Edit tour

Windows Analysis Report
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

Overview

General Information

Sample URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html
Analysis ID:	1392526
Infos:

Detection

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Phishing site detected (based on OCR NLP Model)

Creates files inside the system directory

Form action URLs do not match main URL

Found iframes

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4960 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5328 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7304 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7440 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6420 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css	Avira URL Cloud: Label: phishing
Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff	Avira URL Cloud: Label: phishing
Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

Virustotal: Detection: 17%

Perma Link

Phishing

Phishing site detected (based on OCR NLP Model)

Source: Chrome DOM

ML Model on OCR Text: Matched 82.7% probability on "AT&T Sign in to continue User D Forgot user D? Password Forgot password? Keep me signed in for 2 weeks Sign in Cancel Don't have a user 11)? Create one now Legal policy center Privacy policy Tams ofuze Accessibility Do not sell my per information @2021 AT Intellectual Property. All rights resend. "

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

HTTP Parser: Form action: https://hagolibros.com/.font/another.php fromthemachine hagolibros

Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252...

HTTP Parser: Iframe src: https://cdn.quantummetric.com/helpers/blank

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	HTTP Parser: Number of links: 0
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252...	HTTP Parser: Number of links: 1

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	HTTP Parser: Title: Login Screen does not match URL
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252...	HTTP Parser: Title: AT&T does not match URL

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

HTTP Parser: Has password / email / username input fields

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

HTTP Parser: Form action: https://hagolibros.com/.font/another.php

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

HTTP Parser: <input type="password" .../> found

Source: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID?	HTTP Parser: No favicon
Source: https://servedby.flashtalking.com/container/19536;124481;13503;iframe/?friendlypagename=myATT%20Registration%20OPR%20Choose%20ID%20Pg&flowCode=OPR&ft_referrer=https%3A//www.att.com/acctmgmt/registration/opr/chooseID&ns=&cb=944678.0391137406	HTTP Parser: No favicon
Source: https://6100125.fls.doubleclick.net/activityi;dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID?	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?	HTTP Parser: No favicon
Source: https://6100125.fls.doubleclick.net/activityi;dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0	HTTP Parser: No favicon
Source: https://6100125.fls.doubleclick.net/activityi;dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?	HTTP Parser: No favicon
Source: https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?	HTTP Parser: No favicon
Source: https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?	HTTP Parser: No favicon

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	HTTP Parser: No <meta name="author".. found
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252	HTTP Parser: No <meta name="author".. found
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252	HTTP Parser: No <meta name="author".. found

Source: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252...	HTTP Parser: No <meta name="copyright".. found
Source: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.50.93
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/siam//en/halo_c/images/logos/att-logo.svg HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://suez.fromthemachine.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/siam//en/halo_c/images/logos/att-logo.svg HTTP/1.1Host: signin.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_perc_100000_ol_0_mul_1_app-3Aa75ea7b2824f5aea_1; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQXCXRF6Odg6ONAQAAvZcaqgso2hjQAXnnhqmr1YPkZuknOa6V/5DqWK9e6nyZbeQe7JF6iiJGF5ovXWsPT00HX84Nqa/2sdLY5bJtiGQEbWIwNn5wfSMHONAwFqW4Hht2lfK8+QqYTj/tiY9MMg30KkLAJI8D2nYl3P7ks9CLX4fa3Zw9Ty0gyO/peDQI052SjKA8qzAWJF2a1uM6rpaQFofsvaJ2qVw7Ra9wZmr74/MXf4hTRejMqnXVqeotlZYHZV4+unQO+W4aj7KjyxeK2ZVOVdkTTdaX6sRN4jR8wuHerKiBbj9CpuDvN4mE85w1Nm9+QAN/6udOTaSk95fReUrtSrh2ec/ub+m15HTMrsikoLTNdeE=~-1~-1~-1; bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; dtPC=19$355885995_830h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957686009\|1707955886003
Source: global traffic	HTTP traffic detected: GET /qscripts/quantum-att.js HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1707955888931 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1707955888931 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=03880614951140241342725460080740716815
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955891151 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1Host: attservicesinc.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=0&tt=0&bcn=%2F%2F173bf10b.akstat.io%2F"; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEd
Source: global traffic	HTTP traffic detected: GET /identity-ui/static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3
Source: global traffic	HTTP traffic detected: GET /identity-ui/cms.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz
Source: global traffic	HTTP traffic detected: GET /_sec/cp_challenge/sec-4-2.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7
Source: global traffic	HTTP traffic detected: GET /identity-ui/static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
Source: global traffic	HTTP traffic detected: GET /identity-ui/runtime.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3
Source: global traffic	HTTP traffic detected: GET /identity-ui/polyfills.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTx
Source: global traffic	HTTP traffic detected: GET /identity-ui/ATTAleckSans_W_Rg.woff2 HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://identity.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRs
Source: global traffic	HTTP traffic detected: GET /identity-ui/scripts.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3
Source: global traffic	HTTP traffic detected: GET /identity-ui/vendor.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3C
Source: global traffic	HTTP traffic detected: GET /identity-ui/main.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpi
Source: global traffic	HTTP traffic detected: GET /_sec/cp_challenge/sec-cpt-4-2.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz9
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3h
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/quantum-att-loader.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7lu
Source: global traffic	HTTP traffic detected: GET /identity-ui/styles.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VT
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBz
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/i18n/en.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVb
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"lang: en-usAccept: application/json, text/plain, /Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvd
Source: global traffic	HTTP traffic detected: GET /identity-ui/undefined HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955895264 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /identity-ui/styles.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz9
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /static/ciam/en/common/js/keepAlive.js HTTP/1.1Host: signin.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"lang: en-usAccept: application/json, text/plain, /Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvd
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/quantum-att.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7Djq
Source: global traffic	HTTP traffic detected: GET /identity-ui/undefined HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/i18n/en.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/ATT_LOGO.svg HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/ATTAleckSans_W_Md.woff2 HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://identity.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://identity.att.com/identity-ui/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"lang: en-usAccept: application/json, text/plain, /Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVb
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/ATT_LOGO.svg HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/ATT_Globe.svg HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/ATT_Globe.svg HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897562&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897564&z=1&Q=1&Y=1&X=8fe5c580ccd147e7aedbee0733f50447 HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://identity.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955898565&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F&ld=9xu"; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; dtPC=19$355899941_128h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957699954\|1707955886003
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955899148&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2185&N=5&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/help-white.svg HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/img/help-white.svg HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_F47B67613101177EF351912F6C619F2F_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQVSXRF6QfVamNAQAAU9saqgv6PdBgQ5NaUUbcog8nNtG5twhEHOhjiORGO9W577TnukhixRB+LkDNagsnaYQiteeq01JLJ0O8BMxVnlsfVI+lK5qX3QPF4uxstOiXALjBGkZe8cPwTMaKwMJd60CDUZUJuAXlrOXtpSZ6WsO1KT7ik/SFoy0giwPSN+OT1bcfCqMuX5qcLs2MhtfkLq2U8N/UBX4P7CVXm5qdpmKku2wvNeTThcVh7ZEQkIyrPh6kXC6KPBIQ9WbeYHB+BWnQbv+gGk0FONlHoMLKYGPPC0WXZWeqnPcw0mpJMBr4eE5QpaIVumL3llZ6AyTvVYBxIEbxgYR/4OcAzG/lGv+P8TKj2cR3DhAkVsv9QjfRTRrYDsTD5w==~-1~-1~-1; rxvt=1707957703111\|1707955886003; dtPC=19$355899941_128h11vLCCWPUKMDCDMMRUUR
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955902789 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955902772&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2616&N=11&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955903803&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=644&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_
Source: global traffic	HTTP traffic detected: GET /identity-ui/static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Z
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955904898&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/cms.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5
Source: global traffic	HTTP traffic detected: GET /identity-ui/static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Z
Source: global traffic	HTTP traffic detected: GET /identity-ui/runtime.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCD
Source: global traffic	HTTP traffic detected: GET /identity-ui/polyfills.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FF
Source: global traffic	HTTP traffic detected: GET /identity-ui/scripts.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCD
Source: global traffic	HTTP traffic detected: GET /identity-ui/vendor.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA
Source: global traffic	HTTP traffic detected: GET /PortalRegWeb/PortalRegController?callingAppId=OP HTTP/1.1Host: attreg.att.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/main.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA74
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/quantum-att-loader.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bm
Source: global traffic	HTTP traffic detected: GET /identity-ui/styles.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F9
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955908422 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=I
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/i18n/en.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k;
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fpwd-conf.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36lang: en-usAccept: application/json, text/plain, /appName: m51303sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2
Source: global traffic	HTTP traffic detected: GET /identity-ui/undefined HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESS
Source: global traffic	HTTP traffic detected: GET /scripts/att_common.js HTTP/1.1Host: signin-static-js.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908235&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=8802&N=18&P=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/m51303/fpwd-conf.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36lang: en-usAccept: application/json, text/plain, /appName: m51303sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A;
Source: global traffic	HTTP traffic detected: GET /identity-ui/styles.css HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5B
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akst
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dt
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/_default_/fpwd-conf.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.aksta
Source: global traffic	HTTP traffic detected: GET /identity-ui/undefined HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$
Source: global traffic	HTTP traffic detected: GET /identity-ui/assets/i18n/en.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908818&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1194&N=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"lang: en-usAccept: application/json, text/plain, /Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k;
Source: global traffic	HTTP traffic detected: GET /static/thirdparty/quantum/quantum-att.js HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F9
Source: global traffic	HTTP traffic detected: GET /identity-ui/externcfg/m51303/fpwd-conf.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.i
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dt
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36lang: en-usAccept: application/json, text/plain, /appName: m51303sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Language: en-ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36lang: en-usAccept: application/json, text/plain, /appName: m51303sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842Accept-Encoding: gzip, deflate, brCookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955911127 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B
Source: global traffic	HTTP traffic detected: GET /identity-ui/app-config.json HTTP/1.1Host: identity.att.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914038&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914042&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=da78c3d4cdaa46297a552c7ef8edf726 HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914841&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/invoca-latest.min.js HTTP/1.1Host: solutions.invocacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /signals/config/128900881029137?v=2.9.138&r=stable&domain=www.att.com HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&cid=CAQSKQAvHhf_PSLNqepZ-qn2rSdVk0tKFlFVbo78N0Q-LyZ8xw-_NwIs0pKG&random=410339091 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915578&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=10&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
Source: global traffic	HTTP traffic detected: GET /js/networks/1593/2673476745/tag-live.js HTTP/1.1Host: solutions.invocacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915939&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=906&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&cid=CAQSKQAvHhf_PSLNqepZ-qn2rSdVk0tKFlFVbo78N0Q-LyZ8xw-_NwIs0pKG&random=410339091 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915940&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=43&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916209&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916212&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=6766dc2016a147975d239307765b79f6 HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&cid=CAQSKQAvHhf_QWeWmzipUsyJbcGApLkL44X99wfi1YSp02tHwvbTb_iVk-FM&random=3232090270 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ocp_id=zVbNZYykE83drr4P4MK86A8&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.5190743972107625&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger;navigation-sourceReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&cid=CAQSKQAvHhf_QWeWmzipUsyJbcGApLkL44X99wfi1YSp02tHwvbTb_iVk-FM&random=3232090270 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&ocp_id=zVbNZYykE83drr4P4MK86A8&cid=CAQSKQAvHhf_MJo2B1CEkVyDuHhwoX4cjk618gF1ujYMUjBPnqxXsG6cAP9N&random=3002872816 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1439&N=10&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.5190743972107625&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTgAAAAAAAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&ocp_id=zVbNZYykE83drr4P4MK86A8&cid=CAQSKQAvHhf_MJo2B1CEkVyDuHhwoX4cjk618gF1ujYMUjBPnqxXsG6cAP9N&random=3002872816 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22device%22%3A%22desktop%22%2C%22existingService%22%3A%220%22%2C%22flowCode%22%3A%22OPR%22%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912718-1707999118%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr1& HTTP/1.1Host: pnapi.invoca.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955920177 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202402080201/pubads_impl.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955919310&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1729&N=15&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/tFUHPoLMUwk?rel=0 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b854ee52/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2698003961308787&correlator=4019115447072384&eid=44809527%2C31080778&output=ldjh&gdfp_req=1&vrg=202402080201&ptt=17&impl=fifs&iu_parts=22674080263%2Catt_web%2Cservices%2Caccount_overview%2CAcctMgmt_Global&enc_prev_ius=%2F0%2F1%2F%2F2%2F%2F3%2F%2F4&prev_iu_szs=728x90%7C970x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&sc=1&cookie_enabled=1&abxe=1&dt=1707955921802&lmt=1707341168&adxs=268&adys=1063&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&vis=2&psz=1263x0&msz=1263x0&fws=4&ohw=1263&ga_vid=447345428.1707955922&ga_sid=1707955922&ga_hid=160808378&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjY3NDA4MDI2My9hdHRfd2ViLy9zZXJ2aWNlcy8vYWNjb3VudF9vdmVydmlldy8vQWNjdE1nbXRfR2xvYmFsIixbXV1dXSxudWxsLDNd&dlt=1707955908179&idt=13474&adks=391953684&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.att.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /s/player/b854ee52/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /s/player/b854ee52/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /s/player/b854ee52/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /activityi;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, triggerReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /sites/att/production/gateway.min.js HTTP/1.1Host: gateway.foresee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/tFUHPoLMUwk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b854ee52/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /js/th/O0gGkLOwZlsvEtn_3NBcCB5b9cpchHh7fZmHe94Vfgw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /Z0IIzRaYIgRNxjlGR7HeS_B6WlFxEbSK4MGEzDxrH8Mszp0QD8DqIcDnhkMzRBr1YDqwtT86=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955920192&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1302&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=2698003961308787&correlator=4019115447072384&eid=44809527%2C31080778&output=ldjh&gdfp_req=1&vrg=202402080201&ptt=17&impl=fifs&iu_parts=22674080263%2Catt_web%2Cservices%2Caccount_overview%2CAcctMgmt_Global&enc_prev_ius=%2F0%2F1%2F%2F2%2F%2F3%2F%2F4&prev_iu_szs=728x90%7C970x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&sc=1&cookie_enabled=1&abxe=1&dt=1707955921802&lmt=1707341168&adxs=268&adys=1063&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&vis=2&psz=1263x0&msz=1263x0&fws=4&ohw=1263&ga_vid=447345428.1707955922&ga_sid=1707955922&ga_hid=160808378&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjY3NDA4MDI2My9hdHRfd2ViLy9zZXJ2aWNlcy8vYWNjb3VudF9vdmVydmlldy8vQWNjdE1nbXRfR2xvYmFsIixbXV1dXSxudWxsLDNd&dlt=1707955908179&idt=13474&adks=391953684&frm=20 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /signals/config/128900881029137?v=2.9.138&r=stable&domain=about.att.com HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955921607&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=9962&N=30&P=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /code/19.22.0-fs/fs.utils.js HTTP/1.1Host: gateway.foresee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /code/19.22.0-fs/fs.compress.js HTTP/1.1Host: gateway.foresee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /generate_204?qJUrDw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source;navigation-sourceReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.6060981865747019&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&cid=CAQSKQAvHhf_qT_X31XrWHa_wrmHez3vWIa3D6jmq6zUk-TI7DZ_HXNSR30E&random=3644765651 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/tFUHPoLMUwk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955924651&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1561&N=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /Z0IIzRaYIgRNxjlGR7HeS_B6WlFxEbSK4MGEzDxrH8Mszp0QD8DqIcDnhkMzRBr1YDqwtT86=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955924992&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.6060981865747019&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVgAAAAACAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&cid=CAQSKQAvHhf_qT_X31XrWHa_wrmHez3vWIa3D6jmq6zUk-TI7DZ_HXNSR30E&random=3644765651 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955925111&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=620c97f3cfbb4ae2d8651f2179d6a3ac HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: att-app.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926311&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 15 Feb 2024 00:08:10 GMT
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926982&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=19402&N=6&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927235&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=11063&N=50&P=4 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927846&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1683&N=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
Source: global traffic	HTTP traffic detected: GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://about.att.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.13.2/themes/base/jquery-ui.css HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22agent%22%3Anull%2C%22att_tfn%22%3Anull%2C%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22call_type%22%3Anull%2C%22campaign%22%3Anull%2C%22channel%22%3Anull%2C%22device%22%3A%22desktop%22%2C%22directv%22%3Anull%2C%22end_of_call_reason%22%3Anull%2C%22existingService%22%3A%220%22%2C%22experiment%22%3Anull%2C%22fiber_indicator%22%3Anull%2C%22final_routing_intent%22%3Anull%2C%22flowCode%22%3A%22OPR%22%2C%22fnl_actn_obj%22%3Anull%2C%22fnl_afpd_actn%22%3Anull%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22gclid%22%3Anull%2C%22gclsrc%22%3Anull%2C%22gigaAvailResult%22%3Anull%2C%22language%22%3Anull%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22lob_call_center%22%3Anull%2C%22need_lvl_1_txt%22%3Anull%2C%22need_lvl_2_txt%22%3Anull%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_b%22%3Anull%2C%22nsr_b_inv%22%3Anull%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_e1_inv%22%3Anull%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22nsr_fid_inv%22%3Anull%2C%22optional1%22%3Anull%2C%22optional2%22%3Anull%2C%22orderid%22%3Anull%2C%22owner%22%3Anull%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageName%22%3Anull%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22productTypeCart%22%3Anull%2C%22product_category%22%3Anull%2C%22product_purchased%22%3Anull%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912722-1707999122%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22rpet_wrk_func_cd%22%3Anull%2C%22rslt_lvl_1_txt%22%3Anull%2C%22Site_location%22%3Anull%2C%22source_code%22%3Anull%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr2& HTTP/1.1Host: pnapi.invoca.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest:
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955930205&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=41816&N=47&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955931744 HTTP/1.1Host: fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955930212&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=33620&N=88&P=5 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1Host: mboxedge34.tt.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955932056&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=859&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVwAAAAADAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-source=navigation-sourceReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: 6100125.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fupperfunnel%2F1.0.58%2Fstyles%2Fmain.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.22429841700412045&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVwAAAAADAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&cid=CAQSKQAvHhf_NYnvPxhrFy89bONMnW8oP1EEEe1zOTsZ_nbhCt2F5c29qK-P&random=2721844903 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: /Origin: https://about.att.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1Host: fid.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATYQAAAAAEAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /pixel/8597/?che=0.22429841700412045&omid=03604370663548075242715929808033793837 HTTP/1.1Host: d.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATYQAAAAAEAS1dAAAAAA
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955935538&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=61545&N=65&P=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fupperfunnel%2F1.0.58%2Fstyles%2Fmain.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&cid=CAQSKQAvHhf_NYnvPxhrFy89bONMnW8oP1EEEe1zOTsZ_nbhCt2F5c29qK-P&random=2721844903 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936413&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936421&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=42b21ce1b57d44f61c32abe076faba0a HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955937254&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1Host: brain.foresee.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938280&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://about.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938877&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955939231&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=3d951b4462b544b1f9c368fce5267ef7 HTTP/1.1Host: att-sync.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpers/blank HTTP/1.1Host: cdn.quantummetric.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://identity.att.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955941224&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34142&N=97&P=6 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955941421&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2175&N=5&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955942230&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1201&N=3 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955942405&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=730&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955943485&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2197&N=5&P=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955944108&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=473&N=1 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955945200&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34265&N=99&P=7 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955946433&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=20252&N=36&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955947022&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=883&N=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949201&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=10706&N=7&P=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949780&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=549&N=2 HTTP/1.1Host: ingest.quantummetric.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Zs8vUR_B5xCUNGZa4f2m8bmv8abKQev04QNi5wDabq9g3xJtZodvRQ6GlOFoMxtu5zNCFJL0ecgt5onH3_BI2rqqBkLeJFgKX7QEmDS4lmOLckZSUBM_dU9uV7dCbZYu6orWqDOttSBvqgJ-PF1puI0USuXZZX7N5u8kvq-QajMcgbUqtIdNBZhH
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=sKSQ2nRimLqYD0ZBSssKhn8IDDvrdjZ32LF9c31r-DVOkzfzBnHGdwDF20GPTnex0Qv2DwtHfHjoH8MvtoZMF3hqwZP64mUNNgUDBv5GRlE3Haf9jKx8jNDWoK1UgW0JzlsXy_Qs3xRcjU5jnNO91QB7ULLy0YU6VO7iuFxENBFAEk7G_n1UlQFC
Source: global traffic	HTTP traffic detected: GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html HTTP/1.1Host: suez.fromthemachine.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css HTTP/1.1Host: suez.fromthemachine.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff HTTP/1.1Host: suez.fromthemachine.orgConnection: keep-aliveOrigin: http://suez.fromthemachine.orgUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff HTTP/1.1Host: suez.fromthemachine.orgConnection: keep-aliveOrigin: http://suez.fromthemachine.orgUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico HTTP/1.1Host: suez.fromthemachine.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.htmlAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_257.2.dr, chromecache_264.2.dr, chromecache_417.2.dr	String found in binary or memory: new Image().src = 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1'; equals www.facebook.com (Facebook)
Source: chromecache_262.2.dr	String found in binary or memory: <iframe width="560" height="420" src="https://www.youtube.com/embed/tFUHPoLMUwk?rel=0" title="Video: Connections in Gaming" frameborder="0" allowfullscreen></iframe> equals www.youtube.com (Youtube)
Source: chromecache_262.2.dr	String found in binary or memory: <a class="cta--social" href="https://www.facebook.com/ATT/" data-role="none" target="_blank" aria-label="AT&T on Facebook"> equals www.facebook.com (Facebook)
Source: chromecache_262.2.dr	String found in binary or memory: <a class="cta--social" href="https://www.linkedin.com/company/att" data-role="none" target="_blank" aria-label="AT&T on LinkedIn"> equals www.linkedin.com (Linkedin)
Source: chromecache_334.2.dr	String found in binary or memory: assetURL = 'https://www.youtube.com/watch?v=' + asset.videoID + '?rel=0&autoplay=1'; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr	String found in binary or memory: $.fancybox.defaults.media.youtube = { url: 'https://www.youtube.com/embed/$4' }; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr	String found in binary or memory: }, tpl: '<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>' equals www.facebook.com (Facebook)
Source: chromecache_334.2.dr	String found in binary or memory: }, tpl: '<div class="fancybox-share"><h1>{{SHARE}}</h1><p><a class="fancybox-share__button fancybox-share__button--fb" href="https://www.facebook.com/sharer/sharer.php?u={{url}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m287 456v-299c0-21 6-35 35-35h38v-63c-7-1-29-3-55-3-54 0-91 33-91 94v306m143-254h-205v72h196" /></svg><span>Facebook</span></a><a class="fancybox-share__button fancybox-share__button--tw" href="https://twitter.com/intent/tweet?url={{url}}&text={{descr}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m456 133c-14 7-31 11-47 13 17-10 30-27 37-46-15 10-34 16-52 20-61-62-157-7-141 75-68-3-129-35-169-85-22 37-11 86 26 109-13 0-26-4-37-9 0 39 28 72 65 80-12 3-25 4-37 2 10 33 41 57 77 57-42 30-77 38-122 34 170 111 378-32 359-208 16-11 30-25 41-42z" /></svg><span>Twitter</span></a><a class="fancybox-share__button fancybox-share__button--pt" href="https://www.pinterest.com/pin/create/button/?url={{url}}&description={{descr}}&media={{media}}"><svg viewBox="0 0 512 512" xmlns="http://www.w3.org/2000/svg"><path d="m265 56c-109 0-164 78-164 144 0 39 15 74 47 87 5 2 10 0 12-5l4-19c2-6 1-8-3-13-9-11-15-25-15-45 0-58 43-110 113-110 62 0 96 38 96 88 0 67-30 122-73 122-24 0-42-19-36-44 6-29 20-60 20-81 0-19-10-35-31-35-25 0-44 26-44 60 0 21 7 36 7 36l-30 125c-8 37-1 83 0 87 0 3 4 4 5 2 2-3 32-39 42-75l16-64c8 16 31 29 56 29 74 0 124-67 124-157 0-69-58-132-146-132z" fill="#fff"/></svg><span>Pinterest</span></a></p><p><input class="fancybox-share__input" type="text" value="{{url_raw}}" onclick="select()" /></p></div>' equals www.twitter.com (Twitter)
Source: chromecache_334.2.dr	String found in binary or memory: if (pageScripts[i].getAttribute("src") === "https://www.youtube.com/player_api") { equals www.youtube.com (Youtube)
Source: chromecache_398.2.dr	String found in binary or memory: return b}JC.D="internal.enableAutoEventOnTimer";var xc=da(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr	String found in binary or memory: tag.src = 'https://www.youtube.com/player_api'; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr	String found in binary or memory: var e = { youtube: { matcher: /(youtube\.com\|youtu\.be\|youtube\-nocookie\.com)\/(watch\?(.&)?v=\|v\/\|u\/\|embed\/?)?(videoseries\?list=(.)\|[\w-]{11}\|\?listType=(.)&list=(.))(.)/i, params: { autoplay: 1, autohide: 1, fs: 1, rel: 0, hd: 1, wmode: "transparent", enablejsapi: 1, html5: 1 }, paramPlace: 8, type: "iframe", url: "//www.youtube-nocookie.com/embed/$4", thumb: "//img.youtube.com/vi/$4/hqdefault.jpg" }, vimeo: { matcher: /^.+vimeo.com\/(.\/)?([\d]+)(.)?/, params: { autoplay: 1, hd: 1, show_title: 1, show_byline: 1, show_portrait: 0, fullscreen: 1 }, paramPlace: 3, type: "iframe", url: "//player.vimeo.com/video/$2" }, instagram: { matcher: /(instagr\.am\|instagram\.com)\/p\/([a-zA-Z0-9_\-]+)\/?/i, type: "image", url: "//$1/p/$2/media/?size=l" }, gmap_place: { matcher: /(maps\.)?google\.([a-z]{2,3}(\.[a-z]{2})?)\/(((maps\/(place\/(.)\/)?\@(.),(\d+.?\d+?)z))\|(\?ll=))(.)?/i, type: "iframe", url: function url(t) { equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr	String found in binary or memory: });var o = { youtube: { src: "https://www.youtube.com/iframe_api", class: "YT", loading: !1, loaded: !1 }, vimeo: { src: "https://player.vimeo.com/api/player.js", class: "Vimeo", loading: !1, loaded: !1 }, load: function load(t) { equals www.youtube.com (Youtube)
Source: chromecache_276.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_443.2.dr	String found in binary or memory: (g.Bo(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Bo(c,"www.youtube.com"),d=c.toString()):(c=GAa(d),dK(c)&&(d=c));c=new g.VP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: 2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"desktopLink":"https://www.att.com/stores/","linkTarget":"_self","_type":"footerLinkFields","label":"Find a store"},{"desktopLink":"https://www.att.com/storeappointment/","linkTarget":"_self","_type":"footerLinkFields","label":"Make a store appointment"},{"desktopLink":"https://www.att.com/support/contact-us/","linkTarget":"_self","_type":"footerLinkFields","label":"Contact us"},{"linkTarget":"_self","_type":"footerLinkFields","label":"Help & info","desktopLink":"https://www.att.com/support"},{"label":"Credit card","desktopLink":"https://www.att.com/deals/att-points-plus-citi","linkTarget":"_self","_type":"footerLinkFields"}],"sectionListClass":"no-bullet"}},"column3":{"columnSection1":{"sectionListClass":"ftr-social-links","sectionLinks":[{"iconClass":"icon-social-facebookL","desktopLink":"https://www.facebook.com/ATT","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.3 1 15 1s14 6.3 14 14-6.3 14-14 14z M15.9 10.9c0-.6.3-.7.6-.7h1.6V7.8h-2.2c-1.6-.1-2.9 1.1-3 2.7v2h-1.5V15h1.5v7.2h3V15h2l.2-2.5h-2.2v-1.6z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Facebook"},{"_type":"footerLinkFields","label":"Follow us on Twitter","iconClass":"icon-social-twitterL","desktopLink":"https://twitter.com/att","svgPath":"M0 15C0 6.7 6.7 0 15 0c8.2 0 14.9 6.7 15 15 0 8.3-6.7 15-15 15S0 23.3 0 15Zm1 0c0 7.7 6.3 14 14 14s14-6.3 14-14S22.7 1 15 1 1 7.3 1 15Zm20.193-5.827h-2.147l-3.537 4.043-3.059-4.043H8.02l5.293 6.92-5.016 5.734h2.148l3.871-4.424 3.384 4.424h4.32l-5.517-7.294 4.69-5.36Zm-1.71 11.37h-1.19L10.527 10.39h1.277l7.678 10.152Z","svgFill":"#1d2329","linkTarget":"_blank"},{"iconClass":"icon-social-instagramL","desktopLink":"https://www.instagram.com/att/","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.2.9 15 .9s14 6.3 14 14C29 22.7 22.7 29 15 29zm0-19.8h2.8c.4 0 .9.1 1.3.2.6.2 1.1.7 1.3 1.3.2.4.2.9.2 1.3v5.6c0 .4-.1.9-.2 1.3-.2.6-.7 1.1-1.3 1.3-.4.2-.9.2-1.3.2h-5.6c-.4 0-.9-.1-1.3-.2-.6-.2-1.1-.7-1.3-1.3-.2-.4-.2-.9-.2-1.3v-2.8V12c0-.4.1-.9.2-1.3.2-.6.7-1.1 1.3-1.3.4-.2.9-.2 1.3-.2H15m0-1.3h-2.9c-.6 0-1.2.1-1.7.3-.9.4-1.7 1.1-2.1 2.1-.1.6-.3 1.2-.3 1.8v5.8c0 .6.1 1.2.3 1.7.4.9 1.1 1.7 2.1 2.1.5.2 1.1.3 1.7.3h5.8c.6 0 1.2-.1 1.7-.3.9-.4 1.7-1.1 2.1-2.1.2-.5.3-1.1.3-1.7V15v-2.9c0-.6-.1-1.2-.3-1.7-.4-.9-1.1-1.7-2.1-2.1-.4-.2-1.1-.3-1.7-.3-.7-.1-1-.1-2.9-.1zm0 3.5c-2 0-3.6 1.6-3.6 3.6s1.6 3.6 3.6 3.6 3.6-1.6 3.6-3.6c0-1.9-1.6-3.6-3.6-3.6zm0 6c-1.3 0-2.3-1-2.3-2.3s1-2.3 2.3-2.3 2.3 1 2.3 2.3c.1 1.2-1 2.3-2.3 2.3zm4.7-6.2c0 .5-.4.8-.8.8-.5 0-.8-.4-.8-.8 0-.5.4-.8.8-.8s.8.3.8.8z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Instagram"},{"linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Linkedin","iconClass":"icon-social-li
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: 2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"desktopLink":"https://www.att.com/stores/","linkTarget":"_self","_type":"footerLinkFields","label":"Find a store"},{"desktopLink":"https://www.att.com/storeappointment/","linkTarget":"_self","_type":"footerLinkFields","label":"Make a store appointment"},{"desktopLink":"https://www.att.com/support/contact-us/","linkTarget":"_self","_type":"footerLinkFields","label":"Contact us"},{"linkTarget":"_self","_type":"footerLinkFields","label":"Help & info","desktopLink":"https://www.att.com/support"},{"label":"Credit card","desktopLink":"https://www.att.com/deals/att-points-plus-citi","linkTarget":"_self","_type":"footerLinkFields"}],"sectionListClass":"no-bullet"}},"column3":{"columnSection1":{"sectionListClass":"ftr-social-links","sectionLinks":[{"iconClass":"icon-social-facebookL","desktopLink":"https://www.facebook.com/ATT","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.3 1 15 1s14 6.3 14 14-6.3 14-14 14z M15.9 10.9c0-.6.3-.7.6-.7h1.6V7.8h-2.2c-1.6-.1-2.9 1.1-3 2.7v2h-1.5V15h1.5v7.2h3V15h2l.2-2.5h-2.2v-1.6z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Facebook"},{"_type":"footerLinkFields","label":"Follow us on Twitter","iconClass":"icon-social-twitterL","desktopLink":"https://twitter.com/att","svgPath":"M0 15C0 6.7 6.7 0 15 0c8.2 0 14.9 6.7 15 15 0 8.3-6.7 15-15 15S0 23.3 0 15Zm1 0c0 7.7 6.3 14 14 14s14-6.3 14-14S22.7 1 15 1 1 7.3 1 15Zm20.193-5.827h-2.147l-3.537 4.043-3.059-4.043H8.02l5.293 6.92-5.016 5.734h2.148l3.871-4.424 3.384 4.424h4.32l-5.517-7.294 4.69-5.36Zm-1.71 11.37h-1.19L10.527 10.39h1.277l7.678 10.152Z","svgFill":"#1d2329","linkTarget":"_blank"},{"iconClass":"icon-social-instagramL","desktopLink":"https://www.instagram.com/att/","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.2.9 15 .9s14 6.3 14 14C29 22.7 22.7 29 15 29zm0-19.8h2.8c.4 0 .9.1 1.3.2.6.2 1.1.7 1.3 1.3.2.4.2.9.2 1.3v5.6c0 .4-.1.9-.2 1.3-.2.6-.7 1.1-1.3 1.3-.4.2-.9.2-1.3.2h-5.6c-.4 0-.9-.1-1.3-.2-.6-.2-1.1-.7-1.3-1.3-.2-.4-.2-.9-.2-1.3v-2.8V12c0-.4.1-.9.2-1.3.2-.6.7-1.1 1.3-1.3.4-.2.9-.2 1.3-.2H15m0-1.3h-2.9c-.6 0-1.2.1-1.7.3-.9.4-1.7 1.1-2.1 2.1-.1.6-.3 1.2-.3 1.8v5.8c0 .6.1 1.2.3 1.7.4.9 1.1 1.7 2.1 2.1.5.2 1.1.3 1.7.3h5.8c.6 0 1.2-.1 1.7-.3.9-.4 1.7-1.1 2.1-2.1.2-.5.3-1.1.3-1.7V15v-2.9c0-.6-.1-1.2-.3-1.7-.4-.9-1.1-1.7-2.1-2.1-.4-.2-1.1-.3-1.7-.3-.7-.1-1-.1-2.9-.1zm0 3.5c-2 0-3.6 1.6-3.6 3.6s1.6 3.6 3.6 3.6 3.6-1.6 3.6-3.6c0-1.9-1.6-3.6-3.6-3.6zm0 6c-1.3 0-2.3-1-2.3-2.3s1-2.3 2.3-2.3 2.3 1 2.3 2.3c.1 1.2-1 2.3-2.3 2.3zm4.7-6.2c0 .5-.4.8-.8.8-.5 0-.8-.4-.8-.8 0-.5.4-.8.8-.8s.8.3.8.8z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Instagram"},{"linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Linkedin","iconClass":"icon-social-li
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: 2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"desktopLink":"https://www.att.com/stores/","linkTarget":"_self","_type":"footerLinkFields","label":"Find a store"},{"desktopLink":"https://www.att.com/storeappointment/","linkTarget":"_self","_type":"footerLinkFields","label":"Make a store appointment"},{"desktopLink":"https://www.att.com/support/contact-us/","linkTarget":"_self","_type":"footerLinkFields","label":"Contact us"},{"linkTarget":"_self","_type":"footerLinkFields","label":"Help & info","desktopLink":"https://www.att.com/support"},{"label":"Credit card","desktopLink":"https://www.att.com/deals/att-points-plus-citi","linkTarget":"_self","_type":"footerLinkFields"}],"sectionListClass":"no-bullet"}},"column3":{"columnSection1":{"sectionListClass":"ftr-social-links","sectionLinks":[{"iconClass":"icon-social-facebookL","desktopLink":"https://www.facebook.com/ATT","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.3 1 15 1s14 6.3 14 14-6.3 14-14 14z M15.9 10.9c0-.6.3-.7.6-.7h1.6V7.8h-2.2c-1.6-.1-2.9 1.1-3 2.7v2h-1.5V15h1.5v7.2h3V15h2l.2-2.5h-2.2v-1.6z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Facebook"},{"_type":"footerLinkFields","label":"Follow us on Twitter","iconClass":"icon-social-twitterL","desktopLink":"https://twitter.com/att","svgPath":"M0 15C0 6.7 6.7 0 15 0c8.2 0 14.9 6.7 15 15 0 8.3-6.7 15-15 15S0 23.3 0 15Zm1 0c0 7.7 6.3 14 14 14s14-6.3 14-14S22.7 1 15 1 1 7.3 1 15Zm20.193-5.827h-2.147l-3.537 4.043-3.059-4.043H8.02l5.293 6.92-5.016 5.734h2.148l3.871-4.424 3.384 4.424h4.32l-5.517-7.294 4.69-5.36Zm-1.71 11.37h-1.19L10.527 10.39h1.277l7.678 10.152Z","svgFill":"#1d2329","linkTarget":"_blank"},{"iconClass":"icon-social-instagramL","desktopLink":"https://www.instagram.com/att/","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.2.9 15 .9s14 6.3 14 14C29 22.7 22.7 29 15 29zm0-19.8h2.8c.4 0 .9.1 1.3.2.6.2 1.1.7 1.3 1.3.2.4.2.9.2 1.3v5.6c0 .4-.1.9-.2 1.3-.2.6-.7 1.1-1.3 1.3-.4.2-.9.2-1.3.2h-5.6c-.4 0-.9-.1-1.3-.2-.6-.2-1.1-.7-1.3-1.3-.2-.4-.2-.9-.2-1.3v-2.8V12c0-.4.1-.9.2-1.3.2-.6.7-1.1 1.3-1.3.4-.2.9-.2 1.3-.2H15m0-1.3h-2.9c-.6 0-1.2.1-1.7.3-.9.4-1.7 1.1-2.1 2.1-.1.6-.3 1.2-.3 1.8v5.8c0 .6.1 1.2.3 1.7.4.9 1.1 1.7 2.1 2.1.5.2 1.1.3 1.7.3h5.8c.6 0 1.2-.1 1.7-.3.9-.4 1.7-1.1 2.1-2.1.2-.5.3-1.1.3-1.7V15v-2.9c0-.6-.1-1.2-.3-1.7-.4-.9-1.1-1.7-2.1-2.1-.4-.2-1.1-.3-1.7-.3-.7-.1-1-.1-2.9-.1zm0 3.5c-2 0-3.6 1.6-3.6 3.6s1.6 3.6 3.6 3.6 3.6-1.6 3.6-3.6c0-1.9-1.6-3.6-3.6-3.6zm0 6c-1.3 0-2.3-1-2.3-2.3s1-2.3 2.3-2.3 2.3 1 2.3 2.3c.1 1.2-1 2.3-2.3 2.3zm4.7-6.2c0 .5-.4.8-.8.8-.5 0-.8-.4-.8-.8 0-.5.4-.8.8-.8s.8.3.8.8z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Instagram"},{"linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Linkedin","iconClass":"icon-social-li
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: 2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"desktopLink":"https://www.att.com/stores/","linkTarget":"_self","_type":"footerLinkFields","label":"Find a store"},{"desktopLink":"https://www.att.com/storeappointment/","linkTarget":"_self","_type":"footerLinkFields","label":"Make a store appointment"},{"desktopLink":"https://www.att.com/support/contact-us/","linkTarget":"_self","_type":"footerLinkFields","label":"Contact us"},{"linkTarget":"_self","_type":"footerLinkFields","label":"Help & info","desktopLink":"https://www.att.com/support"},{"label":"Credit card","desktopLink":"https://www.att.com/deals/att-points-plus-citi","linkTarget":"_self","_type":"footerLinkFields"}],"sectionListClass":"no-bullet"}},"column3":{"columnSection1":{"sectionListClass":"ftr-social-links","sectionLinks":[{"iconClass":"icon-social-facebookL","desktopLink":"https://www.facebook.com/ATT","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.3 1 15 1s14 6.3 14 14-6.3 14-14 14z M15.9 10.9c0-.6.3-.7.6-.7h1.6V7.8h-2.2c-1.6-.1-2.9 1.1-3 2.7v2h-1.5V15h1.5v7.2h3V15h2l.2-2.5h-2.2v-1.6z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Facebook"},{"_type":"footerLinkFields","label":"Follow us on Twitter","iconClass":"icon-social-twitterL","desktopLink":"https://twitter.com/att","svgPath":"M0 15C0 6.7 6.7 0 15 0c8.2 0 14.9 6.7 15 15 0 8.3-6.7 15-15 15S0 23.3 0 15Zm1 0c0 7.7 6.3 14 14 14s14-6.3 14-14S22.7 1 15 1 1 7.3 1 15Zm20.193-5.827h-2.147l-3.537 4.043-3.059-4.043H8.02l5.293 6.92-5.016 5.734h2.148l3.871-4.424 3.384 4.424h4.32l-5.517-7.294 4.69-5.36Zm-1.71 11.37h-1.19L10.527 10.39h1.277l7.678 10.152Z","svgFill":"#1d2329","linkTarget":"_blank"},{"iconClass":"icon-social-instagramL","desktopLink":"https://www.instagram.com/att/","svgPath":"M15 0C6.7 0 0 6.7 0 15s6.7 15 15 15 15-6.7 15-15c-.1-8.3-6.8-15-15-15zm0 29C7.3 29 1 22.7 1 15S7.2.9 15 .9s14 6.3 14 14C29 22.7 22.7 29 15 29zm0-19.8h2.8c.4 0 .9.1 1.3.2.6.2 1.1.7 1.3 1.3.2.4.2.9.2 1.3v5.6c0 .4-.1.9-.2 1.3-.2.6-.7 1.1-1.3 1.3-.4.2-.9.2-1.3.2h-5.6c-.4 0-.9-.1-1.3-.2-.6-.2-1.1-.7-1.3-1.3-.2-.4-.2-.9-.2-1.3v-2.8V12c0-.4.1-.9.2-1.3.2-.6.7-1.1 1.3-1.3.4-.2.9-.2 1.3-.2H15m0-1.3h-2.9c-.6 0-1.2.1-1.7.3-.9.4-1.7 1.1-2.1 2.1-.1.6-.3 1.2-.3 1.8v5.8c0 .6.1 1.2.3 1.7.4.9 1.1 1.7 2.1 2.1.5.2 1.1.3 1.7.3h5.8c.6 0 1.2-.1 1.7-.3.9-.4 1.7-1.1 2.1-2.1.2-.5.3-1.1.3-1.7V15v-2.9c0-.6-.1-1.2-.3-1.7-.4-.9-1.1-1.7-2.1-2.1-.4-.2-1.1-.3-1.7-.3-.7-.1-1-.1-2.9-.1zm0 3.5c-2 0-3.6 1.6-3.6 3.6s1.6 3.6 3.6 3.6 3.6-1.6 3.6-3.6c0-1.9-1.6-3.6-3.6-3.6zm0 6c-1.3 0-2.3-1-2.3-2.3s1-2.3 2.3-2.3 2.3 1 2.3 2.3c.1 1.2-1 2.3-2.3 2.3zm4.7-6.2c0 .5-.4.8-.8.8-.5 0-.8-.4-.8-.8 0-.5.4-.8.8-.8s.8.3.8.8z","svgFill":"#1d2329","linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Instagram"},{"linkTarget":"_blank","_type":"footerLinkFields","label":"Follow us on Linkedin","iconClass":"icon-social-li
Source: chromecache_443.2.dr	String found in binary or memory: DPa=function(a,b){if(!a.j["0"]){var c=new bL("0","fakesb",{video:new YK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new $Q(new g.VP("http://www.youtube.com/videoplayback"),c,"fake"):new kR(new g.VP("http://www.youtube.com/videoplayback"),c,new JQ(0,0),new JQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: a))):this.Ud(g.jW(a.errorMessage)):this.Ud(lW(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Nm(c,{hl:a})),this.Ud(lW(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.Hc&&!d.D&&OXa(this,function(e){if(g.WU(e,b.api,!sS(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.yc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: a.hl);this.region=b?b.contentRegion\|\|"US":BC("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":BC("en",a.host_language);this.Oo=!this.Xc&&Math.random()<g.zJ(this.experiments,"web_player_api_logging_fraction");this.fb=!this.Xc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Kd=AC(this.Kd,a.ismb);this.Uo?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=oS(this.Fa)\|\|"www.youtube.com")):r="video.google.com";this.Wm=r;JQa(this,a,!0);this.Na=new MR;g.N(this, equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: a.severity,e,NK(a.details),f)}else this.ra.oa("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Ae(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.DD)(),DU(a,"manifest",function(h){b.G=!0;b.va("pathprobe",h)},function(h){b.Ae(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: g.BS=function(a){var b=g.qS(a);UQa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: g.Ua("Goog_AdSense_Lidar_getUrlSignalsList",Mhb);var pAa=na(["//tpc.googlesyndication.com/sodar/",""]);var RLa={b4a:0,Y3a:1,V3a:2,W3a:3,X3a:4,a4a:5,Z3a:6};var Noa=(new Date).getTime();var Tka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Uka=/\bocr\b/;var Wka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.w(Hu,g.Ld);Hu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Nn.Rj(this.G);delete Hu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.qS(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.kS(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),SD&&(a=zoa())&&(b.ebc=a));return g.Nm(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: g.qS=function(a){a=oS(a.Fa);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: return b}nD.D="internal.enableAutoEventOnTimer";var xc=ca(["data-gtm-yt-inspected-"]),oD=["www.youtube.com","www.youtube-nocookie.com"],pD,qD=!1; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_317.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_443.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ma=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(KR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.ma=!1);b="";g.DR(this.B)?CR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.K?d=zC(d,h,EQa):h&&(d="embedded");this.Ma=d;qta();h=null;d=b?b.playerStyle:a.ps;f=g.Gb(FQa,d);!d\|\|f&&!this.K\|\|(h=d);this.playerStyle=h;this.ma=(this.N=g.Gb(FQa,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.Uo=!this.ma;this.Wa=yC(!1,a.disableplaybackui);this.disablePaidContentOverlay=yC(!1,null==b?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: var V3={};var Ndb=/[&\?]action_proxy=1/,Mdb=/[&\?]token=([\w-])/,Odb=/[&\?]video_id=([\w-])/,Pdb=/[&\?]index=([\d-])/,Qdb=/[&\?]m_pos_ms=([\d-])/,Sdb=/[&\?]vvt=([\w-]*)/,Edb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Rdb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Hdb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_518.2.dr	String found in binary or memory: var scriptUrl = (window.location.hostname.indexOf('finalstage.att.com') > -1) ? "https://finalstage.att.com/scripts/adobe/prod/facebook.js" : "https://www.att.com/scripts/adobe/prod/facebook.js"; equals www.facebook.com (Facebook)
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: {"nav-items":[{"title":"Company","url":"https://about.att.com/pages/corporate_profile","target":"","className":"","subNav":[{"title":"AT&T Mexico","url":"https://www.att.com.mx/newsroom/","target":"_blank","subNav":null},{"title":"Diversity, Equity & Inclusion","url":"https://about.att.com/pages/diversity","target":"","subNav":null},{"title":"Corporate Responsibility","url":"https://about.att.com/csr/home.html","target":"","subNav":null},{"title":"Public Policy","url":"https://www.attconnects.com/?utm_source=ATT001&utm_content=GlobalNav","target":"_blank","subNav":null},{"title":"Ethics & Compliance","url":"https://about.att.com/pages/ethics","target":"","subNav":null},{"title":"Careers","url":"https://www.att.jobs","target":"_blank","subNav":null},{"title":"Shop","url":"https://www.att.com/?source=EPcc000000000000U&wtExtndSource=Homepage_Newsroom_DGen","target":"_blank","subNav":null}]},{"title":"What We Do","url":"https://about.att.com/pages/what-we-do","target":"","className":"what-we-do","subNav":[{"title":"Digital Divide","url":"https://about.att.com/pages/digital-divide","target":"","subNav":null},{"title":"Wireless","url":"https://about.att.com/pages/wireless","target":"","subNav":null},{"title":"5G","url":"https://about.att.com/pages/5G","target":"","subNav":null},{"title":"Internet & Fiber","url":"https://about.att.com/pages/internet-fiber.html","target":"","subNav":null},{"title":"AT&T Business","url":"https://about.att.com/pages/business","target":"","subNav":null},{"title":"Public Sector & FirstNet","url":"https://about.att.com/pages/public-sector","target":"","subNav":null},{"title":"Disaster Recovery","url":"https://about.att.com/pages/disaster-recovery","target":"","subNav":null},{"title":"Technology & Innovation","url":"https://about.att.com/innovation","target":"","subNav":null}]},{"title":"Investors","url":"https://investors.att.com/","target":"_blank","className":"nav-investors","subNav":[{"title":"Investor Profile","url":"https://investors.att.com/investor-profile","target":"_blank","subNav":null},{"title":" Investor News & Events","url":"https://investors.att.com/news-and-events/events-and-presentations","target":"_blank","subNav":null},{"title":"Financial Reports","url":"https://investors.att.com/financial-reports/quarterly-earnings","target":"_blank","subNav":null},{"title":"Stock Information","url":"https://investors.att.com/stock-information/stock-quote-and-chart","target":"_blank","subNav":null},{"title":"Stockholder Services","url":"https://investors.att.com/stockholder-services/cost-basis-guide","target":"_blank","subNav":null},{"title":"Corporate Governance","url":"https://investors.att.com/corporate-governance/leadership","target":"_blank","subNav":null},{"title":"Investor Resources","url":"https://investors.att.com/resources/contacts","target":"_blank","subNav":null}]},{"title":"News","url":"https://about.att.com/allnews.html","target":"","className":"nav-news","subNav":[{"title":"AT&T Blog","url":"https://about.att
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: {"nav-items":[{"title":"Company","url":"https://about.att.com/pages/corporate_profile","target":"","className":"","subNav":[{"title":"AT&T Mexico","url":"https://www.att.com.mx/newsroom/","target":"_blank","subNav":null},{"title":"Diversity, Equity & Inclusion","url":"https://about.att.com/pages/diversity","target":"","subNav":null},{"title":"Corporate Responsibility","url":"https://about.att.com/csr/home.html","target":"","subNav":null},{"title":"Public Policy","url":"https://www.attconnects.com/?utm_source=ATT001&utm_content=GlobalNav","target":"_blank","subNav":null},{"title":"Ethics & Compliance","url":"https://about.att.com/pages/ethics","target":"","subNav":null},{"title":"Careers","url":"https://www.att.jobs","target":"_blank","subNav":null},{"title":"Shop","url":"https://www.att.com/?source=EPcc000000000000U&wtExtndSource=Homepage_Newsroom_DGen","target":"_blank","subNav":null}]},{"title":"What We Do","url":"https://about.att.com/pages/what-we-do","target":"","className":"what-we-do","subNav":[{"title":"Digital Divide","url":"https://about.att.com/pages/digital-divide","target":"","subNav":null},{"title":"Wireless","url":"https://about.att.com/pages/wireless","target":"","subNav":null},{"title":"5G","url":"https://about.att.com/pages/5G","target":"","subNav":null},{"title":"Internet & Fiber","url":"https://about.att.com/pages/internet-fiber.html","target":"","subNav":null},{"title":"AT&T Business","url":"https://about.att.com/pages/business","target":"","subNav":null},{"title":"Public Sector & FirstNet","url":"https://about.att.com/pages/public-sector","target":"","subNav":null},{"title":"Disaster Recovery","url":"https://about.att.com/pages/disaster-recovery","target":"","subNav":null},{"title":"Technology & Innovation","url":"https://about.att.com/innovation","target":"","subNav":null}]},{"title":"Investors","url":"https://investors.att.com/","target":"_blank","className":"nav-investors","subNav":[{"title":"Investor Profile","url":"https://investors.att.com/investor-profile","target":"_blank","subNav":null},{"title":" Investor News & Events","url":"https://investors.att.com/news-and-events/events-and-presentations","target":"_blank","subNav":null},{"title":"Financial Reports","url":"https://investors.att.com/financial-reports/quarterly-earnings","target":"_blank","subNav":null},{"title":"Stock Information","url":"https://investors.att.com/stock-information/stock-quote-and-chart","target":"_blank","subNav":null},{"title":"Stockholder Services","url":"https://investors.att.com/stockholder-services/cost-basis-guide","target":"_blank","subNav":null},{"title":"Corporate Governance","url":"https://investors.att.com/corporate-governance/leadership","target":"_blank","subNav":null},{"title":"Investor Resources","url":"https://investors.att.com/resources/contacts","target":"_blank","subNav":null}]},{"title":"News","url":"https://about.att.com/allnews.html","target":"","className":"nav-news","subNav":[{"title":"AT&T Blog","url":"https://about.att

