2c 31 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325102164,null,null,[[3,1]]]
2024-01-15 13:25:03 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:03 GMT Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-SNw5bQ-W1Ri6aZ4i-J9-PA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.5	51177	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	3189	OUT	GET /pagead/interaction/?ai=CFf0PKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEurptLX5ARABIO34qSBgyYagiqSk4BGgAZLM7PECyAEJqAMByAPLBKoE9wFP0AUrt2pKV0TQz4meDbq3gqBTmzB0Czgtei0xhNc1p3gbN616RxE3mZdqnO6i0hbKQxIHGHjJiWm7SIWbPHgMA3GgMLsX1GnzcfIYdOCmWEfAQWyjlh6R_Kol6qQxyTHTZs3cdvQFo7z32Oml3hTqXimBA6EquJibHrQI72m-X4IQuMj1XOheSWhb7w11VocQw8VwjSiFcqQlYrFyp1M5caCR98ALmGgSogNc5aomoz-SjawzO4easQUwtXjRVqNK1lFev8haX5aAxHqI39Kg2sHesGqbv2KlLD2gqGYemTFYIqqsLjDetby_fipIeMiZdAFz63QswAT96_78iwSIBYWZvuNGoAYugAfWs5OOAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqXz4W_34MDsQknip_hVqkMaIAKAZgLAcgLAeALAYAMAaIMCCoGCgSsurEC2gwQCgoQ4JqcyLa39rh7EgIBA6oNAlVTyA0BohNWCjkIA0ABUggKBhIECAEQAWi6lLOORHIjEiEgAigBOAJAhZm-40ZYAWj-__________8BcAKAAQGYAQMaGQoXY2EtcHViLTYxNjMyOTIzMTczMzMwMTG4E4gE2BMK0BUBmBYB-BYBgBcB&sigh=C6ADlGvm9oo&cid=CAQSOwAvHhf_Oc0BdNyVM9Ng2e6hqlFcLj8n6p81Wx-81tbul3xuivjxRRb-15pxi-Zw86ILoR6uONeRjYVH&label=window_focus&gqid=KjKlZYqnCb2VoPMP8LeXwA8&qqid=CIHKz4W_34MDFUqh0QQdz58Brw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:03 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.5	51186	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	888	OUT	GET /pixel?google_nid=9675309&google_hm=OVBCWmRGNWIxUnBtWGI1&google_gid=CAESEHgIfoKUpGNFFJ28aMDFUyo&google_cver=1&google_push=AXcoOmQ4WbFLt-sFxBPeC-_jGKwAZ-LP2OfZdU90EnhnXFClUZ7Q6-JlFc7F5LWqS8suZCs_GBHINfgMevKYodH_maJZBV2mLPcYfqzK-AlE9s6nmpHYi8kXwSklwA0gzVU0sFLlx6o1YrZ38PkZswVQEHweQg8 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.5	51187	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	795	OUT	GET /pixel?gdpr=0&google_nid=B765081F39B1F7&google_push=AXcoOmTtPDhc-WmUsdaNXtFh0WHfzg25hOMBAsFnSqfZbkENZlHkg5ItukozRuyb4-l_zmqhEOtLeOKSC9CmbbPXi1K477IEWRK9Jy8&google_hm=82nPL-gDAe41xcnm3Ha0dg HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.5	51188	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	990	OUT	GET /pixel?google_nid=blismobile&google_push=AXcoOmRsCKk1AGngUx3OjQPwUkO0pcy8ZdI0fQU8sffR5EvQxMDVeylmTt7WRWsQkqlQAZAqf3TLxUqLhL59jo-n6wZgLUoZn_MmnG5c8t99F157kyCuaklMAsUU1Ppwed5vpYaEr5rhF-7tCjXbPmz-kSmfqvI&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.5	51073	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	813	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmQSz__9n2hB2d9UFcVsGpXgmrwD8HGnt-vPbEyUMlmjUj74q01hb5sjQU41LBhfgsPPod28w0Y4wxZbUtlyfERcsXdqriXPRw HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4
2024-01-15 13:25:03 UTC	656	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 238 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQSz__9n2hB2d9UFcVsGpXgmrwD8HGnt-vPbEyUMlmjUj74q01hb5sjQU41LBhfgsPPod28w0Y4wxZbUtlyfERcsXdqriXPRw&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:25:03 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:25:03 GMT
2024-01-15 13:25:03 UTC	238	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 51 53 7a 5f 5f 39 6e 32 68 42 32 64 39 55 46 63 56 73 47 70 58 67 6d 72 77 44 38 48 47 6e 74 2d 76 50 62 45 79 55 4d 6c 6d 6a 55 6a 37 34 71 30 31 68 62 35 73 6a 51 55 34 31 4c 42 68 66 67 73 50 50 6f 64 32 38 77 30 59 34 77 78 5a 62 55 74 6c 79 66 45 52 63 73 58 64 71 72 69 58 50 52 77 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 61 48 4a 54 52 45 78 50 57 6a 42 59 54 6b 64 4f 65 48 64 55 54 47 30 79 52 6a 51 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmQSz__9n2hB2d9UFcVsGpXgmrwD8HGnt-vPbEyUMlmjUj74q01hb5sjQU41LBhfgsPPod28w0Y4wxZbUtlyfERcsXdqriXPRw&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.5	51194	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	871	OUT	GET /pixel?google_nid=inmobi_pte_limited&google_hm=MDc4YzdhMGUtNjNiYy00OTFlLWE0MzAtMDcwMTg4ZjFjMzQ3&google_gid=CAESEPdxXysThL74tu0ac48dBz0&google_cver=1&google_push=AXcoOmRpPqbdw6uSenbFaK0R23iAP78nBE5lH0LVZSXkbUPmSekqKtgWHQA-opdYCPHl2OTu722sJjb7QUwI4di5_XZh2z5qu3B3qZ8 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.5	51196	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	933	OUT	GET /pixel?google_nid=blismobile&google_push=AXcoOmSXuAXQ02yhFRcDGwMMSAmvwiBMi_7MfOumNkm2KiEcZB4iwbpR7tMo9ispAVU61bb2jggHKu5HPL1HOdRHDTdSIG7RGOSV9Q&google_hm=hmWlMh79NwzagZwUfQ&google_redir=https%3A%2F%2Ftr.blismedia.com%2Fv1%2Fredirect%2FAdxPixel%3F%25%25GOOGLE_ERROR_PAIR%25%25%26partner_device_id%3D65A5321EFD370CDA819C147DBLIS HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.5	51199	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.5	51205	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	1499	OUT	GET /f/AGSKWxWxThWvWVZtuD-tSPfsTvkLN1lMK-CRBW8tzCakqHvcEdr56HRzii6lqv7eerEbIxVXg4qWrLEi88hQzwH5DmnCmCaef9mtHa6XFfa4jjd3HCXwUlXWKXgGurrM4WxjE7IEvyy-uA==?fccs=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 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:04 UTC	1629	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:04 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-GcR-_l_ryAcdU4QYaxz3hw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorGlobalRouterHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorGlobalRouterHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorGlobalRouterHttp/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-01-15 13:25:04 UTC	1629	IN	Data Raw: 64 31 36 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 4d 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 5f 2e 76 28 61 29 7d 3b 5f 2e 41 28 4d 6e 2c 5f 2e Data Ascii: d16if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Mn=function(a){this.j=_.v(a)};_.A(Mn,_.
2024-01-15 13:25:04 UTC	1629	IN	Data Raw: 71 77 2f 6d 3d 63 6f 6f 6b 69 65 5f 72 65 66 72 65 73 68 5f 65 78 65 63 75 74 61 62 6c 65 0a 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 28 27 5c 78 35 62 5c 78 35 62 5c 78 35 62 37 2c 5c 78 32 32 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 5c 5c 5c 78 32 32 2c 5c 5c 5c 78 32 32 41 4b 73 52 6f 6c 38 31 4c 5f 4c 53 72 79 73 4d 46 7a 74 49 58 6e 4b 4f 6a 66 49 70 53 4c 79 62 61 36 47 7a 65 48 63 38 52 61 30 32 63 46 48 57 4c 66 74 48 5a 57 45 53 6f 62 6e 75 61 48 59 45 65 6f 44 38 2d 37 78 6c 32 7a 51 52 68 33 50 79 59 49 38 50 68 4c 35 4a 6f 32 46 56 63 53 41 51 4a 55 53 38 69 5f 4e 72 58 4f 37 6f 75 54 75 78 64 74 66 2d 44 77 73 6a 7a 74 79 Data Ascii: qw/m=cookie_refresh_executable__googlefc.fcKernelManager.run('\x5b\x5b\x5b7,\x22\x5b\x5bnull,\\\x22mylovelybluesky.com\\\x22,\\\x22AKsRol81L_LSrysMFztIXnKOjfIpSLyba6GzeHc8Ra02cFHWLftHZWESobnuaHYEeoD8-7xl2zQRh3PyYI8PhL5Jo2FVcSAQJUS8i_NrXO7ouTuxdtf-Dwsjzty
2024-01-15 13:25:04 UTC	99	IN	Data Raw: 34 68 57 6a 6a 5f 33 77 47 6c 6b 32 5a 73 2d 50 36 72 53 78 4f 4a 62 54 5a 64 2d 6a 41 69 58 64 77 4e 41 58 67 50 6c 35 35 58 39 59 63 75 71 38 68 58 69 56 79 37 31 76 70 63 4f 35 54 74 5f 39 56 74 41 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 27 29 3b 7d 0d 0a Data Ascii: 4hWjj_3wGlk2Zs-P6rSxOJbTZd-jAiXdwNAXgPl55X9Ycuq8hXiVy71vpcO5Tt_9VtA\\u003d\\u003d\x22\x5d\x5d');}
2024-01-15 13:25:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.5	51206	142.251.16.149	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:03 UTC	1133	OUT	GET /pcs/view?xai=AKAOjsuJJzhtifYpceDyc0RRJl5mmUlFu0i8ArISNTn87dpk2LkB9BNJvb1HFkJLoj8zyUGyAMUUz_v-ZBUNviXQx7mEnWIoLaBA2qFcjIZXPhqwJBfHVYM0Z1nkIC9w7XO6jtPE6IskLaWf-xtH67FIx79k38nwjswcgFzh8YBc4REWbx1RQ-a_5tovGSQXu3zDmdo&sai=AMfl-YT3w_f069_pR9P0PGweDE0QvPepJB4lcTrdxVdsGm340ClRZlWnEkTKo4c2geI9NHBuFUDfW6xNewLtnOz7FQbemf_JLfolzYl65g&sig=Cg0ArKJSzD2isLDuxzY4EAE&uach_m=%5BUACH%5D&cry=1&crd=aHR0cHM6Ly9oZWFsdGhjYXJlLmdvdg&fbs_aeid=%5Bgw_fbsaeid%5D&urlfix=1&omid=0&rm=1&ctpt=3&cbvp=2&dett=2&cstd=0&cisv=r20240109.03571&arae=1&ftch=1&adurl= HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:04 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Mon, 15 Jan 2024 13:25:04 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.5	51212	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	775	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=YmFhZWNlZTktMGQ5MC00ZWYyLTgzNTQtMmY2YTk5MTE2Mjg0&google_push&gdpr=0&gdpr_consent=&ttd_tdid=baaecee9-0d90-4ef2-8354-2f6a99116284 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:04 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:04 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.5	51216	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	859	OUT	POST /el/AGSKWxWklcdsVTD_OnIgC8QG_Rn9dUQMimRsvirgelTjkcGNV5YF2DfRTCeOmUTJAFq28ITsDdnzD-_KhzDg2hm-bfPtBybK-uF9E049HHb89LyiqI9fKDtge7SkOK0I0xthL7x2xDui8w== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:04 UTC	166	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 35 33 32 35 31 30 33 32 32 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 2c 31 38 36 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 22 6d 79 6c 6f 76 65 6c 79 62 6c 75 65 73 6b 79 2e 63 6f 6d 22 2c 33 5d 5d 5d Data Ascii: [null,null,null,null,null,null,null,null,1705325103225,null,null,null,null,null,null,null,null,null,null,null,[[1,186,"mylovelybluesky.com","mylovelybluesky.com",3]]]
2024-01-15 13:25:04 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:04 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: script-src 'report-sample' 'nonce-yqw9KJK-hyU6oI1L4vIAdQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.5	51215	172.253.62.102	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	858	OUT	POST /el/AGSKWxW9_aOJ6pkWvpProOECCB9acoW9zXAMzPhkRhzCbGOEN6YZ7pj7m31aK-7ohUZrsrGunK00PhHQL1vrTowyBKEAQvUXHFeqh1o7sERlxZaHCL9eL_WpxMOo3lZnZG2pNTg3nDF7SQ== HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:04 UTC	63	OUT	Data Raw: 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 30 2c 6e 75 6c 6c 2c 31 5d 5d 2c 31 37 30 35 33 32 35 31 30 33 32 32 36 5d Data Ascii: [null,null,null,null,null,null,null,[[0,null,1]],1705325103226]
2024-01-15 13:25:04 UTC	1673	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: http://mylovelybluesky.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 15 Jan 2024 13:25:04 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-yliQumXC1ogaBGDWph6dBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorLoggingHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorLoggingHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorLoggingHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.5	51221	172.253.62.157	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	786	OUT	GET /pixel?google_nid=zemanta&google_push=AXcoOmQSz__9n2hB2d9UFcVsGpXgmrwD8HGnt-vPbEyUMlmjUj74q01hb5sjQU41LBhfgsPPod28w0Y4wxZbUtlyfERcsXdqriXPRw&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; DSID=NO_DATA; ar_debug=1; APC=AfxxVi4kzTDQdfw7INlN8tZeGlytngxjFjOF5LbNKk-RJIs6CKG0ZQ
2024-01-15 13:25:04 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Mon, 15 Jan 2024 13:25:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:04 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.5	51218	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	657	OUT	GET /wp-content/uploads/2013/03/20120822_Europe_Trip_Provence_Day2_22Aug_0344.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:05 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:25:05 GMT content-type: image/jpeg last-modified: Thu, 12 Feb 2015 19:35:35 GMT accept-ranges: bytes content-length: 49968 date: Mon, 15 Jan 2024 13:25:05 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:25:05 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 01 56 01 f9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 01 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 df f1 66 e5 e9 16 5e 39 Data Ascii: JFIFCCV"f^9