Source: unknown

DNS traffic detected: queries for: clients2.google.com

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 15 Feb 2024 00:08:09 GMTContent-Type: text/plain; charset=utf-8Content-Length: 160Connection: keep-aliveaccess-control-allow-headers: Content-Typeaccess-control-allow-headers: Rangeaccess-control-allow-headers: User-Agentaccess-control-allow-headers: X-Requested-Withaccess-control-allow-methods: GETaccess-control-allow-methods: HEADaccess-control-allow-methods: OPTIONSaccess-control-allow-origin: access-control-expose-headers: Content-Lengthaccess-control-expose-headers: Content-Rangeaccess-control-expose-headers: X-Chunked-Outputaccess-control-expose-headers: X-Ipfs-Pathaccess-control-expose-headers: X-Ipfs-Rootsaccess-control-expose-headers: X-Stream-Outputx-content-type-options: nosniffx-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.cssx-ipfs-pop: ipfs-bank5-dc13timing-allow-origin: X-IPFS-LB-POP: gateway-bank1-dc13Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 63 73 73 2f 73 74 79 6c 65 73 2e 63 73 73 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 63 73 73 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css: no link named "css" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 15 Feb 2024 00:08:09 GMTContent-Type: text/plain; charset=utf-8Content-Length: 187Connection: keep-aliveaccess-control-allow-headers: Content-Typeaccess-control-allow-headers: Rangeaccess-control-allow-headers: User-Agentaccess-control-allow-headers: X-Requested-Withaccess-control-allow-methods: GETaccess-control-allow-methods: HEADaccess-control-allow-methods: OPTIONSaccess-control-allow-origin: access-control-expose-headers: Content-Lengthaccess-control-expose-headers: Content-Rangeaccess-control-expose-headers: X-Chunked-Outputaccess-control-expose-headers: X-Ipfs-Pathaccess-control-expose-headers: X-Ipfs-Rootsaccess-control-expose-headers: X-Stream-Outputx-content-type-options: nosniffx-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woffx-ipfs-pop: ipfs-bank2-dc13timing-allow-origin: X-IPFS-LB-POP: gateway-bank1-dc13Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 52 67 2e 77 6f 66 66 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 52 67 2e 77 6f 66 66 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff: no link named "ATTAleckSans_W_Rg.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 15 Feb 2024 00:09:08 GMTContent-Type: text/plain; charset=utf-8Content-Length: 187Connection: keep-aliveaccess-control-allow-headers: Content-Typeaccess-control-allow-headers: Rangeaccess-control-allow-headers: User-Agentaccess-control-allow-headers: X-Requested-Withaccess-control-allow-methods: GETaccess-control-allow-methods: HEADaccess-control-allow-methods: OPTIONSaccess-control-allow-origin: access-control-expose-headers: Content-Lengthaccess-control-expose-headers: Content-Rangeaccess-control-expose-headers: X-Chunked-Outputaccess-control-expose-headers: X-Ipfs-Pathaccess-control-expose-headers: X-Ipfs-Rootsaccess-control-expose-headers: X-Stream-Outputx-content-type-options: nosniffx-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woffx-ipfs-pop: ipfs-bank5-dc13timing-allow-origin: X-IPFS-LB-POP: gateway-bank2-dc13Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 4d 64 2e 77 6f 66 66 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 4d 64 2e 77 6f 66 66 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff: no link named "ATTAleckSans_W_Md.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Thu, 15 Feb 2024 00:08:10 GMTContent-Type: text/plain; charset=utf-8Content-Length: 165Connection: keep-aliveaccess-control-allow-headers: Content-Typeaccess-control-allow-headers: Rangeaccess-control-allow-headers: User-Agentaccess-control-allow-headers: X-Requested-Withaccess-control-allow-methods: GETaccess-control-allow-methods: HEADaccess-control-allow-methods: OPTIONSaccess-control-allow-origin: access-control-expose-headers: Content-Lengthaccess-control-expose-headers: Content-Rangeaccess-control-expose-headers: X-Chunked-Outputaccess-control-expose-headers: X-Ipfs-Pathaccess-control-expose-headers: X-Ipfs-Rootsaccess-control-expose-headers: X-Stream-Outputx-content-type-options: nosniffx-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.icox-ipfs-pop: ipfs-bank5-dc13timing-allow-origin: X-IPFS-LB-POP: gateway-bank1-dc13Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico: no link named "favicon.ico" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL

Source: chromecache_336.2.dr	String found in binary or memory: http://about.att.com/sites/privacy_policy
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: http://about.att.com/sites/web_policy
Source: chromecache_334.2.dr	String found in binary or memory: http://api.jquery.com/jQuery.ajax/)
Source: chromecache_334.2.dr	String found in binary or memory: http://datatables.net).
Source: chromecache_334.2.dr	String found in binary or memory: http://datatables.net/license
Source: chromecache_334.2.dr	String found in binary or memory: http://datatables.net/license/mit
Source: chromecache_334.2.dr	String found in binary or memory: http://datatables.net/tn/
Source: chromecache_334.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-syntax/#parse-comma-separated-list-of-component-values
Source: chromecache_334.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-syntax/#parse-component-value
Source: chromecache_334.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-values-3/#length-value
Source: chromecache_334.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-values-3/#resolution-value
Source: chromecache_334.2.dr	String found in binary or memory: http://dev.w3.org/csswg/css-values/#numbers
Source: chromecache_334.2.dr	String found in binary or memory: http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html
Source: chromecache_334.2.dr	String found in binary or memory: http://eligrey.com
Source: chromecache_334.2.dr	String found in binary or memory: http://fancyapps.com/fancybox/
Source: chromecache_277.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_312.2.dr	String found in binary or memory: http://flickity.metafizzy.co
Source: chromecache_334.2.dr	String found in binary or memory: http://img.youtube.com/vi/
Source: chromecache_495.2.dr, chromecache_401.2.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_334.2.dr	String found in binary or memory: http://jamesroberts.name/blog/2010/02/22/string-functions-for-javascript-trim-to-camel-case-to-dashe
Source: chromecache_355.2.dr, chromecache_299.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_355.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=no
Source: chromecache_334.2.dr	String found in binary or memory: http://jsfiddle.net/gtntL4gr/3/
Source: chromecache_334.2.dr	String found in binary or memory: http://jsperf.com/html-decode
Source: chromecache_334.2.dr	String found in binary or memory: http://jsperf.com/tostring-v-check
Source: chromecache_334.2.dr	String found in binary or memory: http://jsperf.com/whitespace-character/5
Source: chromecache_334.2.dr	String found in binary or memory: http://jsperf.lnkit.com/fast-apply/5
Source: chromecache_440.2.dr	String found in binary or memory: http://lorempixel.com/800/600/nature/2);
Source: chromecache_312.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_334.2.dr	String found in binary or memory: http://modernjavascript.blogspot.com/2013/08/building-better-debounce.html
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_334.2.dr	String found in binary or memory: http://momentjs.com/timezone/docs/#/data-loading/.
Source: chromecache_334.2.dr	String found in binary or memory: http://purl.eligrey.com/github/classList.js/blob/master/classList.js
Source: chromecache_334.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: chromecache_334.2.dr	String found in binary or memory: http://semver.org/
Source: chromecache_434.2.dr	String found in binary or memory: http://solutions.invocacdn.com/js/invoca-4.30.6.min.js
Source: chromecache_334.2.dr	String found in binary or memory: http://stackoverflow.com/a/10836076/182183
Source: chromecache_334.2.dr	String found in binary or memory: http://stackoverflow.com/questions/3561493/is-there-a-regexp-escape-function-in-javascript
Source: chromecache_334.2.dr	String found in binary or memory: http://stackoverflow.com/questions/8898412
Source: chromecache_443.2.dr, chromecache_391.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_336.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_402.2.dr	String found in binary or memory: http://www.att.com/cmpchoice
Source: chromecache_336.2.dr	String found in binary or memory: http://www.att.com/internal/adchoices
Source: chromecache_316.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_334.2.dr	String found in binary or memory: http://www.datatables.net
Source: chromecache_495.2.dr, chromecache_401.2.dr, chromecache_490.2.dr, chromecache_254.2.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_402.2.dr	String found in binary or memory: http://www.directv.com/privacy
Source: chromecache_393.2.dr	String found in binary or memory: http://www.foresee.com
Source: chromecache_434.2.dr	String found in binary or memory: http://www.invoca.com/terms-of-service/.
Source: chromecache_437.2.dr, chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: http://www.myaudiconnect.com
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: http://www.onstar.com
Source: chromecache_334.2.dr	String found in binary or memory: http://www.sprymedia.co.uk/dataTables/lang.txt
Source: chromecache_443.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_443.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_443.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_443.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_443.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_262.2.dr	String found in binary or memory: https://ablegamers.org
Source: chromecache_334.2.dr, chromecache_332.2.dr, chromecache_274.2.dr	String found in binary or memory: https://about.att.com
Source: chromecache_262.2.dr, chromecache_479.2.dr	String found in binary or memory: https://about.att.com/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://about.att.com/?source=EB00CO0000000000L&wtExtndSource=footer
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/allnews.html
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/blogs
Source: chromecache_402.2.dr	String found in binary or memory: https://about.att.com/content/privacy/choices-and-controls.html
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/csr/home.html
Source: chromecache_402.2.dr	String found in binary or memory: https://about.att.com/csr/home/governance/transparency.html
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://about.att.com/csr/home/privacy/full_privacy_policy.html#choice
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/csr/home/privacy/rights_choices.html
Source: chromecache_262.2.dr	String found in binary or memory: https://about.att.com/ecms/dam/sites/accessibility/down_arrow.png
Source: chromecache_262.2.dr	String found in binary or memory: https://about.att.com/ecms/dam/sites/accessibility/share-images/1200x630_Connections_in_Gaming.jpg
Source: chromecache_479.2.dr	String found in binary or memory: https://about.att.com/ecms/dam/snr/DefaultThumbnails/logo_att_share.png
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/ecms/dam/snr/DefaultThumbnails/privacyoptions.png
Source: chromecache_479.2.dr	String found in binary or memory: https://about.att.com/error.html
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/innovation
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/5G
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/business
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/corporate_profile
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/digital-divide
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/disaster-recovery
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/diversity
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/ethics
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/internet-fiber.html
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/media-assets
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/media-contacts
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/public-sector
Source: chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/subscribe-att-news
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/what-we-do
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://about.att.com/pages/wireless
Source: chromecache_402.2.dr	String found in binary or memory: https://about.att.com/privacy.html#tips
Source: chromecache_262.2.dr	String found in binary or memory: https://about.att.com/sites/accessibility
Source: chromecache_348.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_398.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;
Source: chromecache_398.2.dr	String found in binary or memory: https://ad.doubleclick.net/activity;register_conversion=1;
Source: chromecache_348.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_398.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity/
Source: chromecache_443.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_417.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat
Source: chromecache_257.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat
Source: chromecache_264.2.dr	String found in binary or memory: https://adservice.google.com/ddm/fls/z/dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat
Source: chromecache_398.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_398.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_393.2.dr	String found in binary or memory: https://analytics.foresee.com/ingest/events
Source: chromecache_338.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/acura
Source: chromecache_481.2.dr	String found in binary or memory: https://att.com/chrysler
Source: chromecache_402.2.dr	String found in binary or memory: https://att.com/consent/ccpa/dnsatt
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/ford
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/honda
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/mazda
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/mercedes
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/nissan
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/porsche
Source: chromecache_402.2.dr	String found in binary or memory: https://att.com/remove
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/subaru
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://att.com/toyota
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://att.jobs/
Source: chromecache_334.2.dr	String found in binary or memory: https://bit.ly/getsizebug1
Source: chromecache_393.2.dr	String found in binary or memory: https://brain.foresee.com
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=830565
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3443
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/4833
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_334.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_334.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_334.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=548397
Source: chromecache_334.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_412.2.dr, chromecache_398.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_433.2.dr	String found in binary or memory: https://cdn.quantummetric.com/helpers/blank
Source: chromecache_334.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=3509
Source: chromecache_334.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=687
Source: chromecache_402.2.dr	String found in binary or memory: https://code.jquery.com/ui/1.13.2/jquery-ui.min.js
Source: chromecache_276.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://currently.com/
Source: chromecache_393.2.dr	String found in binary or memory: https://cxsurvey.foresee.com/sv
Source: chromecache_334.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_334.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/HTMLElement/focus#Browser_compatibility
Source: chromecache_334.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/isArray
Source: chromecache_334.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/trim
Source: chromecache_393.2.dr	String found in binary or memory: https://device.4seeresults.com
Source: chromecache_443.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_334.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_334.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_336.2.dr	String found in binary or memory: https://e-tst1.stage.att.com/es-us/
Source: chromecache_277.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_339.2.dr	String found in binary or memory: https://fid.agkn.com/f?apiKey=2676946699
Source: chromecache_271.2.dr	String found in binary or memory: https://finalstage.att.com/scripts/adobe/prod/bing.js
Source: chromecache_518.2.dr	String found in binary or memory: https://finalstage.att.com/scripts/adobe/prod/facebook.js
Source: chromecache_334.2.dr	String found in binary or memory: https://flickity.metafizzy.co
Source: chromecache_440.2.dr	String found in binary or memory: https://get.foundation
Source: chromecache_334.2.dr	String found in binary or memory: https://gist.github.com/jonathantneal/db4f77009b155f083738
Source: chromecache_336.2.dr	String found in binary or memory: https://github.com/CookPete/react-player#config-prop
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/chmln/flatpickr/issues/1096
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/chmln/flatpickr/issues/563
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/dordille/moment-isoduration/blob/master/moment.isoduration.js
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/eligrey/classList.js/blob/master/LICENSE.md
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/eligrey/classList.js/issues/36
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/facebook/regenerator/issues/274
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/feross/ieee754
Source: chromecache_275.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_443.2.dr, chromecache_391.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/microsoft/TypeScript/issues/31663
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/1423
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2166
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/moment/moment/issues/2978
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/moment/moment/pull/1871
Source: chromecache_484.2.dr	String found in binary or memory: https://github.com/nodeca/pako
Source: chromecache_433.2.dr	String found in binary or memory: https://github.com/nodeca/pako/blob/master/LICENSE
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/sebmarkbage/ecmascript-string-left-right-trim
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/Array.prototype.includes
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/proposal-global
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-getownpropertydescriptors
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/proposal-object-values-entries
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/proposal-promise-finally
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/tc39/proposal-string-pad-start-end
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/websockets/ws/pull/645
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/173
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/280
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/339
Source: chromecache_334.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_450.2.dr	String found in binary or memory: https://google.com
Source: chromecache_450.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_517.2.dr, chromecache_459.2.dr, chromecache_430.2.dr, chromecache_462.2.dr, chromecache_520.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1049001539/?random
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/embedded-content.html#parse-a-sizes-attribute
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/embedded-content.html#parse-a-srcset-attribute
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/embedded-content.html#valid-source-size-list
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/infrastructure.html#valid-floating-point-number
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_334.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_443.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_334.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/corporate-governance/leadership
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/financial-reports/quarterly-earnings
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/investor-profile
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/news-and-events/events-and-presentations
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/resources/contacts
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/stock-information/stock-quote-and-chart
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://investors.att.com/stockholder-services/cost-basis-guide
Source: chromecache_443.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_334.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_334.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_334.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_334.2.dr	String found in binary or memory: https://jsperf.com/childnodes-array-slice-vs-loop
Source: chromecache_334.2.dr	String found in binary or memory: https://jsperf.com/flatten-an-array-loop-vs-reduce/2
Source: chromecache_334.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_334.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_402.2.dr	String found in binary or memory: https://legiscan.com/NV/text/SB260/id/2404614/Nevada-2021-SB260-Enrolled.pdf
Source: chromecache_437.2.dr	String found in binary or memory: https://localforage.github.io/localForage
Source: chromecache_336.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_336.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_349.2.dr	String found in binary or memory: https://modernizr.com/download/?-animation-atobbtoa-backdropfilter-backgroundblendmode-backgroundcli
Source: chromecache_334.2.dr	String found in binary or memory: https://momentjs.com/timezone/docs/#/use-it/browser/
Source: chromecache_481.2.dr	String found in binary or memory: https://myvehicle.att.com
Source: chromecache_481.2.dr	String found in binary or memory: https://myvehicle.att.com/
Source: chromecache_334.2.dr	String found in binary or memory: https://nodejs.org/dist/latest/docs/api/util.html#util_custom_inspect_function_on_objects
Source: chromecache_336.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_318.2.dr	String found in binary or memory: https://oidc.idp.clogin.att.com/static/pixel-url.img
Source: chromecache_336.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_381.2.dr	String found in binary or memory: https://p11.techlab-cdn.com
Source: chromecache_348.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_488.2.dr, chromecache_419.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_452.2.dr, chromecache_470.2.dr, chromecache_327.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_488.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_419.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_412.2.dr, chromecache_398.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_415.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_411.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_488.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_419.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_334.2.dr	String found in binary or memory: https://pastebin.com/N21QzeQA)
Source: chromecache_334.2.dr	String found in binary or memory: https://people.mozilla.org/~jorendorff/es6-draft.html#sec-generatorresume
Source: chromecache_391.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_334.2.dr	String found in binary or memory: https://player.vimeo.com/api/player.js
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_334.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_264.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4836087;ord=1;num=1178840748?
Source: chromecache_257.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4836087;ord=1;num=1706995820?
Source: chromecache_417.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=4836087;ord=1;num=2026629514?
Source: chromecache_257.2.dr, chromecache_264.2.dr, chromecache_417.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/activity;xsp=5219144;ord=1;num=1?
Source: chromecache_443.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_443.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_443.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_443.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	String found in binary or memory: https://s.go-mpulse.net/boomerang/
Source: chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	String found in binary or memory: https://s2.go-mpulse.net/boomerang/
Source: chromecache_334.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/o.asp?id=fXJtjaWr
Source: chromecache_415.2.dr, chromecache_275.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_453.2.dr	String found in binary or memory: https://servedby.flashtalking.com
Source: chromecache_402.2.dr, chromecache_262.2.dr, chromecache_479.2.dr	String found in binary or memory: https://services.att.com/search/v1/newsroom?app-id=attnews&fq=-rejectDoc:true&callback=getResults
Source: chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	String found in binary or memory: https://signin-static-js.att.com/scripts/att_common.js
Source: chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	String found in binary or memory: https://signin-static-js.stage.clogin.att.com/scripts/att_common.js
Source: chromecache_334.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_252.2.dr, chromecache_439.2.dr	String found in binary or memory: https://sketchapp.com
Source: chromecache_334.2.dr	String found in binary or memory: https://stackoverflow.com/q/181348
Source: chromecache_393.2.dr	String found in binary or memory: https://static.foresee.com
Source: chromecache_443.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_443.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_443.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_443.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_393.2.dr	String found in binary or memory: https://survey.foreseeresults.com/survey/display
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-advancestringindex
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-getsubstitution
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexp.prototype-
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexpexec
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.match
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.replace
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.search
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.split
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toindex
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap
Source: chromecache_334.2.dr	String found in binary or memory: https://tc39.github.io/proposal-flatMap/#sec-FlattenIntoArray
Source: chromecache_412.2.dr, chromecache_452.2.dr, chromecache_398.2.dr, chromecache_361.2.dr, chromecache_470.2.dr, chromecache_450.2.dr, chromecache_348.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_452.2.dr, chromecache_470.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_452.2.dr, chromecache_470.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_452.2.dr, chromecache_470.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_452.2.dr, chromecache_470.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j7566711756
Source: chromecache_327.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=154682551857
Source: chromecache_327.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156435547389
Source: chromecache_327.2.dr	String found in binary or memory: https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819
Source: chromecache_334.2.dr	String found in binary or memory: https://tools.ietf.org/html/rfc2822#section-3.3
Source: chromecache_419.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_419.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_262.2.dr	String found in binary or memory: https://twitter.com/ATT
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://twitter.com/ATTNews
Source: chromecache_443.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_334.2.dr	String found in binary or memory: https://w3c.github.io/webappsec/specs/mixedcontent/#restricts-mixed-content
Source: chromecache_334.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_334.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_336.2.dr	String found in binary or memory: https://www.att.com
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com.mx/newsroom/
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com/?source=EPcc000000000000U&wtExtndSource=
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com/?source=EPcc000000000000U&wtExtndSource=Homepage_Newsroom_DGen
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com/accessibility
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.att.com/acctmgmt/logout?kmsi=n&target_url=https://www.att.com/acctmgmt/registration?orig
Source: chromecache_481.2.dr	String found in binary or memory: https://www.att.com/acctmgmt/logout?target_url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/acctmgmt/passthrough/PRIVACYCHOICES?origination_point=PrivacyCenter
Source: chromecache_494.2.dr, chromecache_513.2.dr	String found in binary or memory: https://www.att.com/acctmgmt/registration/opr/chooseID
Source: chromecache_481.2.dr	String found in binary or memory: https://www.att.com/acctmgmt/registration?origination_point=lsreg
Source: chromecache_262.2.dr	String found in binary or memory: https://www.att.com/buy/phones/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/coverage/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/deals/att-points-plus-citi
Source: chromecache_336.2.dr	String found in binary or memory: https://www.att.com/gen/privacy-policy?pid=2587
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.att.com/gen/public-affairs?pid=20879
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.att.com/legal/legal-policy-center.html
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_314.2.dr, chromecache_336.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com/legal/terms.attWebsiteTermsOfUse.html
Source: chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.att.com/my/#/login
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/mydatarequest
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/mydatarequest/
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/mydatarequest/new-request/
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/mydatarequest/track-a-request/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/partners/currently/email-sign-up/?source=EnEmail2020000BDL&wtExtndSource=myattgl
Source: chromecache_441.2.dr	String found in binary or memory: https://www.att.com/public/16bcb117a2aabc1ca8666233c9dc954522001624dcc5
Source: chromecache_436.2.dr	String found in binary or memory: https://www.att.com/scripts/adobe/prod/attmonetization/js/
Source: chromecache_518.2.dr	String found in binary or memory: https://www.att.com/scripts/adobe/prod/facebook.js
Source: chromecache_271.2.dr	String found in binary or memory: https://www.att.com/scripts/adobe/prod/mktg-rules/global/bing.js
Source: chromecache_262.2.dr, chromecache_479.2.dr	String found in binary or memory: https://www.att.com/search/_next/static/widget/css/search-widget-newsroom.css
Source: chromecache_336.2.dr	String found in binary or memory: https://www.att.com/shop/wireless/mobile-accessibility.html
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.att.com/sitemap/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/storeappointment/
Source: chromecache_469.2.dr, chromecache_240.2.dr, chromecache_262.2.dr	String found in binary or memory: https://www.att.com/stores/
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/support
Source: chromecache_469.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.att.com/support/contact-us/
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.com/support/contact-us/?source=EPcc000000000000U&wtExtndSource=Footer_Newsroom_DGen
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/ui/upperfunnel/1.0.58/scripts/main.js
Source: chromecache_402.2.dr	String found in binary or memory: https://www.att.com/ui/upperfunnel/1.0.58/styles/main.css
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.att.jobs
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.attconnects.com/?utm_source=ATT001&utm_content=GlobalNav
Source: chromecache_402.2.dr	String found in binary or memory: https://www.cricketwireless.com/privacy
Source: chromecache_402.2.dr	String found in binary or memory: https://www.directv.com/privacy/
Source: chromecache_402.2.dr	String found in binary or memory: https://www.directv.com/privacy/privacy-center/
Source: chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	String found in binary or memory: https://www.dynatrace.com/company/trust-center/customers/reports/
Source: chromecache_262.2.dr	String found in binary or memory: https://www.eurogamer.net/why-dont-we-talk-more-about-cognitive-accessibility
Source: chromecache_402.2.dr	String found in binary or memory: https://www.firstnet.com/privacy-policy.html
Source: chromecache_262.2.dr	String found in binary or memory: https://www.foodbusinessnews.net/articles/22850-packaging-update-boosts-accessibility-of-kellogg-cer
Source: chromecache_393.2.dr	String found in binary or memory: https://www.foresee.com/sms-terms-and-conditions/
Source: chromecache_419.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_443.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.google.com/pagead/collect
Source: chromecache_419.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_443.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_412.2.dr, chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.googlesyndication.com
Source: chromecache_361.2.dr, chromecache_450.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.googlesyndication.com/pagead/collect
Source: chromecache_348.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_398.2.dr, chromecache_348.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_398.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=DC-6100125
Source: chromecache_383.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_443.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_262.2.dr	String found in binary or memory: https://www.instagram.com/att
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.instagram.com/attnews/
Source: chromecache_262.2.dr	String found in binary or memory: https://www.linkedin.com/company/att
Source: chromecache_433.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/eula
Source: chromecache_433.2.dr	String found in binary or memory: https://www.quantummetric.com/legal/patents/.
Source: chromecache_506.2.dr	String found in binary or memory: https://www.thunderhead.com
Source: chromecache_393.2.dr	String found in binary or memory: https://www.verint.com/verint-sms-disclaimer/
Source: chromecache_437.2.dr, chromecache_234.2.dr, chromecache_481.2.dr	String found in binary or memory: https://www.volvo.com
Source: chromecache_262.2.dr	String found in binary or memory: https://www.washingtonpost.com/wellness/2022/12/14/va-website-accessibility-disabled-veterans/
Source: chromecache_443.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_314.2.dr, chromecache_423.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCHVMnhhrpYSNNyHlo5G9eaQ
Source: chromecache_334.2.dr	String found in binary or memory: https://www.youtube.com/embed/$4
Source: chromecache_262.2.dr	String found in binary or memory: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0
Source: chromecache_443.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_334.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_334.2.dr	String found in binary or memory: https://www.youtube.com/player_api
Source: chromecache_334.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=
Source: chromecache_443.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_443.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_443.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_443.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 50326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50402
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50407
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50406
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50409
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50408
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 50336 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50441 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50458
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 50443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50459
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50450
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50452
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50451
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50453
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50455
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50469
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50466
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50470
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50472
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50474
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50477
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 50467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 50393 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50414
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50419
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50410
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50412
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50411
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50425
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50428
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50421
Source: unknown	Network traffic detected: HTTP traffic on port 50465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50423
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50422
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50438
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50439
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50430
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50432
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50431
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50433
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50477 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50449
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50448
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50421 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50441
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50440
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50444
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50423 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50469 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50470 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50411 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50378
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50380
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50382
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443

Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.50.93:443 -> 192.168.2.4:49744 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_4960_1306124623

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@34/519@184/58

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7304 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7440 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7304 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7440 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_403.2.dr	Binary or memory string: aelmnt.src = "//d.agkn.com/pixel/8597/?che=" + Math.random() + "&omid=" + vMCID;
Source: chromecache_403.2.dr	Binary or memory string: 'u30': vMCID,

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	100%	Avira URL Cloud	phishing
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	17%	Virustotal		Browse
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
adobetarget.data.adobedc.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
eip-ntt.lsreg.att.com.akahost.net	0%	Virustotal	Browse
suez.fromthemachine.org	2%	Virustotal	Browse
windowsupdatebg.s.llnwi.net	0%	Virustotal	Browse
p11.techlab-cdn.com	0%	Virustotal	Browse
solutions.invocacdn.com	0%	Virustotal	Browse
attservicesinc.tt.omtrdc.net	0%	Virustotal	Browse
s2.go-mpulse.net	0%	Virustotal	Browse
s.go-mpulse.net	0%	Virustotal	Browse
173bf10b.akstat.io	0%	Virustotal	Browse
scripts.webcontentassessor.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://s2.go-mpulse.net/boomerang/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico	100%	Avira URL Cloud	phishing
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap	0%	Avira URL Cloud	safe
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css	100%	Avira URL Cloud	phishing
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff	100%	Avira URL Cloud	phishing
https://tc39.github.io/ecma262/#sec-string.prototype.search	0%	Avira URL Cloud	safe
http://jsperf.lnkit.com/fast-apply/5	0%	Avira URL Cloud	safe
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff	100%	Avira URL Cloud	phishing
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap	0%	Virustotal		Browse
https://tc39.github.io/ecma262/#sec-string.prototype.search	0%	Virustotal		Browse
http://jsperf.lnkit.com/fast-apply/5	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dart.l.doubleclick.net	64.233.176.149	true	false		high
clcontent.att.com	144.161.77.234	true	false		high
eip-ntt.lsreg.att.com.akahost.net	184.31.10.246	true	false	0%, Virustotal, Browse	unknown
i.ytimg.com	142.251.15.119	true	false		high
cdn.quantummetric.com	172.67.20.158	true	false		high
ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com	3.212.181.219	true	false		high
adservice.google.com	142.250.105.155	true	false		high
att-sync.quantummetric.com	35.188.81.186	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
bafybeidpq3cmso7h7wpz4i6fwbwhupx3hr542tdgevwn3alivjmbswxkcq.ipfs.dweb.link	209.94.90.1	true	false		unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	54.84.108.222	true	false		high
adobetarget.data.adobedc.net	63.140.39.150	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	31.13.88.13	true	false		high
ingest.quantummetric.com	146.148.37.220	true	false		high
code.jquery.com	151.101.194.137	true	false		high
photos-ugc.l.googleusercontent.com	64.233.177.132	true	false		high
www.google.com	173.194.219.106	true	false		high
d1vb8d7cedz7p0.cloudfront.net	18.244.202.99	true	false		high
windowsupdatebg.s.llnwi.net	69.164.42.0	true	false	0%, Virustotal, Browse	unknown
d279u996ipxqqp.cloudfront.net	108.139.15.115	true	false		high
star-mini.c10r.facebook.com	31.13.65.36	true	false		high
pagead-googlehosted.l.google.com	142.250.105.132	true	false		high
accounts.google.com	74.125.138.84	true	false		high
securepubads46.g.doubleclick.net	108.177.122.156	true	false		high
ad.doubleclick.net	142.250.105.149	true	false		high
attreg.att.net	144.160.149.45	true	false		high
d2ctznuk6ro1vp.cloudfront.net	3.163.101.103	true	false		high
static.doubleclick.net	142.250.105.148	true	false		high
pnapi-stateless-868251922.us-east-1.elb.amazonaws.com	44.197.54.80	true	false		high
youtube-ui.l.google.com	172.217.215.136	true	false		high
googleads.g.doubleclick.net	172.253.124.157	true	false		high
ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com	54.156.103.28	true	false		high
play.google.com	74.125.138.138	true	false		high
att-app.quantummetric.com	35.226.68.60	true	false		high
ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	23.20.189.8	true	false		high
td.doubleclick.net	172.253.124.157	true	false		high
clients.l.google.com	142.250.105.113	true	false		high
fls.doubleclick.net	173.194.219.148	true	false		high
securepubads.g.doubleclick.net	unknown	unknown	false		high
solutions.invocacdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
p11.techlab-cdn.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
6100125.fls.doubleclick.net	unknown	unknown	false		high
pnapi.invoca.net	unknown	unknown	false		high
clients2.google.com	unknown	unknown	false		high
scripts.webcontentassessor.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
trial-eum-clientnsv4-s.akamaihd.net	unknown	unknown	false		high
www.youtube.com	unknown	unknown	false		high
s2.go-mpulse.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
signin-static-js.att.com	unknown	unknown	false		high
suez.fromthemachine.org	unknown	unknown	false	2%, Virustotal, Browse	unknown
trial-eum-clienttons-s.akamaihd.net	unknown	unknown	false		high
www.directv.com	unknown	unknown	false		high
fid.agkn.com	unknown	unknown	false		high
signin.att.com	unknown	unknown	false		high
173bf10b.akstat.io	unknown	unknown	false	0%, Virustotal, Browse	unknown
connect.facebook.net	unknown	unknown	false		high
brain.foresee.com	unknown	unknown	false		high
kg2tssvyd4fpmzonk22q-f-9a28c56fa-clientnsv4-s.akamaihd.net	unknown	unknown	false		high
www.att.com	unknown	unknown	false		high
yt3.ggpht.com	unknown	unknown	false		high
s.go-mpulse.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
dynatrace.att.com	unknown	unknown	false		high
attservicesinc.tt.omtrdc.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
smetrics.att.com	unknown	unknown	false		high
d.agkn.com	unknown	unknown	false		high
about.att.com	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
servedby.flashtalking.com	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
identity.att.com	unknown	unknown	false		high
gateway.foresee.com	unknown	unknown	false		high
kg2tssvyd4fpmzonk3ba-f-fc39dff1a-clientnsv4-s.akamaihd.net	unknown	unknown	false		high
mboxedge34.tt.omtrdc.net	unknown	unknown	false		unknown
c.go-mpulse.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955941224&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34142&N=97&P=6	false		high
https://www.facebook.com/tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET	false		high
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897562&z=1&S=0&N=0&P=0	false		high
about:blank	false	Avira URL Cloud: safe	low
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955902772&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2616&N=11&P=2	false		high
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?	false		high
https://www.att.com/acctmgmt/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842	false		high
https://www.youtube.com/generate_204?qJUrDw	false		high
https://www.facebook.com/tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET	false		high
https://identity.att.com/_sec/cp_challenge/sec-cpt-4-2.js	false		high
https://identity.att.com/identity-ui/static/thirdparty/adobe/detm-container-ftr.js	false		high
https://ingest.quantummetric.com/att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af	false		high
https://6100125.fls.doubleclick.net/activityi;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?	false		high
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955932056&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=859&N=1	false		high
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css	false	Avira URL Cloud: phishing	unknown
https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?	false		high
https://att-app.quantummetric.com/q3/2f0772e2e946694acf73c98d1ebdd4af	false		high
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908818&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1194&N=2	false		high
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff	false	Avira URL Cloud: phishing	unknown
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949201&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=10706&N=7&P=2	false		high
https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842	false		high
https://ingest.quantummetric.com/att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914038&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0	false		high
https://www.youtube.com/s/player/b854ee52/player_ias.vflset/en_US/base.js	false		high
https://att-sync.quantummetric.com/?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916212&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=6766dc2016a147975d239307765b79f6	false		high
https://gateway.foresee.com/code/19.22.0-fs/fs.utils.js	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://about.att.com/sites/accessibility	false		high
https://identity.att.com/static/thirdparty/quantum/quantum-att.js	false		high
https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955920177	false		high
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff	false	Avira URL Cloud: phishing	unknown
https://www.youtube.com/embed/tFUHPoLMUwk?rel=0	false		high
https://identity.att.com/identity-ui/assets/img/ATT_LOGO.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://player.vimeo.com/api/player.js	chromecache_334.2.dr	false		high
https://s2.go-mpulse.net/boomerang/	chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	false	URL Reputation: safe	unknown
https://att.com/ford	chromecache_234.2.dr, chromecache_481.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_334.2.dr	false		high
https://about.att.com/pages/media-assets	chromecache_314.2.dr, chromecache_423.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_334.2.dr	false		high
https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=154682551857	chromecache_327.2.dr	false		high
https://www.att.com/mydatarequest/	chromecache_402.2.dr	false		high
http://www.datatables.net	chromecache_334.2.dr	false		high
https://openjsf.org/	chromecache_336.2.dr	false	URL Reputation: safe	unknown
https://github.com/tc39/proposal-promise-finally	chromecache_334.2.dr	false		high
https://investors.att.com/resources/contacts	chromecache_314.2.dr, chromecache_423.2.dr	false		high
https://www.att.com/support/contact-us/?source=EPcc000000000000U&wtExtndSource=Footer_Newsroom_DGen	chromecache_314.2.dr, chromecache_423.2.dr	false		high
https://www.att.com/support	chromecache_469.2.dr, chromecache_240.2.dr	false		high
https://www.eurogamer.net/why-dont-we-talk-more-about-cognitive-accessibility	chromecache_262.2.dr	false		high
http://momentjs.com/guides/#/warnings/zone/	chromecache_334.2.dr	false		high
https://investors.att.com/corporate-governance/leadership	chromecache_314.2.dr, chromecache_423.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_443.2.dr	false		high
http://docs.closure-library.googlecode.com/git/closure_goog_date_date.js.source.html	chromecache_334.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_334.2.dr	false		high
https://jsperf.com/getall-vs-sizzle/2	chromecache_334.2.dr	false		high
https://tc39.github.io/proposal-flatMap/#sec-Array.prototype.flatMap	chromecache_334.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_336.2.dr	false		high
https://www.att.com/mydatarequest/track-a-request/	chromecache_402.2.dr	false		high
http://fancyapps.com/fancybox/	chromecache_334.2.dr	false		high
http://momentjs.com/timezone/docs/#/data-loading/.	chromecache_334.2.dr	false		high
http://dev.w3.org/csswg/css-syntax/#parse-component-value	chromecache_334.2.dr	false		high
https://sizzlejs.com/	chromecache_334.2.dr	false		high
http://dev.w3.org/csswg/css-syntax/#parse-comma-separated-list-of-component-values	chromecache_334.2.dr	false		high
http://momentjs.com/guides/#/warnings/min-max/	chromecache_334.2.dr	false		high
https://about.att.com/ecms/dam/sites/accessibility/down_arrow.png	chromecache_262.2.dr	false		high
https://www.att.com/?source=EPcc000000000000U&wtExtndSource=	chromecache_314.2.dr, chromecache_423.2.dr	false		high
http://flickity.metafizzy.co	chromecache_312.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_336.2.dr	false		high
https://analytics.foresee.com/ingest/events	chromecache_393.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_334.2.dr	false		high
https://code.google.com/p/v8/issues/detail?id=687	chromecache_334.2.dr	false		high
https://www.dynatrace.com/company/trust-center/customers/reports/	chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	false		high
https://www.att.com/acctmgmt/passthrough/PRIVACYCHOICES?origination_point=PrivacyCenter	chromecache_402.2.dr	false		high
https://www.att.com/sitemap/	chromecache_469.2.dr, chromecache_240.2.dr, chromecache_336.2.dr	false		high
https://github.com/google/safevalues/issues	chromecache_275.2.dr	false		high
http://datatables.net/license	chromecache_334.2.dr	false		high
https://myvehicle.att.com	chromecache_481.2.dr	false		high
https://services.att.com/search/v1/newsroom?app-id=attnews&fq=-rejectDoc:true&callback=getResults	chromecache_402.2.dr, chromecache_262.2.dr, chromecache_479.2.dr	false		high
https://youtu.be/	chromecache_443.2.dr	false		high
https://about.att.com/pages/business	chromecache_314.2.dr, chromecache_423.2.dr	false		high
https://fid.agkn.com/f?apiKey=2676946699	chromecache_339.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_334.2.dr	false		high
https://github.com/tc39/proposal-object-values-entries	chromecache_334.2.dr	false		high
https://www.att.com/scripts/adobe/prod/facebook.js	chromecache_518.2.dr	false		high
https://about.att.com/pages/5G	chromecache_314.2.dr, chromecache_423.2.dr	false		high
http://jsfiddle.net/gtntL4gr/3/	chromecache_334.2.dr	false		high
https://signin-static-js.stage.clogin.att.com/scripts/att_common.js	chromecache_272.2.dr, chromecache_432.2.dr, chromecache_441.2.dr	false		high
https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture	chromecache_334.2.dr	false		high
https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819	chromecache_327.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_334.2.dr	false		high
https://tc39.github.io/ecma262/#sec-string.prototype.search	chromecache_334.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.att.com/mydatarequest/new-request/	chromecache_402.2.dr	false		high
https://att.com/remove	chromecache_402.2.dr	false		high
https://www.att.com/acctmgmt/logout?kmsi=n&target_url=https://www.att.com/acctmgmt/registration?orig	chromecache_234.2.dr, chromecache_481.2.dr	false		high
https://investors.att.com/	chromecache_314.2.dr, chromecache_423.2.dr	false		high
http://momentjs.com/guides/#/warnings/dst-shifted/	chromecache_334.2.dr	false		high
https://tools.ietf.org/html/rfc2822#section-3.3	chromecache_334.2.dr	false		high
https://www.directv.com/privacy/	chromecache_402.2.dr	false		high
http://jsperf.lnkit.com/fast-apply/5	chromecache_334.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://about.att.com/ecms/dam/sites/accessibility/share-images/1200x630_Connections_in_Gaming.jpg	chromecache_262.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_334.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
146.148.37.220	ingest.quantummetric.com	United States	15169	GOOGLEUS	false
172.217.215.148	unknown	United States	15169	GOOGLEUS	false
144.161.77.234	clcontent.att.com	United States	797	AMERITECH-ASUS	false
35.226.68.60	att-app.quantummetric.com	United States	15169	GOOGLEUS	false
18.244.202.99	d1vb8d7cedz7p0.cloudfront.net	United States	16509	AMAZON-02US	false
23.20.189.8	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
34.135.199.11	unknown	United States	2686	ATGS-MMD-ASUS	false
173.194.219.106	www.google.com	United States	15169	GOOGLEUS	false
64.233.177.132	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
31.13.88.13	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
63.140.38.217	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
63.140.39.150	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
209.94.90.1	bafybeidpq3cmso7h7wpz4i6fwbwhupx3hr542tdgevwn3alivjmbswxkcq.ipfs.dweb.link	United States	40680	PROTOCOLUS	false
108.139.15.115	d279u996ipxqqp.cloudfront.net	United States	16509	AMAZON-02US	false
74.125.138.103	unknown	United States	15169	GOOGLEUS	false
142.250.9.119	unknown	United States	15169	GOOGLEUS	false
74.125.138.149	unknown	United States	15169	GOOGLEUS	false
172.253.124.132	unknown	United States	15169	GOOGLEUS	false
172.217.215.136	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
173.194.219.148	fls.doubleclick.net	United States	15169	GOOGLEUS	false
35.169.173.155	unknown	United States	14618	AMAZON-AESUS	false
142.251.15.155	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.156.103.28	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
144.160.125.207	unknown	United States	797	AMERITECH-ASUS	false
35.238.147.169	unknown	United States	15169	GOOGLEUS	false
142.251.15.119	i.ytimg.com	United States	15169	GOOGLEUS	false
104.22.52.252	unknown	United States	13335	CLOUDFLARENETUS	false
184.31.10.246	eip-ntt.lsreg.att.com.akahost.net	United States	33905	AKAMAI-AMSEU	false
31.13.65.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
142.250.9.149	unknown	United States	15169	GOOGLEUS	false
142.250.9.106	unknown	United States	15169	GOOGLEUS	false
142.250.105.113	clients.l.google.com	United States	15169	GOOGLEUS	false
99.84.208.48	unknown	United States	16509	AMAZON-02US	false
144.160.149.45	attreg.att.net	United States	797	AMERITECH-ASUS	false
64.233.177.155	unknown	United States	15169	GOOGLEUS	false
172.67.20.158	cdn.quantummetric.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.156	securepubads46.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.196.32.2	unknown	United States	14618	AMAZON-AESUS	false
3.163.101.103	d2ctznuk6ro1vp.cloudfront.net	United States	16509	AMAZON-02US	false
54.84.108.222	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.188.81.186	att-sync.quantummetric.com	United States	15169	GOOGLEUS	false
34.135.80.45	unknown	United States	2686	ATGS-MMD-ASUS	false
142.251.15.148	unknown	United States	15169	GOOGLEUS	false
52.7.164.58	unknown	United States	14618	AMAZON-AESUS	false
64.233.177.190	unknown	United States	15169	GOOGLEUS	false
54.147.224.12	unknown	United States	14618	AMAZON-AESUS	false
44.197.54.80	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.105.149	ad.doubleclick.net	United States	15169	GOOGLEUS	false
172.253.124.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.105.148	static.doubleclick.net	United States	15169	GOOGLEUS	false
64.233.177.149	unknown	United States	15169	GOOGLEUS	false
64.233.177.147	unknown	United States	15169	GOOGLEUS	false
74.125.138.84	accounts.google.com	United States	15169	GOOGLEUS	false
64.233.176.149	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
3.212.181.219	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1392526
Start date and time:	2024-02-15 01:10:23 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@34/519@184/58
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.att.com/acctmgmt/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Browse: https://www.att.com/acctmgmt/fpwd/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Browse: https://attreg.att.net/PortalRegWeb/PortalRegController?callingAppId=OP Browse: https://www.att.com/features/accessibility.html Browse: https://about.att.com/csr/home/privacy/rights_choices.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 34.104.35.123, 172.253.124.95, 108.177.122.95, 142.250.9.95, 64.233.185.95, 74.125.138.95, 64.233.176.95, 173.194.219.95, 172.217.215.95, 142.251.15.95, 142.250.105.95, 74.125.136.95, 23.46.202.218, 40.127.169.103, 96.17.34.68, 23.216.73.79, 69.164.42.0, 192.229.211.108, 23.207.49.110, 23.44.104.156, 13.95.31.18, 23.46.200.36, 20.72.123.232, 23.1.30.176, 23.207.48.129, 96.7.224.209, 96.7.224.178, 23.6.117.10, 23.6.117.35, 64.233.177.95, 23.0.175.170, 23.0.175.178, 104.76.210.210, 104.76.210.213, 20.3.187.198, 64.233.185.97, 23.223.44.231, 23.223.44.236, 74.125.138.155, 74.125.138.156, 74.125.138.154, 74.125.138.157, 13.107.21.200, 204.79.197.200, 23.4.32.21, 151.101.2.217, 151.101.194.217, 151.101.130.217, 151.101.66.217, 172.253.124.94, 142.250.105.155, 142.250.105.157, 142.250.105.156, 142.250.105.154, 142.250.105.132, 173.194.219.156, 173.194.219.155, 173.194.219.157, 173.194.219.154, 64.233.176.155, 64.233.176.157, 64.233.176.154, 64.233.176.156, 1
Excluded domains from analysis (whitelisted): e11697.x.akamaiedge.net, p11.techlab-cdn.com.edgekey.net, slscr.update.microsoft.com, glbprod.directv.com.edgekey.net, clientservices.googleapis.com, a1024.dscg.akamai.net, lsreg.att.com.edgekey.net, about.att.com.edgekey.net, a248.b.akamai.net, prod-www.zr-att.com.akadns.net, ocsp.digicert.com, update.googleapis.com, www.gstatic.com, ip46.go-mpulse.net.edgekey.net, fs.microsoft.com, content-autofill.googleapis.com, dual-a-0001.a-msedge.net, pagead2.googlesyndication.com, wildcard46.akstat.io.edgekey.net, dt-appgw-prod.eastus2.cloudapp.azure.com, edgedl.me.gvt1.com, wildcard46.go-mpulse.net.edgekey.net, servedby.flashtalking.com-v1.edgekey.net, www.att.com.edgekey.net, smetrics.att.com.edgekey.net, www.googleadservices.com, e4751.b.akamaiedge.net, e11697.dscx.akamaiedge.net, e27553.dsca.akamaiedge.net, 22948d2183c9207a707bdfa472c85560.safeframe.googlesyndication.com, ip46s2.go-mpulse.net.edgekey.net, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.d
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1815
Entropy (8bit):	7.167000052394706
Encrypted:	false
SSDEEP:	48:3kNinNuiAaCJJ3bXAZ3hzM1zBXzpLKazfac:08N+vLGM1zBXFHac
MD5:	ABD3BFF57AFC444BE6F78801334E6C10
SHA1:	011429AC96709C9B05CDA6F29C3C2ECAC6158391
SHA-256:	F7582FD23DB2B0F03A798169C070E6EF14A4BAF31D2B6DB9F3083FDE8ACED2E3
SHA-512:	524B44202F62D22CD8981F697E385C719EB5346F32437655CC62327A135E966CBA5237D80304C4EAE76952F72E0078B3784114239E6895C71845CD284D1287A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:AA5BD89B936B11E88350D001543530E9" xmpMM:InstanceID="xmp.iid:AA5BD89A936B11E88350D001543530E9" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" stRef:documentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2750
Entropy (8bit):	7.556900878102552
Encrypted:	false
SSDEEP:	48:WkNinNui0JJJ3w+cJyCDgzWrMk/X2JfWJ1DD5+j1y3Mn:d8NcA+OyC2WrZ/mJfGB5+jE8n
MD5:	72CFEF8635D67F28FABBA6945FC4B327
SHA1:	E10FC364FCCD3AFB3B3FB1EC06A9C3B8D0D4C978
SHA-256:	6E42823C0ED27C50A736F8A710834AC04B127AB318F914164527EB19B6DBCD2E
SHA-512:	5B90DE9D6060F9BECF2BB71DB7B28819CA0C1DEC5323B6790775FFA076CEFC6124BBCC5ECD4E8B43639871C07BC79E2529F912C026621B8A2E6E74C3AE82AF76
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/images/favicon-32.png
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33" xmpMM:InstanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:634206E52B206811822A8A008540C61A" stRef:documentID="xmp.did:CBAE199D13206811822AA43317F376F1"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65478)
Category:	downloaded
Size (bytes):	127457
Entropy (8bit):	5.291940920250004
Encrypted:	false
SSDEEP:	1536:PvRm81iXXxV7eWIHczxswQI4h2KE+ixXwRk2sxHXZFR7ZRtHT7ClVzFht5RHZrH/:b0RRoe2s1s+jnznmR
MD5:	CB323CBD1C5F47AF69A8B44DDE4A2D19
SHA1:	E34AA130540456EA73E04B4E320530B0755B5BDF
SHA-256:	C59FE4BB52040311979971AD094E9BC1BB00A698229F65CFD1F2D301BFE15047
SHA-512:	DC0E09A984D72EF3320BA6809BDAC4D5C33625258776748A25A05A96BD8335FAA29D3E1F5DD93408DADC55CBE35241BFE38E16939B035C3A83D8C7E3CF9FDE2E
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/ssaf_universal_client/prod/ssaf-uc.js
Preview:	/** [Universal Client] 02/14/2024 - Version: 1.0.238 */ . !function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n){a.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},a.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},a.t=function(e,t){if(1&t&&(e=a(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(a.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)a.d(n,o,function(t){return e[t]}.bind(null,o));return n},a.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return a.d(t,"a",t),t},a.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},a.p="",a(a.s=32)}([function(e,t,a){"use strict"

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 171, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2031
Entropy (8bit):	7.634453495710265
Encrypted:	false
SSDEEP:	24:H3IsU3VO2acyuYEDt2M82zV9NQ12KnZ/uG11tzgPWd+dtGTuvWj5ZWAg0dAPkGWr:4sqAElzevx/U+MYuujzc0dAPkTz4cftJ
MD5:	49A861853E8D633E5F7194DF5769C096
SHA1:	5D50869A867B37DEB9F2048D4968FFA46FD0F94F
SHA-256:	A9720F8BA881347A3D3CFCA1E61480C3D13E4CDF010D1CA47CF147E9CD8D6817
SHA-512:	2878D67DD4282A60FCD021EFA7A58DF4E0B89DFAFBE96CB248BBA9EA3335D21DA2D0FA9680CEE2DA3343C860AB1226BEB6A38A7D9FA057AB033A68B9299B70F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,.........S.6.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...OP.g..q.R%......O...t...0#g.S98@..2.v.`<.\.......&.Yg...9..$..u..!E.jt.......I6....0/...>....?TU........................\-...C.x<.J...Wi./..`..488x....?c.NI$.IK.o.&i.PH...N}mkk..............C...M....S!T......%...G.Ey....^....]......j.:r.'d1..#.d$..H...................z.......&..oX.^s...Y.pc...N...GFFv.ze_....WVVv{i=.W.L'..y.%...B.S...m..#..j.....R..gouuU....>.~.B.v.]9Q.pjjJ.p.D....c.S.teOEX..s..!.3.N&.YFQ.s.XU.\e....C.[..D.C.S..s....p.42tFQ..[.r.....-}.................C0.!(.....9.W.Q.2`.@5...$......^.%Qy.......R.!..>J..f..N...>..B.o>)._ .J...MOO.@..LLL.vA..344..DL[....!.O".0.N#.!.@..B............6..fy.7S. .Y1'.f....j6............<.....W..^F'.....xWW.k.....k..V...vM...p.?..J.......~&.}....=..3..r...k....{..4...;.BSc.MGT.dM..........z...2.....!..!.B..a...aV8l.tG.Tv%.5....5.s................6.JX.........7.....6gW..........c.,.s..n..k.cw.<....!.BO.ml.i>........wft3

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	227432
Entropy (8bit):	5.475922471024145
Encrypted:	false
SSDEEP:	1536:ZBGu0hZH5NI8p+1vjDMP3If9GmLURpaUHYH/QjJ6TQrqGpFTc+cPUr0I7z/yXE5D:6fNOZXWEWd2UlhRq820o5NNbim8GYaed
MD5:	DCC14470294780B24647B884C1F8871C
SHA1:	2C2F5E6476CAB725C37DE34437FC183649A187B4
SHA-256:	66D537FE9FFBABF408F236213CF9FBDCA2E13FAB6035B3494606DB9485A3D57E
SHA-512:	EE14680EF47DB5993CD41C4A1A6F13D51C4B9B20E1B5F2FF4DCAF9E6E11189AE5920D3E6DAA315A65BB96730D06D0CF067B809F6BA423EF809CAEA22D26F65DB
Malicious:	false
Reputation:	low
URL:	https://www.att.com/idpcms/services/prod/acctmgmt/registration.cmsfeed.js
Preview:	{"idp-cms-feed":{"feedID":"b60967852deeaca82629117b6049f6ad","feedTimeStamp":"2024-02-02T17:38:22.569Z","docId":"71bc77dc-9232-3c3b-b986-b94ffacf25a9","registration":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercreator":"@ATTExplore","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"enablePersonalization":false,"_type":"scmsConfig","pagePath":"/registration"},"contentFragments":{"QARIsThisYourID":{"docId":"b72b6e51-8d61-3a55-ac57-38838acbbb25","docName":"QARIsThisYourID","_type":"scmsFragment","scmsCompId":"QARIsThisYourID","hideOnDefault":false,"master":{"pageTitle":"Is this your user ID?","foundAnotherAttIDText":"We found an ID that might be yours. If it is, you can link your new account to it.","currentUserIDLabel":"ID","signInWithAlsoText":"You may also be signing in with:","wirelessNumberText":"Wireless number:","attEmailText":"Email:","passwordLabel":"Password","

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1600x490, components 3
Category:	dropped
Size (bytes):	122125
Entropy (8bit):	7.964505279100467
Encrypted:	false
SSDEEP:	1536:/Ih0Qq4UvVaztKS6Jo0kwp8x8U2CPq7tHa8ukT97OyMzIwKj0QFKFKwD4rw+Rl06:wh01rvutKfkwi2fF0R8j0Hgdrwz96
MD5:	008D169FF38350F3A5D2B83F1685EEF7
SHA1:	006083A99CBCCE025FB67DE81C0CC162031CC3FF
SHA-256:	F14C7E93C2608CD895980C9436F55DFB7F6D5829484DAF8923849F352E4F69E3
SHA-512:	B864A0D39BE84BD8F3560380ADE22DE56684E37507554973B4BBB54931FCE07B5112F8773BC017E449A6F8E5955E0858A5DD27C2B8B2D86F3EF60453ABA4B9AE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d................................................................................................................................................@.............................................................EA...EU.k....5.p..,........n.#.\|.........}..'.m.c..'0....w<.\|..l_RN.\|.s.i..x.?c.0.c.9..........J....QUB...p.321...z.....SU.....<8Y\|.../5..8z$\...-sa.R.m\|..z?....,..RY.1lS.w.X.\|~.y............B....Ej..Z.......~67\|.....,h..y,..C..u^.?[...gy..!.zZ[..s...E.......k.k_...x...z.._.}.........P.W.J.EU..R.4dTe/.m. .@..Cj..'..>7....._K.u}C.x.nHK.>...R'....\............]z...!...........)..+W.....T..T*...^P.....b.......s.{~2.....O2[Wj.....nVx>......j....3a..t..@........R....^<.......J.J.T.<iZ...e....14...cd.....S..X9.=..bd....).o.....w........C.y..@........R..)Jy.j.>&=.>.off_.w%R.......l[...P...a.t...O7.....W3.:.V=...o.:-...n....r.i....t:.WkO..........y..x...zZ.....33#;6......U..<..].Wc..P....z...l..._Qh.v.Kq.,......o.^..O.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.824862957617356
Encrypted:	false
SSDEEP:	3:SRe3WVnCm:SI3jm
MD5:	7A0D7C0D33E1E1D99F52442CC17B36D2
SHA1:	B190C959D4301EDD823A38BE7FE1B6227CEA0E02
SHA-256:	03817521324A0F89F6F5D6B9EA3C1237CE7326B99C6009A651E549106F422918
SHA-512:	22263335D4A89F1E859ABEB10FA6662B09831237363D6EA181076BAFBACBA5C7BEB5170585E22A67B3EC64258DFCB4BE8EF6B96494150000F89D4004CBC9A78C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmrdiZWsqdwzhIFDXKwy20=?alt=proto
Preview:	ChMKEQ1ysMttGgQICRgBGgQIZBgC

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 10, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	7.09309447017958
Encrypted:	false
SSDEEP:	6:6v/lhPfS9C4lT3vQ9bRssoxM+DZxKICzQhc+y966M2f97c2tVp:6v/7nS9NlrQ9bRMjQQhm66/7c29
MD5:	A6431734387EFA03272B2FACFC41D9CB
SHA1:	5295FB0F4A940B0755B9DA8099C3F22E7636635B
SHA-256:	27457D7E87AA321864FFC366D709814FDC34F780BDD75380146160B3EA330E4C
SHA-512:	00D125C1A052697B5A1F116BF68A49E2A7C932FEA114A6EEFD059DDD712CDA7F73209164563B03A4631C1CABA0C62DA85D067FCE281F49063DBB0FF73276FB3D
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/down_arrow.png
Preview:	.PNG........IHDR.............k.......gAMA......a.....IDAT(....j.0..-.>K.$k6..%.B.-..R..P...)....-..:f...I.!.w!.L.......$U..D)5.l....,../..R...`9.+:...Ns....p...k ....Q.5.~j.c...{..].......Yk?d.....8g.K}Dx'x.r..s .4Mw.)Y.p.............jr.....VUu.Bx;6..M.H5<q+.&N.B0.%.^...Ee.[R[.i...L(.[sF].\C....>.?..y..Wi.....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12390
Entropy (8bit):	7.891549026202851
Encrypted:	false
SSDEEP:	384:bZpm6HcCgTjL7DXgHPOqmbOprulOQ6McqCJ32Z:b+Uc1HjgvOqmbvG2
MD5:	F912231669D7D331A231EA00E2A031D4
SHA1:	B9A77F06A2C8F4993AE500E4218DB30EE9EBEBE8
SHA-256:	89F9287497A2766678E1C6CF05BB011311D787040FDF3D45AEAA7E1FC72F4758
SHA-512:	1D838E6B19D0ACB739D10533DC668EEE0386B34AFCA45A1F66933F08924655C6E4ED702070EFD24ABD4E99A5352D1ADF871C4D2C42C68C83197C5D997E51AAF4
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/cricket-768.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<..0.IDATx.....U...>.p/(.".."N.).Y..8.f8$...a..f.d.YY..S.X}~Mf.S..V.#..8+....w:...#2.{...{....-.p9.~.....^{m.B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!....& %.E.I$k.z.f.voGmQ.....]_.o.@..J.f..r..dUd...c..W[.f&....JH................].3..}.........lh..z..Jm@......lfB...B:.&....6V..l.D.........d5d.P.,..o.&&....x.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...B.!..B...B.!..B...B.!..B...B.!..B...B.!..BH.d....LW.'.k....&&..B...@.[.n...j....B.!t.H..."..B.!.2...B.!..B....u.Y'~."....?;^FR..V..j{.MeRt.I../[8^:..:..e.!..W...R.5.M.6.......<6/n.=.3....o..H.}...f..S..6?.vKsmQ./3.D...zj}..nd?.R.Vp..o7.."..i.a..7.......ew.}...x.../.l..3..EQ.............P..&...-K.!t...hT.z......Nf;..0..M..e..lu.~LZ9.&s..T...>>......~.9...h..[...l....u.~..U.........g`...........w...-._..p......?L.........X.L..........p.^...>NA.K..{...B....Bj.N8{.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2750
Entropy (8bit):	7.556900878102552
Encrypted:	false
SSDEEP:	48:WkNinNui0JJJ3w+cJyCDgzWrMk/X2JfWJ1DD5+j1y3Mn:d8NcA+OyC2WrZ/mJfGB5+jE8n
MD5:	72CFEF8635D67F28FABBA6945FC4B327
SHA1:	E10FC364FCCD3AFB3B3FB1EC06A9C3B8D0D4C978
SHA-256:	6E42823C0ED27C50A736F8A710834AC04B127AB318F914164527EB19B6DBCD2E
SHA-512:	5B90DE9D6060F9BECF2BB71DB7B28819CA0C1DEC5323B6790775FFA076CEFC6124BBCC5ECD4E8B43639871C07BC79E2529F912C026621B8A2E6E74C3AE82AF76
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33" xmpMM:InstanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:634206E52B206811822A8A008540C61A" stRef:documentID="xmp.did:CBAE199D13206811822AA43317F376F1"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8617), with no line terminators
Category:	dropped
Size (bytes):	8619
Entropy (8bit):	5.325540504806494
Encrypted:	false
SSDEEP:	192:t3QSYJ1RSG810D0wvMw49M80j7TrOZj6tUsuE7d71fSGBwlfmRmdX:O7J1RS56DzR2uHr2j6tUNE7d71aGefH1
MD5:	4B210AA8373C04C554008F491FA32016
SHA1:	A82045AC5B9792D5ED5D600FB531E8450BC658CC
SHA-256:	3A585EAC21CE952E77C3857B16263BE870E133061B468549734E1D0C17C29BA9
SHA-512:	3AB58627D00D2CB2687EFF3D8F52B31CC8FB08C674D8678BAD817A44C0A0A5DE4D352B86DE3D00BEB7B32A1FD598C38A007D4B506ACCDFDCD8B17FBCFEE86A98
Malicious:	false
Reputation:	low
Preview:	{"cms-feed":{"feedTimeStamp":"2024-01-04T18:16:51.818Z","feedVersion":"","feedID":"c03e1ead74491b6875600c8dbfc2303a","docId":"ab531682-75db-473a-90b6-116785339efc","pageProperties":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"config":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/consumer/footer"},"seo":{"_type":"scmsSeo","metaSeotitle":"consumer_footer","twittercard":"summary","metaDescription":"consumer_footer","url":"/consumer_footer","metaRobots":"NOINDEX,NOFOLLOW","metaKeywords":"consumer_footer","breadcrumb":[{"url":"/consumer/footer","text":""}]},"release":"prod"},"components":{"default":{"footer":{"variationID":"/shared/global-nav/86f5dd3a-e323-49bb-b970-6744a7835e3a","docId":"86f5dd3a-e323-49bb-b970-6744a7835e3a","_type":"footer","scmsCompId":"consumerFooter","content":{"copyright":{"_type":"footerLinkFields","label":".2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"d

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8149), with no line terminators
Category:	downloaded
Size (bytes):	8149
Entropy (8bit):	5.051098302887842
Encrypted:	false
SSDEEP:	192:haPH65vbl3W2nDuoGs+8QxVqIgJOd+fUIZSfT/yhpEx3o8Jz/yzSfQcgTHAc57gx:he65TZW2nDuoGs+8QxVqIgJOddTfbyhO
MD5:	4AF02DA0686F796E2E978A09E103745A
SHA1:	9809D59F2BF112C8A9AC850FD29BAF3E9E7F439C
SHA-256:	0A2712042548778F03FCB327FCFE266DE92EF13435722D054A42C58B8BF4DA18
SHA-512:	835FB74AB4E141E5D364C94E2CC4CE9D0AB6FBBA7CB9E0605929ED3C4C0D2C8893FC92874ABAA345CBB8D22FA45DDA34ED6F26B6E170A25224B8B4E0F18EEB44
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/global_all_cms_globalnav/web-components/2.0/attwc-globalnav/attwc-globalnav.esm.js
Preview:	import{p as e,b as t}from"./p-9cb43b19.js";e().then(e=>t([["p-ychivr2j",[[0,"att-wcgn-fn-menu",{customerType:[1,"customer-type"],auth:[4],show:[4],selMainMenuLiLabel:[1032,"sel-main-menu-li-label"],response:[32],subMenuhidden:[32],tabindex:[32],data:[32],isMobile:[32]}]]],["p-rl49cprk",[[0,"attwc-globalnav-badge",{count:[8],currentState:[32]}]]],["p-tuevnqcy",[[0,"ccpawc-globalnav-header",{customerType:[1,"customer-type"],dataPrimaryHeaderContent:[1,"data-primary-header-content"],stateData:[32],lastModifiedDate:[32],activeGNEle:[32]},[[0,"toggleMenu","toggleMenu"]]],[0,"ccpagn-mob-menu",{customerType:[1,"customer-type"],componentName:[1,"component-name"],isMenuOpen:[4,"is-menu-open"],currentState:[32]},[[0,"toggleMenu","toggleMenu"]]],[0,"ccpawc-globalnav-skipnav",{active:[32]}],[0,"ccpagn-hamburger",{customerType:[1,"customer-type"],componentName:[1,"component-name"],menuOpen:[4,"menu-open"]}],[0,"ccpagn-mob-menu-cont",{customerType:[1,"customer-type"],isShow:[4,"is-show"]}]]],["p-xa7

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2182
Entropy (8bit):	6.676890230288302
Encrypted:	false
SSDEEP:	24:51a6GpeBcEYW/fj+yybzaKrfTypnV+ogDwDa0QZKRC8niM/RAejtDAd:jmpeB35fjqr7yqDObQG3RAoMd
MD5:	28B3509A23C91AFBBBACE003DE618C5E
SHA1:	36C88272991C8CC7AE434D1C15039DE3CD763E6E
SHA-256:	A2B42D4FAFEAE7DC0490060AFD9B7FCCED9830E11AFF69D9E0CE616BBC5D26F4
SHA-512:	B7AE16F671083482BE227DDD68C94B003AD1C73578ED99D52DBDB810027A9197F9E24A3B2837DC1999C4446AB1A2572BF0ACD1714CC74267C7C18DAD40B51F7C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...(IDATx...o.g..a.........R..T.C.c.1TI.ZV...f...x....[.?......b...s%[..EEu_q.ur.hh.}.}.1\<X.{...}..N....&..i..@dB.................................................................................................................I..~...j....._.rP....O....S. ...v.=..&Q.z.."......RY.}k6.....^.8..b.pssS.f..Nw.#C.R....n...x......#.gV.V.....F.V.?..v......%..........`.....3C..q...<..N..M..-L.1_..D.a.....F...@...?#c.s.,y..S.!,...)...a.z=?)4 ...a..^....?.B.p...5:......F...@.....B....Z......*.....{..........#.4....@T.F.....szf..BX.........Q..............................................................................R..y..a.......@..v.]G..c.4.........\...g_...!.Z...G...x..M.. ..+X.r5m_..@...0...kY.3Z. ....<>...?...B..O~.B.!.B-..B-.B.!.B-..B-.B.!.B-..B-.B.!.B-.(.e..a.....+.PN^.\.p9...N2.!\|...3.k%.\-.X~.F....... .A.y.l.....`.-..h.q...K....#..h...@../.._.). f.)TA.B.d...T0..B...B.TA.!TA..P...B..@.U

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2605)
Category:	dropped
Size (bytes):	2941
Entropy (8bit):	4.275543995871228
Encrypted:	false
SSDEEP:	48:F/A8wHaQ3rsqb2u+0055/01hoFFJyTPD7AnqymJN+46Wp18wqf//qmLXWpLi/q:Fo8wXrsqb2t0subU0PYqymJN+4f4SvoC
MD5:	40C9E475C505CB6FDB73E8493E2BF1E2
SHA1:	376594C8B55330960794DDDC4BF962EB299F8B40
SHA-256:	62C5B3FE2FD1067048690760FC41AC336C5F4396BF025B6F9C21E4D5F6322A8B
SHA-512:	7A5C8ABCC6BB33D99123440B51B76564AC1875C36735A0B91DFBAC813E40B8DEB306CC338EF2089310111C4E1E8008C6321ECEA0DA4F82609E6F7718C769D082
Malicious:	false
Reputation:	low
Preview:	.<svg width="26" height="24" viewBox="0 0 26 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="26" height="24">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.84668 0H25.065V24H0.84668V0Z" fill="white"/>.</mask>.<g mask="url(#mask0)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.53041 21.4778C7.58359 23.0535 10.1602 24 12.9559 24C16.0149 24 18.8043 22.8742 20.9335 21.0252C20.9589 21.003 20.9461 20.9875 20.9208 21.003C19.9657 21.6352 17.243 23.0158 12.9559 23.0158C9.23044 23.0158 6.87587 22.1918 5.54639 21.456C5.52099 21.4435 5.51141 21.4622 5.53041 21.4778ZM13.7778 22.0912C16.7575 22.0912 20.0323 21.2863 21.9902 19.6917C22.5265 19.258 23.0374 18.6793 23.4944 17.9025C23.7576 17.456 24.0147 16.9247 24.2241 16.4025C24.2337 16.3775 24.2177 16.3648 24.1987 16.393C22.3773 19.0503 17.1034 20.7075 11.658 20.7075C7.80879 20.7075 3.66778 19.4875 2.04616 17.1572C2.03035 17.1352 2.01437 17.1447 2.02396 1

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3530
Entropy (8bit):	7.6385347120631835
Encrypted:	false
SSDEEP:	96:0OOgET49Usd6lVfgMpsBtkoW3Xrx+iTIa+O0YD:cJSCnw6X37x+iTIa+O0w
MD5:	3AC8CB5433FEC2BAE753F5259B98E139
SHA1:	B89F7C379C59BAC91A2FB27A5743C81DFFBA14B4
SHA-256:	9F0A7EE0556319E206DC5D09EC6E4A7B1B2C25596821122EAA24BC32EB74A351
SHA-512:	175DDFB22FF1FCDC6B6670FC8361440C82047D9737DC3A65AFA27924CC7931114A719D8DFE95B099F77E239DA33B5AC03CB61ADFCDBCC350781A828C158B214B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<...lIDATx....u.F...q....E...L.f.RA..,W.....P.@r..V`...T.m.Y..m.!@R..b..;.."%.g..{g..B......xK......b.i...x....v...l_.....o@..5....V....d.d.Mv...mZ._.. ..P.............y....@....$Y...zd..'.>m.aso.S.PS"`.0...@.6O.}...m...&...@.........'..]...K.3.....a({...j.y0Q...:Q...8]......Da..xU......LH.[..........I.\r3..y...I0Q...6...nG=<.m....V..X5..../..y...m......\|..[...I.E0Q.....(.$6....I8.R.ah.(.Ki.....(..d.m.>.x...V...2.LB..7....)..f....g.....9...`%.]..[....9.u.................N4.V..m.-.(..@....2......=.O5..\|....8."l..z..........l.6.w..a.Da#,...b.6O..i....9.....g..MKR>,..Y.....>....b....L...y..:>-.+.7../I..U.9l.}.4?VI@.....\.h[.L......".......8....fU"0....K.P,._CsIO.,..q.s.)y......l.O7U.6....P..l.Y....Y..lz?...}......_....k..H....'...,j.v.r.-....!.~.....S.~9R...}(......'..:....\...ZO............2.....2y..^..D(.$ :...i........N.....U({..Y\..>....\......eD9%.'K...{....'.1..W..>X....

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.881883301831841
Encrypted:	false
SSDEEP:	3:YRM9WREa3sUfFLUoXx2ybL2ysrQaJ9WHeSpMuime9SEHAGF:YsWieFgoXgcLX4QaJHSpBim1GF
MD5:	4219BF2540A7C5AFEC463686FC147985
SHA1:	5B4E295C6439DFF866EF114D79F1062426538F79
SHA-256:	97DBB9BDC9CA34105AEE103AC31FD659B2E32524575AED924800FCA9D5C84FE9
SHA-512:	9E006B77582933CD3B3F08DF738ABF8685DDBBCBFB17F17CB923A067C6BD151E4F9C137BCE5551345D11E9A951748BBFAFB806E1C07612DE3E0E41A0580C0101
Malicious:	false
Reputation:	low
Preview:	{"timestamp":"2024-02-15T00:11:55.168+00:00","status":405,"error":"Method Not Allowed","message":"","path":"/msapi/recognizedstatems/v1/privacy/gpccheck"}

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 392 x 293, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	111925
Entropy (8bit):	7.992160874013442
Encrypted:	true
SSDEEP:	1536:fInsgJvdhK0yPeSEqGj9NlhAFGgBsxF5gRQPGmmiWJ40ucXbXBJNJ9q7ArYl08nl:fLQn+gPPlhAFGcsx8RiAnJDnbvzONv
MD5:	4F2B81F2010710A48A399DF64B21891C
SHA1:	EA9320960A8082AF5CF888806DD43BEA7D807EFD
SHA-256:	A70D39DD4DD2BFF0635A923F28BACB34850C5EBAF54E43CF0AE2E3A3E80D3253
SHA-512:	C62C688749F8C6BB7DE270EB2307F81AAEA0C0655742189AFB793911B4EE4CA384FE6EE903CBD92C58BB73804015A38D8CB726E7AEA4D1123716DADD5602506E
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/tiles/5G-Helmet.png
Preview:	.PNG........IHDR.......%.......u.....pHYs.................sRGB.........gAMA......a.....IDATx.....e.U..?....r...]...m.....`..cB1\|.A...!..B..?!!.TJ.1..l.......L/w............;w$Y.H3..FG.........g4.........."..yS.c..c.w.....b..p.rV,C.\..\|..p....2.Y.W+...n.?..v..J.z..A.,[.\|M.<.j........p...s.:.>.\|......V.y..X...V...`.I[..o)}.k............s...3.D.Wys...}~.v.x.j)hw../.H.z.......p...!...R).....R..0p.W}f.Wl.]..\.....}.......O.2./ECk...n[.;}.....hX...m..6.w5..9..>N.u{,W~K..4.Z.0+...J.,M..v=.).....@..}5......<`.c.r...~........Z?...'C........Z.a(/$..7._..........S.Wl.J.V.......O..Y.o..U7...\........(..6......zd..[.c}...A'..Z....5..=x.w...W..].=......~I....B.~.y.c.".q}../...^..i?..e(,....n..Z..x.7..{..B..Jk--..<?...7......Xs....3`k~.y.g...R.k.......:V9.k...^.........(...s_Wz.w.~...ed....<..\.t..Fb..y1........e(C...#N.&...Y.@h.e(C..P^.H...R.....e(C..P^....\..v.L.Og.._y.W.?...e(Cy~!}iH._..V..%.T..YbN..@n.`.....e(Cy..N....].7.iuV.<....r.LB.M.3....

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x7b37295e", baseline, precision 8, 768x575, components 3
Category:	dropped
Size (bytes):	61724
Entropy (8bit):	7.969304112152524
Encrypted:	false
SSDEEP:	768:AquMXCp0ygEmAth/OUdACn7vmvLk38wcbpr28Bty6yTDwrNpk2YMPK9B//1Rqwak:AquMX0aQ2Cn7ATpg6yHwrN/YM67Rqw3J
MD5:	19611F3C157F861A52F57F42A7E8FEC9
SHA1:	464740F230C17D3489A5398A10C9D2BAF49EFFF2
SHA-256:	3596DFB86BF41D0C15286B78A5208895F5558A72B470FA7BC42947D3692FBF83
SHA-512:	E927BCB8B6A58B0F2787390F80FFCF547FDFEEECB98BC10A603AA04B27D54C795B72A143CD7A5BF18768A5AD83D2F98726F0033674C29B080B54BFDADC9481DC
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:68410624549711E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:68410623549711E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ad334a4-8c79-4d18-b1ff-a29f66d2108f" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x7d434fde", baseline, precision 8, 768x575, components 3
Category:	dropped
Size (bytes):	66838
Entropy (8bit):	7.976817068863258
Encrypted:	false
SSDEEP:	1536:9IKs+NHuV7xqYBRDenzti+myMnJKroROuQAL+tnHtS6wepILPA4IgbezmZ:9IgOXZ3DenzU+nM0k4ML+a65pltzmZ
MD5:	6DEEF71EA5940DC1B9CE05B8957ABF5B
SHA1:	74006B05988C2C937CEE4A32E6D46AEEC9F7FA9A
SHA-256:	D67EEA68C895E5B1DA9A19C7C0DB1CC4F17E90418BB193A4AD823EA3735C2A31
SHA-512:	73CF7EB24C54E3A106BF8DC4A65A99E1443AD0E5D5A068F030F15BB2714F123FC4BAEE060C09C66A327F98FDECED8708FE71AC18EB7AA8AEA22F15CEF0B8104F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:4F75905C549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:139AFCE8549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48bfae3f-0171-4a55-a0a4-7d2281c1bda5" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	71507
Entropy (8bit):	5.537780361878489
Encrypted:	false
SSDEEP:	1536:pFEX6nvmJxE+AU48dEpzy40roeTLjm5hmnOzps+HA0XtqqwRos4ggN:pFEXUIKpR2oeXSvmym+HwqnnggN
MD5:	E20751EF396D7FC206DCD5696F687008
SHA1:	978B042BBA834696B6983B99701ACEE10531A6B0
SHA-256:	87533A9B7FA8DF637781B22B20D0287C339A35AE96488EBC6A8ACDBE3C20C553
SHA-512:	4CA42A5DD1C946D71C3F1D157AE722367FBEF911BFD704D259145586675EA4746D5888856131342E267A7F0384086922B9B20CED9DD874E43F2237141EF75441
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/attmonetization/js/tmt.min.js
Preview:	!function(){"use strict";var a8a=["U0JpbWk=","UGVyZm9ybWFuY2UgRGF0YSBFeHRyYWN0ZWQ=","UFdGRVo=","VFdpTkY=","cGVyZm9ybWFuY2U=","dGltaW5n","Z2V0RW50cmllcw==","dG9KU09O","cXVlcnlTZWxlY3RvckFsbA==","V0N6TGo=","bUlhVWc=","Z2V0TWV0aG9kT2JqZWN0SnNvbg==","UHJ0blc=","Z2V0QWRPYmplY3RIVE1M","Z2V0QWRPYmplY3RSYXdIVE1M","Z2V0QWRSZXNvdXJjZUVudHJpZXM=","c1FvVkg=","bVlFcG8=","QWR2ZXJ0aXNlbWVudCBTYW1wbGVk","c2FtcGxl","aXFHU2E=","c2FtcGxlZA==","b0NnUXQ=","QXVodHk=","R1pVS1g=","ZXZlbnRNZXNzYWdl","SXdkV0Y=","Y29tLm1lZGlhdHJ1c3QubWVkaWFmaWx0ZXI=","dHlwZQ==","Y29kZQ==","ZGF0YXNldA==","dnFrVWk=","ZGlzcGF0Y2hFdmVudA==","YkhGaEE=","TEpBVGg=","RXJyb3IgRGV0ZWN0ZWQ=","cHlkZFI=","c3RhY2s=","ZXJyb3Jz","d2NTRUU=","TGpPSkE=","NXw2fDJ8M3wxfDB8NA==","cWtxRWg=","Q1RhYmM=","UE9TVA==","Qk5VdmM=","c3RyaW5naWZ5","a2V5","c2V0UmVxdWVzdEhlYWRlcg==","Q29udGVudC1UeXBl","YXBwbGljYXRpb24vanNvbg==","aFN2eGI=","M3wxfDJ8MHw0","aW5pdGlhbGl6ZUdQVEFkdmVydGlzZW1lbnRz","aW5pdGlhbGl6ZUdQVEV2ZW50TGlzdGVuZXI=","aW5pdGlhbGl6ZVByb3RlY3Q=","aW5pd

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4424), with no line terminators
Category:	downloaded
Size (bytes):	4424
Entropy (8bit):	5.054038336137695
Encrypted:	false
SSDEEP:	96:Cbyh5wZHnwHHy+f4r4HXHfZaxTEZd/vwvivATWRi49U9YQV9VmJAoWm:CbawtnwHHyU4k3fZMTmoqYTWg39YQV9M
MD5:	AAF4F961581ACDE086520F0973126C91
SHA1:	A65ECD2A32723C5BC90C2ECE54EA71EEFB2C07FB
SHA-256:	0B32FC99E4F1DC62F9E60B627B75C6D52A7E19D8FC9CFF6876DD433F4DA72E59
SHA-512:	1F7E1833724C77B21C8749740A63E8F70788FE1612ECFAEEA68B6CA52396B9583F047947EFC21835CB9D255EBEB8D5DBD68F0A42F3C324171B62481D22C95CE5
Malicious:	false
Reputation:	low
URL:	https://www.att.com/search/_next/static/widget/css/search-widget-newsroom.css
Preview:	:root{font:62.5%}@font-face{font-display:swap;font-family:font-regular;font-style:normal;font-weight:400;src:url(fonts/ATTAleckSans_W_Rg.woff2) format("woff2"),url(fonts/ATTAleckSans_W_Rg.woff) format("woff")}@font-face{font-display:swap;font-family:font-bold;font-style:normal;font-weight:400;src:url(fonts/ATTAleckSans_W_Bd.woff2) format("woff2"),url(fonts/ATTAleckSans_W_Bd.woff) format("woff")}@font-face{font-display:swap;font-family:font-medium;font-style:normal;font-weight:400;src:url(fonts/ATTAleckSans_W_Md.woff2) format("woff2"),url(fonts/ATTAleckSans_W_Md.woff) format("woff")}#wgt-custom-select-search{box-sizing:border-box;color:#1d2329;font-family:font-regular,sans-serif;padding:34px 0;margin:auto;max-width:612px}#wgt-custom-select-search-widget{position:relative}#wgt-custom-select-searchfield-predictionBucket{position:absolute;top:calc(48px + 4px);left:0;z-index:9;background:#fff;border-radius:8px;width:100%}#wgt-custom-select-search .wgt-search-feild{-webkit-appearance:none!im

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x7d434fde", baseline, precision 8, 768x575, components 3
Category:	downloaded
Size (bytes):	66838
Entropy (8bit):	7.976817068863258
Encrypted:	false
SSDEEP:	1536:9IKs+NHuV7xqYBRDenzti+myMnJKroROuQAL+tnHtS6wepILPA4IgbezmZ:9IgOXZ3DenzU+nM0k4ML+a65pltzmZ
MD5:	6DEEF71EA5940DC1B9CE05B8957ABF5B
SHA1:	74006B05988C2C937CEE4A32E6D46AEEC9F7FA9A
SHA-256:	D67EEA68C895E5B1DA9A19C7C0DB1CC4F17E90418BB193A4AD823EA3735C2A31
SHA-512:	73CF7EB24C54E3A106BF8DC4A65A99E1443AD0E5D5A068F030F15BB2714F123FC4BAEE060C09C66A327F98FDECED8708FE71AC18EB7AA8AEA22F15CEF0B8104F
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/768x575_featured_mobility_and_dexterity.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:4F75905C549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:139AFCE8549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48bfae3f-0171-4a55-a0a4-7d2281c1bda5" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8369
Entropy (8bit):	4.302782781327462
Encrypted:	false
SSDEEP:	192:SkqhyM/vAzOjErEmOEZQwEPPa6M17V85k2Yp:GhjBRgQwEPi6IV85k2Yp
MD5:	651E53A3A906F20864AEDC525F526A37
SHA1:	3DB1539E7CD71B3A644AC803AA65A8DE901ED9B9
SHA-256:	6982FBE858E30068DE9301B49438C83838BC7BEB058146703B22B701E6709C7E
SHA-512:	91520D6075B6104FCF79190D8659B036E2643826AD933643EDD07F6695CAA1D72E8A45246FA004BBCEF05283456E2E29C13591048C82207DC434C9A72DF7D275
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/siam//en/halo_c/images/logos/att-logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg viewBox="0 0 61 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 54.1 (76490) - https://sketchapp.com -->. <title>B98BD28D-25EE-43D7-A2B5-7516982DFB80</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 1.73611111e-05 25.025641 1.73611111e-05 25.025641 25 0 25"></polygon>. </defs>. <g id="Web" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Desktop---Sign-In---Active-State" transform="translate(-689.000000, -144.000000)">. <g id="Logo" transform="translate(688.125000, 144.000000)">. <g id="Group-6" transform="translate(0.875000, 0.000000)">. <path d="M40.5990974,17.5087674 C40.4364308,17.5087674 40.3239892,17.3962674 40.3239892,17.2334201 L40.3239892,9.17144097 L37.5838553,9.17144097 C37.4211886,9.17144097 37.3085732,9.05894097 37.308

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x979a096d", baseline, precision 8, 768x575, components 3
Category:	downloaded
Size (bytes):	78202
Entropy (8bit):	7.971472710153634
Encrypted:	false
SSDEEP:	1536:K9puj3HOU8/SgIlPqCOd3b6zVHcjIT48FKP9tUlgHN72mLtR+JAoUO084:K9p++j/DQq5RrVt2yNF8JAoNW
MD5:	51C5BC7E9638ECDFC4A468DF4CAF305A
SHA1:	1295505B2FEE376D6535D92E4255E60EAE10ED43
SHA-256:	A5506C33F43B409C3F34DF67A0CD167F089FF18525FCFFB805749C88D08C3104
SHA-512:	55AFC8A33C7DDD89B86A82A26A063B430A47DDE8D32FB04984765BE0EEF8F9EDD1B10312778850CC15E0AD23CCE3D600A463310CB69FB0C193685B4656A9B54F
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/768x575_featured_hearing_speech.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:139AFCE5549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:139AFCE4549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ad334a4-8c79-4d18-b1ff-a29f66d2108f" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 730 x 350, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27927
Entropy (8bit):	7.9148984917448795
Encrypted:	false
SSDEEP:	384:Uo6iFOLW+LgMcCGvksFfOORHJWRMPjiRM/VPBMOyejAZ2mlrSSnDZozRyg7KUjA/:OiFtMYHZ3PuoVaatmlrnDgPK6AjYG
MD5:	5BDD3B225B5AB74EEB122629D9CA7F85
SHA1:	9F12DE79FF677010EF6DEA65892140765A991FBF
SHA-256:	B19D62CDD31970F444976677551C59B4CEA716342A00610DB00CDFEBC32790A6
SHA-512:	B6B9E90ECC397713861AE1D4C69CE605155D642D76E6885B81523131854926808CC7D05830AF712AB0B453E353E6A460C4C44ECD2C00D281A415038142BAECF7
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/snr/DefaultThumbnails/privacyoptions.png
Preview:	.PNG........IHDR.......^......'.`...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:snr="snr". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-04-13T20:04:24.731Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="0bba050c1a0b76f352b4e45652e62b342b38a9f7". dam:size="26533". tiff:ImageLength="350". tiff:ImageWidth="730". dc:format="image/png". dc:modified="2023-05

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.995864648336088
Encrypted:	false
SSDEEP:	3:u/Li87V3VAnaWLgzhFJn:u/LPVCnaDN/
MD5:	596743FD7A9FE6C53A1746AB2E1F0B77
SHA1:	AC945AF9830DFF2318BF4696856695C7FB2C9141
SHA-256:	20E4ED96F398FF9AF7A57FFC1984814ABAA0D069C770B3C6DA89C6C589564A34
SHA-512:	3D9161DF1BA20EDB27774002B4FBA477984A929E21EC96F55CF4168EE938016C1E3FA740D4CAE48DEF3D405A896E23C1C4643F8F954A357D3B28BF08B4E63319
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISJQlFolMx1z8YIRIFDWp1l1cSBQ1raJpuEgUNT54n-BIFDSEBmtI=?alt=proto
Preview:	CiwKBw1qdZdXGgAKCw1raJpuGgQIAxgBCgsNT54n+BoECAUYAQoHDSEBmtIaAA==

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	133
Entropy (8bit):	5.814922383540832
Encrypted:	false
SSDEEP:	3:yionv//thPlSt2/HxdlWmoVCRHH8k/gQapbLzTvgk/UJIdp:6v/lhPY2cmbn8CgL1rgkAAp
MD5:	5CBABD7F4B13F240387FEF448313CA77
SHA1:	C58218936BDA7908186750CB2B85D09DE0941BCA
SHA-256:	0AEB7E679625A0A1FD277CDA44370787C09AD7271AF7A2918EA616D2ECA20C1A
SHA-512:	F1A6B29019B5968BB7FFB875EFCE0682D42DC46B931069E053031CDEFB0906D6A94915745F1D7BA90C3E955BA0CD16FC3AA0DCF8BD69E1960470C2FCAB175BC4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............xl0...LIDAT8.cd...?....-....,.......?A....."...E.q.....#.h.L....iIA. "....BA4.L..........=....IEND.B`.