2024-01-15 13:25:05 UTC	14994	IN	Data Raw: 98 b4 cb dd de 6d 68 88 4d 12 36 ed 47 61 df ab 18 1d fd 1c ba ea f9 ab 93 a9 2a b5 28 42 0f c2 f0 5e 70 ea 40 6a 70 e8 ef 5b dc 74 6b 9a 87 de c7 d0 97 8c 78 a2 73 ea 5a 2e e8 a5 e8 e7 6a 5d 47 3a ba 0d 12 58 4c e8 30 19 d0 2c e9 80 e7 27 48 75 b9 2d a6 dc ae 9e 9d ba 5d 91 51 8a 86 a1 3c c8 76 70 46 f2 d9 f5 74 97 36 c6 d9 18 e4 ac d9 e7 3e 8b e4 ee 75 a3 aa 5c cb a8 75 6b a3 05 60 d8 63 75 85 3d 10 72 65 5c a1 38 79 ac bd 9b ac d2 6f ab b4 30 b0 bd 75 c8 eb 1a 58 a0 de ac 6c 8e 3c 1f 35 4c c6 6f 41 21 06 3a 3b c4 49 71 64 b9 f7 7f 38 dc f4 72 ec 60 e7 35 c9 b2 48 64 69 47 23 19 3d c1 e4 ba 39 d9 d4 e6 98 e5 d0 60 73 21 f3 d6 90 b2 f0 5c 52 be f6 c6 b5 b7 38 5d 2e fc e6 5e 26 c5 c5 b6 d1 8f 3b b4 0c c0 5a 42 34 00 0f 73 74 d9 b3 50 c6 d8 15 9e 29 74 c6 Data Ascii: mhM6Ga*(B^p@jp[tkxsZ.j]G:XL0,'Hu-]Q<vpFt6>u\uk`cu=re\8yo0uXl<5LoA!:;Iqd8r`5HdiG#=9`s!\R8].^&;ZB4stP)t
2024-01-15 13:25:05 UTC	16384	IN	Data Raw: aa 0e 93 ce 11 fd b6 e5 42 b0 02 c9 33 a8 36 59 6f d0 ea b7 37 7a 68 b2 bd b0 a5 50 5a ab 36 55 9a ce 53 5c da d6 88 6f 44 2e 2a 42 03 3c 74 85 79 eb b1 ad 22 b1 45 81 16 c8 36 3f b1 43 65 51 02 da 2d db ad dd 94 5c fc 96 ed 15 c8 85 b8 ff 00 55 2f aa f1 1f c0 df c3 cc ff 00 1a ec cd 34 55 68 ee b8 3c d5 a8 15 14 b3 18 b7 bd 7f 75 07 14 38 74 47 0f 13 55 0a ce f2 09 f2 d7 66 d2 89 80 e6 04 1f 6a fb 20 a7 e2 97 65 34 0b 37 8c 2a a1 b8 a3 de b2 f8 8d 94 cc 30 78 79 15 7a a7 1c ed 12 50 93 6b ac cd 2b 33 56 66 94 1e ee 09 aa cf a3 6d d8 db d1 40 ab 75 52 80 c3 20 73 9f e9 6e c1 ec 57 03 bc aa b7 da e0 3a 84 5c e9 15 a2 ba a3 95 1c a3 64 b6 c0 2c 09 fc 83 63 bb 15 68 52 d7 53 92 a9 a2 a9 ba e4 79 95 90 9e aa fb 0c f7 50 b9 ec 95 11 c4 ef db 6c 7a ac a5 36 4c Data Ascii: B36Yo7zhPZ6US\oD.B<ty"E6?CeQ-\U/4Uh<u8tGUfj e470xyzPk+3Vfm@uR snW:\d,chRSyPlz6L
2024-01-15 13:25:06 UTC	16384	IN	Data Raw: a3 80 6e 36 07 59 68 1e 8f 48 11 5c e6 0e 8f dc b4 13 10 b3 54 b2 17 8f 54 ca 01 ac 2b 4c 2c 66 6e 67 0d 5b 34 35 79 c9 31 80 17 db 72 d4 d9 cd 4c 3c 1f e6 3d 50 37 d3 fb d7 e9 ad 7b c2 d0 2d 06 8c f3 10 e3 e7 f3 0c 93 be 84 bf 4a 7a c2 3a 73 d2 5d c4 34 ed 96 25 1e 9c 43 a7 01 b0 e8 4c 94 70 0f a4 c5 a8 23 cd 5b 77 a8 96 4c 3a a5 ca 1c 8f 92 0a d4 ce 4c 6f b2 0b a0 fc 4a a5 8d 57 ac b6 11 2b 00 65 6d 3b 16 12 96 c0 53 c2 e2 36 4e 6c 4a 72 54 54 22 5d 88 5b 65 3b a8 d8 9e 30 8e 1b 03 e4 40 b9 20 22 bf 44 e0 53 2c ba ef 89 6c 9a 07 82 bd 33 2e 4e 39 8e 4d 99 8a 59 b6 1c 38 62 6d c5 9c 13 f3 94 28 e4 15 eb 12 6d 66 58 bc 8a 39 5b 63 05 e7 cc 6d a0 58 ef fa 96 ed a7 7d cd cf 79 52 e9 ba f3 ff 00 62 11 ca 57 5a 78 8c 71 cd 7f 91 2e ee 01 ca 23 a4 77 0a 7d c9 Data Ascii: n6YhH\TT+L,fng[45y1rL<=P7{-Jz:s]4%CLp#[wL:LoJW+em;S6NlJrTT"][e;0@ "DS,l3.N9MY8bm(mfX9[cmX}yRbWZxq.#w}
2024-01-15 13:25:06 UTC	1394	IN	Data Raw: 69 e4 8b 57 29 ca 03 40 03 00 c4 2f e3 c4 5f fd 8d 18 86 2c 95 21 c7 96 06 49 36 ea 00 cd 5e f9 0f c4 54 1e 07 c7 e7 50 33 67 b9 56 aa 11 2c c4 6a 40 0b 06 d5 bf c4 4f 0a fe 35 33 94 3c e6 16 00 be 47 ee 09 c7 b4 bf 52 cd 00 e8 db ed 2b 84 4d 01 c2 57 fd 88 56 a0 53 0a e5 01 aa 22 c1 59 fa 87 33 a1 1e 8b 08 7f f0 e8 ad 2a e8 98 55 1a 35 3c b6 8a 3d 2a d7 ee cd 9f 1d e6 43 37 87 8b 2c 6f d4 81 c1 7a 68 59 ea d5 22 ad 74 95 9a db 64 87 bf 0d 8a ef 62 b2 63 cb 28 5c 64 c1 65 45 0b a9 49 0a 14 5b 08 10 34 f5 28 c9 bc 04 cd 28 95 1a b3 42 a2 58 0d 0d 86 a0 92 21 7a a1 2f 39 f2 95 20 7b 04 a5 75 6e ee 82 88 35 14 f8 1a f6 99 7d e6 6b dd 75 a2 1c 30 60 b5 1b 14 17 56 b2 00 26 7a c4 80 96 c9 19 5c 58 15 66 0c 88 22 96 91 aa a7 bc 48 b7 00 8b f5 b5 2e c5 0c c4 00 Data Ascii: iW)@/_,!I6^TP3gV,j@O53<GR+MWVS"Y3U5<=C7,ozhY"tdbc(\deEI[4((BX!z/9 {un5}ku0`V&z\Xf"H.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.5	51219	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:04 UTC	627	OUT	GET /wp-content/banners/Travel_Journal_Preorder.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-01-15 13:25:05 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:25:05 GMT content-type: image/jpeg last-modified: Sun, 16 Dec 2018 15:01:52 GMT accept-ranges: bytes content-length: 54995 date: Mon, 15 Jan 2024 13:25:05 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:25:05 UTC	812	IN	Data Raw: ff d8 ff e1 0f 8d 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 20 03 00 00 01 01 03 00 01 00 00 00 d8 00 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 bc 00 00 00 1b 01 05 00 01 00 00 00 c4 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 cc 00 00 00 32 01 02 00 14 00 00 00 ee 00 00 00 3b 01 02 00 0f 00 00 00 02 01 00 00 98 82 02 00 0f 00 00 00 11 01 00 00 69 87 04 00 01 00 00 00 20 01 00 00 58 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a Data Ascii: ExifII* (1"2;i X''Adobe Photoshop CC 2019 (Windows)2018:
2024-01-15 13:25:05 UTC	14994	IN	Data Raw: 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d7 cd e9 94 b5 ec 2c f4 e9 b5 e4 6f 60 f6 d6 e6 bc 7e 8e fa c7 d1 c5 f7 7f 3b 5b 99 e9 aa ee c1 8b 45 16 9f 4e c7 02 5a c7 34 7b 80 25 ae f4 dd f4 2c db b7 dd e9 bb 7b 15 8c cc ac 53 8d e8 e4 e4 34 5f 6d 65 b6 0b 03 ac 6d 6e 73 db e8 34 6f 0c af dd 4b 1f ef ff 00 d2 ab 16 Data Ascii: v7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?,o`~;[ENZ4{%,{S4_memns4oK
2024-01-15 13:25:05 UTC	16384	IN	Data Raw: 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 Data Ascii: ''I'z''((?(q(())8)k))*5h*++6+i++,,9,n,,--A-v--..L.../$/Z///050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}C
2024-01-15 13:25:06 UTC	16384	IN	Data Raw: 36 c5 76 a6 e1 ff 00 6b a7 89 36 6d 1e ef de 13 74 65 be da 42 db 76 39 23 9f 7e d3 c1 0c ba f7 7f 03 2c 3e 1f e3 63 e2 2e 9b 85 91 76 b2 09 06 df 63 5d d3 44 c9 5d 68 f7 3b a9 53 bd de ee a5 93 4e 6f ff 00 1e 2f bb c6 df 7f 29 65 d8 c6 a5 77 cb 16 63 15 f4 b3 7b 62 f8 f0 ed 9b c6 8b ee b0 fb 0d fb 87 de ed 00 69 a4 ba e4 96 19 0d 76 df 13 da 3f ff 00 e4 9a ed 39 53 ff 00 6c fe 86 28 46 36 f2 bb 49 1e d7 58 7b ec d1 29 66 48 55 5e 46 e9 ba dd 47 54 8a fc 6c a3 da 6c e7 92 0d f9 56 f7 f8 24 1a 8d ae 7f 87 5d c3 4e b2 4d 95 57 53 79 ba d1 83 dd bc 1d a6 26 4d ba 45 16 dd 09 8a 24 89 f5 49 31 9b 66 7d d4 f7 35 db bb db c3 f6 71 f5 e7 c7 c4 26 8d e2 32 ec e4 91 36 5b 79 c1 68 88 db 40 bb ed dc ba 29 92 6d d6 7d 38 bd e1 b4 e1 8f f1 31 f1 0d c4 d2 26 de 0d f4 Data Ascii: 6vk6mteBv9#~,>c.vc]D]h;SNo/)ewc{biv?9Sl(F6IX{)fHU^FGTllV$]NMWSy&ME$I1f}5q&26[yh@)m}81&
2024-01-15 13:25:06 UTC	6421	IN	Data Raw: 8a 0b 53 b3 83 c7 8f 96 9c b0 0f 99 b9 85 f8 9a 0c ad 77 56 24 da bd a9 19 44 69 15 05 6d a9 66 97 bc 6b b3 49 e7 a6 4c 3c 2f 5a 48 55 61 03 99 04 ea cc cb e9 2a ae 47 5b f0 d3 92 d1 c9 2a db 1c 20 f2 0a 0b 32 b5 b9 96 3f 6a f2 7f 99 89 5e 52 a0 44 23 59 50 1e 04 d0 f1 8f a5 f5 73 69 f7 7e 36 0e d4 c6 66 9a 38 da 08 58 81 a7 12 48 74 e4 9a 24 07 4d e4 dc 7b 59 7b c9 bc 39 30 b1 49 b5 12 6d 10 7b b1 81 73 c8 09 ef 66 78 ef 55 59 35 59 23 bb 51 f5 2c c2 98 9e 54 96 45 ab 46 d1 00 a2 84 5e 5a f6 3d da 47 96 c5 b3 51 fd 4c 0d 1e f0 b3 55 4c 99 94 2b 79 13 b2 8f d8 7c 19 0c 8c cc 45 18 17 39 d3 a5 b6 da be 97 f9 78 73 b2 53 11 8a 48 d6 28 e4 23 22 81 7f ee 76 ec eb e1 e2 1d f6 e2 44 8d da 33 ee a8 07 02 dc 63 69 2c 4c cf 7b 5d 64 7e 1e 22 dd 30 0e 24 5b da b9 Data Ascii: SwV$DimfkIL</ZHUaG[ 2?j^RD#YPsi~6f8XHt$M{Y{90Im{sfxUY5Y#Q,TEF^Z=GQLUL+y\|E9xsSH(#"vD3ci,L{]d~"0$[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.5	51227	216.239.36.181	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	1632	OUT	POST /g/collect?v=2&tid=G-JJ7DB92BJ6&gtm=45Pe41a0v9133405015&_p=1705325096141&gcd=11l1l1l1l1&dma=0&tcfd=10000&gdid=dZTNiMT&cid=449002724.1705325034&ul=en-us&sr=1280x1024&ir=1&are=1&_eu=EEI&_s=3&sid=1705325033&sct=1&seg=1&dl=http%3A%2F%2Fmylovelybluesky.com%2F&dt=%E8%93%9D%E5%A4%A9%E7%99%BD%E4%BA%91%E6%95%B0%E6%A0%BC%E5%AD%90%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E6%97%85%E6%B8%B8%E9%83%A8%E8%90%BD%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E6%94%BB%E7%95%A5%20%E2%80%A2%20%E6%96%B0%E5%8A%A0%E5%9D%A1%E9%A9%AC%E6%9D%A5%E8%A5%BF%E4%BA%9A%E4%BD%9C%E5%AE%B6%20%E2%80%A2%20%E6%97%85%E6%B8%B8%E7%BE%8E%E9%A3%9F%E9%83%A8%E8%90%BD%E5%AE%A2%E5%92%8C%E6%89%8B%E5%B8%90%E8%BE%BE%E4%BA%BA&en=ad_impression&ep.query_id=CPyizYW_34MDFXSP0QQdX4MNUQ&tfd=9493 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://mylovelybluesky.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://mylovelybluesky.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2024-01-15 13:25:06 UTC	452	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: http://mylovelybluesky.com Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.5	51231	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	3148	OUT	GET /pagead/interaction/?ai=Cp5nk_DGlZdiJOsWlj-8PkPqH6AjEqsuSdbrB3anMDo_ljMzlBBABIO34qSAoCGDJhqCKpKTgEaABmbinlQPIAQGoAwHIAwKqBOIBT9BdM6FMdP0fDSo3UxyNYXYVXGqs__nxWSEJjKCboAtGGLXXJRR-A2VM_xgnP_7xNYydT0AvI5vPAvAGwRobcyE4z4o7w0MSR60x2fT3vQDgvOzq0zuheEGDyHNibvV5o0ByJ0dAGUQlSLVl9qoWwfYTJ6JCZvKtbwkEPVh027vyF_reiF15roL5nTatRwSUDvnc3MCSpLwQ9Z7-IMcg-1AG2Bfg1wcMkLUQchy9aAKB2VK1K8pPGFSN45_rS3PPwH8T3LNctjfvOHO-WvIFota7fgbxA0hEkiJlmd02hL_jLcAEzpi-9-UDiAXSj6CwBqAGZoAHz8fYaqgH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwHSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WNzDh_C-34MDsQk-vF_zLpLcHIAKAZgLAcgLAaIMCCoGCgSsurEC2gwRCgsQwPbj8vT6iYr2ARICAQOqDQJVU8gNAaITVAo3CANAAVIICgYSBAgBEAFoxr_YrEZyIRIfIAIoATgCQNKPoLAGWAFo_v__________AYABAZgBAxoZChdjYS1wdWItNjE2MzI5MjMxNzMzMzAxMdgTDIgUAdAVAfgWAYAXAQ&sigh=C1SblbSwTz0&cid=CAQSOwAvHhf_fHfjV5e8ksG_nj0KTLsq114Z441DK2IH3bagtr7H1qVwAy_ioNsobXnV3sU1MgNCjo9xk7Xk&label=window_focus&gqid=_DGlZYmrOfudoPMPv-SASA&qqid=CNj3h_C-34MDFcXS4wcdEP0BjQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=506127567&adf=1491631625&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325051&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325050771&bpp=56&bdt=460&idt=56&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=1&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=3788&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeEbr%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&btvi=1&fsb=1&dtd=922 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.5	51235	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	3088	OUT	GET /pagead/interaction/?ai=C9Id0_jGlZfHuH7rczLUPv7m4kAuZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BqSUo45oZcrv_kLtIYEqtgYH5UjMnCah5BicURKDEknIeTIJZcj6J3AUSG4AEIuPKHo7mVWDYAPxBL42xcZG85pNuXPNhrdzWjFknIdIrIi39uKWUMM2yBquo_lFzfSujR5sHId4D2vgyRaZqOUvLCUU-9KRk3XU5bU8pP0iZaTe3xsSACRfAx1w67hj337iZ7G3DKnFnjrpFxmUXtc3PjYH5lWyTCpj7B6pBystqMNN7Jn6pwz4UJ9rQPdzSwH7qV3cVW9jV6Ico-KUtqpMN5LdVTs7ou1CCGJ9zh2SJufl2wgNzs-ocPowrIFETDnoUMiiGdIWc8DgebBXMxpYbZt1vtmf7srdxEMaTvwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqu5_C-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=QmFKPmRK1Mg&cid=CAQSOwAvHhf_QEHOD1xwLleoAiJ5w9vxR-uW-TkfDsoLpfLS98O4Mr7ksGByHH0P3E4IB-PYMPeiaAs_rgnI&label=window_focus&gqid=_jGlZabiHs2YoPMP8ve82Ao&qqid=CPHl5_C-34MDFTouswAdvxwOsg&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=618417950&adf=1190397319&pi=t.aa~a.2381652990~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450&nras=2&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=1403&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=2&fsb=1&dtd=728 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.5	51232	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	3099	OUT	GET /pagead/interaction/?ai=CQ0du_jGlZaiXOYjDzLUPyPyi4AOZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDmwSqBI4CT9BxPj_2mwyo64Y6UVbYOhIIGwkgO7vtAup5XVOSzDlOqFS9ekhQCAvpA2p0EEvK6sQahs1-UAEQKCnUy0iLp9YgazcN5MIBqLV5qymaassjpr-3jIk1zLKLmr12ExULHShoNg9MdVfD4zLf8vebQsA4DrGv-cPi8n0VAiyEoqc1TKe2cqka8B3KphUPZBgPVS8SPu797UQ6wHv9UtAg425nbDFWzngOs2oDp73LigXS3olIksDNhrMKTVMjLogB5DwAyrgUqIIUUgqN3amzo8fbpqr_a5L3oCVfseiwLrLixngLacRGr1JiwW8roizn_WiWKo75Ao2ooKv_p--_Owrw4yaoy5bdwlxPIutWwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WKnYgPG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=6gRc5c6-eCA&cid=CAQSOwAvHhf_tK56JVEH8xgsPZBgzcE4dSwywFUAFOhyXZiy6iqTmRW3cKxhSZ5TkOMzmMz6lgyDuuABck7Z&label=window_focus&gqid=_jGlZay2OKacoPMPhqmUyAM&qqid=CKiOgfG-34MDFYghswAdSL4IPA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=1195043941&adf=3510181701&pi=t.aa~a.1081566386~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280&nras=3&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=2531&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=3&fsb=1&dtd=768 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.5	51234	