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	2117
Entropy (8bit):	5.69335800606914
Encrypted:	false
SSDEEP:	48:NOni8FlPuQ9io1V3zV3NVHPIp5vrvQgFFTaF9IG99b:yiKuQ9iERTNPIjvrvQgOB
MD5:	D4FB08B483C07A6E80773CE97F9935BD
SHA1:	60D7B3D23999A613F9B95A4C666189033FEBB7D9
SHA-256:	789E49E50D6E64A284414626E8DABFE23C9F84DEEEDDC88D2C21FF08F0555040
SHA-512:	F88D3E4DDD2983822146BC834E664AAA24B29E8183B20F9A978AFB17238CFC4CA1E06BE4BACBC0E463747142EDBE600882911ABF53F4A4A09C858811397B5E5A
Malicious:	false
Reputation:	low
URL:	https://6100125.fls.doubleclick.net/activityi;dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>.var url = "about.att.com%2Fsites%2Faccessibility";.var DNT = "0";.if (DNT==="0"&&(url.indexOf("%2Fsecurity%2Fsecure-family-app%2F") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Fdeeplink%3Fselectedban%3D365027028481%26selectedctn%3D8305637768%26soc%3DFPROPP%26level%3DFTR") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Faddondeeplink%2Fconfirm") > -1)) {...new Image().src = 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';.}..</script><script>.var url = "about.att.com%2Fsites%2Faccessibility";.var productType = "";..if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1..\|\| url.indexOf("%2Finternet%2F") > -1..\|\| url.indexOf("%2Finternet%2Ffiber%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") > -1..\|\| url.indexOf("buy%2Fb

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.900842292341867
Encrypted:	false
SSDEEP:	3:YRM9WREa3sXxBW+fx2ybL2ysrQaJ9WHeSpMuime9SEHAGF:YsWiPKcLX4QaJHSpBim1GF
MD5:	C91035294567EE90A933473B1AAF2012
SHA1:	90CE5AE507058A8E54E6EA2F99EBCCCDC56D7DD3
SHA-256:	517E6F299AC9CA8C85E458E0536479975E41360B5E5C2B937D60B7FB53F28EDC
SHA-512:	AB01A1FD60AF3D4E73069D7C38A75D8FA61A0DA3D9A381FEFF57ACB3654139E38FC3BB10C69270D949E3DAF2DC80742139F89840BAD0C9D7D15B644568935B94
Malicious:	false
Reputation:	low
Preview:	{"timestamp":"2024-02-15T00:12:06.993+00:00","status":405,"error":"Method Not Allowed","message":"","path":"/msapi/recognizedstatems/v1/privacy/gpccheck"}

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8528), with no line terminators
Category:	downloaded
Size (bytes):	8529
Entropy (8bit):	5.043356698765225
Encrypted:	false
SSDEEP:	96:idUQAVorVMHFKLfu7iDkuKfd8Ku4KuHvnGBKuZtLseNuAcKkPXbWKF/6fBuBQ:iKQMo5MlKLf3kzf6K5KykKCLNpSv6B/
MD5:	009A519B6E619DC1A634D8DEB608FD76
SHA1:	89C52EDDCC3D2FF2AB73C7737D71F93D8B0267A8
SHA-256:	B247BA91F57062BE62F753590F2F222310F82C14C99CC3608E968021A90079C8
SHA-512:	1B5BE9B3A222FAED6B12C4C7C73EEA5DB0D03A201100D47963A81FB68901D1AE6B794DD893BCC348EA178248672B8CC73026120F9B2A63916B0840826368E66B
Malicious:	false
Reputation:	low
URL:	https://www.att.com/msapi/idp-content-orchestration/v1/scms/shared/global-nav/consumer/header
Preview:	{"cms-feed":{"feedTimeStamp":"2024-01-30T15:03:28.947Z","feedVersion":"","feedID":"88c8dbffb28b042bb88d41de42a5137b","docId":"90f23f4b-f805-4d0f-98c6-6c8a4a3d555c","pageProperties":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"config":{"_type":"scmsConfig","pagePath":"/consumer/header","enablePersonalization":false},"seo":{"metaSeotitle":"Consumer Header","twittercard":"summary","metaDescription":"Consumer Header","url":"/consumer_header","metaRobots":"INDEX,FOLLOW","metaKeywords":"Consumer Header","_type":"scmsSeo","breadcrumb":[{"url":"/consumer/header","text":""}]},"release":"prod"},"components":{"default":{"header":{"variationID":"/shared/global-nav/54775d0a-3576-4f58-bf3d-8ef7fa14c2d5","docId":"54775d0a-3576-4f58-bf3d-8ef7fa14c2d5","_type":"consumerHeader","scmsCompId":"header","content":{"headerBGImage":{"showBGImage":true,"startDate":"10/01/2021","imgUrl":"/idpassets/sales/uf/gnav-image/Sparkles_1600x62.svg","endDate":"02/15/2022"},"Auth":{"Profile":{"Accoun

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	96860
Entropy (8bit):	5.852761023235275
Encrypted:	false
SSDEEP:	1536:x4AcToYq2IzqYRQV84AcToYq2IzqYRQVJ3Z6NSUVAe+sC5xYe+cYUExY:x3QltIzqYWu3QltIzqYWfZ4+H+chZ
MD5:	24E6B02D79607CB9D08CE4AB40C81627
SHA1:	575560AC4ECA273BC0A4C3F02F082A32026144DE
SHA-256:	A966E94076632CAF490C78D547220AE4D948C525559E9B2FA4AFC2DD95D76E3B
SHA-512:	1BE09AC11E6BABCDB15B2576C4A13364F200E91C28CA5E795FF18E87965CAA6AA18C16ADA5EAF5080EA5CECB025E302F371D1B296356153ABB0F1A6133C770EC
Malicious:	false
Reputation:	low
Preview:	{"/22674080263/att_web//services//account_overview//AcctMgmt_Global":["html",0,null,null,0,250,970,0,0,null,null,1,1,[["ID=d0c691ad42813de7:T=1707955925:RT=1707955925:S=ALNI_MZ08gTOpOfrWL8o7jZWAdnbtW8L9A",1741651925,"/","att.com",1],["UID=00000dc9ff6cd03e:T=1707955925:RT=1707955925:S=ALNI_MZScLANX8OuaorkRrkDUr4sSZaHQA",1741651925,"/","att.com",2]],[138392143702],[5976945797],[5155550293],[3008605080],null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGsnjB7K8oCRB-QG2RFE1sYZGou6UX8Hjbn5L22tT9Kr_7tKSB4R_UP4VgnXqQTf5kAypFlmjP5YJuslCwqkN9A","CLLA69GHrIQDFSuKdwEd57sKIw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOW5dpUo8osT0ZL_leT7gfFolR3OxldG8-rY-yPcbp-WCgpuwiZelaIPVJGWCfZezMb4Tw5Uqutft5q94LPbzekcfPVrMJbVVwmE5EGKSXwgbEBdVA83w",null,null,1,null,null,null,[["ID=f338a020e103950f:T=1707955925:RT=1707955925:S=AA-AfjbhiaxVZ7eU4e28-TdJYMvB",1723507925,"/","att.com"]],[]]}.<!doctype ht

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8528), with no line terminators
Category:	dropped
Size (bytes):	8529
Entropy (8bit):	5.043356698765225
Encrypted:	false
SSDEEP:	96:idUQAVorVMHFKLfu7iDkuKfd8Ku4KuHvnGBKuZtLseNuAcKkPXbWKF/6fBuBQ:iKQMo5MlKLf3kzf6K5KykKCLNpSv6B/
MD5:	009A519B6E619DC1A634D8DEB608FD76
SHA1:	89C52EDDCC3D2FF2AB73C7737D71F93D8B0267A8
SHA-256:	B247BA91F57062BE62F753590F2F222310F82C14C99CC3608E968021A90079C8
SHA-512:	1B5BE9B3A222FAED6B12C4C7C73EEA5DB0D03A201100D47963A81FB68901D1AE6B794DD893BCC348EA178248672B8CC73026120F9B2A63916B0840826368E66B
Malicious:	false
Reputation:	low
Preview:	{"cms-feed":{"feedTimeStamp":"2024-01-30T15:03:28.947Z","feedVersion":"","feedID":"88c8dbffb28b042bb88d41de42a5137b","docId":"90f23f4b-f805-4d0f-98c6-6c8a4a3d555c","pageProperties":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"config":{"_type":"scmsConfig","pagePath":"/consumer/header","enablePersonalization":false},"seo":{"metaSeotitle":"Consumer Header","twittercard":"summary","metaDescription":"Consumer Header","url":"/consumer_header","metaRobots":"INDEX,FOLLOW","metaKeywords":"Consumer Header","_type":"scmsSeo","breadcrumb":[{"url":"/consumer/header","text":""}]},"release":"prod"},"components":{"default":{"header":{"variationID":"/shared/global-nav/54775d0a-3576-4f58-bf3d-8ef7fa14c2d5","docId":"54775d0a-3576-4f58-bf3d-8ef7fa14c2d5","_type":"consumerHeader","scmsCompId":"header","content":{"headerBGImage":{"showBGImage":true,"startDate":"10/01/2021","imgUrl":"/idpassets/sales/uf/gnav-image/Sparkles_1600x62.svg","endDate":"02/15/2022"},"Auth":{"Profile":{"Accoun

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (19870), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	133555
Entropy (8bit):	5.203591185023161
Encrypted:	false
SSDEEP:	1536:c8AYxbgM+hb4Pu2kTQEmRfg5t/Tt/JlVFhrFUVErPEPNQp:c8fgthb4Pu2kTQE0fC/5/HVFhrFdrPEW
MD5:	94127C760EE8F383DF554682BD0A5FC4
SHA1:	72E3B154720C3C57F2614B1341F62037BA770164
SHA-256:	B43829A355C3822BBB886119D700082DD902CE5695FE694C65EDB90423BAD3FC
SHA-512:	0CF03346409BBC63D63A202760FBD7D0C4793A63725D1A81A7A625FDAC721B10474E6B69BCF275938E2D79E6399232D22CA20DC4606426F62333B494FF7A876A
Malicious:	false
Reputation:	low
URL:	https://about.att.com/sites/accessibility
Preview:	..<!DOCTYPE html>.. [if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7"> <![endif]-->.. [if IE 7]> <html class="no-js lt-ie9 lt-ie8"> <![endif]-->.. [if IE 8]> <html class="no-js lt-ie9"> <![endif]-->.. [if gt IE 8]> >..<html lang="en-US" class="no-js">....<head>.. ..<meta charset="utf-8"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>..<meta name="viewport" content="width=device-width"/>..<meta name="robots" content="INDEX, FOLLOW"/>...... <link rel="stylesheet" href="/etc.clientlibs/snr/components/page/clientlibs-base.min.css" type="text/css">.<script defer src="/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js"></script>.<script defer src="/etc.clientlibs/snr/components/page/clientlibs-base.min.js"></script>.......... <meta name="SBC-SEARCH-CATEGORY" content="All"/>...<meta name="SBC-SEARCH-TAGS_LIST"/> .. <meta name="SBC-SEARCH-PUBLISHDATE" content="2019-04-04T08:33:00.000-07:00"/>....

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	86927
Entropy (8bit):	5.289226719276158
Encrypted:	false
SSDEEP:	1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69
MD5:	A09E13EE94D51C524B7E2A728C7D4039
SHA1:	0DC32DB4AA9C5F03F3B38C47D883DBD4FED13AAE
SHA-256:	160A426FF2894252CD7CEBBDD6D6B7DA8FCD319C65B70468F10B6690C45D02EF
SHA-512:	F8DA8F95B6ED33542A88AF19028E18AE3D9CE25350A06BFC3FBF433ED2B38FEFA5E639CDDFDAC703FC6CAA7F3313D974B92A3168276B3A016CEB28F27DB0714A
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/vendor/jquery.min.js
Preview:	/! jQuery v3.3.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(e,t){"use strict";var n=[],r=e.document,i=Object.getPrototypeOf,o=n.slice,a=n.concat,s=n.push,u=n.indexOf,l={},c=l.toString,f=l.hasOwnProperty,p=f.toString,d=p.call(Object),h={},g=function e(t){return"function"==typeof t&&"number"!=typeof t.nodeType},y=function e(t){return null!=t&&t===t.window},v={type:!0,src:!0,noModule:!0};function m(e,t,n){var i,o=(t=t\|\|r).createElement("script");if(o.text=e,n)for(i in v)n[i]&&(o[i]=n[i]);t.head.appendChild(o).parentNode.removeChild(o)}function x(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?l[c.call(e)]\|\|"object":typeof e}var b="3.3.1",w=function(e,t){return new w.fn.init(e,t)},

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (610)
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	5.689961478107825
Encrypted:	false
SSDEEP:	48:NOni+wnFlPuQ9i+wT1V3zV3NVHPIp5vNkvQV9w5FTaUG9KGwu:yi+6uQ9i+0RTNPIjv2vQTDd
MD5:	16E1D61B3578A8430E59B32A7B1A5F15
SHA1:	3DB45AE804120A3E86BBAE802BCACC8CA1A297B2
SHA-256:	DE07563C71BC6AFA48FCAE7B83D19CD74A0332A9B8101C2EDE2E3B73B2ED3734
SHA-512:	FF1AAC9921A573925FFB7EB84D2735E0D52D04A9778F6413C486DA0B0C7C7631119914472045CF31C87A30CCBA889EA8819A7EADF7731CAD9D508505179876EB
Malicious:	false
Reputation:	low
URL:	https://6100125.fls.doubleclick.net/activityi;dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>.var url = "www.att.com%2Facctmgmt%2Fregistration";.var DNT = "0";.if (DNT==="0"&&(url.indexOf("%2Fsecurity%2Fsecure-family-app%2F") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Fdeeplink%3Fselectedban%3D365027028481%26selectedctn%3D8305637768%26soc%3DFPROPP%26level%3DFTR") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Faddondeeplink%2Fconfirm") > -1)) {...new Image().src = 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';.}..</script><script>.var url = "www.att.com%2Facctmgmt%2Fregistration";.var productType = "";..if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1..\|\| url.indexOf("%2Finternet%2F") > -1..\|\| url.indexOf("%2Finternet%2Ffiber%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") > -1..\|\| url.indexOf("buy%2Fb

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x7b37295e", baseline, precision 8, 768x575, components 3
Category:	downloaded
Size (bytes):	61724
Entropy (8bit):	7.969304112152524
Encrypted:	false
SSDEEP:	768:AquMXCp0ygEmAth/OUdACn7vmvLk38wcbpr28Bty6yTDwrNpk2YMPK9B//1Rqwak:AquMX0aQ2Cn7ATpg6yHwrN/YM67Rqw3J
MD5:	19611F3C157F861A52F57F42A7E8FEC9
SHA1:	464740F230C17D3489A5398A10C9D2BAF49EFFF2
SHA-256:	3596DFB86BF41D0C15286B78A5208895F5558A72B470FA7BC42947D3692FBF83
SHA-512:	E927BCB8B6A58B0F2787390F80FFCF547FDFEEECB98BC10A603AA04B27D54C795B72A143CD7A5BF18768A5AD83D2F98726F0033674C29B080B54BFDADC9481DC
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/768x575_featured_vision.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:68410624549711E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:68410623549711E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ad334a4-8c79-4d18-b1ff-a29f66d2108f" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1367
Entropy (8bit):	7.758083478784373
Encrypted:	false
SSDEEP:	24:nu/1CUwLpBR37jHJN95hpt8zEhN3N9DhG1xrbjdZheWEiOS62SpOqC7:u/oUqdXpr5ftg69Dg1xTdZn8qD7
MD5:	4DD46C07067407811B9BF3F9BDD29540
SHA1:	45870C05F7EBD395CFF68AA8BA1A9926DF2011AB
SHA-256:	C807F3760A56EBB70972C157885F5F5C935F5F9958F7CEF2B74D2613D519FB1C
SHA-512:	BEF939ADEDFB427A651B3E52CA1CAF8423B05B4E0C2307EB6FFBA6566D22F288293215D84D8D401D43D6E905AEA1182F1E7D85F46D9DF19B0F9B5AFB4EAC1C9D
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/icons/shop_online_icon_2021.png
Preview:	.PNG........IHDR...d...d.....p.T....IDATx...c.,....Z.m.m.m.m.m.[......>...O2.o.MZ5.T.J.R.T.J.R....Q..T....2.......g.9.....H.....1...]X.Q. }.........1..D..s3.."..Azg....d<.c.......x..Y..h$../.1/.r(W.<.....u.,.\...":..... #3;.s0..,?.]p.Y.hf.6...%.Oc.....8.Ky..J.....Y..L.c...U.J...-ke...x.s....6..~ .....$8...LO0..X... .....DV.7.l_.A.....za.....C...9.\|J0;Y/.@p.Y..H..P.A.$X...n ....$x..?..%8...> X...v$....Npi....X.?-... Z...`q.....O.......U...+.i.........2=..d=.=..dU......4...4....g...W....$....~(....`....u..26Y...c,Y.An.."..........L.J}A.;+...M..5.Nr....x...A.=.i,.!.B.4...&!W.B.....o..N 8.Z.B...]K.\|@-T.W......@0)eo6._h".=H..e.@...m..\O.{.`cr...?.@Y....c.....`.......%..v5...-....5.S...&&.H.ekA.o....O..e....(Lg..H.z.`."...ej"...Da..!.cS..!x............p.Fp.e..~.......e.>..5.;......N...N.3E.#.e)l;..T...h..MG.;.....n/..(j..lK..p..H."...>.3....^...].S....Ciz.`U.T=_.,Di:..l....?.HiZ....O$..R..@.I(Bs.`)J.C.;0RN..t....7R..%..N:(es...3..6u...~ ..T...`_

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51630)
Category:	downloaded
Size (bytes):	125852
Entropy (8bit):	5.452245937122134
Encrypted:	false
SSDEEP:	3072:RN5vc+AMrR9Pcrl0xYuE0Dte4Vs9aAj8lM:RNpcS9crHuE0DVVs9aAj8lM
MD5:	C0D4192EBDC44CC31CF755E8F582F821
SHA1:	944A273A714CBC2155724E78F340B26BE6F2D215
SHA-256:	43DD574BA0B968B07BF2D8BAF3EF531339D1D179558301666909A332940E7CFC
SHA-512:	A5131DE74A57C296D6F1CE3D69E40E540F89506AD4681D8B46D343D81122C62EF25DE5E3D8DD4870317438A09ABD52DBF4E0D63FD7DD8EF267ADF1E0CA0FA0AA
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/128900881029137?v=2.9.138&r=stable&domain=www.att.com
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 768x575, components 3
Category:	dropped
Size (bytes):	65779
Entropy (8bit):	7.980624309518107
Encrypted:	false
SSDEEP:	1536:TwccT4JUXiCim7fDmks61JH2kKyxBWYF1N1jQ:TikqSw7re61JWZeWEQ
MD5:	2FFF6F35FAFA4817418AC0075D8A56A4
SHA1:	80D1FA10866BDA1E5A5335F670B969830BC51F6E
SHA-256:	D9B0B2BF4BB9EAAA39E37A6CB3606BF27A521436466490A44209F55B19B9DF24
SHA-512:	B200AAE60A0BCE1713823D7BC1A33A063EEF63D46A49CFF02DBD6B866D5C857033E698BB9E2D018046E3A3F9630DFA2BE56109B3B80C50E69C0D1AA4601714BE
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,..............................................................................................................................................?..........................................................1~..<..W,.,.=PJzh.$...f(..,.jHC..Y..L.."e..u...4....w,m`..!...a.......@7.....wr.<...s.D.c.#2~....o\|Tq..2.MQi3.2:..>R.(......;.S.....}"42%..?Q..h.:.....L}...\|.G.7].B.>H..%...SlDlG.7W..c#.1..2Rg,.f.s.^....@....ou..F<...`.?Y[Iw_....sQ9b....=.s1.Yb.x....[..b8.R...dqE.t.<.......9#.Z...b.F.h,7..\EDy.k.9YWOmY.i..;...6...e...r..#.o.......H.z#,\.A..Y.i...:..6B2..Mkk.V>...:..s..U.U..h.B.kQ.$.V.uH.w:H2>Z...rD.Y%J.b.z.RB..I$..qG..Sg.d}#Q..vg.....M....:..z.....f......F..H.Tt.#.<.......y.RI..k.+....Ah.,.....(..].2..p...R}d.5u5y.}o...=Ft..a.8.d.X.!.....t...KU .d..{.....Tf..H7G.L.'...gp..U.k.Z...1H...e{y9_.f.a).9.\.'...r.r.E..JU..d=.s....].EU...b".....c...s.........K..../1;.]......+c...O......dp..%zby.r.z9.%V1..h..4...E...T.t...5..Q...J.rw9.,.V.SOujap.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11126)
Category:	downloaded
Size (bytes):	11267
Entropy (8bit):	5.262731024296997
Encrypted:	false
SSDEEP:	192:JrprDNvD66fPP/+I6OP1fQP0OIr96DB6MHXcwr1Rd:JrprxG6fPP3P1fQMOIsDsMM4
MD5:	00C98A0D1144F474BFA702DC7603347F
SHA1:	B0A096D4891CB98EB2DDA88A626C1423E9BBDBF2
SHA-256:	106FCD8D723EDA7D92A26893A439CCEF998E5FC68AD228253607143D801E8CD8
SHA-512:	DDF32C235BED5367BFB55C593914847AE3215E74FD072F34C6599796C3A4BBB84DC19487263C1C381A66CBEBAEF9FC96C0608B90CBDD55B1E47A85DD03306FFB
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/inc/jquery-migrate.min.js
Preview:	/! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],i=1;i<=3;i++){if(+o[i]<+n[i])return 1;if(+n[i]<+o[i])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.3.2",n.console&&n.console.log&&(s&&e("3.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.0.0+ REQUIRED"),s.migrateWarnings&&n.console.log("JQMIGRATE: Migrate plugin loaded multiple times"),n.console.log("JQMIGRATE: Migrate is installed"+(s.migrateMute?"":" with logging active")+", version "+s.migrateVersion));var r={};function u(e){var t=n.console;s.migrateDeduplicateWarnings&&r[e]\|\|(r[e]=!0

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	5.2565209845255625
Encrypted:	false
SSDEEP:	24:NfnIOHorfObS4Ow9ZAyQ5SMLDIY9M57khRWZp7mnh:ZIOHGPAZAD5SMPI2g7khwDmnh
MD5:	AE63C9F8830B788C14103002BA1909ED
SHA1:	3612AEDC3359923CD1F8CF5E684DCD63DAF90034
SHA-256:	29293537FFF88AC91B77966A0A9E372CB3B92C451DEC9E9021CE388C71558B3C
SHA-512:	83EA9C4603A54BC544B33CA76633FC69E0A424B5CC773456A5E971C980A805620AD0A37D53EF1DB1A40C1E59B004BD552CF9AADD4738A88B0523CC38F4F8611F
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/eComm_Universal_Bing.js
Preview:	/* Marketing Rules version: 2655 */.//Rule: eComm_Universal_Bing.var scriptUrl = (window.location.hostname.indexOf('finalstage.att.com') > -1) ? "https://finalstage.att.com/scripts/adobe/prod/bing.js" : "https://www.att.com/scripts/adobe/prod/mktg-rules/global/bing.js";.(function(w, d, t, r, u) {..var f, n, i;..w[u] = w[u] \|\| [], f = function() {...var o = {....ti: "18003891",....disableAutoPageView: true...};...o.q = w[u], w[u] = new UET(o), w[u].push("pageLoad")..}, n = d.createElement(t), n.src = r, n.async = 1, n.onload = n.onreadystatechange = function() {...var s = this.readyState;...s && s !== "loaded" && s !== "complete" \|\| (f(), n.onload = n.onreadystatechange = null)..}, i = d.getElementsByTagName(t)[0], i.parentNode.insertBefore(n, i).})(window, document, "script", scriptUrl, "uetq");.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2117)
Category:	downloaded
Size (bytes):	246547
Entropy (8bit):	5.6533119118439465
Encrypted:	false
SSDEEP:	6144:gdMtMIsS6URzc0+WSYWGMFZNWXqfKxHoD2xXLNej:XMpyLSYWpv1
MD5:	684BCE003A819086920BC0716C9F43E4
SHA1:	FF5F7836E47FAE52374C83BE3A40028BF7B65751
SHA-256:	2E2AB7ADF54AFBBC23ED2C7574CCFC48143DA9069DEA5720DC82611CC1456E9A
SHA-512:	2842E66E89BEDCA30F6337634114E2270775113498E8C5E29475D4B66A4E4E01E5D1AC2123C4EBA8A880C5CED28CDBC5F7CF9CDA6A38A1FB776C8F4B8E8D73F3
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><script type="text/javascript" data-dtconfig="rid=RID_1691811223\|rpid=1907169233\|domain=att.com\|reportUrl=//dynatrace.att.com/bf/fc09f351-c4e7-46dc-afb8-cd98de60285e\|app=a75ea7b2824f5aea\|dsss=1\|ssc=1\|auto=1\|cors=1\|featureHash=ICA27NVfghjoqrtux\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=910bdnkt\|mel=100000\|md=mdcc1=crxVisitor,mdcc3=caccessDomain,mdcc4=ccAuthNState,mdcc5=cidse_stack,mdcc6=cSI,mdcc7=cTSN,mdcc8=cidpcloud_stacks,mdcc9=bdT_.version,mdcc11=cpartner,mdcc12=bnavigator.userAgent\|iub=^bs/msapi^bs/alertms^bs/v1^bs/notifications^bs/globalnotifications^c att^bs.inq^bs.com^bs/chatskins^bs/launch/^c ^bs/scripts^bs/touchcommerce^bs/inqChat^bs.html\|ssv=4\|lastModification=1707439561086\|tp=500,50,0,1\|agentUri=/acctmgmt/ruxitagentjs_ICA27NVfghjoqrtux_102792311300312

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	5.3044761388433
Encrypted:	false
SSDEEP:	3:fkreWdsRphgbqdtdkUKdLLMHLWKwhGDnGQLM/QLBoNgbqdtdkUB:fIdsRLgGdtGFLMHTfnGQLM/Q1oNgGdtl
MD5:	B89378EA93E4CAD3891C7C586341F460
SHA1:	F312F57C8FCFD2D8D443673C115DA5D18D1FB104
SHA-256:	4617B7071EFC13C929BB3D9BD85B582A9EBE19A451989001DF3EC0BFE010C41B
SHA-512:	D5C36EE77AD613026AB11EE398C52AD8B3D9336B08071A14A34749DBB26BFF3849EF651040A2DC78AEAB36FAFC5976498A1AFB25473515D44EF75B0E9FDA03A2
Malicious:	false
Reputation:	low
URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico
Preview:	failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico: no link named "favicon.ico" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	38750
Entropy (8bit):	5.088573789502073
Encrypted:	false
SSDEEP:	384:DAjlAjLAjPAjJPGCU2hBObJzzjv6tyO8+LzzV0LHN6WXL:DoloLoPo19Lh09znvazN6H7
MD5:	1993C65A123D326CF5B2F065BEC21AC5
SHA1:	1486839238C27E988B7F14374122160183580FB2
SHA-256:	E4D111DE66559EA6F260E785F565BF98FAF833BDC7DE06599F5E5937CF1254EA
SHA-512:	94076A25C2343D64EEE6F4B09CD51911939E01512EF58DF92AF60C9DC2D5A35DC64383CF78418382F3B40763CCF2314A9108A530F12CED6429EBFB610FD6F16B
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/custom/analytics.js
Preview:	$( document ).ready(function() {...var dmfExistOnReady = setInterval(() => {....if (window.DataMappingInterface) {.....clearInterval(dmfExistOnReady);.. if(window.DataMappingInterface.autopageload == undefined \|\| window.DataMappingInterface.autopageload) {..... DataMappingInterface.disableAutoPageLoad();.....}... }...}, 50);..........var friendlyPageName = $('title').text() + " Pg";.....//var pageCategory = $('meta[name=SBC-SEARCH-CATEGORY]').attr('content');.....var pageCategory = $('meta[name=SBC-SEARCH-TAGS_LIST]').attr('content');.....var pageTitle = $('title').text();.....var publishDate = $('meta[name=SBC-SEARCH-PUBLISHDATE]').attr('content');.....var formattedPublishDate = "";.....var contentFriendlyNamesList = $(".contentFriendlyName");.....var marqueeArr = [];.....var marqueeCounter = 0;.....var currentComponentOrder = 0;.....var skipCounter = 0;.....var contentFriendlyName = "";.......$(".marquee__slides").each(function(){marqueeArr.push($(this).find(".banner"

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2352)
Category:	downloaded
Size (bytes):	4150
Entropy (8bit):	5.404146041352465
Encrypted:	false
SSDEEP:	96:BdvzQY9V6QVWlP/Or3zeP9WTBxj6kDxx1vbysf39O84UakyeUZlHjv:BdvMtlpWXeFWTflDBeslB4UakCjHjv
MD5:	2303851096D153BF0A3879E053030AE3
SHA1:	963CD49282A1F7929D65922C7C263DD68E562501
SHA-256:	2E4168AF48914F54BE8CE165155B55DF8E863086F38374A74E0EA76E7A6B4C86
SHA-512:	460F911458FE5A7E9ADC44BB8CCA99EFB1807EF84B727E198D07E24072DFCC1A5381485C7E509CB1E6A35FE95A7641C8F9840E064DBA1A2CCB16E4A85EA9BEEF
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function h(a){return-1===a.toString().indexOf("`")}const k=h(a=>a``)\|\|h(a=>a`\0`)\|\|h(a=>a`\n`)\|\|h(a=>a`\u0000`),l=g``&&g`\0`&&g`\n`&&g`\u0000`;var m;var p=class{constructor(a){if(n!==n)throw Error("TrustedResourceUrl is not meant to be built directly");this.l=a}toString(){return this.l+""}},n={},q=function(a){if(void 0===m){var d=null;var b=e.trustedTypes;if(b&&b.createPolicy)try{d=b.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}m=d}a=(d=m)?d.createScriptURL(a):a;return new p(a)};var t=class{constructor(a){if(r!==r)throw Error("SafeUrl is not meant to be built directly");this.j=a}toString(){return this.j.toString()}},r={};new t("about:invalid#zClosurez");new t("about:blank")

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64193)
Category:	downloaded
Size (bytes):	206903
Entropy (8bit):	5.450121649576107
Encrypted:	false
SSDEEP:	3072:YKrFqWNNFd+6vOU0bteuvQ+AMPpgArl0xYu5G5n+:YKRjNrrn0bvQQGArHu5G5n+
MD5:	7B4CF01B840F2C159888151DA8CA473C
SHA1:	14C2CFBF1D1A14B86277A83C393C5274D1DEECEA
SHA-256:	0763CD1A747B69EA9663B46A0DC1A098B7ED482E8C947B69C0BE8EB9DA576A8F
SHA-512:	FAF164DD338B57C3FEA63CF2498E40396169C53697BEBA2C4BC3B61B84F4D9ED21DCC3D638557FF245B400ABDE2808712C51E6AD6F919FF8179025256D9D6729
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/facebook.js
Preview:	/* Marketing Rules version: 3220 /.//hn4276 - 11/15/23 update [SPTANALYTI-25071].//Source: https://connect.facebook.net/en_US/fbevents.js.//facebook.js../. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLD

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33780)
Category:	downloaded
Size (bytes):	456337
Entropy (8bit):	5.542033043002749
Encrypted:	false
SSDEEP:	6144:z1RDVaPkP8KOmYOLhucxEZL9CNI06/uNsfKEz5om82HiBlPDt:RRUPkP8SLhucG7iTDt
MD5:	911978A40A65E821AF59D37CF47670F1
SHA1:	E66A06224F386B64C449B9DFD9DA0E95F013152B
SHA-256:	674812E733325FE1D9E82A74BDC5816C138A6618DAC8C521F219332181720687
SHA-512:	E9B12208B0A12F1621936439C2A8AC1CCA050CCB457AD2292167DBF68E5398C7516F84247469FD41E9769ACFC86AA91E0240D741BBC1BC9A25639C01E40B395D
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/static/js/26.6fa07cfe.chunk.js
Preview:	webpackJsonp([26],{1242:function(t,e,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0});var r=i(7023);e.default=r.default},1278:function(t,e,i){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.htmlparser2=e.convertNodeToElement=e.processNodes=void 0;var r=i(1305);Object.defineProperty(e,"processNodes",{enumerable:!0,get:function(){return a(r).default}});var s=i(1325);Object.defineProperty(e,"convertNodeToElement",{enumerable:!0,get:function(){return a(s).default}});var n=i(1282);Object.defineProperty(e,"htmlparser2",{enumerable:!0,get:function(){return a(n).default}});var o=a(i(1456));function a(t){return t&&t.__esModule?t:{default:t}}e.default=o.default},1282:function(t,e,i){var r=i(373),s=i(1326);function n(e,i){return delete t.exports[e],t.exports[e]=i,i}t.exports={Parser:r,Tokenizer:i(384),ElementType:i(1289),DomHandler:s,get FeedHandler(){return n("FeedHandler",i(1424))},get Stream(){return n("Stream",i(1438))},get WritableStream(){return n("WritableSt

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 10, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	326
Entropy (8bit):	7.09309447017958
Encrypted:	false
SSDEEP:	6:6v/lhPfS9C4lT3vQ9bRssoxM+DZxKICzQhc+y966M2f97c2tVp:6v/7nS9NlrQ9bRMjQQhm66/7c29
MD5:	A6431734387EFA03272B2FACFC41D9CB
SHA1:	5295FB0F4A940B0755B9DA8099C3F22E7636635B
SHA-256:	27457D7E87AA321864FFC366D709814FDC34F780BDD75380146160B3EA330E4C
SHA-512:	00D125C1A052697B5A1F116BF68A49E2A7C932FEA114A6EEFD059DDD712CDA7F73209164563B03A4631C1CABA0C62DA85D067FCE281F49063DBB0FF73276FB3D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.......gAMA......a.....IDAT(....j.0..-.>K.$k6..%.B.-..R..P...)....-..:f...I.!.w!.L.......$U..D)5.l....,../..R...`9.+:...Ns....p...k ....Q.5.~j.c...{..].......Yk?d.....8g.K}Dx'x.r..s .4Mw.)Y.p.............jr.....VUu.Bx;6..M.H5<q+.&N.B0.%.^...Ee.[R[.i...L(.[sF].\C....>.?..y..Wi.....IEND.B`.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	3178
Entropy (8bit):	7.271079372649213
Encrypted:	false
SSDEEP:	96:tVWyXur8pgAlcCPV/lFf0276uwld6sK4KQ:tVWyX28l6o/lFf0HldZKg
MD5:	7B6EFFF72F4550FA2242D99AECC0FCCC
SHA1:	23AD7B3ED0EC757DE9071611232727D8AF777654
SHA-256:	A6F5E73D9E4705CE91A3037F6F26B06D4FAEF900F0595D8D72E6B0890A13B2E0
SHA-512:	A422AE49B0FE752820D65A5B726A29E844C020ED882B3F973A268EA50728EE3736D3FDE349E3E32962B9E437BE30DAB2F67A4A97E0EE39637A163D699512E69E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...1PTg..q.P..6.:...TYR.+....C..9h.<.I..EH..g....Q&......YHq...$:t.'.F .....8.]x...0...........].P........T3!.@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..`...W..f3...U.S....;@...u..2e500..P..UL.....k!.v......f....Q...P.!\]....\|>..O?.[......si+.....c...>u......{7..z...'.\|b..#......u~,..#.X-us......&(..]]].B.~..r...../.}..i....B..f..`>.........(..b.u.....3.+...o............................................................Zjm.........{..s.m..!\|..Kk{}go.{.....]..^.....?....)y.mmm...k.{..a..@._w..........4..i....E...\|r.f.B....}.B.q...........?$.1<d.w.......B.c7Dk{.+!l+~.arla.N..tr...........}...?.......04.@.7R.....-.=.........)..........'.ah.~.....O?.t.{...._.mG...kU0$..............'>K...-,...\|...xS..........=.<.....@"4..@O<;.Z..... .i...t+.x...X.....[.t.7.....5..w.%..^......&.....[.B.v.Q..........q_...4...T..d...6......c....!L.x.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33939), with no line terminators
Category:	downloaded
Size (bytes):	33962
Entropy (8bit):	5.322892378657438
Encrypted:	false
SSDEEP:	384:ana0B8qr7v5Vd0bYw5lzTmwWT2tlT5vjWvjXVciE7uQv+JQY9qx0jaIxza3tFqnR:aBtvV0kw5+Y3Svhcio+yYc8aIQ3tG
MD5:	B46D9A130E1AB641B8F7C3EDFDD18CF5
SHA1:	905DC5286E81AADE6D47699D1E885078A83C5208
SHA-256:	39735AF5D5E6BBA5E448E93F49E809189B53DF05215EA9CB8C3C5B67DEDD5A37
SHA-512:	3BB0A937F079030954285AB41CCA50DB1963C010495162AA0EBFFB8E0CA3ED358379588F09CC4B80C74192C6D39D34E73E3CEA87AE326774E2B3F3E95899F2D4
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/goldeneye/scripts/goldeneye.js
Preview:	!function(e){function n(){}function r(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=0,this._handled=!1,this._value=void 0,this._deferreds=[],d(e,this)}function i(t,n){for(;3===t._state;)t=t._value;return 0===t._state?void t._deferreds.push(n):(t._handled=!0,void r._immediateFn(function(){var e,o=1===t._state?n.onFulfilled:n.onRejected;if(null!==o){try{e=o(t._value)}catch(e){return void s(n.promise,e)}a(n.promise,e)}else(1===t._state?a:s)(n.promise,t._value)}))}function a(o,e){try{if(e===o)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.then;if(e instanceof r)return o._state=3,o._value=e,void c(o);if("function"==typeof t)return void d((n=t,i=e,function(){n.apply(i,arguments)}),o)}o._state=1,o._value=e,c(o)}catch(e){s(o,e)}var n,i}function s(e,o){e._state=2,e._value=o,c(e)}function c(e){2===e._state&

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.429936107700023
Encrypted:	false
SSDEEP:	3:YWR4bL29RAXxQAfB4xCxKRTiAen:YWybLSUH6qKRe3
MD5:	8A9E551B5CB11639113E37C4A828F43E
SHA1:	B6A26E9482ADAEAF4DED233C774751432B937D6E
SHA-256:	43A54008C947CEC1F6DFDB40C58E0112CB3F7F49175D57576CED014D5BBD1CF0
SHA-512:	86312DCD97D01EC696B624244FD2FAC67EAB21F72BF5164E55AD6B2075DE50CC7DB6E4BB27308B0078F53D9CACE3969A4484C8998B243C9FAEEAE4CFB41834A2
Malicious:	false
Reputation:	low
Preview:	{"status":405,"message":"Request method 'GET' not supported"}

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 171, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2031
Entropy (8bit):	7.634453495710265
Encrypted:	false
SSDEEP:	24:H3IsU3VO2acyuYEDt2M82zV9NQ12KnZ/uG11tzgPWd+dtGTuvWj5ZWAg0dAPkGWr:4sqAElzevx/U+MYuujzc0dAPkTz4cftJ
MD5:	49A861853E8D633E5F7194DF5769C096
SHA1:	5D50869A867B37DEB9F2048D4968FFA46FD0F94F
SHA-256:	A9720F8BA881347A3D3CFCA1E61480C3D13E4CDF010D1CA47CF147E9CD8D6817
SHA-512:	2878D67DD4282A60FCD021EFA7A58DF4E0B89DFAFBE96CB248BBA9EA3335D21DA2D0FA9680CEE2DA3343C860AB1226BEB6A38A7D9FA057AB033A68B9299B70F9
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/access-or-delete.png
Preview:	.PNG........IHDR...,.........S.6.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...OP.g..q.R%......O...t...0#g.S98@..2.v.`<.\.......&.Yg...9..$..u..!E.jt.......I6....0/...>....?TU........................\-...C.x<.J...Wi./..`..488x....?c.NI$.IK.o.&i.PH...N}mkk..............C...M....S!T......%...G.Ey....^....]......j.:r.'d1..#.d$..H...................z.......&..oX.^s...Y.pc...N...GFFv.ze_....WVVv{i=.W.L'..y.%...B.S...m..#..j.....R..gouuU....>.~.B.v.]9Q.pjjJ.p.D....c.S.teOEX..s..!.3.N&.YFQ.s.XU.\e....C.[..D.C.S..s....p.42tFQ..[.r.....-}.................C0.!(.....9.W.Q.2`.@5...$......^.%Qy.......R.!..>J..f..N...>..B.o>)._ .J...MOO.@..LLL.vA..344..DL[....!.O".0.N#.!.@..B............6..fy.7S. .Y1'.f....j6............<.....W..^F'.....xWW.k.....k..V...vM...p.?..J.......~&.}....=..3..r...k....{..4...;.BSc.MGT.dM..........z...2.....!..!.B..a...aV8l.tG.Tv%.5....5.s................6.JX.........7.....6gW..........c.,.s..n..k.cw.<....!.BO.ml.i>........wft3