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	3112	OUT	GET /pagead/interaction/?ai=C8T89_jGlZe3LOYvPzLUP3ZCa6ASZh4L8dPWKyPqNEt_Mu5XGOBABIO34qSBgyYagiqSk4BGgAYvN6JwpyAEJqQKcXkyLdl-yPqgDAcgDm4SAgASqBI4CT9B76urqQtx7KOxyEZ-Dnd9pD1aebsdVQyqdsKpohRYiOzFus-bvYpRFARqCVozmJh9LSxjpZdLvPG3PL0Yv2Rg90v96fdsBKm3VGlDQeeAUfMMXOwLGkB8xwECaiz7WaHOb2qPTWhtfbNPL6GGdWrzcXNtRXIwiuS9HG3gDGclKiOHzNv6-jGkf8qcjIChkZNCUldJpRJdBXoPcjQ5ldqWygVNQC0F_DWNO_JKOKRCr42Ej6mPDK6M-oR9opRq0i2wUTlZsUY3YsTKj9PkrljQuvs9iX1oP9Gpdc6diA4oAG-HxpImzYYvXOQQiepl8v01PRrKpNu1SHvqUgIrOeusZnXjyI2yJFateMveNwATPhO3arQTgBAOIBZ7zw81LkAYBoAZMgAeLhbn8A6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WLqOgfG-34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQKqDQJVU7AT2a2IFtgTDYgUAtgUAdAVAfgWAYAXAQ&sigh=a1IJ1yYcWPc&cid=CAQSOwAvHhf_x7JvRWcSdyiXQUE_xL1SIriC1cHa2yANtUL6GWXmI1kXBkvKfq0PFquBMDfZq1BWLlRkVrpD&label=window_focus&gqid=_jGlZa3pOISaoPMPxLmX6Ao&qqid=CO3CgfG-34MDFYsnswAdXYgGTQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?gdpr=0&client=ca-pub-6163292317333011&output=html&h=280&adk=279133150&adf=1051027078&pi=t.aa~a.2657635577~rp.4&w=360&fwrn=4&fwrnh=100&lmt=1705325053&rafmt=1&to=qs&pwprc=6034854619&format=360x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-content&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325052524&bpp=1&bdt=2213&idt=-M&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C750x450%2C360x280%2C360x280&nras=4&correlator=7739714387177&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325051&ga_hid=1379947469&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=842&ady=3567&biw=1263&bih=907&scr_x=0&scr_y=282&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080265%2C31080409%2C42531706%2C95320378%2C95321627%2C95322162%2C31078668%2C31078670&oid=2&pvsid=995171086146678&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=6&uci=a!6&btvi=4&fsb=1&dtd=780 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.5	51230	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	1830	OUT	GET /pagead/interaction/?ai=CVf-x_DGlZZpNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTlAU_Q7PG01DMHZEkgJrxF4_DjecNnguIjeAytIdmElPB2llgFIugrN50jUsbj7dhJZ0Psa_O86slxflY3gxeivqPA961Kswi2zC4CKjl3DrtLhsQQUr6E2VkhKTnxElXfQHLFw0GhoBFTTTivLcjy-IWbSwbZEYivBusvqJ5INFhaMEXRZx-PvRinVS8LhcfJ3n1-mHx3t62BtOP9UkpICk17n7aDyAxPfRJcDKhWye9hLjCHz4pk6JnpEtoiTPUfGqkAMUTE5s-el4bSM6d2b-6d5jj-wYpc7-9ZnQjP1pysBP3rAnLABMrpwPe0BIgFgYKwvEuAB-u49YMBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOxCQsE03VQQM48gAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQjYWtxdfwse0BEgIBA6oNAlVTyA0B2BMNiBQF0BUB-BYBgBcB&sigh=9KidFsfYGwY&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJq7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.5	51233	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	1833	OUT	GET /pagead/interaction/?ai=CCdBz_DGlZZtNv9PT_A_TzZnABZqt8bJ00-zexMUR29keEAEg7fipIGDJhqCKpKTgEaABj_H8_gLIAQGoAwHIA8sEqgTnAU_QSzJLie_ckNCaVfRF4hVZyHKfMQkx7oZNgCBq9zF4WXKdZ6SsxyhUmL0QGc8RIQhdFK5xEYvnEcoFMIVdx9S3FuwmAn3qilz4oKOBTzXZ5IAwXC56DCmt9ZIREWrBBcJPAjZjvJfTczv98OIwJj0Yyr3vBFmQIdqp9P5vju7ikj5i58lyedeJ1y3pZJdAGGCkjBHZvwt7IEkhl2uZXZUAOL0ts_jVCWhD90eiTU1SXDivyftyks2A5lK4aKFl3J1HmHAQ8X2HPio5VCFQXMjO_vLa2l19ZKNh7le2hD2Yj-gBOT0Xs8AEyunA97QEiAWBgrC8S4AH67j1gwGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAfKqbECqAfrpbEC2AcB0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA7EJCwTTdVBAzjyACgGYCwHICwGiDAgqBgoErLqxAtoMEQoLEMD5y9ngnpOLxwESAgEDqg0CVVPIDQHYEw2IFAXQFQH4FgGAFwE&sigh=3PaEhYNeVO8&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJu7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:06 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.5	51228	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	892	OUT	GET /wp-content/uploads/2013/03/20120822_Europe_Trip_Provence_Day2_22Aug_0344.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325100.56.0.0; FCNEC=%5B%5B%22AKsRol81L_LSrysMFztIXnKOjfIpSLyba6GzeHc8Ra02cFHWLftHZWESobnuaHYEeoD8-7xl2zQRh3PyYI8PhL5Jo2FVcSAQJUS8i_NrXO7ouTuxdtf-Dwsjzty71ryAcX3zuH5FavEVLHjC3u9PGRjG5TBbbYP5Fw%3D%3D%22%5D%5D
2024-01-15 13:25:07 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:25:07 GMT content-type: image/jpeg last-modified: Thu, 12 Feb 2015 19:35:35 GMT accept-ranges: bytes content-length: 49968 date: Mon, 15 Jan 2024 13:25:07 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:25:07 UTC	812	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 06 06 06 08 06 06 08 0c 08 07 08 0c 0e 0a 08 08 0a 0e 10 0d 0d 0e 0d 0d 10 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 09 08 08 09 0a 09 0b 09 09 0b 0e 0b 0d 0b 0e 11 0e 0e 0e 0e 11 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 01 56 01 f9 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 05 00 02 03 04 06 01 07 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 df f1 66 e5 e9 16 5e 39 Data Ascii: JFIFCCV"f^9
2024-01-15 13:25:07 UTC	14994	IN	Data Raw: 98 b4 cb dd de 6d 68 88 4d 12 36 ed 47 61 df ab 18 1d fd 1c ba ea f9 ab 93 a9 2a b5 28 42 0f c2 f0 5e 70 ea 40 6a 70 e8 ef 5b dc 74 6b 9a 87 de c7 d0 97 8c 78 a2 73 ea 5a 2e e8 a5 e8 e7 6a 5d 47 3a ba 0d 12 58 4c e8 30 19 d0 2c e9 80 e7 27 48 75 b9 2d a6 dc ae 9e 9d ba 5d 91 51 8a 86 a1 3c c8 76 70 46 f2 d9 f5 74 97 36 c6 d9 18 e4 ac d9 e7 3e 8b e4 ee 75 a3 aa 5c cb a8 75 6b a3 05 60 d8 63 75 85 3d 10 72 65 5c a1 38 79 ac bd 9b ac d2 6f ab b4 30 b0 bd 75 c8 eb 1a 58 a0 de ac 6c 8e 3c 1f 35 4c c6 6f 41 21 06 3a 3b c4 49 71 64 b9 f7 7f 38 dc f4 72 ec 60 e7 35 c9 b2 48 64 69 47 23 19 3d c1 e4 ba 39 d9 d4 e6 98 e5 d0 60 73 21 f3 d6 90 b2 f0 5c 52 be f6 c6 b5 b7 38 5d 2e fc e6 5e 26 c5 c5 b6 d1 8f 3b b4 0c c0 5a 42 34 00 0f 73 74 d9 b3 50 c6 d8 15 9e 29 74 c6 Data Ascii: mhM6Ga*(B^p@jp[tkxsZ.j]G:XL0,'Hu-]Q<vpFt6>u\uk`cu=re\8yo0uXl<5LoA!:;Iqd8r`5HdiG#=9`s!\R8].^&;ZB4stP)t
2024-01-15 13:25:07 UTC	16384	IN	Data Raw: aa 0e 93 ce 11 fd b6 e5 42 b0 02 c9 33 a8 36 59 6f d0 ea b7 37 7a 68 b2 bd b0 a5 50 5a ab 36 55 9a ce 53 5c da d6 88 6f 44 2e 2a 42 03 3c 74 85 79 eb b1 ad 22 b1 45 81 16 c8 36 3f b1 43 65 51 02 da 2d db ad dd 94 5c fc 96 ed 15 c8 85 b8 ff 00 55 2f aa f1 1f c0 df c3 cc ff 00 1a ec cd 34 55 68 ee b8 3c d5 a8 15 14 b3 18 b7 bd 7f 75 07 14 38 74 47 0f 13 55 0a ce f2 09 f2 d7 66 d2 89 80 e6 04 1f 6a fb 20 a7 e2 97 65 34 0b 37 8c 2a a1 b8 a3 de b2 f8 8d 94 cc 30 78 79 15 7a a7 1c ed 12 50 93 6b ac cd 2b 33 56 66 94 1e ee 09 aa cf a3 6d d8 db d1 40 ab 75 52 80 c3 20 73 9f e9 6e c1 ec 57 03 bc aa b7 da e0 3a 84 5c e9 15 a2 ba a3 95 1c a3 64 b6 c0 2c 09 fc 83 63 bb 15 68 52 d7 53 92 a9 a2 a9 ba e4 79 95 90 9e aa fb 0c f7 50 b9 ec 95 11 c4 ef db 6c 7a ac a5 36 4c Data Ascii: B36Yo7zhPZ6US\oD.B<ty"E6?CeQ-\U/4Uh<u8tGUfj e470xyzPk+3Vfm@uR snW:\d,chRSyPlz6L
2024-01-15 13:25:08 UTC	16384	IN	Data Raw: a3 80 6e 36 07 59 68 1e 8f 48 11 5c e6 0e 8f dc b4 13 10 b3 54 b2 17 8f 54 ca 01 ac 2b 4c 2c 66 6e 67 0d 5b 34 35 79 c9 31 80 17 db 72 d4 d9 cd 4c 3c 1f e6 3d 50 37 d3 fb d7 e9 ad 7b c2 d0 2d 06 8c f3 10 e3 e7 f3 0c 93 be 84 bf 4a 7a c2 3a 73 d2 5d c4 34 ed 96 25 1e 9c 43 a7 01 b0 e8 4c 94 70 0f a4 c5 a8 23 cd 5b 77 a8 96 4c 3a a5 ca 1c 8f 92 0a d4 ce 4c 6f b2 0b a0 fc 4a a5 8d 57 ac b6 11 2b 00 65 6d 3b 16 12 96 c0 53 c2 e2 36 4e 6c 4a 72 54 54 22 5d 88 5b 65 3b a8 d8 9e 30 8e 1b 03 e4 40 b9 20 22 bf 44 e0 53 2c ba ef 89 6c 9a 07 82 bd 33 2e 4e 39 8e 4d 99 8a 59 b6 1c 38 62 6d c5 9c 13 f3 94 28 e4 15 eb 12 6d 66 58 bc 8a 39 5b 63 05 e7 cc 6d a0 58 ef fa 96 ed a7 7d cd cf 79 52 e9 ba f3 ff 00 62 11 ca 57 5a 78 8c 71 cd 7f 91 2e ee 01 ca 23 a4 77 0a 7d c9 Data Ascii: n6YhH\TT+L,fng[45y1rL<=P7{-Jz:s]4%CLp#[wL:LoJW+em;S6NlJrTT"][e;0@ "DS,l3.N9MY8bm(mfX9[cmX}yRbWZxq.#w}
2024-01-15 13:25:08 UTC	1394	IN	Data Raw: 69 e4 8b 57 29 ca 03 40 03 00 c4 2f e3 c4 5f fd 8d 18 86 2c 95 21 c7 96 06 49 36 ea 00 cd 5e f9 0f c4 54 1e 07 c7 e7 50 33 67 b9 56 aa 11 2c c4 6a 40 0b 06 d5 bf c4 4f 0a fe 35 33 94 3c e6 16 00 be 47 ee 09 c7 b4 bf 52 cd 00 e8 db ed 2b 84 4d 01 c2 57 fd 88 56 a0 53 0a e5 01 aa 22 c1 59 fa 87 33 a1 1e 8b 08 7f f0 e8 ad 2a e8 98 55 1a 35 3c b6 8a 3d 2a d7 ee cd 9f 1d e6 43 37 87 8b 2c 6f d4 81 c1 7a 68 59 ea d5 22 ad 74 95 9a db 64 87 bf 0d 8a ef 62 b2 63 cb 28 5c 64 c1 65 45 0b a9 49 0a 14 5b 08 10 34 f5 28 c9 bc 04 cd 28 95 1a b3 42 a2 58 0d 0d 86 a0 92 21 7a a1 2f 39 f2 95 20 7b 04 a5 75 6e ee 82 88 35 14 f8 1a f6 99 7d e6 6b dd 75 a2 1c 30 60 b5 1b 14 17 56 b2 00 26 7a c4 80 96 c9 19 5c 58 15 66 0c 88 22 96 91 aa a7 bc 48 b7 00 8b f5 b5 2e c5 0c c4 00 Data Ascii: iW)@/_,!I6^TP3gV,j@O53<GR+MWVS"Y3U5<=C7,ozhY"tdbc(\deEI[4((BX!z/9 {un5}ku0`V&z\Xf"H.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.5	51229	103.130.153.151	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:06 UTC	862	OUT	GET /wp-content/banners/Travel_Journal_Preorder.jpg HTTP/1.1 Host: mylovelybluesky.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.449002724.1705325034; __gads=ID=4dba28c46c56e006:T=1705325037:RT=1705325037:S=ALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ; __gpi=UID=00000db762a073bf:T=1705325037:RT=1705325037:S=ALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA; _ga_JJ7DB92BJ6=GS1.1.1705325033.1.1.1705325100.56.0.0; FCNEC=%5B%5B%22AKsRol81L_LSrysMFztIXnKOjfIpSLyba6GzeHc8Ra02cFHWLftHZWESobnuaHYEeoD8-7xl2zQRh3PyYI8PhL5Jo2FVcSAQJUS8i_NrXO7ouTuxdtf-Dwsjzty71ryAcX3zuH5FavEVLHjC3u9PGRjG5TBbbYP5Fw%3D%3D%22%5D%5D
2024-01-15 13:25:07 UTC	556	IN	HTTP/1.1 200 OK Connection: close cache-control: public, max-age=2592000 expires: Wed, 14 Feb 2024 13:25:07 GMT content-type: image/jpeg last-modified: Sun, 16 Dec 2018 15:01:52 GMT accept-ranges: bytes content-length: 54995 date: Mon, 15 Jan 2024 13:25:07 GMT server: LiteSpeed strict-transport-security: max-age=3600; includeSubDomains; preload vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-01-15 13:25:07 UTC	812	IN	Data Raw: ff d8 ff e1 0f 8d 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 0e 00 00 01 03 00 01 00 00 00 20 03 00 00 01 01 03 00 01 00 00 00 d8 00 00 00 02 01 03 00 03 00 00 00 b6 00 00 00 06 01 03 00 01 00 00 00 02 00 00 00 12 01 03 00 01 00 00 00 01 00 00 00 15 01 03 00 01 00 00 00 03 00 00 00 1a 01 05 00 01 00 00 00 bc 00 00 00 1b 01 05 00 01 00 00 00 c4 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 31 01 02 00 22 00 00 00 cc 00 00 00 32 01 02 00 14 00 00 00 ee 00 00 00 3b 01 02 00 0f 00 00 00 02 01 00 00 98 82 02 00 0f 00 00 00 11 01 00 00 69 87 04 00 01 00 00 00 20 01 00 00 58 01 00 00 08 00 08 00 08 00 80 fc 0a 00 10 27 00 00 80 fc 0a 00 10 27 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 39 20 28 57 69 6e 64 6f 77 73 29 00 32 30 31 38 3a Data Ascii: ExifII* (1"2;i X''Adobe Photoshop CC 2019 (Windows)2018:
2024-01-15 13:25:07 UTC	14994	IN	Data Raw: 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d7 cd e9 94 b5 ec 2c f4 e9 b5 e4 6f 60 f6 d6 e6 bc 7e 8e fa c7 d1 c5 f7 7f 3b 5b 99 e9 aa ee c1 8b 45 16 9f 4e c7 02 5a c7 34 7b 80 25 ae f4 dd f4 2c db b7 dd e9 bb 7b 15 8c cc ac 53 8d e8 e4 e4 34 5f 6d 65 b6 0b 03 ac 6d 6e 73 db e8 34 6f 0c af dd 4b 1f ef ff 00 d2 ab 16 Data Ascii: v7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?,o`~;[ENZ4{%,{S4_memns4oK
2024-01-15 13:25:07 UTC	16384	IN	Data Raw: 27 18 27 49 27 7a 27 ab 27 dc 28 0d 28 3f 28 71 28 a2 28 d4 29 06 29 38 29 6b 29 9d 29 d0 2a 02 2a 35 2a 68 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 Data Ascii: ''I'z''((?(q(())8)k))*5h*++6+i++,,9,n,,--A-v--..L.../$/Z///050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}C
2024-01-15 13:25:08 UTC	16384	IN	Data Raw: 36 c5 76 a6 e1 ff 00 6b a7 89 36 6d 1e ef de 13 74 65 be da 42 db 76 39 23 9f 7e d3 c1 0c ba f7 7f 03 2c 3e 1f e3 63 e2 2e 9b 85 91 76 b2 09 06 df 63 5d d3 44 c9 5d 68 f7 3b a9 53 bd de ee a5 93 4e 6f ff 00 1e 2f bb c6 df 7f 29 65 d8 c6 a5 77 cb 16 63 15 f4 b3 7b 62 f8 f0 ed 9b c6 8b ee b0 fb 0d fb 87 de ed 00 69 a4 ba e4 96 19 0d 76 df 13 da 3f ff 00 e4 9a ed 39 53 ff 00 6c fe 86 28 46 36 f2 bb 49 1e d7 58 7b ec d1 29 66 48 55 5e 46 e9 ba dd 47 54 8a fc 6c a3 da 6c e7 92 0d f9 56 f7 f8 24 1a 8d ae 7f 87 5d c3 4e b2 4d 95 57 53 79 ba d1 83 dd bc 1d a6 26 4d ba 45 16 dd 09 8a 24 89 f5 49 31 9b 66 7d d4 f7 35 db bb db c3 f6 71 f5 e7 c7 c4 26 8d e2 32 ec e4 91 36 5b 79 c1 68 88 db 40 bb ed dc ba 29 92 6d d6 7d 38 bd e1 b4 e1 8f f1 31 f1 0d c4 d2 26 de 0d f4 Data Ascii: 6vk6mteBv9#~,>c.vc]D]h;SNo/)ewc{biv?9Sl(F6IX{)fHU^FGTllV$]NMWSy&ME$I1f}5q&26[yh@)m}81&