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.319773835029478
Encrypted:	false
SSDEEP:	3:0TIjiH3WVnCksLEVKYP1:0TIjojksgYYd
MD5:	BA924BE71BC0FDA4C954F034C83DD5A7
SHA1:	259AE218ABCC0AD4BE93AB943FD441CD0A53D391
SHA-256:	26317DC101B3209096D6A82B60BFA1963E9935D521B78601E15D84120B558D58
SHA-512:	84EED5027F89E59AE26D55311F9888F4385D88B40F44ADBC8B6B42BD74D9443AD5274F950DE6DC9B4623824D080810B8E1B0A51F600CB3C5BA763F7732336BCA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlXp7wYIQtCFRIFDeeNQA4SBQ2cTkrQ?alt=proto
Preview:	CiAKEQ3njUAOGgQICRgBGgQIZBgCCgsNnE5K0BoECAUYAQ==

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 768x575, components 3
Category:	downloaded
Size (bytes):	65779
Entropy (8bit):	7.980624309518107
Encrypted:	false
SSDEEP:	1536:TwccT4JUXiCim7fDmks61JH2kKyxBWYF1N1jQ:TikqSw7re61JWZeWEQ
MD5:	2FFF6F35FAFA4817418AC0075D8A56A4
SHA1:	80D1FA10866BDA1E5A5335F670B969830BC51F6E
SHA-256:	D9B0B2BF4BB9EAAA39E37A6CB3606BF27A521436466490A44209F55B19B9DF24
SHA-512:	B200AAE60A0BCE1713823D7BC1A33A063EEF63D46A49CFF02DBD6B866D5C857033E698BB9E2D018046E3A3F9630DFA2BE56109B3B80C50E69C0D1AA4601714BE
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/768x575_featured_cognitive_2021.jpg
Preview:	......JFIF.....,.,..............................................................................................................................................?..........................................................1~..<..W,.,.=PJzh.$...f(..,.jHC..Y..L.."e..u...4....w,m`..!...a.......@7.....wr.<...s.D.c.#2~....o\|Tq..2.MQi3.2:..>R.(......;.S.....}"42%..?Q..h.:.....L}...\|.G.7].B.>H..%...SlDlG.7W..c#.1..2Rg,.f.s.^....@....ou..F<...`.?Y[Iw_....sQ9b....=.s1.Yb.x....[..b8.R...dqE.t.<.......9#.Z...b.F.h,7..\EDy.k.9YWOmY.i..;...6...e...r..#.o.......H.z#,\.A..Y.i...:..6B2..Mkk.V>...:..s..U.U..h.B.kQ.$.V.uH.w:H2>Z...rD.Y%J.b.z.RB..I$..qG..Sg.d}#Q..vg.....M....:..z.....f......F..H.Tt.#.<.......y.RI..k.+....Ah.,.....(..].2..p...R}d.5u5y.}o...=Ft..a.8.d.X.!.....t...KU .d..{.....Tf..H7G.L.'...gp..U.k.Z...1H...e{y9_.f.a).9.\.'...r.r.E..JU..d=.s....].EU...b".....c...s.........K..../1;.]......+c...O......dp..%zby.r.z9.%V1..h..4...E...T.t...5..Q...J.rw9.,.V.SOujap.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955911127
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32066)
Category:	downloaded
Size (bytes):	87925
Entropy (8bit):	5.254844985603049
Encrypted:	false
SSDEEP:	1536:oKaiDfnGeLP4yKPZ4LmPqFvEyfXsfSS3HeORSuv39YsdInP:oL4Lm7SJ
MD5:	B67B8027CA07EAD9C8558FCF824A29B9
SHA1:	124213498BAFE8A248A1925D20AE29C6D6EE28CC
SHA-256:	3AFD081B77B5B9FF1F017B720F4F3D10A5F740864CBF1B9E6C576FDDBBCF5F29
SHA-512:	BB4F82AA6410D2790F64A5ACC34BBF30A1EBB3EFC96F9494E4F928B8699D005DDCF083DB0577893A52FC444C27F645B5312C7356D79D23E9D591CC4232080FED
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/upperfunnel/1.0.58/scripts/main.js
Preview:	if(function(a,b){"use strict";function c(){function c(){if(a.matchMedia){var b=a.matchMedia("only screen and (min--moz-device-pixel-ratio: 1.3), only screen and (-o-min-device-pixel-ratio: 2.6/2), only screen and (-webkit-min-device-pixel-ratio: 1.3), only screen and (min-device-pixel-ratio: 1.3), only screen and (min-resolution: 1.3dppx)");return b&&b.matches\|\|a.devicePixelRatio>1}return a.devicePixelRatio?a.devicePixelRatio>1:!1}function d(){var c=Math.max(document.documentElement.clientWidth,a.innerWidth\|\|0);if(b("html").hasClass("lt-ie9"))return"large";var d="small";return d=c>u.views.small?"medium":d,d=c>u.views.medium?"mediumLarge":d,d=c>u.views.mediumLarge?"large":d,d=c>u.views.large?"xlarge":d}function f(){var a=d();return"small"===a?"Mobile":"medium"===a\|\|"mediumLarge"===a?"Tablet":"Desktop"}function g(a,b){if("undefined"!=typeof a)return r[a]\|\|(r[a]={callbacks:[]}),"undefined"!=typeof b&&(r[a].callbacks.push(b),"undefined"!=typeof r[a].value&&("function"==typeof r[a].callbac

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	495
Entropy (8bit):	5.130337507079993
Encrypted:	false
SSDEEP:	12:UCH/87vyLL8NL6BR37xqv6WyxbRyfTxRWUkEvoSkMwYVLX+m:Nf5ghcRrYvCRyfTxRWUnv2BYl+m
MD5:	39A5C969CFE60D8E006A9A4C56239B62
SHA1:	24140E08E2D6F858EAD3231D17C56A9A9F451118
SHA-256:	0125E14A6118E1B51CB5759BAB6E80D83849D968FB3C8B07F37A3D17442D942F
SHA-512:	EDC37307FD9671D5BD5013EA8070F2BA600C78B69A4F3D044313AFF15DBFC81890BF841390C7544D934AB54D145FE43A32F432263C005EFB831B5E425EBD8AD7
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/Invoca_Consumer.js
Preview:	/* Marketing Rules version: 1617 */..//Rule: Invoca_Consumer..//ATTUID: ml916s....(function(i, n, v, o, c, a) {.. i.InvocaTagId = o;.. var s = n.createElement('script');.. s.type = 'text/javascript';.. s.async = true;.. s.src = ('https:' === n.location.protocol ? 'https://' : 'http://') + v;.. var fs = n.getElementsByTagName('script')[0];.. fs.parentNode.insertBefore(s, fs);..})(window, document, 'solutions.invocacdn.com/js/invoca-latest.min.js', '1593/2673476745');

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0xb05caf1b", baseline, precision 8, 768x575, components 3
Category:	dropped
Size (bytes):	66264
Entropy (8bit):	7.971147971109916
Encrypted:	false
SSDEEP:	1536:UwIObgqgaMaSnW7QlQQp1hC+LANoUSZG49G7:UOrgaPSF1hvANoUoGr
MD5:	D3BF6F1C3ABEBC1BD4A106A1BB8B0602
SHA1:	69974CB0B1F6219D8679BDB642E680CB5EB06B27
SHA-256:	7BB5EA9B613403EAFD1F5C56B9D9C1A269D35DFCBA48F11DE874579E7EDF1150
SHA-512:	CFEB71FA7F761CE794FE5D100C2D731B76648B40A486E2A359A7C61772FB0F5BE2C2D9B2437896818EF441EFB8022CC63B4365899422316EBF9ACC6121798775
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:4F759060549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:4F75905F549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48bfae3f-0171-4a55-a0a4-7d2281c1bda5" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	dropped
Size (bytes):	14583
Entropy (8bit):	5.487552107568547
Encrypted:	false
SSDEEP:	384:X+msuHc7wc6ne16yW2EsEGaD6+aWGraiEnUnoDen0rtCJhGTSD5l:X+msGcpb16yWV3Ga6+jGGiNoSn0rtCJt
MD5:	EEB74615EFBF636CC7B78B17C6A933C7
SHA1:	34BF4DC348CF19180C5A022D7AB98B221D60DAD2
SHA-256:	74A7A53097F5335E794968F4F7C27D089701FD635C8698C5F5FDA7F30356CACB
SHA-512:	31CEFCB902B1F836DEB72B9AC0F61E9E23975164BCFF56F0A265FC5ACDEDAC11CD71E8C731016F8AC5554B6372B6520635A6917062E401640DF2E33E8ACD24B2
Malicious:	false
Reputation:	low
Preview:	/. Compiled on Thu Dec 01 2022 12:38:00 GMT+0000 (Coordinated Universal Time) (1825232097) /.'use strict';(function(J){function m(f){if(B[f])return B[f].exports;var l=B[f]={xa:f,ta:!1,exports:{}};J[f].call(l.exports,l,l.exports,m);l.ta=!0;return l.exports}var B={};m.c=B;m.d=function(f,l,p){m.ua(f,l)\|\|Object.defineProperty(f,l,{enumerable:!0,get:p})};m.r=function(f){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(f,Symbol.toStringTag,{value:"Module"});Object.defineProperty(f,"__esModule",{value:!0})};m.t=function(f,l){l&1&&(f=m(f));if(l&8)return f;if(l&4&&"object"===.typeof f&&f&&f.sa)return f;var p=Object.create(null);m.r(p);Object.defineProperty(p,"default",{enumerable:!0,value:f});if(l&2&&"string"!=typeof f)for(var E in f)m.d(p,E,function(y){return f[y]}.bind(null,E));return p};m.n=function(f){var l=f&&f.sa?function(){return f["default"]}:function(){return f};m.d(l,"a",l);return l};m.ua=function(f,l){return Object.prototype.hasOwnProperty.call(f,l)};m.p="";re

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	3178
Entropy (8bit):	7.271079372649213
Encrypted:	false
SSDEEP:	96:tVWyXur8pgAlcCPV/lFf0276uwld6sK4KQ:tVWyX28l6o/lFf0HldZKg
MD5:	7B6EFFF72F4550FA2242D99AECC0FCCC
SHA1:	23AD7B3ED0EC757DE9071611232727D8AF777654
SHA-256:	A6F5E73D9E4705CE91A3037F6F26B06D4FAEF900F0595D8D72E6B0890A13B2E0
SHA-512:	A422AE49B0FE752820D65A5B726A29E844C020ED882B3F973A268EA50728EE3736D3FDE349E3E32962B9E437BE30DAB2F67A4A97E0EE39637A163D699512E69E
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/control-sensitive-personal-info.png
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<....IDATx...1PTg..q.P..6.:...TYR.+....C..9h.<.I..EH..g....Q&......YHq...$:t.'.F .....8.]x...0...........].P........T3!.@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..@..`...W..f3...U.S....;@...u..2e500..P..UL.....k!.v......f....Q...P.!\]....\|>..O?.[......si+.....c...>u......{7..z...'.\|b..#......u~,..#.X-us......&(..]]].B.~..r...../.}..i....B..f..`>.........(..b.u.....3.+...o............................................................Zjm.........{..s.m..!\|..Kk{}go.{.....]..^.....?....)y.mmm...k.{..a..@._w..........4..i....E...\|r.f.B....}.B.q...........?$.1<d.w.......B.c7Dk{.+!l+~.arla.N..tr...........}...?.......04.@.7R.....-.=.........)..........'.ah.~.....O?.t.{...._.mG...kU0$..............'>K...-,...\|...xS..........=.<.....@"4..@O<;.Z..... .i...t+.x...X.....[.t.7.....5..w.%..^......&.....[.B.v.Q..........q_...4...T..d...6......c....!L.x.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 22564, version 1.0
Category:	downloaded
Size (bytes):	22564
Entropy (8bit):	7.977929467313529
Encrypted:	false
SSDEEP:	384:l5X54F0doZh0+PoFlaBg6gHz/SxTlpyUbt9AySOm5zN3kl1tX:n+nZaQalkgsPyUvAySOwNwl
MD5:	D3A41C3B37B104492A076BB9B7F8EE2F
SHA1:	D44815073830BE30AF0ACF925E440A16123A9782
SHA-256:	E8D5FAE41878B2727AB8FB243BC4BF071238077F621E2BC110BFF7CA4FFB962E
SHA-512:	238C5A75D1297A1B9CB71E3EA4C0B16CDFF924F88BF5D5A71D2B57BEB80F859CB24B0B9C9645CD7CCEE0DA0B0DBF039AE77DB602506D2ECE30FDD78779C4AD28
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_Lt.woff
Preview:	wOFF......X$................................GDEF..H.........&X'.GPOS..Id......'...bGSUB..S.............OS/2.......Y...`e.O.cmap.......g...f.X.Wcvt ...t...r...@....fpgm...h........./.7gasp..H.............glyf......8..._...r.head.......6...6..5.hhea...........$....hmtx...T..........=3loca..............Omaxp....... ... .9..name..G.........,YY.post..H........ ...:prep.......Y...............~..7_.<...........T........X..................x.c`d``....H....?.e.P..0.............p.A...K......./.a...H......x.%.E..........9.....+.(..@+m......Z.6.....r.+..i.M.S?.f.3 .0.... .....E)....7.A..n..!...x....wG.G....m.~.Y.m.VP.am.m.ds.5.&9....}..I..!..)$A`7(C.h.Y'.NT...5xK{./...\(..8Or..~p..$..;Te....S..a...wU.....^I.\|X.6.E.....a...u..u`)......o.&..<m...%..uB.po..1T@.T9$5c...USv....M...w..2...+.Du.:s..t..g..=...'.m...TkG..vR...R.gu.......K&...@..B..On{......K..jd1D...h.=.../p+!...A3.....\.9...@E..-q.*'XA.nJ......7.%.)y.P..[E)^...=.I=..-..$8.>..D.#.m..[m.......Ce.....J...g

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=*;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.369707376737533
Encrypted:	false
SSDEEP:	3:wZkKaQ0x6d:wZDIcd
MD5:	7FC8633AB4063FC68D1E25FA8A90C53D
SHA1:	C3EAC2CF2AE24B5B11E94FD882B5EA0144FE728D
SHA-256:	6EC1D233D26BC2F7A2F292476FD567238FFBB188582250325E68E22914CAD031
SHA-512:	F3B7BB8DD539E3CB94EA227C9175757F3280C63169E566043D9F844F0ABA8F51137C190C439E37316F47DD59B2D9373F3215C325C084B7DBE959EB9F74D70BDF
Malicious:	false
Reputation:	low
Preview:	FL(BF)\|Error=Beacon body is empty

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	5.4720622126554135
Encrypted:	false
SSDEEP:	3:fkreWdsRphgbqdtdkUtcO216yz9ft+FIwhGkxCO216yz9flfXNgbqdtdkUB:fIdsRLgGdtGvTZzP+FIbTZz3/NgGdtGa
MD5:	E9AC68BA1C7EC11A083DDCB4F2D48672
SHA1:	2D061251C00A842E27936D67D5AF45EBC54F2EAA
SHA-256:	EBE8E533539BBEE43FFF57CBA0A77EB6E8A94354F2B596681604269159E860BE
SHA-512:	84E4E49B197CC77C203A98917CC054A8E4F957D1CB3704393B9A846DCCECF6216BB257CC22FC201FFE4E98F907D1CA8D77678BE5C30B52F37C8D70F7FC13F9C0
Malicious:	false
Reputation:	low
URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff
Preview:	failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff: no link named "ATTAleckSans_W_Rg.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2605)
Category:	downloaded
Size (bytes):	2941
Entropy (8bit):	4.275543995871228
Encrypted:	false
SSDEEP:	48:F/A8wHaQ3rsqb2u+0055/01hoFFJyTPD7AnqymJN+46Wp18wqf//qmLXWpLi/q:Fo8wXrsqb2t0subU0PYqymJN+4f4SvoC
MD5:	40C9E475C505CB6FDB73E8493E2BF1E2
SHA1:	376594C8B55330960794DDDC4BF962EB299F8B40
SHA-256:	62C5B3FE2FD1067048690760FC41AC336C5F4396BF025B6F9C21E4D5F6322A8B
SHA-512:	7A5C8ABCC6BB33D99123440B51B76564AC1875C36735A0B91DFBAC813E40B8DEB306CC338EF2089310111C4E1E8008C6321ECEA0DA4F82609E6F7718C769D082
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/identity-ui/assets/img/ATT_Globe.svg
Preview:	.<svg width="26" height="24" viewBox="0 0 26 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="26" height="24">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.84668 0H25.065V24H0.84668V0Z" fill="white"/>.</mask>.<g mask="url(#mask0)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M5.53041 21.4778C7.58359 23.0535 10.1602 24 12.9559 24C16.0149 24 18.8043 22.8742 20.9335 21.0252C20.9589 21.003 20.9461 20.9875 20.9208 21.003C19.9657 21.6352 17.243 23.0158 12.9559 23.0158C9.23044 23.0158 6.87587 22.1918 5.54639 21.456C5.52099 21.4435 5.51141 21.4622 5.53041 21.4778ZM13.7778 22.0912C16.7575 22.0912 20.0323 21.2863 21.9902 19.6917C22.5265 19.258 23.0374 18.6793 23.4944 17.9025C23.7576 17.456 24.0147 16.9247 24.2241 16.4025C24.2337 16.3775 24.2177 16.3648 24.1987 16.393C22.3773 19.0503 17.1034 20.7075 11.658 20.7075C7.80879 20.7075 3.66778 19.4875 2.04616 17.1572C2.03035 17.1352 2.01437 17.1447 2.02396 1

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 392 x 293, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	111925
Entropy (8bit):	7.992160874013442
Encrypted:	true
SSDEEP:	1536:fInsgJvdhK0yPeSEqGj9NlhAFGgBsxF5gRQPGmmiWJ40ucXbXBJNJ9q7ArYl08nl:fLQn+gPPlhAFGcsx8RiAnJDnbvzONv
MD5:	4F2B81F2010710A48A399DF64B21891C
SHA1:	EA9320960A8082AF5CF888806DD43BEA7D807EFD
SHA-256:	A70D39DD4DD2BFF0635A923F28BACB34850C5EBAF54E43CF0AE2E3A3E80D3253
SHA-512:	C62C688749F8C6BB7DE270EB2307F81AAEA0C0655742189AFB793911B4EE4CA384FE6EE903CBD92C58BB73804015A38D8CB726E7AEA4D1123716DADD5602506E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%.......u.....pHYs.................sRGB.........gAMA......a.....IDATx.....e.U..?....r...]...m.....`..cB1\|.A...!..B..?!!.TJ.1..l.......L/w............;w$Y.H3..FG.........g4.........."..yS.c..c.w.....b..p.rV,C.\..\|..p....2.Y.W+...n.?..v..J.z..A.,[.\|M.<.j........p...s.:.>.\|......V.y..X...V...`.I[..o)}.k............s...3.D.Wys...}~.v.x.j)hw../.H.z.......p...!...R).....R..0p.W}f.Wl.]..\.....}.......O.2./ECk...n[.;}.....hX...m..6.w5..9..>N.u{,W~K..4.Z.0+...J.,M..v=.).....@..}5......<`.c.r...~........Z?...'C........Z.a(/$..7._..........S.Wl.J.V.......O..Y.o..U7...\........(..6......zd..[.c}...A'..Z....5..=x.w...W..].=......~I....B.~.y.c.".q}../...^..i?..e(,....n..Z..x.7..{..B..Jk--..<?...7......Xs....3`k~.y.g...R.k.......:V9.k...^.........(...s_Wz.w.~...ed....<..\.t..Fb..y1........e(C...#N.&...Y.@h.e(C..P^.H...R.....e(C..P^....\..v.L.Og.._y.W.?...e(Cy~!}iH._..V..%.T..YbN..@n.`.....e(Cy..N....].7.iuV.<....r.LB.M.3....

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50721)
Category:	downloaded
Size (bytes):	51932
Entropy (8bit):	5.717631095822653
Encrypted:	false
SSDEEP:	768:jSAdWRuJNKahOvUyCwq9jkpCc11+g3Gn5D0jfB71RXK+MjFVB9DdPI92a0cbz:jnWRGHQvX4juC873o5D0jRS+cB9Wl7f
MD5:	8E6164AF8F8CFB9023DDDBB89347FD9B
SHA1:	F11890EA5A9F81D7B48E700415029F3906FAF804
SHA-256:	3B480690B3B0665B2F12D9FFDCD05C081E5BF5CA5C84787B7D99877BDE157E0C
SHA-512:	A39DCEDA6B91CB2248F1891235237ACBB2AB599665B31103D94DDD02504ADB0965127C20FC937F3B109AF36D67372D1445D93FEAC1A3B26C9D86E0599635C9E0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/O0gGkLOwZlsvEtn_3NBcCB5b9cpchHh7fZmHe94Vfgw.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function X(n){return n}var q=function(n,U,S,a,L,F,Q,R,I,v,Y,y){for(Y=(v=91,79);;)try{if(34==v)break;else if(v==n)Y=68,R=I.createPolicy(F,{createHTML:Z,createScript:Z,createScriptURL:Z}),v=85;else if(v==S)v=G.console?96:85;else if(v==U)Y=79,v=S;else if(91==v)R=Q,I=G.trustedTypes,v=12;else{if(v==a)return R;if(96==v)G.console[L](y.message),v=85;else{if(85==v)return Y=79,R;12==v&&(v=I&&I.createPolicy?n:a)}}}catch(W){if(79==Y)throw W;68==Y&&(y=W,v=U)}},G=this\|\|self,Z=function(n){return X.call(this,n)};(0,eval)(function(n,U){return(U=q(75,0,35,98,"error","ad",null))&&1===n.eval(U.createScript("1"))?function(S){return U.createScript(S)}:function(S){return""+S}}(G)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:applicatio

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64399)
Category:	downloaded
Size (bytes):	255084
Entropy (8bit):	5.159519117191277
Encrypted:	false
SSDEEP:	3072:eDPNddBFak8JUaVDpYujVHUc92smVppuzUPFI9fB8NpjJSyACAV:uNdIVWjNS9cdzAV
MD5:	1E2047978946A1D271356D0B557A84A3
SHA1:	5F29A324C8AFFB1FDB26AD4564B1E044372BEED2
SHA-256:	9528CA634FECAD433D044DDD3E6F9CE1F068D5D932DAFDBB19D8E6DAEA1968BD
SHA-512:	E7BA19FEF5BC00D32347F290E817BDBFFFBF87A6EAF7F9777F439CEEF9FAA8CAB286F3DDD5CBCA051596A73BB44289DE226AABD929263B8312A94F91A47A26DD
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.13.2/jquery-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 1600x490, components 3
Category:	downloaded
Size (bytes):	122125
Entropy (8bit):	7.964505279100467
Encrypted:	false
SSDEEP:	1536:/Ih0Qq4UvVaztKS6Jo0kwp8x8U2CPq7tHa8ukT97OyMzIwKj0QFKFKwD4rw+Rl06:wh01rvutKfkwi2fF0R8j0Hgdrwz96
MD5:	008D169FF38350F3A5D2B83F1685EEF7
SHA1:	006083A99CBCCE025FB67DE81C0CC162031CC3FF
SHA-256:	F14C7E93C2608CD895980C9436F55DFB7F6D5829484DAF8923849F352E4F69E3
SHA-512:	B864A0D39BE84BD8F3560380ADE22DE56684E37507554973B4BBB54931FCE07B5112F8773BC017E449A6F8E5955E0858A5DD27C2B8B2D86F3EF60453ABA4B9AE
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/banners/homepage_new_banner.jpg
Preview:	......JFIF.....d.d................................................................................................................................................@.............................................................EA...EU.k....5.p..,........n.#.\|.........}..'.m.c..'0....w<.\|..l_RN.\|.s.i..x.?c.0.c.9..........J....QUB...p.321...z.....SU.....<8Y\|.../5..8z$\...-sa.R.m\|..z?....,..RY.1lS.w.X.\|~.y............B....Ej..Z.......~67\|.....,h..y,..C..u^.?[...gy..!.zZ[..s...E.......k.k_...x...z.._.}.........P.W.J.EU..R.4dTe/.m. .@..Cj..'..>7....._K.u}C.x.nHK.>...R'....\............]z...!...........)..+W.....T..T*...^P.....b.......s.{~2.....O2[Wj.....nVx>......j....3a..t..@........R....^<.......J.J.T.<iZ...e....14...cd.....S..X9.=..bd....).o.....w........C.y..@........R..)Jy.j.>&=.>.off_.w%R.......l[...P...a.t...O7.....W3.:.V=...o.:-...n....r.i....t:.WkO..........y..x...zZ.....33#;6......U..<..].Wc..P....z...l..._Qh.v.Kq.,......o.^..O.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.515396048773456
Encrypted:	false
SSDEEP:	48:soJoeCq6Pt/YUA5TGkwwG8VHfH68riq+YJZrtHAopQ0KOTxTiLkXl3eWIO1DIM:Xlby/qTNwwG8VHv3riqZXpHAB0o5i8M
MD5:	E73488182AA37117B7FE80FB5667BD23
SHA1:	A6C78BE8C6345D5D9BF09BEAD652A9D2CDD9386A
SHA-256:	70E50944BAE272F6BB767E433EBD30B3AB2F8CA1C6A3E02083A088619BE9DA63
SHA-512:	914B640C3EC89CB44A80465E6C0F23AB44A7A39E9795926230D55EA4F9CBECF9091094D99E2D850641B20A1DE39D80414827761C5465AE29EE4F0307A0B05DFB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...VIDATx...Kl\...qC..E....UIv...".b...."....Z..MAdc..h6....8.EJW.oo"... .pv!wc......E0...AG.3....:...#dy....x.7......T...<.U. eB.......................................................................................................!.Jennnaaa%'n.....z}..Xccc...+MU.U9.........)p.e333^1@..........pz..!d0+.........[..\.tI..!$..F........H.Z.B@........^......BR....BH...B@.I..Z..!.WP..!$..j! ..^A-....+.....z....BR....BH...B@.I..5.G..!.Vph..S..!.V........B..`...q-_@.I..MB....2..l..P.T...!d`+.fgg.e.V..c...bi...!d0+......(..._..e..B..x..%....1.....B.......NOO....Q@......gff&....H.Kccc~...2....)F..!$..6L...BH.l.<B..!].N~S\i+X8....& .t.:..q}..f......~..........`,.3..BH.....W.7T...l.! .t.:.......V.U?S@..Luz..6+..722....!..N/[.f.]...B.R........ .t.:=h...BHy+.... .....k...B..`7Z....z..R.;.B....W.N.P...p.V.... ..n....B....A...Z...B88..h.U.@......P...p0+.J.U.@.....[...B8..l.B....$*.V.U.@.S..-TA.!....... ..&ZA{

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16290
Entropy (8bit):	6.016956527641721
Encrypted:	false
SSDEEP:	384:qIJp7Or088o1rF36WL7NyZYcLiMJmVEaffxURBaDy6Tb6Xe0:NJp7Or0Bo1sWL7N0LKVEaVDFn90
MD5:	971C9AFB8263857B187EF3CB1B16E48A
SHA1:	AAC85EE135C8ED93F94CAA23B6B497A700956A2D
SHA-256:	A1F0C2CC7BBF29C4D331358C990AB2DDB663223B59551DDAD357926895907E7D
SHA-512:	E9DAEA1E18674664032B7F9B02E4DC4F5016C430E4A494963481D69DAECD28C7946EEB244DEB7155891400D6764A74EAF218329970BFB3E4F3B22B717E1B598B
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"1VbNZfTfJvqDrr4PlrWSiAo","injector_basename":"sodar2","bg_hash_basename":"Ke811GU8D9oP10uMu54EDqWuI5DGCOjC6vNIGcZJ2dY","bg_binary":"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

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	396639
Entropy (8bit):	5.653071313572857
Encrypted:	false
SSDEEP:	3072:TWY4NwkXOaoAx3gB6eCseTNcc5e3cNUhrnyFwhkk5/k8tJ5StmwKX1mxhG:iNNwk+aoAx3gB6eCseTNz5Fe2BmwKyhG
MD5:	7CF7D23442AD0A246D413AF4C2A1E71E
SHA1:	76FD734E9CEC570E91FFF4AA40D82E3970C210AD
SHA-256:	D0DBAF74AEC3359DAC02C4E34DD375A2FC620281EAF4453E3D6C05B4AE780149
SHA-512:	FA789BB2B576A7E22F77922BCB6A5FC17D38159BA7CF4B1DE666E22359EB6414CA81811FAD448D13D15D3FB968ECAF2CC4E43F8C310BB3FEB0DAF192DBF9E7F4
Malicious:	false
Reputation:	low
URL:	https://scripts.webcontentassessor.com/scripts/f9276c0ae7d238a3e1121013b02922ec4e1c77a8d197856747a76e436a2fb660.json
Preview:	{ "hash": "f9276c0ae7d238a3e1121013b02922ec4e1c77a8d197856747a76e436a2fb660", "parentConfigurationHash": null, "hostname": "mf.webcontentassessor.com", "version": "2.0", "debug": false, "attributes": ["allow-forms", "allow-pointer-lock", "allow-popups", "allow-popups-to-escape-sandbox", "allow-same-origin", "allow-scripts", "allow-top-navigation-by-user-activation"], "sdk": {"runtime": {"sdk-enabled": true, "sdk-enabled-events": true, "sdk-enabled-filter": true}, "web-view-delegates-android": ["com.google.android.gms.internal.ads", "com.google.android.gms.ads.internal", "com.applovin.impl.adview", "com.applovin.adview.AppLovinFullscreenActivity"], "web-view-delegates-ios": ["GADWebViewController", "GADFullScreenAdViewController", "ALWKWebView", "ALAAppLovinVideoViewController"]}, "setup": {"disableEventLogging": false, "disableImpressionTracking": false, "eventLevels": [1, 2, 3, 4], "eventMessages": false, "gptSampleEvent": "slotRenderEnded", "userReport": false, "userReportedAds": fal

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.774838638690409
Encrypted:	false
SSDEEP:	48:OZVKu9puDf+sG4rnNwP+FOObT6Xmn/WOuR6L5MkyrSEppRL:y9puDGsG4rnNwmIObT6W/WOr9MkBoR
MD5:	B77827C50A912DFB41813F14CD3F8291
SHA1:	57C7E4F300F2E9C570C1C40BC52234A71992EB83
SHA-256:	4C425946EAFA64CCB0F03051C8EF471624CFDF84DCE2F7C9FDAAC5015754A9FC
SHA-512:	5B93D4DF75F7796CAE96A1D0A663341F59EF0775ED2902F90068C931F794610928147794431DF2E8D870FF5F2AC4DC771B3098478206349C69EC397C21011EDE
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................D.D...........................................2............................!"1AQ.#a23CRq........................................=.........................!.1AQa.2q.."....Bb...Rrs.......#$3............?..UDJ"Q...D.%.(.DJ"Q....V.4.M...=.F..{.A8...\|.,m.<.'.tMQ...+.G7.....r.Q@Z{..G.5......z...4].<..w.^.b.2...2y....v..U(.DJ"Q........3X.K.2'f.....r...H2v..{9Y.Z.:.VH.f.4.q.\.Zq.G[V.f2..tN.i.....4.'....@..X.G7.!...q..K..?.\|.w.VowVl....j......a{X9...........u.....I....[P9........./...n...Vf....c4-.37....f..6.....eT<u.Zk..8N.1i.c..=.9....y.2..Wt`v!K..WA.5#E.dk.K...:p.7.Q.u.auU[3..%0:..f...k}CE......^(.m.%..l.........J.T..;VuSN.i]...i.....QVEY.!7c....z.]y..(.D_.c.. d..8...>.....6\\l.]%.jW.;<.in.4Y.e...LH....J...Ee......T.R9.`};..q.......dP.E.P.G.c....G.I..h.k.w...xJ.....].".O....8.h...\[[..o,.....O.r...Ajz..:..i.*Y.q.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23916, version 1.0
Category:	downloaded
Size (bytes):	23916
Entropy (8bit):	7.977555978337375
Encrypted:	false
SSDEEP:	384:Su/fXGJo4JBbheuESLoM7ByrV+4YS/iN9VNmLvnNmDx/7ZqkfLS2+gtX:3G9AY7UA2iN1mLNS91qkO2Pl
MD5:	F01ACFAF64AE1D381FC2524FFF3283A7
SHA1:	CA464721F7261A70F0CC3E0785F367A776A32156
SHA-256:	D0C4812C9F1B672A7EA3420B10EA389CABB4B50694418965003250C876A2B13B
SHA-512:	A93ADB6EDC461EEB1472E40ED8AA65AFB51761C92C7D942568B112AC7F871323B7F348F129D7CB8097414D1EFF3FD36CE77FD1F3931DF1702238028DDA65B413
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_Md.woff
Preview:	wOFF......]l................................GDEF..L.........&X'.GPOS..M\|...`..(..D..GSUB..X.............OS/2.......Z...`f[R.cmap.......g...f.X.Wcvt ...........X"...fpgm...\........./.7gasp..L.............glyf...(..;...c..Y.head.......6...6..4.hhea....... ...$.A..hmtx...T.........40Xloca...p..........maxp....... ... ....name..K.........,YY.post..L........ ...:prep.............a.1..........._.<...........Y........;..................x.c`d``......U...k..@...X...=.......p.A...H......./.a..........x.%.........n# %3.P..2.K.[.#!i.`..p.K@...+`...hJ-m.K.....F@.`.t.A.{1z.........T........x....7..O..m.m[.m..]<.......m#...'.{gFK.....\|..I..>/..'J`.Q.I..ZbP..s.j.../..~..E.%}..%.......$..5..U`.Tn.,.H;B.._..ce.1...eo......%0.=0.m.k.W+L...B..@;LB.t._.th...V.....',B.$A......).3.+.......S.K.J6[..P..Q.3.i.9... W....bs5........h...E.LS...\|.0.)..<...d.U.=.3.U...m.l.......c.g3..9o....e.P_..j..)...X......aOr....5.]4e~T...Z..........C.v...S.E.,..n.......*.J..Y....(.f.S.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42862)
Category:	downloaded
Size (bytes):	42863
Entropy (8bit):	5.085616303270228
Encrypted:	false
SSDEEP:	768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH
MD5:	D5A61C749E44E47159AF8A6579DDA121
SHA1:	3B41B3BC956685015A347A2238E71DB29DFA0DBB
SHA-256:	0C7178CC6CA34FB18E30F070A5E7A1C287B2D7CCFCBA2CFDF06E0F46EDA55740
SHA-512:	5ED98CB4311C373DA3EDE92BB47BCE551E22C30683EA8FC55097BAF99ABE1E0702B24DE48F8B9241047CC1E4364158F5A343E4E8FC182E8866DB4E99CCD7EE6E
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/inc/slick.min.js
Preview:	!function(i){"use strict";"function"==typeof define&&define.amd?define(["jquery"],i):"undefined"!=typeof exports?module.exports=i(require("jquery")):i(jQuery)}(function(i){"use strict";var e=window.Slick\|\|{};(e=function(){var e=0;return function(t,o){var s,n=this;n.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:i(t),appendDots:i(t),arrows:!0,asNavFor:null,prevArrow:'<button class="slick-prev" aria-label="Previous" type="button">Previous</button>',nextArrow:'<button class="slick-next" aria-label="Next" type="button">Next</button>',autoplay:!1,autoplaySpeed:3e3,centerMode:!1,centerPadding:"50px",cssEase:"ease",customPaging:function(e,t){return i('<button type="button" />').text(t+1)},dots:!1,dotsClass:"slick-dots",draggable:!0,easing:"linear",edgeFriction:.35,fade:!1,focusOnSelect:!1,focusOnChange:!1,infinite:!0,initialSlide:0,lazyLoad:"ondemand",mobileFirst:!1,pauseOnHover:!0,pauseOnFocus:!0,pauseOnDotsHover:!1,respondTo:"window",responsive:null,rows:1,rtl:!1,slide:"",slidesP

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	55256
Entropy (8bit):	5.569539140706679
Encrypted:	false
SSDEEP:	768:b+vH30pP9hawhqZ4kFo44pKrhs0Z/7bszBxstuNOfJ:i8p71V/mrWYEFjNwJ
MD5:	4C1CFA090FD07F5EAC17CFAAE54DC8C6
SHA1:	AC844CAE232A79DF1C7B88A50313CCAECED25001
SHA-256:	AD80A3F6B1B1B869088B872381B3179A21DCCC4E465EC0A00C92824F6462C258
SHA-512:	B61C46B08B9CD0CFE8A044400FA966CB8762EA73BA3B45668BB6C483399D1E3A3C715C5FB2DD6D5C3B1C4412375352C55D2314BB636946373D5EB87A31C050EE
Malicious:	false
Reputation:	low
URL:	https://p11.techlab-cdn.com/e/65319_1825202461.js
Preview:	/. Compiled on Fri Aug 12 2022 14:23:30 GMT+0000 (Coordinated Universal Time) (1825202461) /.'use strict';(function(){function Mb(){this.md=this.te=this.time=this.text=0;this.W=null;this.vc=0;this.sb=this.name="";this.Ja=0;this.done=!1}function bb(){this.input=null;this.Pa=this.V=this.oa=0;this.la=null;this.ob=this.J=this.ca=0;this.lb="";this.state=null;this.hc=2;this.L=0}function xa(a,b,c,e,d,f,g,h){var m=h.ea,p,q,k,n,t,v,D=0,r=new Y.va(16);var l=new Y.va(16);var u,w=0;for(p=0;15>=p;p++)r[p]=0;for(q=0;q<e;q++)r[b[c+q]]++;var x=m;for(k=15;1<=k&&0===r[k];k--);x>k&&(x=k);if(0===k)return d[f++]=.20971520,d[f++]=20971520,h.ea=1,0;for(m=1;m<k&&0===r[m];m++);x<m&&(x=m);for(p=n=1;15>=p;p++)if(n<<=1,n-=r[p],0>n)return-1;if(0<n&&(0===a\|\|1!==k))return-1;l[1]=0;for(p=1;15>p;p++)l[p+1]=l[p]+r[p];for(q=0;q<e;q++)0!==b[c+q]&&(g[l[b[c+q]]++]=q);if(0===a){var C=u=g;var M=19}else 1===a?(C=Nb,D-=257,u=Ob,w-=257,M=256):(C=Pb,u=Qb,M=-1);q=t=0;p=m;var y=f;e=x;l=0;var ja=-1;var O=1<<x;var Z=O-1;if(1===a&&

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64489)
Category:	downloaded
Size (bytes):	112092
Entropy (8bit):	5.278248032865275
Encrypted:	false
SSDEEP:	1536:S2DWI2K5B6NHi5+lwAUsXz2lpAFMd65C/ggH5TBTrLAsKI:9SIu+CsC25TLKI
MD5:	D266C2B956AF5FF23DE4EF71EFBE33B7
SHA1:	92214F8E5602046806BFBE2A0B33E2F8132A0E6F
SHA-256:	EB3CDB5A856AAB06A4FD5FBBF057CE22E1D819B132726639DBBA9454E96FCD78
SHA-512:	680701CCFE03D66E7C747DE2DD5E121E35AD53E499FFB92435F0534944288B0E53274BDEDB398CDDBE692E7D3C6A7C0D1C03996E273D3007F46A153945E3411A
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mbox-contents.js
Preview:	/target team release notes .ECAP-23262, part of Oct 3rd 2023 updates/.var head_ab=document.getElementsByTagName("head")[0],pageLoadFired=!1;function targetView(){var viewName=window.location.pathname;((viewName=viewName\|\|"home").indexOf("#")\|\|viewName.indexOf("/"))&&(viewName=viewName.substr(1),console.log(viewName)),"undefined"!=typeof adobe&&adobe.target&&"function"==typeof adobe.target.triggerView&&adobe.target.triggerView(viewName)}function listAbVariants(currentVariant){null!=currentVariant&&""!==currentVariant&&(window.abVariants?window.abVariants+=", "+currentVariant:window.abVariants=currentVariant,console.log("AT: Current AB tests on this page: "+window.abVariants))}head_ab.addEventListener("DM_EVENT_PAGELOAD",function(e){pageLoadFired=!0}),function(){var firetheCallOnce_ab=!1,attachatjs=function(version){attachABJSFramework(),"2.4.0"===version&&(./*. @license. * at.js 2.4.0 \| (c) Adobe Systems Incorporated \| All rights reserved. * zepto.js \| (c) 2010-20

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	622
Entropy (8bit):	4.6894839881975425
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65fKjKNTH1JJTkdhth03+/l4vumVw6/3cpCqEBmDl7iHA2:tzBXuXMMAYnJTkU3+wumKpCzBmDl7H2
MD5:	55ADF983E8653AF9041C6211A0EFE20B
SHA1:	9F0E5AF756CAE49D103E4112149C6E5044000AC3
SHA-256:	F8169D27DFEA25BAD0A2AE2C801CE94FB7BAF545B25F73B93D0D7423D429CF3C
SHA-512:	B5AAB16CB383C38A810480BF95CC0DC72531AE05B4F94CE040F0C065071339F2ACB797DE33F7FAB9B9FF2D8153A5A5837BBE6273CD3A159E7CD5F9CCCD592FC2
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16 8.597C17.5 7.325 21.296 5 29 5H30V25H29C22.188 25 19.346 26.875 17.646 27.997C17.154 28.321 16.585 28.492 16 28.492C15.415 28.492 14.845 28.321 14.354 27.997C12.654 26.875 9.812 25 3 25H2V5H3C10.704 5 14.5 7.325 16 8.597ZM4 7.014V23.014C10.151 23.182 13.233 24.892 15 26.03V10.39C14.254 9.662 11.234 7.223 4 7.014ZM28 23.014C21.848 23.182 18.766 24.892 17 26.031V10.392C17.757 9.653 20.78 7.223 28 7.015V23.014ZM19 13H26V15H19V13ZM19 18H26V20H19V18Z" fill="white"/>.</svg>.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19596, version 1.0
Category:	downloaded
Size (bytes):	19596
Entropy (8bit):	7.987550513502273
Encrypted:	false
SSDEEP:	384:pVSj7HEnLFyuiZ4zFwZHtUuzHcH23RmR22ukZyC2uxokeNtFXPKNM:Oj7wLcY+ZfQWF2z1o/NbXPKNM
MD5:	0C6016D2601693FB28B079401732E491
SHA1:	A6BEA66C36ADA118FDA165E09FDED89EE5ED6B1A
SHA-256:	59EA63B5FFE0F060E37C24A44B6406943DF9E4FCA39E2EF43023C2AE9783F220
SHA-512:	CA78EBA91FEC9DFB4762CFE5D2019F6F730B66CF74DF12F672E1E0C4412AA88B04AA0E73BDFA1547F4407B2FACF3C9D8BF2D8D73095ADA54D63CF53AA8903C16
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/identity-ui/ATTAleckSans_W_Md.woff2
Preview:	wOF2......L...........L)..........................n..z....`..f..X..W.....p..>.6.$..@..b.. .... ..~...7pnN..(...X...lD....C..Q.l..0.........C..]U......wD .'.F..6.'.Y3s...N..[_.#.....Il.....f.....8..C..f.N.CG%Bq....#...)...YC.x..K.....eQ..v>.'~.{..{..l.!....Vf.FP_..8hb.......o0jG/..2...{.e..z..O..-.q2.9...Cg`......'...}..{fA(.H.Ag.A....q[....#....^N......h........s...$..l....rY.@<.j8.:.....U..Sv....<.o._9......:...DE..#.BZD`.Y.........v........7...b.6?..B.f&.$l.o\|..0.....)'....."~....z..?5.:?...t.v...!Q..@Y.n....0..6.........B..:..'.).+].'.Y.....r.//0.)xz.....s\.....I.c.....s.3.]....?8V..v.>.'B.]..@N. @,...5..Z0.z...*.............n7\I4.T!3Q...~.Le.~...h..U.....{.\|$X...bC.Dxx.tq.(..)c..:..........>...@.&T.H......IHW0.J..2..O.T.\H.....Dkr.R.T.f].)m.6g.....V..G..C..uv..Z...;..y...}........!..."....I"T.%......_...o.{......4...Z.w.5L#..\..D..A=.'B..h.4&TB...........B$ w?~n..W.=...+s. ""RH!"""...Z..........#FD..7..}.p.R]42.qG....0.....A..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (414)
Category:	downloaded
Size (bytes):	1973430
Entropy (8bit):	5.9031718653002665
Encrypted:	false
SSDEEP:	24576:tmGuBioU6hPt6V5V3agdk797zuELJY1+3Ua4aHn2fk40V:t2r
MD5:	B71194F261D22A5E4992947375EDBB62
SHA1:	9EFBFA354057BB7457DB1330205D65908B5805A0
SHA-256:	CC18EE330A20290BBD61DAF25EB66376B84209BE83772A57A1E596D3BBEC6B35
SHA-512:	EA18240044D621A4CEC92F350868973E5190D3CBF636D25FC360DEA3896F76F104726769A0261AE2472F842A7F29B612C6938371DAD9078DA63EE58D00AD18F6
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/styles/main.css
Preview:	@charset "UTF-8";./*. AT&T About Us for AEM. * by FleishmanHillard, c. 2018. . NOTE: ATTN DEVS!. * Please use this stylesheet for importing SASS partials only. Do not author any SASS or CSS directly in this file.. * Also, please first refer to the _abstracts partials to review the existing global style settings and utilities before creating new variables, mixins, etc.. . For style guidelines and coding conventions for this project,. * please consult the README.md in the root of the project.. /./====. MAIN. ====/./ Import core component styles statically /.@import url("core_components.css");./=========. Abstracts. =========/./=========. VARIABLES. =========/./===========. Breakpoints. ===========/./ we switch from mobile to tablet here /./ we switch from tablet to desktop here /./ max width of standard 15" laptop viewport /./============. Global Sizes. ============/./ Component Margin/Paddings /./ Section Margin/Paddings /./ Line Height /./ M