2024-01-15 13:25:08 UTC	6421	IN	Data Raw: 8a 0b 53 b3 83 c7 8f 96 9c b0 0f 99 b9 85 f8 9a 0c ad 77 56 24 da bd a9 19 44 69 15 05 6d a9 66 97 bc 6b b3 49 e7 a6 4c 3c 2f 5a 48 55 61 03 99 04 ea cc cb e9 2a ae 47 5b f0 d3 92 d1 c9 2a db 1c 20 f2 0a 0b 32 b5 b9 96 3f 6a f2 7f 99 89 5e 52 a0 44 23 59 50 1e 04 d0 f1 8f a5 f5 73 69 f7 7e 36 0e d4 c6 66 9a 38 da 08 58 81 a7 12 48 74 e4 9a 24 07 4d e4 dc 7b 59 7b c9 bc 39 30 b1 49 b5 12 6d 10 7b b1 81 73 c8 09 ef 66 78 ef 55 59 35 59 23 bb 51 f5 2c c2 98 9e 54 96 45 ab 46 d1 00 a2 84 5e 5a f6 3d da 47 96 c5 b3 51 fd 4c 0d 1e f0 b3 55 4c 99 94 2b 79 13 b2 8f d8 7c 19 0c 8c cc 45 18 17 39 d3 a5 b6 da be 97 f9 78 73 b2 53 11 8a 48 d6 28 e4 23 22 81 7f ee 76 ec eb e1 e2 1d f6 e2 44 8d da 33 ee a8 07 02 dc 63 69 2c 4c cf 7b 5d 64 7e 1e 22 dd 30 0e 24 5b da b9 Data Ascii: SwV$DimfkIL</ZHUaG[ 2?j^RD#YPsi~6f8XHt$M{Y{90Im{sfxUY5Y#Q,TEF^Z=GQLUL+y\|E9xsSH(#"vD3ci,L{]d~"0$[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.5	51238	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:07 UTC	1849	OUT	GET /pagead/interaction/?ai=C5lAd_DGlZZxNv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEigJP0LhJFx_3ItxoLq26zrolQtN57TLZVlenMsBFXe44tjAI-0p9KEhCP65vpW9906ejaLAN1jXF9YQL5d8Z3TleoRrfeFAumGUoRv5Irq7fA6854JkvDiFJUUIfGRsuvCzTYfCh3GNFXM150mabMqRG3ZAk-n3TYqIEeVrZou1O0_mUxlGbqlHDXUsp1TTQogYamRgmoourD5YpsUQ3qdu4JhfyxCwQ0EPILdk5tLWHT5TdVpFQs2dXA-LoRKeTLi96J1-j8MHi-_L_K_tSgW7LSUGmn7cwWcpyyb3FMhj27EEHZgEmXdlxxrYqT_eOHPXZntTO_4VYV3i0cRHq9utLsWARqkYOzWqz-sAEuf6yyaME4AQDiAXcy-qJSZAGAaAGTIAHmqnmwQGoB9m2sQKoB47OG6gHk9gbqAfulrECqAf-nrECqAfVyRuoB6a-G6gHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA0ggfCIBhEAEYHzICigI6BIBAgEBIvf3BOlj6_83vvt-DA4AKAZgLAcgLAYAMAaIMCCoGCgSsurECqg0CVVOwE-blqxbQEwDYEw2IFALYFAHQFQH4FgGAFwE&sigh=g6ajDms2XP4&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJy7zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.5	51236	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:07 UTC	1850	OUT	GET /pagead/interaction/?ai=CKKul_DGlZZ1Nv9PT_A_TzZnABbfHu6116ZWyzYoRZBABIO34qSBgyYagiqSk4BGgAc7Wmb4CyAEJqAMByAObBKoEiwJP0Np9sr6OnmLV6uH2whdWwE7_IAfotQJOnB8onsVT4iQn_cffUnVeQEWsupSQjan6WnRq7AtTi_v6q_TeCoJ11M-CrWjO9zRYLNog8x7WcUysgeAKYrFQ4Cy4FG1MhBKOhwOj_4f3vd9-q3roeLC4BGnO4QeN9H3C11cMeS9_VlWiygUdBW2YFpVSDs3qT4L94yF86e0mQgYfAbvQoS92t5ejr89VeNbihGRlubHVSdOe7fzR7VG3AP-lSSn92B_T_KwMaCgZt4MIHoVq_630C9RVvMJcvnC1FxvvEMCQXbqlUHY7zWacwnvZpt9n5YpaYucp1qZPUiY8en4BKxKZ06MFyj58tiz-uYnABLn-ssmjBOAEA4gF3MvqiUmQBgGgBkyAB5qp5sEBqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAtgHANIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY-v_N777fgwOACgGYCwHICwGADAGiDAgqBgoErLqxAqoNAlVTsBPm5asW0BMA2BMNiBQC2BQB0BUB-BYBgBcB&sigh=BD7MJ-Ea9UI&cid=CAQSOwAvHhf_ymRuRktSzbRvDGBK8ckaGOCxz1cNI8xNF3mZdbrGDsWMPBQH49TKhsWz2z_zFhOHaQCpeaL7&label=window_focus&gqid=-zGlZbPhPPyToPMPyrGoqAQ&qqid=CJ27zu--34MDFb_plAkd02YGWA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.5	51240	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:07 UTC	3189	OUT	GET /pagead/interaction/?ai=CFf0PKjKlZYGNCsrCxtYPz7-G-ArC2_2sdb2K4vuNEurptLX5ARABIO34qSBgyYagiqSk4BGgAZLM7PECyAEJqAMByAPLBKoE9wFP0AUrt2pKV0TQz4meDbq3gqBTmzB0Czgtei0xhNc1p3gbN616RxE3mZdqnO6i0hbKQxIHGHjJiWm7SIWbPHgMA3GgMLsX1GnzcfIYdOCmWEfAQWyjlh6R_Kol6qQxyTHTZs3cdvQFo7z32Oml3hTqXimBA6EquJibHrQI72m-X4IQuMj1XOheSWhb7w11VocQw8VwjSiFcqQlYrFyp1M5caCR98ALmGgSogNc5aomoz-SjawzO4easQUwtXjRVqNK1lFev8haX5aAxHqI39Kg2sHesGqbv2KlLD2gqGYemTFYIqqsLjDetby_fipIeMiZdAFz63QswAT96_78iwSIBYWZvuNGoAYugAfWs5OOAagH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WOqXz4W_34MDsQknip_hVqkMaIAKAZgLAcgLAeALAYAMAaIMCCoGCgSsurEC2gwQCgoQ4JqcyLa39rh7EgIBA6oNAlVTyA0BohNWCjkIA0ABUggKBhIECAEQAWi6lLOORHIjEiEgAigBOAJAhZm-40ZYAWj-__________8BcAKAAQGYAQMaGQoXY2EtcHViLTYxNjMyOTIzMTczMzMwMTG4E4gE2BMK0BUBmBYB-BYBgBcB&sigh=C6ADlGvm9oo&cid=CAQSOwAvHhf_Oc0BdNyVM9Ng2e6hqlFcLj8n6p81Wx-81tbul3xuivjxRRb-15pxi-Zw86ILoR6uONeRjYVH&label=window_focus&gqid=KjKlZYqnCb2VoPMP8LeXwA8&qqid=CIHKz4W_34MDFUqh0QQdz58Brw&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=280&adk=3088186576&adf=683863926&pi=t.aa~a.108489206~rp.4&w=1200&fwrn=4&fwrnh=100&lmt=1705325096&rafmt=1&to=qs&pwprc=6034854619&format=1200x280&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&fwr=0&pra=3&rpe=1&resp_fmts=3&wgl=1&fa=40&dt=1705325096612&bpp=2&bdt=577&idt=199&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=32&ady=206&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=213 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.5	51239	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:07 UTC	3045	OUT	GET /pagead/interaction/?ai=CRn4qKjKlZe_CE_zDxtYPm5W7QNSd8Plcm7SZp5EL0JCA7JACEAEg7fipICgIYMmGoIqkpOARoAHN8fbiAsgBBqgDAcgDAqoE5AFP0POtMOl-2_hwzcVIhf0FsOnw11UZk-FRkSavcc4lRsPJGVcrow1-wJ4RrYrw4eE2GwvhBRHtzYmaDRKy4C1mm3H_3RSKGYLHZaD1A6QroQPWHO66y-1J88sHrLppZcUWI-P3JVo_LGi9lzgNrcX-FfCl_dsRKawsCGheujSZmkvsFgG0A0pagpwfyocqObEGH9iCu0CQmvYtaGY4qvMncqgtk9_doe4SJzqt5X01H29k9RTkFzxiRVTRjjQzuvlWqxjUHwzVtHCTgjwJt4oLuNDStLr-f9i1qc2fY6fWe-CR2BnABN-skZmDAogF9ezfiAegBjeAB5uOiZ0BqAfZtrECqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgH1ckbqAemvhuoB5oGqAfz0RuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHyqmxAqgH66WxAtgHAdIIHwiAYRABGB8yAooCOgSAQIBASL39wTpY1crYhb_fgwOxCU9YIgYSXr2JgAoBmAsByAsBogwIKgYKBKy6sQLaDBEKCxCQxImWgYD-hY8BEgIBA6oNAlVTyA0B2BMNiBQD0BUB-BYBgBcB&sigh=sylM6owGxs0&cid=CAQSOwAvHhf_ljL70XOrxjAmvqCGMK5VxayLXn-dwzoUVxYD7K8Itvg7EGf0etxXhQTaro-g2TE2Wno2D67k&label=window_focus&gqid=KjKlZa3ZEq_KoPMP8Y22-A4&qqid=CO__2IW_34MDFfyh0QQdm8oOCA&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-6163292317333011&output=html&h=450&slotname=8641603784&adk=1684424416&adf=1524225159&pi=t.ma~as.8641603784&w=750&cr_col=4&cr_row=2&fwrn=2&lmt=1705325097&rafmt=9&format=750x450&url=http%3A%2F%2Fmylovelybluesky.com%2F%23genesis-footer-widgets&ea=0&host=ca-host-pub-2644536267352236&crui=image_stacked&fwr=0&wgl=1&dt=1705325096611&bpp=1&bdt=576&idt=196&shv=r20240109&mjsv=m202401080101&ptt=9&saldr=aa&abxe=1&cookie=ID%3D4dba28c46c56e006%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MblVmm1x7JvGUlyO00XL4D81TwwsQ&gpic=UID%3D00000db762a073bf%3AT%3D1705325037%3ART%3D1705325037%3AS%3DALNI_MZ4UZ-wCR8SU3KNesWd_Ga2d6ZheA&prev_fmts=0x0%2C1200x280&nras=2&correlator=5149972078852&frm=20&pv=1&ga_vid=449002724.1705325034&ga_sid=1705325097&ga_hid=68920925&ga_fc=1&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=62&ady=5384&biw=1263&bih=907&scr_x=0&scr_y=8326&eid=44759875%2C44759926%2C44759837%2C95320238%2C31080333%2C42532600%2C95321900%2C95321627%2C95322162%2C21065725%2C31078668%2C31078670&oid=2&pvsid=2985583051357587&tmod=347032164&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=446 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.5	51241	142.251.179.156	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:07 UTC	1822	OUT	GET /pagead/interaction/?ai=CVHmZKjKlZfzlB_SextYP34a2iAXPzv6idb6DmuODEtvZHhABIO34qSBgyYagiqSk4BGgAYnY9skDyAEJqAMByAMCqgTnAU_Q3BZ6hx1PJCUg3GpkGt-C9RqqzNj6uMdvPLsMSq2JmjFQpJc7mqgceGgxOeY5MsBrG2xNANrP3xJ5DjaHAT3oHCtw0OaVqvxYVJHmQW_nsBaqMXO8fnH5rYxqHMSUDOvCOnTw6jtd64UouL7ZsTO2KIeVBAqJqpXlnjcTZzZFVmUDj6y7wLtQRYY5-EdY-VS__w4cF_25MXvkYNsVMwvIsmbq1nhqV6KOyNbfCpi7b9b35alWn9hVaBbu9z0Wm6rF7znFUBKCt0E4QArFvbLZyQRYbVVF2Shr2kfE6f5ysqyA65Aw48AEzcOcvrsEiAXenqyZTaAGEYAHiuPWP6gH2baxAqgHjs4bqAeT2BuoB-6WsQKoB_6esQKoB9XJG6gHpr4bqAeaBqgH89EbqAeW2BuoB6qbsQKoB4OtsQKoB_-esQKoB9-fsQKoB8qpsQKoB-ulsQLYBwDSCB8IgGEQARgfMgKKAjoEgECAQEi9_cE6WPbszIW_34MDgAoBmAsByAsBgAwBogwIKgYKBKy6sQLaDBEKCxDgopbYroOz1pwBEgIBA6oNAlVTyA0B2BMN0BUB-BYBgBcB&sigh=90j_1GsJxqE&cid=CAQSOwAvHhf_FQNFhEPQrAEB8_Ddvsn3XdThTZe6DuhMnyzh2BAwQ0J5xaMZq3HECVNb-vVmz2iJZRudxkKl&label=window_focus&gqid=KjKlZaGCB6PLoPMP3fG6gAk&qqid=CPyizYW_34MDFXSP0QQdX4MNUQ&fg=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240109/r20110914/zrt_lookup_fy2021.html?fsb=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnQqTlCwpkwy3np3iSt4QtVB4h7FqqX-CowRhD8fO-x9ugkNHMUHBtT1_ozhuY; APC=AfxxVi5ezxUGfP7v2gPdRJ6RXe-pCZTx_WzAVc4qdaibISal1qxFYA; DSID=NO_DATA; ar_debug=1
2024-01-15 13:25:07 UTC	625	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jan 2024 13:25:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: * Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.5	51100	50.31.142.63	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:11 UTC	814	OUT	GET /usersync/googleadx/?google_gid=CAESEDlBtm3XF5Cv_oysSMb9_YQ&google_cver=1&google_push=AXcoOmS4xfBktbiyJEYWtgMnG4IkbRinQOlMNSRgvubYtTWkC8aFNfGDqhrB2gKg3d1xUOIE6nb0EuulRnGLdXhLwnwxUo-pde2eXG0 HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pagead2.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4
2024-01-15 13:25:13 UTC	657	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 239 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmS4xfBktbiyJEYWtgMnG4IkbRinQOlMNSRgvubYtTWkC8aFNfGDqhrB2gKg3d1xUOIE6nb0EuulRnGLdXhLwnwxUo-pde2eXG0&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ= P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=hrSDLOZ0XNGNxwTLm2F4; Path=/; Domain=zemanta.com; Expires=Tue, 14 Jan 2025 13:25:13 GMT; Max-Age=31536000; Secure; SameSite=None Date: Mon, 15 Jan 2024 13:25:13 GMT
2024-01-15 13:25:13 UTC	239	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6d 61 6e 74 61 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 70 75 73 68 3d 41 58 63 6f 4f 6d 53 34 78 66 42 6b 74 62 69 79 4a 45 59 57 74 67 4d 6e 47 34 49 6b 62 52 69 6e 51 4f 6c 4d 4e 53 52 67 76 75 62 59 74 54 57 6b 43 38 61 46 4e 66 47 44 71 68 72 42 32 67 4b 67 33 64 31 78 55 4f 49 45 36 6e 62 30 45 75 75 6c 52 6e 47 4c 64 58 68 4c 77 6e 77 78 55 6f 2d 70 64 65 32 65 58 47 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 61 48 4a 54 52 45 78 50 57 6a 42 59 54 6b 64 4f 65 48 64 55 54 47 30 79 52 6a 51 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cm.g.doubleclick.net/pixel?google_nid=zemanta&google_push=AXcoOmS4xfBktbiyJEYWtgMnG4IkbRinQOlMNSRgvubYtTWkC8aFNfGDqhrB2gKg3d1xUOIE6nb0EuulRnGLdXhLwnwxUo-pde2eXG0&google_hm=aHJTRExPWjBYTkdOeHdUTG0yRjQ=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.5	51266	172.253.63.100	443	1120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-01-15 13:25:18 UTC	449	OUT	GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000004385723E0D HTTP/1.1 Host: clients1.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br
2024-01-15 13:25:19 UTC	817	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-90tL3iqLWhb-kVBxPtMKag' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Security-Policy: script-src 'report-sample' 'nonce-ei4vBdcXzvmXzncnk9R7SQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/download-dt/1 Content-Type: text/plain; charset=utf-8 Content-Length: 220 Date: Mon, 15 Jan 2024 13:25:19 GMT Expires: Mon, 15 Jan 2024 13:25:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-01-15 13:25:19 UTC	220	IN	Data Raw: 72 6c 7a 43 31 3a 20 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 0a 72 6c 7a 43 32 3a 20 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 0a 72 6c 7a 43 37 3a 20 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 0a 64 63 63 3a 20 0a 73 65 74 5f 64 63 63 3a 20 43 31 3a 31 43 31 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 2c 43 32 3a 31 43 32 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 2c 43 37 3a 31 43 37 4f 4e 47 52 5f 65 6e 55 53 31 30 39 33 0a 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 2c 43 31 53 2c 43 37 53 0a 73 74 61 74 65 66 75 6c 2d 65 76 65 6e 74 73 3a 20 43 31 49 2c 43 32 49 2c 43 37 49 0a 63 72 63 33 32 3a 20 65 62 66 31 35 33 35 63 0a Data Ascii: rlzC1: 1C1ONGR_enUS1093rlzC2: 1C2ONGR_enUS1093rlzC7: 1C7ONGR_enUS1093dcc: set_dcc: C1:1C1ONGR_enUS1093,C2:1C2ONGR_enUS1093,C7:1C7ONGR_enUS1093events: C1I,C2I,C7I,C1S,C7Sstateful-events: C1I,C2I,C7Icrc32: ebf1535c

Target ID:	0
Start time:	14:23:43
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:23:47
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1644 --field-trial-handle=1984,i,912001148016824484,8178260461963803595,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:23:49
Start date:	15/01/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://mylovelybluesky.com
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://mylovelybluesky.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Windows Analysis Report
http://mylovelybluesky.com