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	2238
Entropy (8bit):	6.825668419353433
Encrypted:	false
SSDEEP:	48:1XqulG/1qW8HHN163bxtEXVE6BhUSPvv46R5OeI79696rQLzAG6KV:d1lG/12H763wXCCaso6R/q696rQLzAfm
MD5:	B4A54644FDFAF3D444B14AC9E46603FB
SHA1:	4252725C4E31053573B35409D8DC529C39B3E2A8
SHA-256:	17AA7C3AE67AECB088E82DE571EA54228F0196C9F3F9D3EA300DAC15435CA1F2
SHA-512:	EC74DAEB354EB37212CAFC7BA5378254A02DDA780071034F5AD7675DD265A8A161719E4B2B5C17BA115998F9BEAD76F9B2211BEC9E04BF3B5EE9477DA7E716F1
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/resources/designs/default/favicon.ico
Preview:	...... ..............(... ...@................................m.......r..)6D.....cr...]...A}.$1?.4@N..X.......b...e..........,9I.,8G.<J[.r....9m......a..ESe.,-+.....m}...m...~..\j\|..V..3AT. J...w..0<L..[..y.....+......C..y...L......................(2=.......#.\l......!$$.(Cf...".(4C..T...^...........h...w..441..!...=s. R..20(.....Qat.....0;E.!3.."-.#0?.!.>......Y......%),..&>.....))%..$5..F...,<.t...../.`o...x..JYn..w...~....-.......%..&6.+7F.05.fv..7DS.. %...).GVj..&7......"2..o...y..1?Q.........."3.....1-$......(9..'7.,6B..#0....... .Xg\|.M]p..):.. 1.05;..(8.eu..0<I..$2..`..........$/<. ,:..........%6.....hx......%2A.>N^..&4..$4..4\..;.{....#3.".<..<.l}..ix...j...,>."0B...(.'>]...,..'6..)8.#',.@Ob..0X..)7...!..)>..;L...........-.-//......(.."6......!2.2?N.&(%......s......v....*9..):..!1..N..~.......O^s.$O..........Ygv.....BQi.18A..$3..`...$2..t.............../Z.o........:b.;Ja......\|...{..........#.;..+<..f...h...! .........jy......!/A.............=IU..&5.(6I..:I..H..9GX.!1H. -

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4681
Entropy (8bit):	4.855320955077783
Encrypted:	false
SSDEEP:	96:cJU/N9scOLOy9WYOo9QT7IUaO12O8O+O3OQOROroqNBX9u9G9nB96d93c9V7zUoL:gU16cGnpdyTMUau2z7itiSJBXsUhBId+
MD5:	FA928623936A29CD877BFBBA73D8FDC2
SHA1:	69C6C48E2E9EF3E2B86ACD9EAA2158836DB35BC2
SHA-256:	4405612DD24A1AABEC9F835809CDC033EBCF8C0F147AF2B5B298DBFF6695C6FC
SHA-512:	ACDE2515C730A7D2F8A1A02E895AF927217733F30089695FE23200820DAD3AE5AEB708DD5A0E3E1A05A01A43C235B68775BCFD4EE0DB044A56F3CDCE98EA5C70
Malicious:	false
Reputation:	low
Preview:	{"nav-items":[{"title":"Company","url":"https://about.att.com/pages/corporate_profile","target":"","className":"","subNav":[{"title":"AT&T Mexico","url":"https://www.att.com.mx/newsroom/","target":"_blank","subNav":null},{"title":"Diversity, Equity & Inclusion","url":"https://about.att.com/pages/diversity","target":"","subNav":null},{"title":"Corporate Responsibility","url":"https://about.att.com/csr/home.html","target":"","subNav":null},{"title":"Public Policy","url":"https://www.attconnects.com/?utm_source=ATT001&utm_content=GlobalNav","target":"_blank","subNav":null},{"title":"Ethics & Compliance","url":"https://about.att.com/pages/ethics","target":"","subNav":null},{"title":"Careers","url":"https://www.att.jobs","target":"_blank","subNav":null},{"title":"Shop","url":"https://www.att.com/?source=EPcc000000000000U&wtExtndSource=Homepage_Newsroom_DGen","target":"_blank","subNav":null}]},{"title":"What We Do","url":"https://about.att.com/pages/what-we-do","target":"","className":"what-

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65386)
Category:	downloaded
Size (bytes):	440236
Entropy (8bit):	5.503295455013639
Encrypted:	false
SSDEEP:	6144:0782oP0E2w88BvAg8V7EoS0LGhOb3jZjTwfOL:0782twJAEoS0LxjZ6q
MD5:	49D40D3C008767CDF660C2C1DD48BA26
SHA1:	8548CFD7D54C3D0B131290EAC3DE1BE7FF9669A3
SHA-256:	5A75ADE244357B72C307D1201F4E1A748951DD96F1237BEED544B640BDE2CB11
SHA-512:	B532761106716EC2EB288492F03013208036866DDA05E08BCD137EE6F83BCF542C491A54610848CE13ECC4643D8B46478E3BC1D2CF247CDBD7657A8CAB48DC2D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202402080201/pubads_impl.js
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 .*/ .var ca,ea,ha,ka,na,pa,sa,ra,ua,va,xa,ya,Aa,Da,Ea,Ja,Ka,Ma,Na,Pa,Xa,db,gb,mb,ob,pb,qb,rb,tb,xb,zb,Eb,Fb,Kb,Mb,Ob,Qb,Tb,ac,cc,bc,gc,hc,Ub,ic,jc,kc,nc,oc,qc,rc,sc,xc,yc,Bc,Dc,Ec,Hc,Ic,Kc,Mc,Jc,Oc,Qc,Rc,Tc,Uc,Vc,Xc,Yc,Zc,ad,fd,gd,id,jd,dd,kd,cd,bd,ld,md,nd,od,qd,rd,ud,td,wd,xd,Dd,Gd,Hd,Jd,Ld,Md,Qd,Sd,Rd,Vd,Xd,Wd,Zd,Yd,$d,be,Id,ge,he,ke,se,le,qe,re,te,ue,ye,ze,Ae,De,Ee,Fe,pe,Ge,He,Ie,Je,Ke,Le,Pe,Qe,Re,Ne,Ye,Oe,Ze,cf,ef,gf,lf,mf,nf,rf,sf,tf,vf,wf,xf,yf,zf,Cf,Gf,If,Hf,Mf,Of,Pf,Sf,Tf,Uf,Yf,$f,eg,gg,hg,kg,lg,mg,ng,og,qg,rg,tg,ug,wg,xg,yg,zg,Ag,Bg,Eg,Gg,Kg,Ig,Og,Pg,Qg,Mg,Ng,Rg,Sg,bh,$g,qh,yh,Tg,Hh,Qh,Rh,Vh,Wh,hi,ji,ki,ni,ri,wi,Ei,Hi,Ji,Li,Mi,Ni,Oi,Pi,Qi,Si,Ti,Vi,ij,kj,lj,oj,mj,rj,sj,tj,xj,yj,Cj,Dj,Pj,Vj,Tj,Uj,ak,ek,gk,hk,ik,kk,ok,vk,rk,lk,Dk,Bk,Ck,Fk,Gk,Jk,Pk,Sk,Tk,L,Uk,$k,Yk,kl,N,ml,nl,ol,ql,sl,tl,Al,Bl,Dl,El,Kl,Rl,Tl,Vl,Wl,Xl,Yl,am,em,gm,im,hm,om

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51630)
Category:	downloaded
Size (bytes):	125852
Entropy (8bit):	5.452245937122134
Encrypted:	false
SSDEEP:	3072:RN5vc+AMrR9Pcrl0xYuE0Dte4Vs9aAj8lM:RNpcS9crHuE0DVVs9aAj8lM
MD5:	C0D4192EBDC44CC31CF755E8F582F821
SHA1:	944A273A714CBC2155724E78F340B26BE6F2D215
SHA-256:	43DD574BA0B968B07BF2D8BAF3EF531339D1D179558301666909A332940E7CFC
SHA-512:	A5131DE74A57C296D6F1CE3D69E40E540F89506AD4681D8B46D343D81122C62EF25DE5E3D8DD4870317438A09ABD52DBF4E0D63FD7DD8EF267ADF1E0CA0FA0AA
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/128900881029137?v=2.9.138&r=stable&domain=about.att.com
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1137
Entropy (8bit):	4.856994345754096
Encrypted:	false
SSDEEP:	24:IfJMIAnqsgAm0Lbia8lRWUXQHpeq0AGQwk7KFGRRKD/aJuPwPf9s1NduF8AfbM:IXsgALbMwU/FAGQjecCijqduFRjM
MD5:	E42E50EA3F07E4266E944FAF1DEE6D3C
SHA1:	EBD45EE0DE211F9E6AEE5DC4FB51CCC14FA081AE
SHA-256:	33A050282E9356BE2F2D8538F376FCBC4C7BBC778C4517375B44DAD46D48389E
SHA-512:	614EA3BADF8DBCF042E540DCA49F097D5EAC214AC0241B295E81FA65AFBCFFF6B1746D7BC4AA427A4DB96A19D27B54C0AB32CB46BE13C46F54C708AE3209BD17
Malicious:	false
Reputation:	low
URL:	https://signin.att.com/static/ciam/en/common/js/keepAlive.js
Preview:	/. 1) This JavaScript is provided by AT&T CSO-Tguard Group.. 2) Import this JavaScript files into the pages where needed.. 3) This JavaScript will refresh the session when the user goes to a different page which is not behind our webseal. 4) Call the function refreshTGuardSession() using onload in each web page.. /.function refreshTGuardSession() {. addPixelImage();.}.function addPixelImage() {. var _body = document.getElementsByTagName("body")[0];. var _date = new Date().getTime();. var _qVer = "?v=";. var _imgSrcs = ["https://oidc.idp.clogin.att.com/static/pixel-url.img"];. var i;. for (i = 0; i < _imgSrcs.length; i++) {. var _rmImg = document.getElementById('haloAMImg'+i);. if(_rmImg){. _body.removeChild(_rmImg);. }. var _img = document.createElement("IMG");. _img.id = "haloAMImg"+i;. _img.src = _imgSrcs[i]+_qVer+_date;. _img.style.display = 'none';. _img.width = 0;. _img.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11070
Entropy (8bit):	5.198152465424702
Encrypted:	false
SSDEEP:	192:DMnHYNpyZiniIGgikb8my5bmyzb7wW5q9aql8OiYs3TntYqJr0FZsQS62Zmw5rPC:ji4GOq5DfLr2ZI6Cc
MD5:	7EE9ACB08AC20AB2635AE9305197E7BF
SHA1:	BB3BA9769F1169F70039362457106D1CAB72270C
SHA-256:	13A8D85E7DB99566A21071533A17775B649ABD5225B2B2DD63609CD04F79BEF2
SHA-512:	99B05EAC3CBFD9BDABD29B6FD3997C1DABB02C2D6F68D133035DB22931BCB5B9F092727FC0AA00815FFA5D46514DC0044FAF1EE4AF4E17AC7BAC9AB205C7E144
Malicious:	false
Reputation:	low
URL:	https://www.att.com/idpcms/services/prod/acctmgmt/forgotid.cmsfeed.js
Preview:	{"idp-cms-feed":{"feedID":"7b5b2cf3fd8f1073606c26b48cbad900","feedTimeStamp":"2023-10-25T19:22:07.155Z","docId":"46cabb0a-6da0-385c-be52-6933dd48cc9d","forgotid":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"_type":"scmsSeo","twittercard":"summary","metaRobots":"INDEX,FOLLOW","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/forgotid"},"contentFragments":{"FindEmailAccount":{"docId":"48dd4bc8-0de3-37a9-9c3e-00813193ebfd","docName":"FindEmailAccount","_type":"scmsFragment","scmsCompId":"FindEmailAccount","hideOnDefault":false,"master":{"pageTitle":"Find your AT&T email account","firstNameLabel":"First name","lastNameLabel":"Last name","zipCodeLabel":"Billing ZIP code","dateOfBirthLabel":"Date of birth","buttonContinueCTA":"Continue","buttonCancelCTA":"Cancel","lastNameCharErrTxt":"Be sure your entry is between 1 and 80 characters.","firstNameCharErrTxt":"Be sure your entry is between

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 162, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11683
Entropy (8bit):	7.956378811235422
Encrypted:	false
SSDEEP:	192:kEGy2AH7voOLvnSNUe6dzt6HEWoexB+/tmHsjeLGCkbh+UFkgdOZxu7v21zM1LWH:kQgOLblmMexgmHRLG9cwku97v2FgyZTd
MD5:	786F0812367339CAAE670D457C46F741
SHA1:	D744A0B554ECFF4E8571A9D596A6C91DF20A1934
SHA-256:	7BABB5C688C92AF125B8253DFF422F0F81968BD8DFFD0F6D619ECCAF0B9B6E62
SHA-512:	25961D02F553BBD70CC3A861B9120995BD409E251467FE47AE118483A09A133FFE01955BA21427DE8D41CB1A1CACCC1452030A23745DED75B0DBD0F597A46BCA
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/title-footer.png
Preview:	.PNG........IHDR..............%V.....tEXtSoftware.Adobe ImageReadyq.e<..-EIDATx..}...Gyg...ol.,..kd.p....\.w.....l."..p........r.H0.k..$.VK..%...>..F.`.@.Q.G....c..,.V/.`.?.............Y....j.....O=..z.B.X.b.Jw.v...._.b..z.;8.8n,.xY.x..+UF..4..........Z.u.(.8..C&..{.{.-5S.6.;.m..s.......6....O\|.._?Z..........1.=...:...R.g.~.J}.....).IJ.q........:.i...$a.....:........).......h.}.wp...,x....].......C...8F....u........A...d...X....O\..9sq..,..TZ.A.Q.X:....%...!<Nx_=/e....{......FTU..F>..>..c:I[R...4x0 .@.k..s...c.2}l~l...\|..Ye....1C..."...u...S....w.>..3m...C...o.....E;.I....p.E.O.p..1.....?8F ..J.@...........G..>...O'....;.Xj...2...R....b.........j.}.Wx...5........i`E.o+.`.s3...9...j(.X.A..?.g.2..4.2..m.........Xd.i.....;tD....`..W...^.d8g\.2...3.U..........m..U.....``.)....E.c,U.f.+.K.y.J.#...0.....{..&.D....;.mT..4.`....P.....sK..i....[pba....gxa..a~.......d[..d..l.\`%)`...[.>..T..).(..Z.Z....$.VF...F`.9.T.h......5._..G....s.6..&.....L..(

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1367
Entropy (8bit):	7.758083478784373
Encrypted:	false
SSDEEP:	24:nu/1CUwLpBR37jHJN95hpt8zEhN3N9DhG1xrbjdZheWEiOS62SpOqC7:u/oUqdXpr5ftg69Dg1xTdZn8qD7
MD5:	4DD46C07067407811B9BF3F9BDD29540
SHA1:	45870C05F7EBD395CFF68AA8BA1A9926DF2011AB
SHA-256:	C807F3760A56EBB70972C157885F5F5C935F5F9958F7CEF2B74D2613D519FB1C
SHA-512:	BEF939ADEDFB427A651B3E52CA1CAF8423B05B4E0C2307EB6FFBA6566D22F288293215D84D8D401D43D6E905AEA1182F1E7D85F46D9DF19B0F9B5AFB4EAC1C9D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T....IDATx...c.,....Z.m.m.m.m.m.[......>...O2.o.MZ5.T.J.R.T.J.R....Q..T....2.......g.9.....H.....1...]X.Q. }.........1..D..s3.."..Azg....d<.c.......x..Y..h$../.1/.r(W.<.....u.,.\...":..... #3;.s0..,?.]p.Y.hf.6...%.Oc.....8.Ky..J.....Y..L.c...U.J...-ke...x.s....6..~ .....$8...LO0..X... .....DV.7.l_.A.....za.....C...9.\|J0;Y/.@p.Y..H..P.A.$X...n ....$x..?..%8...> X...v$....Npi....X.?-... Z...`q.....O.......U...+.i.........2=..d=.=..dU......4...4....g...W....$....~(....`....u..26Y...c,Y.An.."..........L.J}A.;+...M..5.Nr....x...A.=.i,.!.B.4...&!W.B.....o..N 8.Z.B...]K.\|@-T.W......@0)eo6._h".=H..e.@...m..\O.{.`cr...?.@Y....c.....`.......%..v5...-....5.S...&&.H.ekA.o....O..e....(Lg..H.z.`."...ej"...Da..!.cS..!x............p.Fp.e..~.......e.>..5.;......N...N.3E.#.e)l;..T...h..MG.;.....n/..(j..lK..p..H."...>.3....^...].S....Ciz.`U.T=_.,Di:..l....?.HiZ....O$..R..@.I(Bs.`)J.C.;0RN..t....7R..%..N:(es...3..6u...~ ..T...`_

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18480, version 1.0
Category:	downloaded
Size (bytes):	18480
Entropy (8bit):	7.9883935603264415
Encrypted:	false
SSDEEP:	384:7D4KwqZYhcok8+w/5nW0Rp4bJcLHwrQIk3CRc4BfO/QM:/4KBYhcoyuR4bJUaTumfOV
MD5:	15D443231FF3A13B0DCAB5A9B8FD7276
SHA1:	8833865F3777104A8D58943779C3C47CD9B0BA09
SHA-256:	E2740C7B209E33ACA7176250D80F94B4924E5E5D18076EE3B95F32A0E20D1F58
SHA-512:	B475833F63AC87A71263D06698F8D8D97C5EBF06869E2D7A8D4719D4A85D886817FE7E9C602F4DCEB93C130946F319A3C468040AF2DA08EC1F6BF339BD74794F
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Rg.woff2
Preview:	wOF2......H0..........G...........................n..P....`..f..@..W.....@....6.$..@..b.. .... .. ..5l..=...n....F.q.&.O...6.@..X.........s.e..!.....6.c&..Z..\.UQ++....zOLA........F2l..........O..bKT.Da.)......PHM.fw\|8....gYX...^B+,&.... ..a)........N.3..V.IQ.i={."..K.CR...#)$..P........G).....m....6Fo..t.....\.n...1~.?.[s.L.@9.px.;..0p..Q<...hP...9...rq\|u...Z..h..4.c.~..... ....z...'. ...Q...........k....0..j.ZS.Y....B.I.HQ.M X.....iCh.).t..[N....'.e.e.I.TR......./4.;n...e{..Q......v.S..S.=.sw..P.....M5.Z.....w..M`.>2fV..'@.M.43.._...P.O...?.e.ml ....j("(.TL....m.n?.a..D."J.;.....#.N.E........c...}..l?..v.`M$.P.......#..3.A.:D.v.R.i..4 p%@}...3...1.X..<...K.7Uk......u...^$L.."yEE.R,..R...b..?... . @...p.....)...<.....)W1..l.N.....!V./.....2W)......\|g....D...B.O/F}.o.nsY.V...^O.....Fa.....gP.X.X..8.......`.....\|.I'..6.a}d3.1....V...YAl.n$.....L..i.....D4DJ%dJ..m.....tcZ....\|..F.y.4.f..m+..X.....dz..r...x..........oz...T.H:}..........C....oWGo.~.

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.115834092163221
Encrypted:	false
SSDEEP:	3:Kpra/J:KFsJ
MD5:	D3C2A591900E64D260F13AE5EE229C68
SHA1:	8020918AB86109B17CC1B56D8A005767679A1C57
SHA-256:	21EB273EF68C50BC871CB1B80331BF441E9349D2ED73846431A57ECC6485383A
SHA-512:	01E854A9090495F812E5D0F4C02B967B89EC395BEC5D5A986729214219CF156D753251146C6CFD89D0A69EE71347958E8F465A4FBD1A24AF8D45B2D25D04514C
Malicious:	false
Reputation:	low
Preview:	END POINT NOT FOUND

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2890
Entropy (8bit):	7.39773086657616
Encrypted:	false
SSDEEP:	48:LbWPHrsRhna1Y4yWkv1uL7g1qDmc7jFq/hUWazu0rQfskf7ldz:XmI5jWkvs7g1qDBs/aWWx0ESl1
MD5:	445BF96D1898D8802D9C795183E75E16
SHA1:	6CCFDDB254B1943340301B839E991C5A19DE5F43
SHA-256:	95E69E3B1AA91AF68A1AC335F5F0CF203C203275D8A9A35DBC253837922A91BC
SHA-512:	3211228F0DCA4FBA4448C64CC1419F86E4AD5E2148384163C12F1EFC23A2D19645F85B5476487507AF47E6D2C283C1A074DD0E7E3986B5F90217A712592E2290
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/email-icon-134.png
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...1v.....7EJ..........S.\|..'X...O ....$.@...].Sa....T.F$va..E..1......D...~.....!..........?.A1.]..............q...)...a..B....../.....@?..../..T..@....b....B......._.U^3..........B...$,..o...i..t..@w......_........c!....,..Z.o.........sl...`.N....7..M.....[..M.Ga.;..../P...............~p....@.^..=.^...i.wU..._{...O....;~..b\;\|.....f......W+B....T.....U....,...... ....S..aO...]9X....\|%...v.,......s...r........./...}......l.Y...L....Y~....U..;._..1SS......s..>.q....WS.....@.7..)#S........ ........ ........ ....O..}..M\|.AV.7a...w..5.{.O.o......i..'a....W.=.nvsY...........b.K.f7y..b.k........8L.....).c.?..;..c.P.......hv3}(.........s..0_.4..>/.+....!..@.^=...+..X.i...X.5\|'......[..>4\|.].s.....qY...m....s...i.Nl.}.Z.G...CHX.............Ea.8.....O...EC1.....0?..Km.m1.?........6......t...k..4...i........Mg...yi..&s... .tC.T.?.........:.....P_....9<.8t..H.S......Ks.Yl.3.}....

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://22948d2183c9207a707bdfa472c85560.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1707
Entropy (8bit):	7.75950233175324
Encrypted:	false
SSDEEP:	48:PeaSU6jV1IjZGaF6la2WjjZeFDelL096CDQjw:P5+uUOl2E6ax096sQjw
MD5:	D266D514C13220AEB741CFF48C8EDD5C
SHA1:	D55BB900CAB0F61A63877952DE16905569315D50
SHA-256:	5B00F8AA4FCFF03AC75290E6EE406557A848B214AB0EAF694E27C19382FB7331
SHA-512:	1216E945DF91285EE2CE95F2713FFE73FB3C4A89551F20AB132F76D4A45F4E287C1FD60C06493C66D0FC266013E27DF37998C1330B63ED51A651C4C89AA24E7E
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/icons/locate_a_store_icon_2021.png
Preview:	.PNG........IHDR...d...d.....p.T...rIDATx......... ..............y;......q.8Y..m.m.m.m....g...]I..M.v.;..I._r....{:.es.(.e.D.J.aG.f..c.os..H....e..1..y.'x..D.H....4....C9......p.&...".ihy.$..Q.ej.f...L`wR.h9F.\|..4..<L..A..f.w....V..u.Nj*..U./.L...~..t!.D;..a^J]'~&..T#.....4..?/.Q\.M...P.G...eFR9.O.7...bN.&r\|..M..n... ...1../.I<.i... ..n...+...r.D.V..3.;.G.GU..x.`"....:....Y.=..R....9..A.....Q.._S.3...Qqm./.Y.p....<A..1.3.`..........!.C...#...</...1..9.Y)......d+./..J..\.3..'Q........c".mt..ZV.b~"....Y..Z..A. ...A.!.?g.[....K..?y.#X.Z..n%x.j.k...]..\.z...>..3.a...1.a.....(.>..o0....u8.UhC..L....=y..D.p.dg.P.^.uth`....-b.;..i.?.6...<.p".....K'Z.(.Isk.&..P"c..._..A.0.`.......60F.&..LS.$.....YL.C.asz.. .(E5,.y.N..=Ip\|....~..U9jy......d-..4.....GdQ...z.i...^...7...ei........US.E.wP.fc.n...`..V. ..Lf.Q.e.Q...q!.2.`.[.QC...i...~.:V..A...N@..2#w3.h..,N.....F.Z.....A. ..t(w.....X....I.k(G31..w.....v....d.E(W..,_Y.H..\|G-....')g_..Q..tc..^...L.B....'

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4854), with no line terminators
Category:	downloaded
Size (bytes):	4854
Entropy (8bit):	5.670363552943274
Encrypted:	false
SSDEEP:	96:YyRkctyPg38OWnLqGRb8HOREZqyLmT1iqvmcUq2mTvqgmyWlqLXm0InaKuncFOqj:yayPg38PL3ZQpqZ0qO7qv7q1bqyzknqj
MD5:	93DE09A36F944E9A22E66F3FE4132A2D
SHA1:	EDB5451F06A7F281C54993A53C91C2C05E2AC5DC
SHA-256:	070B47B7980CD6B4232B346625E75934A000D4BAF64675937C77F55ADBEAEE10
SHA-512:	338F698508BBAA36F15FD4BBFCB094B7EDF2AA13E71EB01D3C534E9328FEF018DE88869CD15AED4B2EAAC9DC74A27F46F8E37B368B938E79201EC1D135C97A58
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":46656000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7566711756","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVA1Q!3sAAptDV4mzlCp"],"userBiddingSignals":[null,null,1707955925467561],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685075200372\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685075200372","1","

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12390
Entropy (8bit):	7.891549026202851
Encrypted:	false
SSDEEP:	384:bZpm6HcCgTjL7DXgHPOqmbOprulOQ6McqCJ32Z:b+Uc1HjgvOqmbvG2
MD5:	F912231669D7D331A231EA00E2A031D4
SHA1:	B9A77F06A2C8F4993AE500E4218DB30EE9EBEBE8
SHA-256:	89F9287497A2766678E1C6CF05BB011311D787040FDF3D45AEAA7E1FC72F4758
SHA-512:	1D838E6B19D0ACB739D10533DC668EEE0386B34AFCA45A1F66933F08924655C6E4ED702070EFD24ABD4E99A5352D1ADF871C4D2C42C68C83197C5D997E51AAF4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<..0.IDATx.....U...>.p/(.".."N.).Y..8.f8$...a..f.d.YY..S.X}~Mf.S..V.#..8+....w:...#2.{...{....-.p9.~.....^{m.B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!..B.!....& %.E.I$k.z.f.voGmQ.....]_.o.@..J.f..r..dUd...c..W[.f&....JH................].3..}.........lh..z..Jm@......lfB...B:.&....6V..l.D.........d5d.P.,..o.&&....x.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...@.!..B...B.!..B...B.!..B...B.!..B...B.!..B...B.!..BH.d....LW.'.k....&&..B...@.[.n...j....B.!t.H..."..B.!.2...B.!..B....u.Y'~."....?;^FR..V..j{.MeRt.I../[8^:..:..e.!..W...R.5.M.6.......<6/n.=.3....o..H.}...f..S..6?.vKsmQ./3.D...zj}..nd?.R.Vp..o7.."..i.a..7.......ew.}...x.../.l..3..EQ.............P..&...-K.!t...hT.z......Nf;..0..M..e..lu.~LZ9.&s..T...>>......~.9...h..[...l....u.~..U.........g`...........w...-._..p......?L.........X.L..........p.^...>NA.K..{...B....Bj.N8{.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5268
Entropy (8bit):	4.146739101627285
Encrypted:	false
SSDEEP:	96:Xxjql8CT+ijJmlwfzaXcoX8w97on/oh9fNqncAYXRZk0XqZLR:Xxj/TijJmEaXT8+Yoh9fNCcdU0aj
MD5:	91762DDE8687FF7CDFD8D2CA754242C4
SHA1:	5A78CA3036ED8C2AE8349B22E763A4EA1BC23880
SHA-256:	00F24C53A8243D72EC3717C929E3FBA0FDE647F199966EA7A043B93787E5C516
SHA-512:	4CF945504AF2E828F0CCEDB561785994B61B61A3BA8E62345C9821235C5843F574A736329B552A29E2484506AAFE9DD1352AEB55B2895CE16A7C5EE334C464E4
Malicious:	false
Reputation:	low
Preview:	<svg width="60" height="24" viewBox="0 0 60 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M39.7891 16.8083C39.6314 16.8083 39.5224 16.7003 39.5224 16.544V8.80451H36.8662C36.7086 8.80451 36.5994 8.69651 36.5994 8.54051V7.47284C36.5994 7.31668 36.7086 7.20868 36.8662 7.20868H43.9375C44.0953 7.20868 44.2043 7.31668 44.2043 7.47284V8.54051C44.2043 8.69651 44.0953 8.80451 43.9375 8.80451H41.2813V16.544C41.2813 16.7003 41.1722 16.8083 41.0143 16.8083H39.7891ZM47.1992 15.5123C46.3984 15.5123 45.7195 14.9245 45.7195 14.0965C45.7195 13.2563 46.2048 12.8365 46.957 12.4162L48.9216 14.5045C48.4969 15.1403 47.9754 15.5123 47.1992 15.5123V15.5123ZM47.7452 8.48051C48.3761 8.48051 48.6913 8.88834 48.6913 9.38068C48.6913 9.90868 48.3273 10.2085 47.4661 10.7005C46.9686 10.1727 46.7508 9.81268 46.7508 9.40451C46.7508 8.87651 47.1143 8.48051 47.7452 8.48051V8.48051ZM53.1182 16.4723L51.0683 14.2762L52.427 11.9725C52.5481 11.7688 52.4389 11.6365 52.2447

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2637
Entropy (8bit):	5.23540428880029
Encrypted:	false
SSDEEP:	48:YYGfGvdw/frocI2RE2TB5hdrs28+bLaR2bbXUWwy+w8lMnagdNa5hd5IM:NIGM5IeAALDbey+9Gaoa5T
MD5:	76154C4B777447D239B9BC73CC2D9B60
SHA1:	96ED737126D0EF4BBFC5BA8AF2EB71EBA3135487
SHA-256:	B1583A74ECDDFBB642D7BAF2AB3614CFF54CA585421EBC3770E6D943EA0F936A
SHA-512:	C9D82D928B1D48BD72088DA2A84EDE85F479A24E8CBDB203CF3ABD4EA0A48B79C82E2BF7C1CDEEB3EBF84474017DA5A912060532A4CB51737712B3CA827A023F
Malicious:	false
Reputation:	low
Preview:	{"idp-cms-feed":{"feedID":"0b69410fff79966132cf4cfc42a2caac","feedTimeStamp":"2023-10-25T19:21:45.314Z","docId":"03e82d3a-6b5b-339f-a73c-789ff5c1d2b1","iseglobalnav":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/iseglobalnav"},"contentFragments":{"OttLander":{"docId":"b5c99c85-86c7-3e34-9609-fab9a64859d6","docName":"OttLander","_type":"scmsFragment","scmsCompId":"OttLander","hideOnDefault":false,"master":{"ottLanderLocalNavCTA":"Account","ottLanderCtxNavMyPackagesCTA":"My TV packages","ottLanderCtxNavMyAddonsCTA":"My add-ons","ottLanderCtxNavMyDiscountsOffersCTA":"My discounts & offers","ottLanderCtxNavFAQHelpCTA":"FAQ & help","variationID":"b5c99c85-86c7-3e34-9609-fab9a64859d6"}},"Support":{"docId":"c828d2fb-3088-3021-bf07-988ce55b3432","docName":"Support","_type":"

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	757
Entropy (8bit):	4.806287925892661
Encrypted:	false
SSDEEP:	12:UhUMBVtaXRxwjfcFghjgvHQOfeDyJxapo3FaXR9jsPMdHFTxpAREXMvFfQpARHUO:wUMB+vw4FgYAaxapQgcSWcYHbawvN
MD5:	2E978C5C16FD71BEB6628CE1003FCF70
SHA1:	2EE735D9331F8977DBF15D891B4B0BE558C715FF
SHA-256:	DBD6206FA072EF500F13CE68B366FFDFE085744D9006D906BD9A60D778B00BB5
SHA-512:	5A99EBDBC744D52F184505AA316AEF6F43AAD794B168AE9AA044002C47E651FD6AFC5B3C40A7999A6D3F92AFE45B9C87E56B657E057C56C7C4DE0ED31748297A
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/attmonetization/js/attmonetization.css
Preview:	/* attmonetization.css PROD - 249 /.....advertisementpanel, .adWrapper {.. text-align: center;.. width: 100%; .. ..}...adlabel { .. display: block; .. text-align: right; .. margin:auto;.. font:300 1.1rem/1.27 font-regular;..}.....hideAdd {.. / display: none; */.. padding: 0px 0px 0px 0px;.. text-align: center;.. width: 100%; ..}....@media all and (min-width: 1025px) {...advertisementpanel { .. padding: 32px 0px 32px 0px;.. }...}....@media all and (min-width: 768px) and (max-width: 1024px) {.. .advertisementpanel { .. padding: 24px 0px 24px 0px;.. } ..}....@media all and (max-width: 767px) {.. .advertisementpanel { .. padding: 16px 0px 16px 0px;.. }.. .ad-label {.. letter-spacing: 0.03rem; ... }..}....

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (934)
Category:	downloaded
Size (bytes):	25217
Entropy (8bit):	4.854436112969288
Encrypted:	false
SSDEEP:	384:27vhXSioVMhif5vxHEb+FyRMIw53h10P1spG1RTCY1/gcJYDl9OsHl+DG:27vhXSoh85vxa+FyRLwS1spGD9FG
MD5:	9C511857FCCD1E36093E05DFCE1AD695
SHA1:	7A3F43BCCCA6AB94E60228AAB0492475235EB5CA
SHA-256:	585A3483990B21899738AFA3C19C98F1D36E5F279C77FEC527C1541D1F332614
SHA-512:	9E4C33B9F6659C2AF3E264EAA282C6CD5BE90F61839BF11A37EDB6FAE20A5D8E18B62A34DC9B377BA2ADDEF1F47EC88F795B46EF800981E8FB508CD2DAFD3064
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/global_nav.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){."use strict";..Object.defineProperty(exports, "__esModule", {. value: true.});..var _typeof = typeof Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };..//Copy of checkURL from analytics.js - 04/16/2021.var convertToAbsoluteUrl = function convertToAbsoluteUrl(clickedURL) {. var href = "";. if ((typeo

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.262814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMVn:qy6sJMVn
MD5:	EEB676C401A115F03D55DA75FBAED82E
SHA1:	1B74F55E4D819239ADF562291436F6B9470F62C6
SHA-256:	E32A6AE5E43F7F652674E0F03DC23F86839F839B29EE4E63C01C93DA180BB0D0
SHA-512:	3A5357E187B2CBCBAC3B3606E86053CB3381BF02A2BD3A74338BF48F7F6D864EDADF59D25E407BF16FBE321A2FB7481126B89ED6B0AA4622F4BA2D6EC04C37DF
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955891151
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nc"};

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4028)
Category:	downloaded
Size (bytes):	2024080
Entropy (8bit):	5.180171055258665
Encrypted:	false
SSDEEP:	49152:xmsUA5FAboHRPPLlSmSt9Doy/ITEGuz7fYYmD43APx+W/Y7cFyMyDTPfCAIkyjz+:xQ
MD5:	4811E432C6689AAA762D0C82D10A9F1C
SHA1:	4ACF309B3A82CB447ADD86C159194641D72547DA
SHA-256:	40AC1A2DC8A54B0F41CFAE5B9A0B48E26E825BD17B221BDF4B255749C52E4298
SHA-512:	CC4F244F915B3DD6C0E5075ECAA1DF46BB34EAC97E284AA51A2ADBE41CA94BC878348CCA6B7C581EA5DAE663104E3019B809BD5517EFE8AE8B5D360C1C0BDB1B
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/main.js
Preview:	(function(){function r(e,n,t){function o(i,f){if(!n[i]){if(!e[i]){var c="function"==typeof require&&require;if(!f&&c)return c(i,!0);if(u)return u(i,!0);var a=new Error("Cannot find module '"+i+"'");throw a.code="MODULE_NOT_FOUND",a}var p=n[i]={exports:{}};e[i][0].call(p.exports,function(r){var n=e[i][1][r];return o(n\|\|r)},p,p.exports,r,e,n,t)}return n[i].exports}for(var u="function"==typeof require&&require,i=0;i<t.length;i++)o(t[i]);return o}return r})()({1:[function(require,module,exports){."use strict";..// ==================================================.// fancyBox v3.5.2.//.// Licensed GPLv3 for open source use.// or fancyBox Commercial License for commercial use.//.// http://fancyapps.com/fancybox/.// Copyright 2018 fancyApps.//.// ==================================================.!function (t, e, n, o) {. "use strict";. function a(t, e) {. var o,. a,. i,. s = [],. r = 0;t && t.isDefaultPrevented() \|\| (t.preventDefault(), e = e \|\| {}, t && t.d

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23052, version 1.0
Category:	downloaded
Size (bytes):	23052
Entropy (8bit):	7.978185783242237
Encrypted:	false
SSDEEP:	384:HFtugbAi0wjhiVeyVkyQUw0uCXGIi0Be+I7WkOo8MG8xDr3+6COEgrRzrk0gtX:HFtutxwaeyVkyQUFO0Y+I7Wru/O6hEQG
MD5:	98FA0438E4D560C3E3F8E6279696D769
SHA1:	5EF54B90902A66115CEE8D30BA71C21A8E2F3D15
SHA-256:	F13FFC0ADC7E47990E67BCFB8F355A65C29361B12F0F20D5067AC880393685BC
SHA-512:	F77BBDC7B41B34164B0C986FBC51B635D69C5EB7AE81744F9A3D753BDE2056A8F0652E947CC235539FA03B6C1794E066E9117622117AEBA01B78FB8FCB016AA9
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_Bd.woff
Preview:	wOFF......Z.................................GDEF..I.........&X'.GPOS..J\......(....GSUB..U\|............OS/2.......V...`g#R.cmap.......g...f.X.Wcvt ...p...\|...4...Afpgm...`........./.7gasp..I.............glyf......9...^...L)head.......6...6..3.hhea....... ...$.l..hmtx...P..........((loca.............2..maxp....... ... .(..name..H.........,YY.post..I........ ...:prep.......`.....Nj..........OK._.<...........J........ ...;..............x.c`d``......5.....Vk...`,..\|..M.....p.A...H......./.a...7......x.%.E..P....n......&\.@.4.+E..}2\;....`....K+gZ..~....@.`6^.9......"U@....hPz..E....x.....G......q.l.....vT.m...A.....n.n...z../5$k...Q.8..IEnH..fS....S..C.a../.".{.X...y.(........}..}...j..j.}.r...[m...b......B.A..YQ..3..0.6.........Hp..0.g.w.aMX......r(aO/,..V.;Q...o....\|.fX.\|....j..(.X...N...c..E.jtg.'..#...}...w...Jw.....v..j..GT.-..x@=.{y..Z.....,..!..rN7.....i.`].)4..C.z.c[...N..E.j..gRG.PG.....3.n..sY..!...+..xS-r..w...3...'.vS.y.......L..f...VP..S.q.

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42544)
Category:	downloaded
Size (bytes):	2207165
Entropy (8bit):	5.530632736057777
Encrypted:	false
SSDEEP:	49152:De2VoYydMsBmf+M7siSbPXZwRXZaPmYG0E5B:DehYydMv5B
MD5:	F66DED885F7DC3ECE33060A86A416E3A
SHA1:	CDF792984135C49E0B9541447E50C7C69957569B
SHA-256:	8CDC92AF4F52053D5E61B45716807E4B6D6DE4075C27A3FC789BD4A0EE167B2F
SHA-512:	D3575AB38EDBBDD475104B7F2B032745C9C20CDEBDB0DEC88234873A8293A50D9BA4DAF0F41F72DA85C96C9CFAA9AAA78E02BA26DF00D49DB1F8AD6BA0DCE0AD
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/static/js/main.12caf814.js
Preview:	!function(e){var t=window.webpackJsonp;window.webpackJsonp=function(n,r,a){for(var i,s,l=0,c=[];l<n.length;l++)s=n[l],o[s]&&c.push(o[s][0]),o[s]=0;for(i in r)Object.prototype.hasOwnProperty.call(r,i)&&(e[i]=r[i]);for(t&&t(n,r,a);c.length;)c.shift()()};var n={},o={90:0};function r(t){if(n[t])return n[t].exports;var o=n[t]={i:t,l:!1,exports:{}};return e[t].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.e=function(e){var t=o[e];if(0===t)return new Promise(function(e){e()});if(t)return t[2];var n=new Promise(function(n,r){t=o[e]=[n,r]});t[2]=n;var a=document.getElementsByTagName("head")[0],i=document.createElement("script");i.type="text/javascript",i.charset="utf-8",i.async=!0,i.timeout=12e4,r.nc&&i.setAttribute("nonce",r.nc),i.src=r.p+"static/js/"+({33:"es6.polyfill",85:"entries.polyfill"}[e]\|\|e)+"."+{0:"76b451cb",1:"d36d8480",2:"806a7686",3:"433385a1",4:"5f6f269f",5:"12e635e6",6:"6e0daa61",7:"88abbfde",8:"d2fdbc91",9:"9402ec81",10:"db2da4fc",11:"7b866677",12:"03d1223c",13:"3156f978",14

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	54627
Entropy (8bit):	5.582897887649716
Encrypted:	false
SSDEEP:	768:/+1vW+8oXaW17SXDu+90xcyWH9/tskWsIjwHdpOYyRM:YW+VXalMU/tsqCM
MD5:	7A49369E36F3B34D19EBF31A933843BA
SHA1:	8B8B9DE52BB9F638BE786690DA267ED17BC8E1C6
SHA-256:	C62C0DD47E8988A5AB575EEFD2211DFF96493283C745EC743BEBDBFBA381BC29
SHA-512:	B2CDBA03D17F8AF747011A037A1639BD4B22BDC2CFA9370F2B9E446FF63661C30B204E4F9E4E4AAA80E338BFEB2DE1CFD255B238E68F4F9A1D0122E724063A04
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b854ee52/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0 /./.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var qpb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.jT(a)},rpb=function(){return{I:"svg",.Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",Gc:!0,S:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	5681
Entropy (8bit):	4.772015688526843
Encrypted:	false
SSDEEP:	96:Z8iRiJHDg1GA9gH9g9Ez+Q0Nzt2gAoYvWnkwJGScJpYILKRKDKgLom8z7gNDiQly:qiRiJj29u9CyG7NwJpVLd78mGmDiQFR4
MD5:	B550C75569A4E4473D231D1B414606A1
SHA1:	02A5BFBD65E359BCD80627A4FB2CA02061276E2A
SHA-256:	9EBE52A8FB1BBD1D27DA208D7B323CB6E7B7C3BB664ED9D1E420C72703720DF8
SHA-512:	6815288870F30C8C3ABD1DA1225037EB398FA219D8614277CC7E4E3B4110A5C0F05B6280392022959B916922D1D3D4F233BAD8AD2EB9746550B3E9D964A6A7C6
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/Neustar_Fabrick_Unauth.js
Preview:	/* Marketing Rules version: 3036 /.//Rule: Neustar_Fabrick_Unauth.//ATTUID: ml916s..//Hashing function.function sha256(ascii) {. function rightRotate(value, amount) {. return (value >>> amount) \| (value << (32 - amount));. };.. var mathPow = Math.pow;. var maxWord = mathPow(2, 32);. var lengthProperty = 'length'. var i, j; // Used as a counter across the whole file. var result = ''.. var words = [];. var asciiBitLength = ascii[lengthProperty] 8;.. //* caching results is optional - remove/add slash from front of this line to toggle. // Initial hash value: first 32 bits of the fractional parts of the square roots of the first 8 primes. // (we actually calculate the first 64, but extra values are just ignored). var hash = sha256.h = sha256.h \|\| [];. // Round constants: first 32 bits of the fractional parts of the cube roots of the first 64 primes. var k = sha256.k = sha256.k \|\| [];. var primeCounter = k[lengthProperty];. /*/.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	682159
Entropy (8bit):	5.347917983475889
Encrypted:	false
SSDEEP:	6144:KqSrU8EN4R2pSS1Ua7gFlu1JAegLsL+wLdX8C7bh+nUqWioFZyS6pVNwT7x7c75v:WLsL9LlqWE
MD5:	FAF669DAFFC9E9AC1E9615B46056DF43
SHA1:	6CB7EFCCD9FB360B470D05B7CF6257021383D48E
SHA-256:	128CBAD01AF6BF71B409BB139CB8AA1FEB05CC2FA2A9C6E7BBB0F014DC19C457
SHA-512:	E899F82B658379E85B679A2A6496E9715A1DA193F8BC33A81985E9C6D7C2DE2947762D659A78B8D709C813BE5B9E8190BE764B77DE12144BC7AA57D2F4DBDDB4
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/global_all_cms_globalnav/web-components/2.0/attwc-globalnav/p-vzp2vj6a.entry.js
Preview:	import{r as t,c as e,h as i,d as s,g as n,H as a}from"./p-9cb43b19.js";import{g as o,a as l}from"./p-da828625.js";import{i as r,K as c,g as d,a as h,b as u,c as p,d as g,e as v,f as b,h as f,j as m,k as w,l as C,m as k,r as y,n as T,o as S,s as L,p as x,q as _,t as A,u as D,v as M,w as z,L as N,x as O,y as I,z as P,A as H,B,C as E,D as R,E as U,F,G as j,H as W,I as $,J as G,M as V,N as Z,O as K,P as J,Q as q,R as Y,S as X,T as Q,U as tt,V as et,W as it,X as st,Y as nt,Z as at,_ as ot}from"./p-39475d66.js";const lt=class{constructor(i){t(this,i),this.gnActiveModule=e(this,"gnActiveModule",7)}componentWillUpdate(){if(r()){const t=document.getElementsByTagName("body")[0],e=document.getElementsByTagName("html")[0];this.menuOpen?(e.classList.add("gn-ds2-overflow-hidden-sm"),t.classList.add("menu-visible")):(e.classList.remove("gn-ds2-overflow-hidden-sm"),t.classList.remove("menu-visible"))}}componentDidUpdate(){this.menuOpen!==this.show&&(this.menuOpen=this.show)}passEvent(t){switch(t.keyCo

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	898
Entropy (8bit):	5.410005956950647
Encrypted:	false
SSDEEP:	12:YqmgPOHOnbLCsNGRcObDLNxnz/i23HDmhiGrdMdhrZ6Ec9M:YoPSybLCgGVbdxnz/iIEiGrdMHWM
MD5:	5AC9037CC3ECE3ECC5F2E4B8C6A453E4
SHA1:	8D29E543BC6F0F48FCEF21A1C0D756217A2DF483
SHA-256:	08FBB59626BDC2BE93616FFDF8B2E407CE2E3547229A596441182918C0D6F29B
SHA-512:	6C112153FAB0115CD8F00049D5487AB5599059DE0BC74ACC67473FEF74DA7124EBA87A7E70099E287B6D12C3D3D71E33892D2B38796FC56D908F96CEAE675108
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=2698003961308787&correlator=4019115447072384&eid=44809527%2C31080778&output=ldjh&gdfp_req=1&vrg=202402080201&ptt=17&impl=fifs&iu_parts=22674080263%2Catt_web%2Cservices%2Caccount_overview%2CAcctMgmt_Global&enc_prev_ius=%2F0%2F1%2F%2F2%2F%2F3%2F%2F4&prev_iu_szs=728x90%7C970x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&sc=1&cookie_enabled=1&abxe=1&dt=1707955921802&lmt=1707341168&adxs=268&adys=1063&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&vis=2&psz=1263x0&msz=1263x0&fws=4&ohw=1263&ga_vid=447345428.1707955922&ga_sid=1707955922&ga_hid=160808378&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjY3NDA4MDI2My9hdHRfd2ViLy9zZXJ2aWNlcy8vYWNjb3VudF9vdmVydmlldy8vQWNjdE1nbXRfR2xvYmFsIixbXV1dXSxudWxsLDNd&dlt=1707955908179&idt=13474&adks=391953684&frm=20
Preview:	{"/22674080263/att_web//services//account_overview//AcctMgmt_Global":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=95dcb621db441056:T=1707955922:RT=1707955922:S=ALNI_MZ3wZZ4-gQihIqRzBk4pjTtu6yFIA",1741651922,"/","att.com",1],["UID=00000dc9ffb44975:T=1707955922:RT=1707955922:S=ALNI_MbvJJIaaBSGoMxxVxfKTnJfs9YZ1g",1741651922,"/","att.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CInnytCHrIQDFXABTwgdRMMEwA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOUCNIDcnOF7CwvDU1v_8IpSvohOTFDp0boa3f2jdYfraQ5d8UmUK7OASmxUYOBV-ti7xrxliP6vIRiBBpOcybLihLzmkK_XRXOViLRkemsiKE4EKItMA",null,null,1,null,null,null,[["ID=d4089f215a4db0e4:T=1707955922:RT=1707955922:S=AA-AfjaLhnsNyGeQZIFvIWWsBxHI",1723507922,"/","att.com"]],[]]}..

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.369707376737533
Encrypted:	false
SSDEEP:	3:wZkKaQ0x6d:wZDIcd
MD5:	7FC8633AB4063FC68D1E25FA8A90C53D
SHA1:	C3EAC2CF2AE24B5B11E94FD882B5EA0144FE728D
SHA-256:	6EC1D233D26BC2F7A2F292476FD567238FFBB188582250325E68E22914CAD031
SHA-512:	F3B7BB8DD539E3CB94EA227C9175757F3280C63169E566043D9F844F0ABA8F51137C190C439E37316F47DD59B2D9373F3215C325C084B7DBE959EB9F74D70BDF
Malicious:	false
Reputation:	low
Preview:	FL(BF)\|Error=Beacon body is empty

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3530
Entropy (8bit):	7.6385347120631835
Encrypted:	false
SSDEEP:	96:0OOgET49Usd6lVfgMpsBtkoW3Xrx+iTIa+O0YD:cJSCnw6X37x+iTIa+O0w
MD5:	3AC8CB5433FEC2BAE753F5259B98E139
SHA1:	B89F7C379C59BAC91A2FB27A5743C81DFFBA14B4
SHA-256:	9F0A7EE0556319E206DC5D09EC6E4A7B1B2C25596821122EAA24BC32EB74A351
SHA-512:	175DDFB22FF1FCDC6B6670FC8361440C82047D9737DC3A65AFA27924CC7931114A719D8DFE95B099F77E239DA33B5AC03CB61ADFCDBCC350781A828C158B214B
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/security-icon-134.png
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<...lIDATx....u.F...q....E...L.f.RA..,W.....P.@r..V`...T.m.Y..m.!@R..b..;.."%.g..{g..B......xK......b.i...x....v...l_.....o@..5....V....d.d.Mv...mZ._.. ..P.............y....@....$Y...zd..'.>m.aso.S.PS"`.0...@.6O.}...m...&...@.........'..]...K.3.....a({...j.y0Q...:Q...8]......Da..xU......LH.[..........I.\r3..y...I0Q...6...nG=<.m....V..X5..../..y...m......\|..[...I.E0Q.....(.$6....I8.R.ah.(.Ki.....(..d.m.>.x...V...2.LB..7....)..f....g.....9...`%.]..[....9.u.................N4.V..m.-.(..@....2......=.O5..\|....8."l..z..........l.6.w..a.Da#,...b.6O..i....9.....g..MKR>,..Y.....>....b....L...y..:>-.+.7../I..U.9l.}.4?VI@.....\.h[.L......".......8....fU"0....K.P,._CsIO.,..q.s.)y......l.O7U.6....P..l.Y....Y..lz?...}......_....k..H....'...,j.v.r.-....!.~.....S.~9R...}(......'..:....\...ZO............2.....2y..^..D(.$ :...i........N.....U({..Y\..>....\......eD9%.'K...{....'.1..W..>X....

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=*;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 52, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	7.919176008417911
Encrypted:	false
SSDEEP:	96:whmBrfJbFAe3M5ZaO8jzfdunjW8z3d0QRNE:whmBJqec5ZQ/fdun68OJ
MD5:	072FD9D2BB54D755712B8F41D80B5F5A
SHA1:	E67BE8D502F363E3B242E62254BE82A4540B8BC4
SHA-256:	92329A101DAB051A4C91CCE3418307D65D8E65B5CB4CE73AA3F11300470BBD7A
SHA-512:	58B8C1CEEEECC00F0E841F27E196A60697A4BD6298133C3BB7EC95D0F6E0F90A5A123693FF7565BD2158B544BE1F851EF5F6B96C1C669E119A3858E040778DD8
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/att_logo.png
Preview:	.PNG........IHDR...\|...4.....H.\.....IDATx...{..uy....!7.\..B.r..-".@HU."...%U..P6 F. -2P..Z;."..H;..+.h..x.:........]("W......I.xv....}.y/.i8........}~.\.......,...1..`-...i.j.........\|....a..0.....S..........?.g.l,..........4.a_c...M.Y.+.....#9 .....wG..1.V.Y.5./.I.1..n.i...Q..u......p=.h.F3....4y~3..Ec\|Gwe.4lg...&`.f.s..a....S.k.>...9.W..).P.O..o..Z.Y~..I.'..F../.Q...\|.{I..*...1....6<.O.7q.4.L.Y8....!....p.....d.....}q...&/.........C..".Z"M.-d...h.....6[x.1.....+.H....I...=.....+.I.S;....v.... aK..th....p....[...6.-..l....B.O...d.TY........=......,..gV.....E...#:.,....@..S;.........T.Ta...\..W..i.HW.E.{a?.........1W.,..[K....(4....K........+.......!.dL.L.]........b.gK..@...xK..f........j...y...q.n..p.'........Bir...x\|...cG#...Qi.j..O8.....7qb..PM.\|...G......i.'....p...r._..>..%Ti.o...+M..7.X..V..Q. MN-.=.KE...>....?..xb...N.w...^..x...-..u...m.1.U..T{[.l.&.&.a'..~.N.S..D.........o..!`].....(....Y9.....k.....Q..,.J.....jg..o.^...\.+

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10901
Entropy (8bit):	4.978961357056151
Encrypted:	false
SSDEEP:	96:jjBmB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDA0/t:jhBHczCVvKRC7Wi4xi18tH/0gCk
MD5:	90CE59623FA24013407147229876A2FF
SHA1:	B123F5A44F8AA1C2A5FFF39B7B6390D10675C7D9
SHA-256:	56E8B4A2F81EC40AF2B68543DC0B60357E54EDCCEFF34B698F3E395548873E02
SHA-512:	73409C3439D0B2F3B43A7F29D5CB76E04B147DF0A7E92E28805869C532006044911A504C977B7DC1549E3058FA3364FD34A538315CC11BA2A60D58FCF15B51E4
Malicious:	false
Reputation:	low
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955896370,"h.cr":"edb9f7d69d399df818ceee9a4d218d7e7105202a-8921eae8-fb0f3170","session_id":"6acde003-fb49-417c-b973-c43a0915fc9e","site_domain":"att.com","beacon_url":"//173bf106.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1815
Entropy (8bit):	7.167000052394706
Encrypted:	false
SSDEEP:	48:3kNinNuiAaCJJ3bXAZ3hzM1zBXzpLKazfac:08N+vLGM1zBXFHac
MD5:	ABD3BFF57AFC444BE6F78801334E6C10
SHA1:	011429AC96709C9B05CDA6F29C3C2ECAC6158391
SHA-256:	F7582FD23DB2B0F03A798169C070E6EF14A4BAF31D2B6DB9F3083FDE8ACED2E3
SHA-512:	524B44202F62D22CD8981F697E385C719EB5346F32437655CC62327A135E966CBA5237D80304C4EAE76952F72E0078B3784114239E6895C71845CD284D1287A0
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/images/favicon.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:AA5BD89B936B11E88350D001543530E9" xmpMM:InstanceID="xmp.iid:AA5BD89A936B11E88350D001543530E9" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" stRef:documentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2852)
Category:	downloaded
Size (bytes):	193657
Entropy (8bit):	5.522305357343455
Encrypted:	false
SSDEEP:	3072:LNIgfQS2uFKbZ5j8iAizOb0FIjSO7Y0Faq/CzbdscN27rSTO:Z/2oKVFmz7Y0FaEUVN27rSi
MD5:	D28CD5E3AA20F62A9D757A45BCD6CFCD
SHA1:	C23A4C34D27C15E290F671E6BD821B5EB3B67D60
SHA-256:	B77063BEE8F3FDA04819B9A23BD06C2F3919C986EF765579E2FD450C81C1D006
SHA-512:	4D9FBCF0A0E7391C1479E51A995E4BD0F2F70168C43B54F826036A0D732CB4E825DAF49A4167EB462A23351E632CE1A7C45F6AFE13F4F262F6CE813E4E79BE18
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=DC-6143919&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=function(a){return a.raw=a},ea=function(a,b){a.raw=b;return a},fa=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Err

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26757)
Category:	downloaded
Size (bytes):	27663
Entropy (8bit):	5.795977711867059
Encrypted:	false
SSDEEP:	384:Rdp2aQVEqBgtlRMIU8DR8NiSFCC6MMnXSOTUQxUDwZC1iaHPxj8AKXEUUvQznUKW:R0aPV8N/FChMMnN1x1ZC1ia/uEZvSJO
MD5:	21604CB6D3B1DBB454D8A018D4803972
SHA1:	DA7EF056C54A147E62266AE5DAA1A0165913EBC3
SHA-256:	572B784CCADEEC8FAA3A9F24482F081BC7B6F8DF8E6EF2676835056874E2A705
SHA-512:	C5F7D146C0530F45D0ADFC38ED4D98D9212B91EA73ED67440E5261E339ED1CDD9C301C854F62AA778342F79B5187FDBC745B8D2843561C3C9C44A58E8B264776
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/vendor/modernizr.min.js
Preview:	/! modernizr 3.6.0 (Custom Build) \| MIT . * https://modernizr.com/download/?-animation-atobbtoa-backdropfilter-backgroundblendmode-backgroundcliptext-backgroundsize-bgpositionshorthand-bgpositionxy-bgrepeatspace_bgrepeatround-bgsizecover-borderimage-borderradius-boxshadow-boxsizing-canvas-canvasblending-classlist-cookies-cssanimations-csscalc-csscolumns-cssfilters-cssgradients-cssgrid_cssgridlegacy-cssmask-csspositionsticky-cssreflections-cssremunit-csstransforms-csstransforms3d-csstransformslevel2-csstransitions-cssvhunit-cssvminunit-cssvwunit-datauri-ellipsis-eventlistener-fetch-flexbox-fontface-generators-hsla-ie8compat-json-lastchild-matchmedia-mediaqueries-multiplebgs-mutationobserver-nthchild-opacity-overflowscrolling-picture-preserve3d-promises-queryselector-rgba-shapes-siblinggeneral-sizes-srcset-supports-svg-svgfilters-textshadow-touchevents-video-videoautoplay-setclasses-shiv !*/.!function(e,t,A){function n(e,t){return typeof e===t}function r(){var e,t,A,r,o,a,i;for(var s i

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5243
Entropy (8bit):	7.654490494450682
Encrypted:	false
SSDEEP:	96:1e4wZ5MRTbPz2gNReVLCKU7pJjWX9poY8/LYLyKOC7:1e4/NbL7RedU7rWX9C/LJZo
MD5:	3779769A5C227D44F0E601B31C693BD4
SHA1:	4A6076A60FC7F4F43BFFE2D6DADA969B52D3C5C9
SHA-256:	47FCE7DCEB34B4074B77C921A2E0596F9863811CD57C65B8DBDD0D1525FA0C07
SHA-512:	45D5EB4BDD8DBBDAA80F970198867E32A02BE00079AFEC8E1F5349331EC79CC2C0125BCBDDFC9E87DF8154EBF7036597C6F77251DEEF9AF10A60C6AA39164A79
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...Qo#.u...E.".6..8I.d1....s_.d@.}...O..'X.....P.....6/.S)..........i..mj...A...jh./...........ZJ.5...s.=.^...l.........\-K.?...;.>...Q.........@..k.?(....rqq!...2.N._.../......w....<...)..........ukpF..,..Y...K.{t:.Y..]]].{*..hs7.......k..........M(&..:I..;....d'..B..........p............Hd..y^...v.<:C...k.1..g.^o^...z..._pe .......&.N....g..........Z..@V..&..................]..lQ.(..Y..D@{.......@..@..[0..+8"_xF@K.J&.#.0.......h.-..Q..5.k.$.d.......@^.....9Wk.K...>..DD{........@N..#.bY..."9.D.9.........b)....m&@,K../.....f..A.....u.......$(....F.`...e>.`.G..................O..........j...k.....G./_..._...D.y...........Z../...........`[<.+.....-...Z.......O........^..q\|\|,a..V.=?W....j.r.......%.\|..GK?...P.?}.Wy..?..'_.............r\|.e......R..}}-gggY..q....@.......t...g.9....."......u.Q...&..4..v........... ...x.b...N.y._.......J.m...S.....v.............$i..3......

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23644, version 1.0
Category:	downloaded
Size (bytes):	23644
Entropy (8bit):	7.97875728674254
Encrypted:	false
SSDEEP:	384:6AsxARD0XUFyrvvdd0opaupWKPik+TuqhaVbfgzDjIwO05WA6RruHtX:6dA8VDluoVQ4pfAfF58BuHl
MD5:	496A70C0EF2A83CADA48E4E6712D230C
SHA1:	67096D05B1816262AF1103CDEC9B77AE232DEE6F
SHA-256:	3664F91BAEC63678FABAA2AFA2411AA50292E47CACB796AAF7C862620698D11E
SHA-512:	202F369A283568D74012279723E1E067606B29153B92C4317623598B8F952843D3529A0D315A3D54D3422D0B31FC175DA89527D891BAD547F928502D5781DFA9
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_BdIt.woff
Preview:	wOFF......\\................................GDEF..L,........&X'.GPOS..L.........8..GSUB..W.............OS/2.......Z...`g#R.cmap...P...g...f.X.Wcvt ...........8....fpgm............./.7gasp..L ............glyf......;...a.\...head.......6...6..'.hhea.......#...$.$.@hmtx...X..........#.loca...L........\|Fd9maxp....... ... .1..name..K.........,YY.post..L........ ...nprep...h...d.......P.........w.._.<...........M............:..............x.c`d``......U.?..V./..2 .....D.p......p.A...K......./.a...@......x.%.5.BQ....7.. ....7a%.%........l..&.4..8...C.L.ES.....{X.%..t3...7..xC...h.sB....S....x......Y.....\.m.m.vr.(.m.m[....;.-...>F..G.]..5v.O........T9.......'...P.h.j.....?b?I.p.d#...:Z..:.V.R.-....\|..S.e..k.......Q...(..(..(.N.j....P7<..q..p.6C......\...IX.e..S.zitG..C.J...!7Ja4.....'F`,.7Fi..E.j4..q.. .8..<....'.W.&.......\L}Y....9.r..<.......F.X.8.FsTA.p...e..Z.T_....VQ=.N..=..oU.p.1.D..smP....2..4....x-\.....LUCW.]...T)+.g....s.k.C......}Jl..x..s.>...v.m.U

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.774838638690409
Encrypted:	false
SSDEEP:	48:OZVKu9puDf+sG4rnNwP+FOObT6Xmn/WOuR6L5MkyrSEppRL:y9puDGsG4rnNwmIObT6W/WOr9MkBoR
MD5:	B77827C50A912DFB41813F14CD3F8291
SHA1:	57C7E4F300F2E9C570C1C40BC52234A71992EB83
SHA-256:	4C425946EAFA64CCB0F03051C8EF471624CFDF84DCE2F7C9FDAAC5015754A9FC
SHA-512:	5B93D4DF75F7796CAE96A1D0A663341F59EF0775ED2902F90068C931F794610928147794431DF2E8D870FF5F2AC4DC771B3098478206349C69EC397C21011EDE
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/Z0IIzRaYIgRNxjlGR7HeS_B6WlFxEbSK4MGEzDxrH8Mszp0QD8DqIcDnhkMzRBr1YDqwtT86=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................D.D...........................................2............................!"1AQ.#a23CRq........................................=.........................!.1AQa.2q.."....Bb...Rrs.......#$3............?..UDJ"Q...D.%.(.DJ"Q....V.4.M...=.F..{.A8...\|.,m.<.'.tMQ...+.G7.....r.Q@Z{..G.5......z...4].<..w.^.b.2...2y....v..U(.DJ"Q........3X.K.2'f.....r...H2v..{9Y.Z.:.VH.f.4.q.\.Zq.G[V.f2..tN.i.....4.'....@..X.G7.!...q..K..?.\|.w.VowVl....j......a{X9...........u.....I....[P9........./...n...Vf....c4-.37....f..6.....eT<u.Zk..8N.1i.c..=.9....y.2..Wt`v!K..WA.5#E.dk.K...:p.7.Q.u.auU[3..%0:..f...k}CE......^(.m.%..l.........J.T..;VuSN.i]...i.....QVEY.!7c....z.]y..(.D_.c.. d..8...>.....6\\l.]%.jW.;<.in.4Y.e...LH....J...Ee......T.R9.`};..q.......dP.E.P.G.c....G.I..h.k.w...xJ.....].".O....8.h...\[[..o,.....O.r...Ajz..:..i.*Y.q.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=*;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (756)
Category:	downloaded
Size (bytes):	9236
Entropy (8bit):	4.613932448838148
Encrypted:	false
SSDEEP:	192:tebpZ0x5kRWrEEpyh7yvkblTlJicftaAFk0fvWyDZWQ1AYCToEnDg4tUgvC43y:tebp2TkU98zbFlpFRWylQvy
MD5:	E91A54C7C184DD9473B48C1A2C76C49E
SHA1:	228D3DE8EF30401A6B0694E518CD39D4199F9184
SHA-256:	966FCF29CF0051EDE07D14005003F8473636E7F65A01359BEB425EF31B1E3EAF
SHA-512:	220A7FD05EA2F433EE639FD8D7D0B0B090F116B7C720568A2E9D9414CE5AC9AA85743284ABDCCA67F6D2BE756303FDFD00E40B8BB708D55143F8B59DDFB07CE9
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/airpr.js
Preview:	/* Marketing Rules */.//Onclusive airpr.js..(_airpr_ns = {. _airpr_ga_dim_preset: {},. _airpr_ga_account_preset: {},. _airpr_ga_type_preset: {},. airpr_id: function() {. return window._airpr && _airpr.hasOwnProperty("id") ? window._airpr.id : window._airpr. },. ga_dim: function() {. return _airpr_ns._airpr_ga_dim_preset[_airpr_ns.airpr_id()] ? _airpr_ns._airpr_ga_dim_preset[_airpr_ns.airpr_id()] : window._airpr.ga_dim. },. ga_account_preset: function() {. return _airpr_ns._airpr_ga_account_preset[_airpr_ns.airpr_id()] ? _airpr_ns._airpr_ga_account_preset[_airpr_ns.airpr_id()] : window._airpr.ga_account_preset. },. ga_account_type_preset: function() {. return _airpr_ns._airpr_ga_type_preset[_airpr_ns.airpr_id()] ? _airpr_ns._airpr_ga_type_preset[_airpr_ns.airpr_id()] : "ua". },. preload: function() {. return !window._airpr \|\| !window._airpr.hasOwnProperty("preload") \|\| window._airpr.preload. },. ca_cookie: func

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2363)
Category:	downloaded
Size (bytes):	36099
Entropy (8bit):	5.266544519281258
Encrypted:	false
SSDEEP:	192:W0OW02ANbMD6l2n+brGtUQnSMfps3+eYQY+h572hk/xrAY5Y6BjSmMErEURHllPx:kMD/+vaW1eyH/PiF5fydQt/DS25gb
MD5:	D933811BD3D6E357AD39601D152CE3FF
SHA1:	E097A676F5D9EB96CECC7FBB2B73A9FC8DB4B018
SHA-256:	C8C2157918C9FED0BB9DCC56C96B52DC7AF70B05CA0228E467EAF91777751AD7
SHA-512:	9429346842FA0AF00642F699E3B868AB5BFF84DB2E9C4F300F8C669817A59098E0E750DAB96EAE55D69610997080013A3F1718EFF49386CD53E3E20CC30A4DEF
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.13.2/themes/base/jquery-ui.css
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Arial%2CHelvetica%2Csans-serif&fsDefault=1em&fwDefault=normal&cornerRadius=3px&bgColorHeader=e9e9e9&bgTextureHeader=flat&borderColorHeader=dddddd&fcHeader=333333&iconColorHeader=444444&bgColorContent=ffffff&bgTextureContent=flat&borderColorContent=dddddd&fcContent=333333&iconColorContent=444444&bgColorDefault=f6f6f6&bgTextureDefault=flat&borderColorDefault=c5c5c5&fcDefault=454545&iconColorDefault=777777&bgColorHover=ededed&bgTextureHover=flat&borderColorHover=cccccc&fcHover=2b2b2b&iconColorHover=555555&bgColorActive=007fff&bgTextureActive=flat&borderColorActiv

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop 22.4 (Macintosh)], baseline, precision 8, 1280x416, components 3
Category:	downloaded
Size (bytes):	137358
Entropy (8bit):	7.956349688499274
Encrypted:	false
SSDEEP:	3072:xA8cpTPtRA/BozKaZkGBEeg2BXF6vxAKSAPtH5GFQZ6X:BMPtm/XaqGBVXF6yZAPtH578X
MD5:	73EB938841C05BB1F68064AFA0492354
SHA1:	9BA685E6AA96C209F57D6EA0CED2FB7CA489C9FA
SHA-256:	3DEC53791EF255E4F0CE35910CE908C9D9E379274D2CA003351F453A9B994F7C
SHA-512:	EC74CFA7E9AB9938A6300EEB5629A97ED2CBFDAD6FA14F273EB066CD50136BFD733470FD6B7E0F67F9D5D94AED3463709F1189B905B021D82DFCB5A74DD66357
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/rights-choices-hero.jpg
Preview:	.....LExif..II*...............1...!...".......Adobe Photoshop 22.4 (Macintosh).....Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dam="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" dam:Physicalheightininches="-1.0" dam:Physicalwidthininches="-1.0" dam:Fileformat="JPEG" dam:Progressive="no" dam:extracted="2022-05-19T11:56:08.983Z" dam:Bitsperpixel="24" dam:MIMEtype="image/jpeg" dam:Physicalwidthindpi="-1" dam:Physicalheightindpi="-1" dam:Numberofimages="1" dam:Numberoftextualcomments="0" dam:sha1="74a4e3bcdc1a532a477cf057c88b7d30997d3157" dam:size="134682" xmp:CreatorTool

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	111753
Entropy (8bit):	7.983499066074463
Encrypted:	false
SSDEEP:	1536:2RFzBzsPcVJX/vkDd35zPUbr92Ey4aIYwL7rdkEQkRdvEdrS76sk2tB2hEf1MxGW:qsMJPsDdJTqrILI4eTXk2tB2hWbljEMk
MD5:	75431674108C62BC5804D52E71EC52DE
SHA1:	E10D0DBA2D4137BF51C1AF334705DE36AC2E5993
SHA-256:	729341C031AFCD52ECE6EEA913459C4AC94A7A51235B6F274832ADFBAB85A862
SHA-512:	D922E641BB9BD85EC064B5F2FC1D3AFBB515596BC5DB41F90E381FBE6313C760D2B152B4213E78FC0648FAAD8B603C64892A8DAA4A9CDBE5D959031265EDA433
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................Q......................!..1.AQa.."2q.B......#Rb.....3Sr.Cs.....$4c......D...T....................................E........................!.1..AQq....."3abc.....2Rr....#4S.B...$5%C.............?..H.{..".H.T.C... .R.....\.......PR......!.R%.....P4U..... J. .D.4.\.r.......W..r..r....".....T.pJ.r.rP..$.U.%...&.9r@..pJ.(@..$J..\.r.9r....... ABT..... .....b1W....E. .8&'...."T.r.W.@... \...R..CEJ.p)@U.$.T...H..T.S...,.\..\.r.9,.\...\. ...AB.B.H......T.rYH..T..K..r...\...B.9r...P.&.. ..$.H..\.(..H. ..BjYH ...J .*jPSl......1.JT.9+R...R.D....&..SF.S.R..4pJ.BpM.8%..T.G....&.c.pL..Mc.....Q...pM..1.hpN...&1.xJ.Brc.......c.....8&1.....Bm.<Ur.u.....R..h..0..8.....A9>K..c.&..#\....8;.~I.....{.\...=.....:?.1.._..'-......\|\|........)\|/..._R...7....u.Zz?K.}..p../...%....N._e

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (846), with no line terminators
Category:	downloaded
Size (bytes):	846
Entropy (8bit):	5.53828129163559
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHjdo2OBcJ/nim/6AP8ZRmTXVFqN/MOjKTiUMGT2IWRYRmTU:hMiRO90OaJim/vPFTFf8G9eTTYf/A8
MD5:	0A970FD3DA94D029F1023E1AAA3837BA
SHA1:	B0DB32CB67E093F0CAF1AFAD8B42AF9185B1F06F
SHA-256:	083594162E2B974C2DDF0EE19C3331023A46FB1318CEE37CA0AC3905E98C2712
SHA-512:	2179D79DBA0F054779477F1B8EBC22EED088F93CFF234E9B831C37F164F58118092273BDB63E79FD5C21A0E77E114E5EF9C0175450C30AA8FD84D5797D0610B5
Malicious:	false
Reputation:	low
URL:	https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=*;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html"/></body></html>

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, privacy-icons
Category:	downloaded
Size (bytes):	14080
Entropy (8bit):	5.228321547792356
Encrypted:	false
SSDEEP:	192:hOf39cWdYU7tqdVle8QtJc4SqXDj4/oO1OpwWyMQ/ZllwQK:A9tH7tqdVet8GO1OTyMQRlC
MD5:	5DE210F1166B3E72D020E76E90A4B6CC
SHA1:	3E880A72177E600A0DE9C0AD5C13F639FE686528
SHA-256:	56378E44D3D06FDB6C69F9E5143820B0E8BE26A04FBF60076CD7EED0581AC606
SHA-512:	F801DC972B1D45F4C1CD17033FB4C9ADAB85E6B361D7B68A051852C2E8DEB40CF240D4FD5ED1FC6838040C62F3244FB6D1F9FAEC57FC9A92FFA5783D7349B2FA
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/privacy-icons.ttf?e18jd3
Preview:	...........0OS/2...z.......`cmap.V........Tgasp.......p....glyf>.O&...x..2Hhead t...3....6hhea......3....$hmtx.?....4.....loca......4....Hmaxp...$..4.... nameJ ....5.....post......6.... ...2.......................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.......................!5!%!5!.!5!...D.....f...U....@.............9.e......7........}.~.W......}.........9.........'...............}.................c.................................5.F.I.`.c.k.n.v.z.............3.3.3...3.93......31.3.3.1...3....13.3.3.3..3..#.3.#.+...#..#.1..#.....#.3...#.#...#.....3..3...3...3513..3.#.#..#1#.#.#.#.+...+...#.#..#.#..+..#..5'5#573.3..1..3..5#5#5'5/.15'3.#.53=.'5/.5'5'#'#5+.5#'1'53.1#5#5'.#..#5#.=.#53..#..5.5#.#5/.5'5'5'#5'#'#'+.'1'#'#5'5#'5#'#.#5'5#'#5#5#5#'#5'535#5'#=.'5#5'#.#5#5#5#5'5#53..7=./.5'#1+.5#5#5'#53..3..3.3..#.35#

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2182
Entropy (8bit):	6.676890230288302
Encrypted:	false
SSDEEP:	24:51a6GpeBcEYW/fj+yybzaKrfTypnV+ogDwDa0QZKRC8niM/RAejtDAd:jmpeB35fjqr7yqDObQG3RAoMd
MD5:	28B3509A23C91AFBBBACE003DE618C5E
SHA1:	36C88272991C8CC7AE434D1C15039DE3CD763E6E
SHA-256:	A2B42D4FAFEAE7DC0490060AFD9B7FCCED9830E11AFF69D9E0CE616BBC5D26F4
SHA-512:	B7AE16F671083482BE227DDD68C94B003AD1C73578ED99D52DBDB810027A9197F9E24A3B2837DC1999C4446AB1A2572BF0ACD1714CC74267C7C18DAD40B51F7C
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/port-my-data.png
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...(IDATx...o.g..a.........R..T.C.c.1TI.ZV...f...x....[.?......b...s%[..EEu_q.ur.hh.}.}.1\<X.{...}..N....&..i..@dB.................................................................................................................I..~...j....._.rP....O....S. ...v.=..&Q.z.."......RY.}k6.....^.8..b.pssS.f..Nw.#C.R....n...x......#.gV.V.....F.V.?..v......%..........`.....3C..q...<..N..M..-L.1_..D.a.....F...@...?#c.s.,y..S.!,...)...a.z=?)4 ...a..^....?.B.p...5:......F...@.....B....Z......*.....{..........#.4....@T.F.....szf..BX.........Q..............................................................................R..y..a.......@..v.]G..c.4.........\...g_...!.Z...G...x..M.. ..+X.r5m_..@...0...kY.3Z. ....<>...?...B..O~.B.!.B-..B-.B.!.B-..B-.B.!.B-..B-.B.!.B-.(.e..a.....+.PN^.\.p9...N2.!\|...3.k%.\-.X~.F....... .A.y.l.....`.-..h.q...K....#..h...@../.._.). f.)TA.B.d...T0..B...B.TA.!TA..P...B..@.U

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	215501
Entropy (8bit):	5.535671100339894
Encrypted:	false
SSDEEP:	3072:cIIgfQS2uFK1R5j8/AizObpFqjqyRyDaXjVZECVO7Y0Faq/Cz2mBCO:9/2oK8M0W0yDaXjVZEC07Y0FaEHYB
MD5:	9A8A4B7EC4D38CA6DECF15F9187E879F
SHA1:	296694874846E40F6E8982E11CDAB982EF81A305
SHA-256:	669BC55C0833BCAC46E58CF147128204E29018CA7CB13B4BCAA9E87F6176C14E
SHA-512:	4A70CE8836BCE1F9E70CE87AA2680858F9DFE5F6980FFBB088525F10D0FD42B5058E51DE6D657FFEF108419AFE3B87CD8B7D53ED224AF624BFDE56E7E665BF63
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1036745755&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ads_first","priority":1,"vtp_instanceDestinationId":"AW-1036745755","tag_id":7},{"function":"__rep","vtp_containerId":"AW-1036745755","vtp_remoteConfig":["map","enhanced_conversions",["map"]],"tag_id":1},{"function":"__ccd_ads_last","priority":0,"vtp_instanceDestinationId":"AW-1036745755","tag_id":6}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1":"gtm.init"}],. "rules":[[["if",0],["add",2]],[["if",1],["add",0,3,1]]].},."runtime":[ [50,"__ccd_a

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	4.989766174423453
Encrypted:	false
SSDEEP:	24:uhyhzk2/OVsaJ4zQe3QxYaaa/vdKVDaaaaal3Ldaaaagaat3KUg+sa/:DVk2RaKmOaaa/vdKVDaaaaaddaaaaga8
MD5:	8CC5501351F013DE0CE76FA0A2C59D50
SHA1:	CCC13EA6E1BF7CA9FE31B0DD997981FA8EC6A2E1
SHA-256:	42938B72E2EC54515EB9C49145F42B8728CFC0B70170F80AEF58CE93032B1C1D
SHA-512:	BB41B6338F83027723F628D0724EB533A2BCA18956776C985BF2D6E03267D1E3C6E1C45F0A8A1316726F847DCDD16C1570AB0E8BAFFFA03D5DD663B0FAD385CA
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@.....................................................................................................\|...z...~...w...p...o...y..................................\|...E......)........"...P...............................................................3...^...............r.........^.. .................*...l...z...{...............5...Q........................G............k..........7..............................................$.......................B........................4......k.................K.........................Q............F.....................................................$......................./.......................'......X............_..O..(.........................W.............a..............I..............d...S...]...v..........D...>...............................................................................k...-..............

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (507)
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	5.590980700456143
Encrypted:	false
SSDEEP:	48:DEyM5GnVXjOlZDWFomJqiOGgzaR6flHqDe6vuEVgfAfBtRsJ/8Ee8Lfa+:oyJnxjwkFjJqdtdK/udfA0/8b8r9
MD5:	0E7BC16532936D718F36DC47D8FEB332
SHA1:	A2C67B619FAAC3A4ABA0407CB4F34D844F4D2071
SHA-256:	422AA4E7BA5FF626A830DBBEE358CB5055122A03B5C36B5F7608E1B34999E529
SHA-512:	F94140B4AB0E5D441FFF70F740AE780A293837EFE446261C3B22D4644F65D1925BD780A33F781F8A79579BF180D75E4C30618E978CB65985C0CA48F7DBB5675D
Malicious:	false
Reputation:	low
Preview:	/. Compiled on Sun Apr 24 2022 11:59:28 GMT+0000 (Coordinated Universal Time) (1825202523) /.'use strict';(function(){let g,l,e,y,z,d,n=!1,t=0;class E{constructor(a,b,c,f,m,p,q){this.salt=b;this.J=p;this.K=l.d.f(f);this.L=a;this.H=m;this.I=c.a;a=c.d;this.A=a.i;this.D=a.b;this.g=a.f;this.F=a.a;this.C=a.c;this.B=q}static ["a"](){if(l.j.q){var a=F();a?(d=a,d["#$S^"]\|\|G()):(d={},u());e.t.l(2,()=>{d&&(d["#$S^"]=t,1==t?g.v.h.j(document,"X-AK-PIM-INJECT=sync;path=/;"):g.v.h.j(document,`X-AK-PIM-INJECT=;Expires=${(new Date).toUTCString()};Max-Age=0;`),u())});g.n.m.b(()=>{if(!n){const b=Date.now();.for(const c in d){if(!Array.isArray(d[c]))continue;const f=d[c][7];f&&b>f&&delete d[c]}u()}},3E3+g.n.j.f())}}static ["k"](a){return e.a.j(a.u)?2:e.a.i(a.u)?1:0}static ["y"](a,b,c){b=l.d.f(b);return!!(null!=d&&b in d&&d[b][0]===a&&(!c\|\|c&&c==d[b][5]))}static ["m"](a,b,c){let f=a.p;if(d){b=l.d.f(b);var [,,m,p,q,v,,,w]=d[b];if(m!==e.q.x("4")){b=x(p);var r=A(b,q),h=e.j;h.l(a.u,r);f.d.p(a.u,5,m);h.b(a.u

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45943)
Category:	downloaded
Size (bytes):	71477
Entropy (8bit):	4.727277777174713
Encrypted:	false
SSDEEP:	1536:PmU5gViWdUmfkknzXlvOzDg9EeXOwDaPPw7O38:PDyViWqmfRlWz4N6Pz8
MD5:	B1806C720095B52689406BD976C543C7
SHA1:	85223E17A0C90674CB4FE72A38A2CCFDC95FDB04
SHA-256:	02433A62F3BC96003E78509EC45872FE3330C330204FA77415039F40A043224B
SHA-512:	359A81D7AAEBA4092466D2902EF752B534D4D18BC6E8B37E156DE9F694B49467E4B255C216710BC2577B935F9270AF5BC474FD1589446E3B905DB3700433B592
Malicious:	false
Reputation:	low
URL:	https://p11.techlab-cdn.com/e/65226_1825232128.js
Preview:	/. Compiled on Thu Jul 06 2023 07:07:08 GMT+0000 (Coordinated Universal Time) (1825232128) /.'use strict';(function(u){function h(c){if(q[c])return q[c].exports;var e=q[c]={s:c,i:!1,exports:{}};u[c].call(e.exports,e,e.exports,h);e.i=!0;return e.exports}var q={};h.c=q;h.d=function(c,e,n){h.j(c,e)\|\|Object.defineProperty(c,e,{enumerable:!0,get:n})};h.r=function(c){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(c,Symbol.toStringTag,{value:"Module"});Object.defineProperty(c,"__esModule",{value:!0})};h.t=function(c,e){e&1&&(c=h(c));if(e&8)return c;if(e&4&&"object"===typeof c&&.c&&c.h)return c;var n=Object.create(null);h.r(n);Object.defineProperty(n,"default",{enumerable:!0,value:c});if(e&2&&"string"!=typeof c)for(var t in c)h.d(n,t,function(v){return c[v]}.bind(null,t));return n};h.n=function(c){var e=c&&c.h?function(){return c["default"]}:function(){return c};h.d(e,"a",e);return e};h.j=function(c,e){return Object.prototype.hasOwnProperty.call(c,e)};h.p="";return h(

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955920177
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	4.926152207436919
Encrypted:	false
SSDEEP:	3:PouVWJhquHbs0sJYXEFNjJXUIk+OCiFwsAAbHblu+FYBzO907ZWAEBbZ6iF4:h4hqIY0gYXk3bVfAbpli7ZWAEB965
MD5:	7CE3863722ADABD7C5828E94D43241F4
SHA1:	D99E5DABE9AD4FD46FC2AFF599065DEA88A49F4D
SHA-256:	07E2A6FB0D22CDBDE787EC2941EB285C222861DDC3CBC8903315B6E5942BE8CB
SHA-512:	8CB65C0295D55C3F0AA03F17E6949F2EF52157FE6D45A09D61BEB06DB0DE08C934BA2FA96EF22E12F3B27BB87ECA2AEFBB2A34F490C6CBC4BC3FD80754AA4038
Malicious:	false
Reputation:	low
URL:	https://cdn.quantummetric.com/helpers/blank
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body></body></html>

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0x979a096d", baseline, precision 8, 768x575, components 3
Category:	dropped
Size (bytes):	78202
Entropy (8bit):	7.971472710153634
Encrypted:	false
SSDEEP:	1536:K9puj3HOU8/SgIlPqCOd3b6zVHcjIT48FKP9tUlgHN72mLtR+JAoUO084:K9p++j/DQq5RrVt2yNF8JAoNW
MD5:	51C5BC7E9638ECDFC4A468DF4CAF305A
SHA1:	1295505B2FEE376D6535D92E4255E60EAE10ED43
SHA-256:	A5506C33F43B409C3F34DF67A0CD167F089FF18525FCFFB805749C88D08C3104
SHA-512:	55AFC8A33C7DDD89B86A82A26A063B430A47DDE8D32FB04984765BE0EEF8F9EDD1B10312778850CC15E0AD23CCE3D600A463310CB69FB0C193685B4656A9B54F
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:139AFCE5549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:139AFCE4549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ad334a4-8c79-4d18-b1ff-a29f66d2108f" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11058
Entropy (8bit):	4.986788927361511
Encrypted:	false
SSDEEP:	96:j0mB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDA0/0B:jEBHczCVvKRC7Wi4xi18tH/0gCbt
MD5:	A28E98202ACDA40448D1913701892C46
SHA1:	1478ED3ECC74FAF810B6B9100B2EA21C0F45FFAE
SHA-256:	54BBD2A89B3DDFC6436E4678B17D0EAD609B57DDFD817DF9B4A8B45D45ECEC5C
SHA-512:	EA319811D0EFA3E452162045E727E23DD8AE45020057E109A88BEFEA1C717FA50A496550EB796C3A3169AA3229E5E43CDDCDB726E6FC5AB3A137FDF1F41FAAF3
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=WPDUB-APVCN-LTNDE-ZPC3E-YKMHC&d=www.att.com&t=5693186&v=1.766.0&sl=0&si=3a86da2d-e501-4a5d-92bd-fd247307bd99-s8vf71&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=245538"
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955891034,"h.cr":"55d107f82f281937121b39b7de1e5f09992eeba2-8921eae8-fb0f3170","session_id":"77347219-a524-4295-8f80-f3f6728d815c","site_domain":"att.com","beacon_url":"//173bf10b.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18648, version 1.0
Category:	downloaded
Size (bytes):	18648
Entropy (8bit):	7.9875716664872085
Encrypted:	false
SSDEEP:	384:/0DW/LIHS+OYvV8fSUHHc0CTP8y62zZQ84vm:S2IyNpncxPjhVX
MD5:	A2D24DEEB37E8B4A64B5536ECB11897A
SHA1:	AFCAABA991FF5BFFCEDA661DFA5E8E8F1E2D11AE
SHA-256:	37A1212CC1AB5C935D9A3FEE05C98C940EAA895A23510E5F83D550DFBB0D763F
SHA-512:	1FF4A0AB5B9EF504F562168124984D74DD600A9B99522A5C6C08B252B4032F3A3EC395917875167C30170D1F35FD5EFF223FDE46FCA60363867A4ADA27AF3FD7
Malicious:	false
Reputation:	low
URL:	https://www.att.com/search/_next/static/widget/css/fonts/ATTAleckSans_W_Bd.woff2
Preview:	wOF2......H...........Hs..........................n..0....`..f..4..W.....l..I.6.$..@..b.. .... .......I.[U. .\|...q..6....../..?).1...P.YZ&.......^.j.{=.2jVA..3!z{...$../..i..A.e"..i F.3.;ij.....>Z.......\l7.\dg?........F.r...P....9.9N._.h.)hOIDs..;..r..-.$"..... .....4...6.'.y......{....n.rc.....p~...s.+.-.L...X`.pn...E...t..]..H...R.....y.#..}.?..`..X^.Qx.Fjf',.\|.......;.KTT.2......E.G..z..VF..m.\$kr..X$l......D...!w........^..^5..?.{.n..J....w...R........_.l~........nA.D+.%.DA..s.....5..9...H6P..uL...k.A..5..A.......7J....]...........g.XR.k......C...M........+S..G.....]........->.<..Ty.d...u4.?...D.J..$.h...I...?.x.....Q....@.4.w.KO-K..%A...H<w.......\.t..hx.....{.q...Z.f...vK..X......2..........A \|.6n....l.`0....5 .W..3.lw.....:..).K=....\....]`wf.D$.........t............\Q.....>.:.=(\..L.rLE.uQ..\.).n...K.\|S..2'@K..NQ......t..2.2h..=X.H.....^...T.... .+.K'.?.Z,...5......q@...\|uf...S.....#..'.x..F.....p,.....7......(.,......;..E.A4.<.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12834
Entropy (8bit):	7.882967481951929
Encrypted:	false
SSDEEP:	384:v7e6z0q2f1TVg7bfXThnEykpkQLpAabbFKH:De40q2NBkbbCykDLpAabbFm
MD5:	E9B3AC738FDD30627B24A08163BC2D12
SHA1:	8F0DB196E24DDA3E4C4A4732349CDB874491EAFF
SHA-256:	4DFE63095CB11A097964F7A1A6EACF0D0E4B4B5516BA98C9B848655512B9BDA9
SHA-512:	29DF772CE099F39557BA209B3BEFEEABCFF053EA59586CB939DA228E4ADF449E4846DEAADCF8930C84FA4267DB6C1720AF5FEBCBD0ACCB7193815F999613E671
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/dtv-768.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<..1.IDATx...\|.E.....!..x.x.x.L.@@E..T........@.u.]!....=<W}W].....E.Nf..x........~.OM7.,b ].............)E......"mDZ..f"....oX$).^d....OE..D..l.....^..........Vd..},R.vnv...$....;Y.Q..v..c..X.<k]..z.Hd.k,...D........t......"..tr..]..;....f..\|...."[....{+e.._d..-9g.>>(....m...;b.d...WU.@a....X..{w.j...;...8..o.@.....L.@.u.t....'R.:.AE..o .e.....sCT?V.....".w....1o!r....e.O.K...D..m.....H..W..<.:..]g.zq..0S.Tz<...X.Lj......EwW.H.................._.l.o{.wJ.."...&....""m].....L.y].-r......}.+}.a.+...4.@h9Y...+E...}...i.,2_.I..E.X.K..........6g/..N.B>...l"N..-............?ae.;j.......^...P.`..^...'"S...U..PO.\}.r.....y.m."...D....h....0.."..D.(..9"y.R.u..........@.+r39#./.3.......7...r..'.M.l..W....X\|...4A...<...7.$.t.>....\|./.,si..7C........]F.h.8r6.......vZ..F....4..WD/...I..;......l..(..0s`.Y.^.h..ms....../...?.o(....?.....9..K$.vnX......l<...t..B....l..O.Y.I.eAa

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65098)
Category:	downloaded
Size (bytes):	213725
Entropy (8bit):	5.361679936162521
Encrypted:	false
SSDEEP:	3072:z63NGm+mJgNeQQi8iqGHIKnJUtpT+BsbNLZ9ip0q:INGmYaGH5Urcso0q
MD5:	F1D54743DBCC9A03EB08F14D0DE65DA4
SHA1:	16B96431016B503517462F0797901AD8DAC94481
SHA-256:	4E973E1B8E6B798931086CF372B83E40C417E33C0922087DAD0EB2F89FA891AC
SHA-512:	209CC5643F2EFEB7E0EDD8CF015FCFF122BC355FE89694650A0CE7761FA1B22284A26CE218FE6A5337E9DCA6F7704A7AE523B997413338FF98AE10FC54804736
Malicious:	false
Reputation:	low
URL:	https://s2.go-mpulse.net/boomerang/WPDUB-APVCN-LTNDE-ZPC3E-YKMHC
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017-2022, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.766.0 c28975a504c1aa46de14fe358f4875ace2917401 */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23116, version 1.0
Category:	downloaded
Size (bytes):	23116
Entropy (8bit):	7.977484725975461
Encrypted:	false
SSDEEP:	384:t6wlBEXV7wZVLAaEShr5klWoi1kHTqahmDSh9jmhyBiv10qg5bj8pzRKdhgtX:tG7wVmSclEkHTn8+h9pBYiqoishgl
MD5:	B77138CD66C0D556B3CA6E6E7C99E39B
SHA1:	F87022BA2961EB9116344F0B74ACE98878D902EF
SHA-256:	3176A04F5A6738CF1BD8C95BE53769112DA1239CFE959FF096F9DCB7261BF5EF
SHA-512:	036D2636AAC097D6C38405281C6ED843FF735BD3880E6C42F19B0983B12D2DCAE6A38A09F1269D3F4EA97745D88A6CFA74363D2BEA75B7DEB3006811E2395793
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_Blk.woff
Preview:	wOFF......ZL................................GDEF..J.........&X'.GPOS..KX...b..)h...kGSUB..U.............OS/2.......Z...`g.T)cmap.......g...f.X.Wcvt ...p...\|...4.6..fpgm...X........./.7gasp..J.............glyf......:...`6.!.4head.......6...6..4.hhea....... ...$....hmtx...T.......... .loca............3...maxp....... ... ./..name..I.........,YY.post..J........ ...:prep.......g.....~/0.........[`_.<...........P............s..............x.c`d``........?..&.b...`,.....s.....p.A...G......./.a...>......x.c`a.`na`e``......P....0.2q03q.1...,``..``....`...G_G..................f..1.0..R..<..Q....x....-W......m..m...Am=...m.k.~+.S3.$_...8.su...\..B....T...@KL..j...>.....%}..$....~.......oT.s..3..U..B.V.wJ........P.......50.EP....z.. .Z....=..)....B..b....~.O.xH......\|e...._......EH...\|..<.^..:..\..[..`....s..~..tm.i.[...F[@.[..Hs...0eC..[.P.S...b..$./1n..[......~.?.......-....$.o.u.{..W..>.....,R......8.l..q..J..lMN.qf.....n..Y.O.....=.N..(..z..=M..j...x..S..X(R]p..

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
URL:	https://about.att.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (792), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22262
Entropy (8bit):	5.331559689664766
Encrypted:	false
SSDEEP:	384:ovk/E79uLMpPr2eiR7aeP0XTigiTYG0BdRBfVhtCsJyB047VbsVeSAQ5:uqeBdRBfVh+B02qVeSR5
MD5:	D4CF7A5C27A2C3C5038A1A7B22AD74DC
SHA1:	0D4FB595F2A3C6C71E7AEE28950C29C8973F7902
SHA-256:	2AA75B0A30009AEFB3014BE83CEA7A9B825B02D398961B34A114DEE399C09FC5
SHA-512:	32426446D398BA69A7DF68559D263312D7941851E570EE40295D3EE3B0F0AC99763CC4D7EA9FDF07F7C7E59A315E10E72EF4D1904DAB5A394BC2B5F4B05AC031
Malicious:	false
Reputation:	low
URL:	https://solutions.invocacdn.com/js/networks/1593/2673476745/tag-live.js
Preview:	(function(networkId) {.var cacheLifetimeDays = 30;..var customDataWaitForConfig = [. { on: function() { return Invoca.Client.parseCustomDataField("agent", "Last", "URLParam", ""); }, paramName: "agent", fallbackValue: null },. { on: function() { return Invoca.Client.parseCustomDataField("att_tfn", "Last", "URLParam", ""); }, paramName: "att_tfn", fallbackValue: null },. { on: function() { return Invoca.Client.parseCustomDataField("AT_T_UUID", "Last", "JavascriptDataLayer", "Invoca.Client.ddoGetVar(\"user.uuid\")"); }, paramName: "AT_T_UUID", fallbackValue: null },. { on: function() { return Invoca.Client.parseCustomDataField("call_type", "Last", "JavascriptDataLayer", "Invoca.Client.getMktAvailability(\"mktHsia\")"); }, paramName: "call_type", fallbackValue: null },. { on: function() { return Invoca.Client.parseCustomDataField("campaign", "Last", "URLParam", ""); }, paramName: "campaign", fallbackValue: null },. { on: function() { return Invoca.Client.parseCustomDataField("channe

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	182077
Entropy (8bit):	5.16707718160483
Encrypted:	false
SSDEEP:	3072:iIhP/kNVJcrH8Ol6466PPpoIVQDLB979XlcR7PZiS:fkNVJJE166PPpoCeLB9hChZx
MD5:	666766D3B3722F17DCABA4AE76498167
SHA1:	A4B8D20D8925098A1CD4C69F72AE58C217C74096
SHA-256:	A51177CE27C9440F635C6BFEF9BD3AAB0B52A97D5BC8540E2E3A9AD8F4C46F6A
SHA-512:	F5C5E6BE62B58080F0DD3A25E9783FD52525B3F0AF04C81E76ED5A0E34F9D7DB10CF2EE393E2E87B3C90AA5CC2956D8B817C30E31132BAAB687E0ECFB56B5E2D
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/inc/foundation.min.js
Preview:	!function(t,e){if("object"==typeof exports&&"object"==typeof module)module.exports=e(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],e);else{var n="object"==typeof exports?e(require("jquery")):e(t.jQuery);for(var i in n)("object"==typeof exports?exports:t)[i]=n[i]}}(window,function(n){return s={},o.m=i={"./js/entries/foundation.js":function(t,e,n){"use strict";n.r(e);var i=n("jquery"),o=n.n(i),s=n("./js/foundation.core.js");n.d(e,"Foundation",function(){return s.Foundation});var a=n("./js/foundation.core.utils.js");n.d(e,"CoreUtils",function(){return a});var r=n("./js/foundation.util.box.js");n.d(e,"Box",function(){return r.Box});var l=n("./js/foundation.util.imageLoader.js");n.d(e,"onImagesLoaded",function(){return l.onImagesLoaded});var u=n("./js/foundation.util.keyboard.js");n.d(e,"Keyboard",function(){return u.Keyboard});var c=n("./js/foundation.util.mediaQuery.js");n.d(e,"MediaQuery",function(){return c.MediaQuery});var h=n("./js/foundation.util.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18480, version 1.0
Category:	downloaded
Size (bytes):	18480
Entropy (8bit):	7.9883935603264415
Encrypted:	false
SSDEEP:	384:7D4KwqZYhcok8+w/5nW0Rp4bJcLHwrQIk3CRc4BfO/QM:/4KBYhcoyuR4bJUaTumfOV
MD5:	15D443231FF3A13B0DCAB5A9B8FD7276
SHA1:	8833865F3777104A8D58943779C3C47CD9B0BA09
SHA-256:	E2740C7B209E33ACA7176250D80F94B4924E5E5D18076EE3B95F32A0E20D1F58
SHA-512:	B475833F63AC87A71263D06698F8D8D97C5EBF06869E2D7A8D4719D4A85D886817FE7E9C602F4DCEB93C130946F319A3C468040AF2DA08EC1F6BF339BD74794F
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/identity-ui/ATTAleckSans_W_Rg.woff2
Preview:	wOF2......H0..........G...........................n..P....`..f..@..W.....@....6.$..@..b.. .... .. ..5l..=...n....F.q.&.O...6.@..X.........s.e..!.....6.c&..Z..\.UQ++....zOLA........F2l..........O..bKT.Da.)......PHM.fw\|8....gYX...^B+,&.... ..a)........N.3..V.IQ.i={."..K.CR...#)$..P........G).....m....6Fo..t.....\.n...1~.?.[s.L.@9.px.;..0p..Q<...hP...9...rq\|u...Z..h..4.c.~..... ....z...'. ...Q...........k....0..j.ZS.Y....B.I.HQ.M X.....iCh.).t..[N....'.e.e.I.TR......./4.;n...e{..Q......v.S..S.=.sw..P.....M5.Z.....w..M`.>2fV..'@.M.43.._...P.O...?.e.ml ....j("(.TL....m.n?.a..D."J.;.....#.N.E........c...}..l?..v.`M$.P.......#..3.A.:D.v.R.i..4 p%@}...3...1.X..<...K.7Uk......u...^$L.."yEE.R,..R...b..?... . @...p.....)...<.....)W1..l.N.....!V./.....2W)......\|g....D...B.O/F}.o.nsY.V...^O.....Fa.....gP.X.X..8.......`.....\|.I'..6.a}d3.1....V...YAl.n$.....L..i.....D4DJ%dJ..m.....tcZ....\|..F.y.4.f..m+..X.....dz..r...x..........oz...T.H:}..........C....oWGo.~.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	dropped
Size (bytes):	55256
Entropy (8bit):	5.569539140706679
Encrypted:	false
SSDEEP:	768:b+vH30pP9hawhqZ4kFo44pKrhs0Z/7bszBxstuNOfJ:i8p71V/mrWYEFjNwJ
MD5:	4C1CFA090FD07F5EAC17CFAAE54DC8C6
SHA1:	AC844CAE232A79DF1C7B88A50313CCAECED25001
SHA-256:	AD80A3F6B1B1B869088B872381B3179A21DCCC4E465EC0A00C92824F6462C258
SHA-512:	B61C46B08B9CD0CFE8A044400FA966CB8762EA73BA3B45668BB6C483399D1E3A3C715C5FB2DD6D5C3B1C4412375352C55D2314BB636946373D5EB87A31C050EE
Malicious:	false
Reputation:	low
Preview:	/. Compiled on Fri Aug 12 2022 14:23:30 GMT+0000 (Coordinated Universal Time) (1825202461) /.'use strict';(function(){function Mb(){this.md=this.te=this.time=this.text=0;this.W=null;this.vc=0;this.sb=this.name="";this.Ja=0;this.done=!1}function bb(){this.input=null;this.Pa=this.V=this.oa=0;this.la=null;this.ob=this.J=this.ca=0;this.lb="";this.state=null;this.hc=2;this.L=0}function xa(a,b,c,e,d,f,g,h){var m=h.ea,p,q,k,n,t,v,D=0,r=new Y.va(16);var l=new Y.va(16);var u,w=0;for(p=0;15>=p;p++)r[p]=0;for(q=0;q<e;q++)r[b[c+q]]++;var x=m;for(k=15;1<=k&&0===r[k];k--);x>k&&(x=k);if(0===k)return d[f++]=.20971520,d[f++]=20971520,h.ea=1,0;for(m=1;m<k&&0===r[m];m++);x<m&&(x=m);for(p=n=1;15>=p;p++)if(n<<=1,n-=r[p],0>n)return-1;if(0<n&&(0===a\|\|1!==k))return-1;l[1]=0;for(p=1;15>p;p++)l[p+1]=l[p]+r[p];for(q=0;q<e;q++)0!==b[c+q]&&(g[l[b[c+q]]++]=q);if(0===a){var C=u=g;var M=19}else 1===a?(C=Nb,D-=257,u=Ob,w-=257,M=256):(C=Pb,u=Qb,M=-1);q=t=0;p=m;var y=f;e=x;l=0;var ja=-1;var O=1<<x;var Z=O-1;if(1===a&&

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (819), with no line terminators
Category:	downloaded
Size (bytes):	819
Entropy (8bit):	5.544384355390643
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHaz12OBccomniI3F8ZRmTXVFqN/M7rijKTiUMGT2IWRYRmc:hMiRO9nzLaPciGFFTFz8G9eTTYb
MD5:	73B9A2D9D84638110D2C71AF075255CA
SHA1:	37557DC51EAB25098A4706CAB02767B1E664B821
SHA-256:	0DD981757284DAEA9C2A735E366A592F6A36D1ECEB92F6F18C6A08A77FCCA4A5
SHA-512:	1C8B619BEA573BA15DAC35CE574976C087797722D6DC743541D70D79F3ABC391FC49AD4988B5F1AA086BD7FD15B293597429BCDCD707EC8676794328D21FCAC6
Malicious:	false
Reputation:	low
URL:	https://6100125.fls.doubleclick.net/activityi;dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=*;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility"/></body></html>

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18676)
Category:	downloaded
Size (bytes):	155819
Entropy (8bit):	5.868818474144048
Encrypted:	false
SSDEEP:	1536:VZxBi7f7gKv1PmevxccCbz1gaczCBNbeQI2Rn4IYVjK3JFnXmKZ9O6sWlQbyejr1:oNcFviayuBcVOZJDO6sxfrUuFTiNfi
MD5:	A4187962F7D6FCDD267B2294A04A0C4C
SHA1:	4858F8AE9906E79222A1EA5FD7341C92C98142D6
SHA-256:	645D47ACB59E00B4FE9061FC5BE41C9B4B2C17471F567B50B3BBEF08A30BA03C
SHA-512:	E9F289C60E53610DAF495955656617F9042068E2C64956250AA0F5D35AE17B390BC60AF86D8666806D957E54F23BB6D2DF576E4954C8A8D5E5A7B2B0932A9671
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/styles/core_components.css
Preview:	@charset "UTF-8";./* Abstracts /./=========. VARIABLES. =========/./===========. Breakpoints. ===========/./ we switch from mobile to tablet here /./ we switch from tablet to desktop here /./ max width of standard 15" laptop viewport /./============. Global Sizes. ============/./ Component Margin/Paddings /./ Section Margin/Paddings /./ Line Height /./ Misc /./==================. Responsive Columns. ==================/./. * The following column sizing map is used to determine how different sized columns will adjust their widths at different breakpoints.. * For each column size (12, 9, 8, 6, 4, 3, 2), the subsequent responsive widths are listed in parentheses, going in order from mobile, to tablet, to small desktop, to full desktop.. * ex: colSize:(mobileWidth, tabletWidth, smDesktopWidth, lgDesktopWidth), where the width values refer to the number of parts-per-12 that the column should occupy at each screen size.. * Note that all column widths ar

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1096)
Category:	downloaded
Size (bytes):	149481
Entropy (8bit):	5.5657636542014055
Encrypted:	false
SSDEEP:	3072:g5+9odDxKHSXKWRIEI6GTBZoUmkfM/yAOFq/gqWa3lW6RayUWui1amFK5rLY9:g5+9odDxKHSKWRIEI6GTqKM/yrFq/gqn
MD5:	A1D728D03953E88764DA57A75722CA09
SHA1:	D65817E7FE36567F6CC508A07A4ACB05B90D8E1B
SHA-256:	3B013E9E79A6C8B40CB0B6260EE69F6EC531CA25286B7E5842124524730370D8
SHA-512:	0B94E45F589B5D8C9E7F1B0B37C4DA11B69845D5D4F38E4A438797FDCA17769CD7A19E129FFEC6BE384198E575E57BF840463FE69907E5F6891501E89D15633B
Malicious:	false
Reputation:	low
URL:	https://www.att.com/public/16bcb117a2aabc1ca8666233c9dc954522001624dcc5
Preview:	'use strict';(function(u){function f(b){if(n[b])return n[b].exports;var d=n[b]={v:b,m:!1,exports:{}};u[b].call(d.exports,d,d.exports,f);d.m=!0;return d.exports}var n={};f.c=n;f.d=function(b,d,k){f.o(b,d)\|\|Object.defineProperty(b,d,{enumerable:!0,get:k})};f.r=function(b){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(b,Symbol.toStringTag,{value:"Module"});Object.defineProperty(b,"__esModule",{value:!0})};f.t=function(b,d){d&1&&(b=f(b));if(d&8)return b;if(d&4&&"object"===typeof b&&.b&&b.l)return b;var k=Object.create(null);f.r(k);Object.defineProperty(k,"default",{enumerable:!0,value:b});if(d&2&&"string"!=typeof b)for(var m in b)f.d(k,m,function(q){return b[q]}.bind(null,m));return k};f.n=function(b){var d=b&&b.l?function(){return b["default"]}:function(){return b};f.d(d,"a",d);return d};f.o=function(b,d){return Object.prototype.hasOwnProperty.call(b,d)};f.p="";return f(0)})([function(){function u(a){var c;if(y)Array.isArray(a)?r.push.apply(r,n([],f(a),!1)):r.push

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	66732
Entropy (8bit):	5.206486882888794
Encrypted:	false
SSDEEP:	1536:diqQSwCcXoqbFNbdd7bwrmis6eA17A45fchb38JFBX3nMWlgJ3W20zof:dc
MD5:	3B7F57CE3E1694F66C27DFA773C8412B
SHA1:	6B84E89F77667625B88FFEE88B8CE98F2385087D
SHA-256:	93AFB9E0E9930E580C42DEED37EC1A9CBA6F037CA77599F985BB7C161C9FC34C
SHA-512:	20FAD77CEB2359A33FF4ABB2E42BEC1C48A3B5F7B27D40017F847A6B8E04840BFFA9EB9F55FF0FC3ED8E2E99079B656E0F8D273A775FA455629BDA8603B5163A
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/frameworks/css/v1.0.0/core-global-styles-fonts.min.css
Preview:	@font-face{font-family:'font-thin';font-style:normal;font-weight:normal;src:url("../../fonts/ATTAleckSans_W_Th.woff2") format("woff2"),url("../../fonts/ATTAleckSans_W_Th.woff") format("woff")}@font-face{font-family:'font-light';font-style:normal;font-weight:normal;src:url("../../fonts/ATTAleckSans_W_Lt.woff2") format("woff2"),url("../../fonts/ATTAleckSans_W_Lt.woff") format("woff")}@font-face{font-family:'font-regular';font-style:normal;font-weight:normal;src:url("../../fonts/ATTAleckSans_W_Rg.woff2") format("woff2"),url("../../fonts/ATTAleckSans_W_Rg.woff") format("woff")}@font-face{font-family:'font-medium';font-style:normal;font-weight:normal;src:url("../../fonts/ATTAleckSans_W_Md.woff2") format("woff2"),url("../../fonts/ATTAleckSans_W_Md.woff") format("woff")}@font-face{font-family:'font-bold';font-style:normal;font-weight:normal;src:url("../../fonts/ATTAleckSans_W_Bd.woff2") format("woff2"),url("../../fonts/ATTAleckSans_W_Bd.woff") format("woff")}@font-face{font-family:'font-black

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	downloaded
Size (bytes):	120225
Entropy (8bit):	5.488347894305818
Encrypted:	false
SSDEEP:	3072:iTObzPtgFUdKxmBahF1T9nd7AZf5iBJPu7ezO0W+l+:4ObzPeFUdKxmBahF1T9nd7AZf5iBJPux
MD5:	C5896D7E7C281629702C519B8667A1BB
SHA1:	C2666BE7E908B5D0CF86E42F9F025A584D9E30BA
SHA-256:	837AFABF805BCB0324780FC683BE7D83A32E4C9C5AE647BC0AC42CC1BE9B671D
SHA-512:	66B853024A7D0F8CCF702DF8B747A4659D82C344D103214803F2D9E5184469A5F5B3241A2867B49806DEB261584B60347381CE2627BC37A2AD91391FA57A8757
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b854ee52/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var a8=function(a){g.Ho(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.ob()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Iga(a.B,b,c)},Tyb=function(a){if(a instanceof g.jt)return a;.if("function"==typeof a.Jk)return a.Jk(!1);if(g.bb(a)){var b=0,c=new g.jt;c.next=function(){for(;;){if(b>=a.length)return g.K2;if(b in a)return g.kt(a[b++]);b++}};.return c}throw Error("Not implemented");},Uyb=function(a,b,c){if(g.bb(a))g.bc(a,b,c);.else for(a=Tyb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Vyb=function(a,b){var c=[];.Uyb(b,function(d){try{var e=g.Fv.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.yla(e)&&c.push(d)},a);.return c},Wyb=function(a,b){Vyb(a,b).forEach(function(c){g.Fv.prototype.remove.call(this,c)},a)},Xyb=function(a){if(a.ma){if(a.ma.locationOverri

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.934656753155064
Encrypted:	false
SSDEEP:	3:AnIdFBxcbdNg1+zgBDkA62N/cAONS:AQo3gY4DJFcs
MD5:	C2FB79CE39876AA8331490ED13034C9D
SHA1:	D400977D8CABA9DB2D5F59CEEA0D058F08E669FB
SHA-256:	99D2C1370BC4CBA007C1841821E0B328E012FB7D4F5BF5DBF4234D9291618595
SHA-512:	62D5DAD35E1EC3BC7E1EC9BBEA4362EBC849B92E47A6F540751D31704FF436C4D75A06A7D54685D4DFD5DEB666B18E385DF618755C6F697E367ADBEEB84C4ACF
Malicious:	false
Reputation:	low
URL:	https://pnapi.invoca.net/1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22device%22%3A%22desktop%22%2C%22existingService%22%3A%220%22%2C%22flowCode%22%3A%22OPR%22%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912718-1707999118%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr1&
Preview:	json_rr1({"invocaId":"i-9628e359-e4d7-41c9-e90e-d778a0c43f73","message":"shared params updated"});

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	374376
Entropy (8bit):	5.207466711124167
Encrypted:	false
SSDEEP:	1536:sMi8ZHMCbS/SgV9UI3ILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByZ54cf:sMi8ZiSggImSoyJufmJ3ckIoNN
MD5:	101CE6BEC017FDEDA83AACA342362AAA
SHA1:	3495E40A0E1427DFE2668D100B748E3B2BE51C13
SHA-256:	52535A880872C1C5273500B7F045580DFFFB0FE2A02852223E9E63DB92D41CC3
SHA-512:	50A83664F427CA8A742031F4B42566510BE0A1A3D1CF671701BF47C038D963126E61B7B995ED2760F1E031F96D6D60D5E4757FAC2E60F766E9D34C1A85D3BFF4
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b854ee52/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,.2,1);transition:color .1s cubic-bezier(0,0,.2,1);outline:0}.html5-video-player a:hover{color:#fff;-webkit-transition:color .1s cubic-bezier(.4,0,1,1);transition:color .1s cubic-bezier(.4,0,1,1)}.ytp-probably-keyboard-focus a:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,1

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	6594
Entropy (8bit):	7.819486685544312
Encrypted:	false
SSDEEP:	96:hTNPau8YU9e1gMICreK19HdC3h4TkPArOJZWWHs+t6FuERan9pco5:9sMIjKbHUuc6t+rE09pco5
MD5:	5C5B2075986AFE954C0B653227CBB1BB
SHA1:	DA1CCA95731A3F08B20C6387D4E4696B91714B56
SHA-256:	394C8C705D03B7FD70425B35D63F8CD71D5BD638E056893688FB45302F207051
SHA-512:	4069577CDE9D3452D04794A9A33B5EDA0B746172770E69984923C219329436D0B67E429BCE3E6F0235716662355EF9A722271D3455D8301087BBFEC7B274060F
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/do-not-sell-or-share.png
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...dIDATx...;l...`R..-.E..7...-S.....n+J..p..q.H.q.....!....Qp.....YD.. .KiH......)....(.!%..3..`....rg8...9...............!.....!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.....T.\|...V.U...s.\|&.t.............H.Z.....y.Pz..K..'...7..... .4.Z-....y.....AXz.j..S.q.....a....^Z;m.............d..................C.$\ooo.a!..,...........jq.......0......p.._..vq..~./..7O.h8...z._;.R.v..k.....N.....$.LLL......$..G.c.....T.8.Z........k...w.-k.........#..Wr....J%<..;....Y.<...7...H..a+..fa.z......m...ccck...g[..........!..?.^..l......W...{....p....e.-B8].ti.Q.....799..'.q888.z.Yd{O...X..}....o~./.h.{.[.>...?N.Q.....).Dh.Z-d.J=Q....R....?..L....:$.C..?.q.....U.R...8.'.q..0..8.W:T.AXn{O.._..\....{..W.yS.q.!./].T......a.7..8.?~.s.p..x.D...`.r.h.qnn...G../...955588.......dBB......h..q.n...=.....:A(

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7945
Entropy (8bit):	7.748490113078029
Encrypted:	false
SSDEEP:	96:zyjxDIUN+iODQRb2pQXkkvoFQUPZalGQ3pRqORSvhQXQZSov9JMBNT30wDddwMjK:zy1bbQQbomUPZWZRT1XDEbMN/wSYF
MD5:	25DA3CB2B689E8E67EA3BC986313C1E2
SHA1:	E009D4604F601F5167D805BF4354FA32EF7CA702
SHA-256:	7656E7A17574FD74D9FEBCAA852B660872F7D899B2124E9C99BF887E8CB69EE7
SHA-512:	7236B432CB80C6B85AF6875ADD366A8D541F2D8DB90F18D29FB6846B8EC46950D76175889187F76B5FB8430C23C818C839BC84C352249340E72917DC47EA120B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....k....q..D?.4...l...xL}g.6.:.X".....}..{...../...Ph....-.%...n..:..../H...KB...1d...$....[..w.3.-...<.U..X.4Z.K...3..........~.._.(... ......................................................................................................................t.Y.A.X.%_+..bq.._./&.}...:. ../...{.....T.J>..+..j.&t=...F:..A.[$.$...^..+.NL...X,...$ %.%.y... .R.$..i>.v.e_.W...\|o......Dxi.. lo.I..._.Dri.d..T...a....@..8l67.B..qs../.......W.7..E.F.L)...-.........(.jD. .."..\.O#...!..[..~m.MQ2..l...&.1l$._.....@.....o....;.k........HF&.s.ND../R.-S....S...@.6...\..r;!...1.q.Rt....6MSBQ..'%.an=+7.D.....B..(.g.......(...O.E..j.g>8*.......a:.!... <E..z..~..BB.~.v"J..5.......:Ec)..:.%3r.Y........Q.P...b.N.B.')%./..C..a.IHH..5.F./...r.x.X,>3=+Op.n.............#K...!".....Q-...@.@LOd."%`....\.x.}]O.L..q. ..x..K.y.R.....[^Y~....(..TQ.X<x.].Tj<.iZ.X..up.6c....{.?..D&3..........V....>.{F.

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11058
Entropy (8bit):	4.985766051146791
Encrypted:	false
SSDEEP:	96:jRmB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDA0/0B:jFBHczCVvKRC7Wi4xi18tH/0gCbt
MD5:	83DD73C84AA6B1E44DC46CF9739E9805
SHA1:	F0BB4F62DAA3011C871EBFAAA9E40456A2E8DEBB
SHA-256:	02E9151E2CFADA6E72CA262781558319522CADF057115756F998F4D5299D1403
SHA-512:	BA4907599F4B41FD9C7B7E85B075B9B1256AC9678995FC452607267AA899F31FFA61A0738AE3BB4CE9381E20064EB873BC0C972114A1ABD256FF47A4925FF522
Malicious:	false
Reputation:	low
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955904937,"h.cr":"b149f56e7482a0a87099edd819a0b4953b2f0a5c-8921eae8-fb0f3170","session_id":"cd84ea51-fad7-447b-826d-372572ab7b19","site_domain":"att.com","beacon_url":"//173bf106.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 393x294, components 3
Category:	dropped
Size (bytes):	55691
Entropy (8bit):	7.9632933838458495
Encrypted:	false
SSDEEP:	768:4YyrtOVVzaBZEg6Z0Pc+JwZBdU2ezMbiO8iCkFe59IHsQrBQNXKbxqMHdAaR4MVK:4POmBMn4u4Rb9lQrBQWxtvqK6uw
MD5:	425C48A40B41AC0A45925F9F2C21465B
SHA1:	8903C27E4D5206FB69986DA89456F1A777CE95B1
SHA-256:	D1CAD36BEC70F0D27A8882D6E2DE499577B0A0BC9C722F737E3B6105B8BC7DBA
SHA-512:	37577262901EF014F9752580CCE8726C27340931886C13EC37334105AA482BA6E207ECE1841840E66D0AC8A8B51C3319CA5E0DC1D28E68BE8CFF96317C268329
Malicious:	false
Reputation:	low
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1469)
Category:	downloaded
Size (bytes):	4899
Entropy (8bit):	5.840454855226587
Encrypted:	false
SSDEEP:	96:NKP/9XFTNAjlRnMNmJK3qoFiNAjlRnMN/Q861Nr4Q:0H9RNAJRntn/NAJRnOk
MD5:	4F3EACF787CE472E3E2705EF9BF6ED7A
SHA1:	B242FAF85EE3C3308B7CDB40166024FDEEC861B7
SHA-256:	D41B7EDBEEF4E71271606F6876DB7DF6657938C00CF848A35310FD040C38FCA2
SHA-512:	EFB6DAFE268EEAE48329911EE951304FDF2CF4675928D6D926156F3F1344D0F0927791EBE914B963A42150E810578F0D8A98EA6A61FDD2F058B0126A17059773
Malicious:	false
Reputation:	low
URL:	https://about.att.com/etc.clientlibs/snr/components/page/clientlibs-base.min.css
Preview:	.cmp-accordion__header{margin:0}..cmp-accordion__button{display:block;width:100%;text-align:left}..cmp-accordion__panel--hidden{display:none}..cmp-accordion__panel--expanded{display:block}..cmp-carousel__content{position:relative}..cmp-carousel__item{display:none}..cmp-carousel__item--active{display:block}..cmp-carousel__action{-webkit-appearance:none;-moz-appearance:none;appearance:none}..cmp-carousel__indicators{display:flex;flex-wrap:wrap;justify-content:center;margin:0;padding:0;list-style:none}..cmp-carousel__indicator{position:relative;flex:0 1 auto;width:10px;height:10px;margin:0 7px;border-radius:50%;font-size:0;text-indent:-3000px;background-color:rgba(0,0,0,0.5)}..cmp-carousel__indicator--active{background-color:rgba(0,0,0,0.8)}..cmp-image__image{width:100%;height:auto}..cmp-search{position:relative}..cmp-search__field{position:relative;height:2rem}..cmp-search__input{padding-left:2rem;padding-right:2rem;height:100%;width:100%}..cmp-search__icon{display:block;position:absolut

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	325599
Entropy (8bit):	5.588094066897398
Encrypted:	false
SSDEEP:	3072:p0A8NxPZ/QfgdMrNNmvqElR+CiUqz9WuICwQM1fA9wfzz/d1Bg:axFbdMrNNmCEljiUqx7ICwQ+fAKru
MD5:	8D759FCB3EEA5D9CE416DAD96217C5D9
SHA1:	0B73BBE2AFF526FFB29C845BF59E81AF0AE49B8E
SHA-256:	8E85B1B25BDE2589BEF64E3F9964B38AA5340D2CCACF73A027DECBC90DB42507
SHA-512:	88D2DE69B042A792A1AD47EE77B6EF71EA7B4E5BF36AEB08403D39305CFDD32839C3F91FF5EE5786FADDA138F3360AA08273070E314FC9F50A7AD9BBCD629C25
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b854ee52/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ha=da(this);function u(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ca(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility?
Preview:	<html></html>

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39322)
Category:	downloaded
Size (bytes):	498824
Entropy (8bit):	5.1140779775357315
Encrypted:	false
SSDEEP:	3072:uncw/+sYh9Y5nYWLYW4YW3iOjYEGYEAYjAYf+zjMtijpijpljQijZYEgYZtDIUDn:u5Ri4F
MD5:	9B927322DE17E302F448D9F39215A6A0
SHA1:	F4948C39D1C2335D515B1E3F3D2E4B7EAA172D60
SHA-256:	80F20AD27CDD8BA82E335B3BCC974EDD8EE5C5D2056C05A792D15DCEC1E24EA5
SHA-512:	B805F135278A3D01F409751D4B153ABE55DEA80A11A4DE1F3FE3091B73A541BC7143F59DB21A1A7FB267A63D08F4BFAD1B98C0E98AC1D6E3F0347F6B873F64DD
Malicious:	false
Reputation:	low
URL:	https://gateway.foresee.com/sites/att/production/gateway.min.js
Preview:	!function(){var globalConfig={},productConfig={};..globalConfig = {"customerId":"JxTg9PsUYKor4P5i9ne0Ug==","siteKey":"att","products":{"trigger":true,"feedback":true,"mpathy":false,"opinionlab":false},"enableStorage":true,"storage":"MICROCOOKIE","cookieSecure":false,"cookieExpiration":730,"journeyEvents":{"transmit":"never","list":[]},"disableCpps":[],"browserCutoff":{"Edge":1,"IE":11,"Safari":5.2,"Firefox":30,"Chrome":30,"Chrome Mobile":38,"Opera":1000},"platformCutoff":{"Android":5,"Winphone":9999,"iPod":11,"iPhone":11,"iPad":11},"termsAndConditions":{"customerName":"","customerLink":"","emailDisclaimer":"","smsDisclaimer":"You are requesting to receive a text message (SMS) survey on behalf of %customerName%. You may also receive an SMS message confirming your request. By completing this request, you are opting in to receive 1 SMS message to complete the survey. SMS messages are sent through an automated process based on your responses. Message and data rates may apply. At any time,

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=1, software=Adobe Photoshop 22.4 (Macintosh)], baseline, precision 8, 1280x416, components 3
Category:	dropped
Size (bytes):	137358
Entropy (8bit):	7.956349688499274
Encrypted:	false
SSDEEP:	3072:xA8cpTPtRA/BozKaZkGBEeg2BXF6vxAKSAPtH5GFQZ6X:BMPtm/XaqGBVXF6yZAPtH578X
MD5:	73EB938841C05BB1F68064AFA0492354
SHA1:	9BA685E6AA96C209F57D6EA0CED2FB7CA489C9FA
SHA-256:	3DEC53791EF255E4F0CE35910CE908C9D9E379274D2CA003351F453A9B994F7C
SHA-512:	EC74CFA7E9AB9938A6300EEB5629A97ED2CBFDAD6FA14F273EB066CD50136BFD733470FD6B7E0F67F9D5D94AED3463709F1189B905B021D82DFCB5A74DD66357
Malicious:	false
Reputation:	low
Preview:	.....LExif..II*...............1...!...".......Adobe Photoshop 22.4 (Macintosh).....Ahttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:dam="http://www.day.com/dam/1.0" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" dam:Physicalheightininches="-1.0" dam:Physicalwidthininches="-1.0" dam:Fileformat="JPEG" dam:Progressive="no" dam:extracted="2022-05-19T11:56:08.983Z" dam:Bitsperpixel="24" dam:MIMEtype="image/jpeg" dam:Physicalwidthindpi="-1" dam:Physicalheightindpi="-1" dam:Numberofimages="1" dam:Numberoftextualcomments="0" dam:sha1="74a4e3bcdc1a532a477cf057c88b7d30997d3157" dam:size="134682" xmp:CreatorTool

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	2075
Entropy (8bit):	5.022571620741154
Encrypted:	false
SSDEEP:	24:QNu0eg5cFTVGzYO7AvkA3RGfN2L7JuQ8mmSSfQQJyaKqAuKyGgQKDunoKUNd4g6v:QA0KTVvO7AvkA3RbVknryFAwE4dv
MD5:	8084DA3C9E7258595971AEFA1864CEE1
SHA1:	02F1E2F249863AE2F0F6296AED46DC96FA42EC16
SHA-256:	B3F0A51197E77B186F31DE4B16A5281246CC58F540F510B3329BC236508A531E
SHA-512:	22A34E410FB834A01D58809AFB43A00C563DB961DA8A8E0BF8799DDF0D6490F337FC118E9B0C00870B0E78A9096034ED49969739BA07105592A24C3123C7DA6F
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/_sec/cp_challenge/sec-4-2.css
Preview:	.sec-container{padding-top:30px;margin:0 auto;width:1140px}#sec-overlay{display:none;position:fixed;top:0;left:0;right:0;bottom:0;z-index:2147483647;background-color:rgba(0,0,0,0.5)}#sec-container{position:absolute;top:50%;left:50%;transform:translate(-50%,-50%);-ms-transform:translate(-50%,-50%);background-color:#fff;border-radius:5px;box-shadow:0 0 10px gray;min-width:500px;z-index:2147483647}#sec-container .closebtn{position:absolute;top:10px;right:25px;font-size:20px}#sec-if-container{font-family:arial;color:#515151;text-align:center;width:-webkit-fill-available;padding-bottom:20px;overflow:hidden}.#sec-if-container .behavioral{height:148px;width:655px}#sec-if-container .adaptive{height:154px;width:655px}#sec-if-container iframe{border:0;border-style:none}#sec-if-container iframe.funcaptcha{width:308px;height:300px}#sec-if-container iframe.whiteshadow{width:250px;height:75px}#sec-text-if{display:block;margin:0 auto;width:700px;border:0}#sec-text-container{overflow:auto;-webkit-over

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4183)
Category:	downloaded
Size (bytes):	390110
Entropy (8bit):	5.536822588355362
Encrypted:	false
SSDEEP:	6144:2AiofKIMg9G/bTIcmo0YnLeuV8AOLV1bd:K8KeCLeuV8xVT
MD5:	5577242D980D877BE9684C805ED35A6E
SHA1:	2C895E1C180E35E1366F877A637D2BA0F081CDFF
SHA-256:	F27C3145C926B385E8A1E373E94BC391A5707D45D48AA5E3509818ED48552ACE
SHA-512:	8973802559A929DCB44364322845329009323739FE46E7CFF38B9496BC21F3CBBB996F03846BB67007E04A78F493E6CBAD6D6C3D41FB32E13E2A1364B09B6B30
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/marketing.min.js
Preview:	/* Marketing Rules version: 86 */.var dntCookie2 = JSON.parse(getCookie("attpc-opt")) ? JSON.parse(getCookie("attpc-opt")) : "";.var dnt = 0;.if ((dntCookie2.consent == "d") \|\|. ((typeof window.navigator.doNotTrack != "undefined") && (window.navigator.doNotTrack == true \|\| window.navigator.doNotTrack == 1)) \|\|. ((typeof window.navigator.globalPrivacyControl !="undefined") && (window.navigator.globalPrivacyControl == true && window.navigator.globalPrivacyControl == 1))){. dnt = 1;.}..if (window.location.href.indexOf("dnserrorassist.att.net") === -1 &&. window.location.href.toLowerCase().indexOf('businesscenter.att.com') === -1 && . window.location.href.toLowerCase().indexOf('businessdirect.att.com') === -1) {. //Remove GA360 ECAP-21408..//hn4276 - 1/31/24 update [SPTANALYTI-26295].//Source: https://www.googletagmanager.com/gtag/js?id=DC-6100125.//Beginning of GTAG library..// Copyright 2012 Google Inc. All rights reserved.. .(function(){.. var data = {. "resource": {.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/8597/?che=0.22429841700412045&omid=03604370663548075242715929808033793837
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1707
Entropy (8bit):	7.75950233175324
Encrypted:	false
SSDEEP:	48:PeaSU6jV1IjZGaF6la2WjjZeFDelL096CDQjw:P5+uUOl2E6ax096sQjw
MD5:	D266D514C13220AEB741CFF48C8EDD5C
SHA1:	D55BB900CAB0F61A63877952DE16905569315D50
SHA-256:	5B00F8AA4FCFF03AC75290E6EE406557A848B214AB0EAF694E27C19382FB7331
SHA-512:	1216E945DF91285EE2CE95F2713FFE73FB3C4A89551F20AB132F76D4A45F4E287C1FD60C06493C66D0FC266013E27DF37998C1330B63ED51A651C4C89AA24E7E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....p.T...rIDATx......... ..............y;......q.8Y..m.m.m.m....g...]I..M.v.;..I._r....{:.es.(.e.D.J.aG.f..c.os..H....e..1..y.'x..D.H....4....C9......p.&...".ihy.$..Q.ej.f...L`wR.h9F.\|..4..<L..A..f.w....V..u.Nj*..U./.L...~..t!.D;..a^J]'~&..T#.....4..?/.Q\.M...P.G...eFR9.O.7...bN.&r\|..M..n... ...1../.I<.i... ..n...+...r.D.V..3.;.G.GU..x.`"....:....Y.=..R....9..A.....Q.._S.3...Qqm./.Y.p....<A..1.3.`..........!.C...#...</...1..9.Y)......d+./..J..\.3..'Q........c".mt..ZV.b~"....Y..Z..A. ...A.!.?g.[....K..?y.#X.Z..n%x.j.k...]..\.z...>..3.a...1.a.....(.>..o0....u8.UhC..L....=y..D.p.dg.P.^.uth`....-b.;..i.?.6...<.p".....K'Z.(.Isk.&..P"c..._..A.0.`.......60F.&..LS.$.....YL.C.asz.. .(E5,.y.N..=Ip\|....~..U9jy......d-..4.....GdQ...z.i...^...7...ei........US.E.wP.fc.n...`..V. ..Lf.Q.e.Q...q!.2.`.[.QC...i...~.:V..A...N@..2#w3.h..,N.....F.Z.....A. ..t(w.....X....I.k(G31..w.....v....d.E(W..,_Y.H..\|G-....')g_..Q..tc..^...L.B....'

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 393 x 294, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	191929
Entropy (8bit):	7.987537744028424
Encrypted:	false
SSDEEP:	3072:C8Q4gqKoYybgMcJx1Y95TpJplpn4V7xJJtTR8hw/WEsjyWMFI0FrksO0+lsVFGR9:9SqKJybglm5Tl2bTsw/cYIwrksGqzGR9
MD5:	F39017F2059DB2FDAA8F7475ECE824DD
SHA1:	3AFA9AFFE547A56555833C4CE2ECB43D43BDB671
SHA-256:	55C2C617C78F8CFD7C7EC4676927C7009502D9DB46952068AADC3A2A8AE5F7C4
SHA-512:	DFFE1E488ACA782C631997744EE9D3113F12E907BBBACF9B048D2A76B5DE86DEF918D886B37F78176648B364F8C1DB13758ED1C86DFA0A35417FA04F4254BD89
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/1630706_feature_apps-for-deaf-hard-hearing.png
Preview:	.PNG........IHDR.......&............#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="4.082822799682617". dam:Physicalwidthininches="5.457651138305664". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-03-31T21:13:0

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1041), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	77664
Entropy (8bit):	4.984880009065021
Encrypted:	false
SSDEEP:	768:zxMfa6XR5oB6QIpBq8K/9UxIl+UB+x5ne4YAn0jTdNp+x5ne4YAn0b3+x5ne4YA0:zxMfa6XR5oB6QIi/9UKN5L
MD5:	8D7FC9738A3DD58CC25A296DE606FFEB
SHA1:	65F9EF9DD95049D3FBAD4452445FFEFDCC099EB8
SHA-256:	6F95A56A157D0A9BF7C1C2BC01F0DA25B54D9E9D5D27782B658DB46CC5A96CDC
SHA-512:	F72E7050225CDEC92C8FE47D6A5A26748F9A30A29E2D9207E4FC5BE4F92879801E5A8793C2DEA8E18FE41046897730ED7131AD0F3EA678E9DDBB555B12972446
Malicious:	false
Reputation:	low
URL:	https://about.att.com/privacy/choices-and-controls.html
Preview:	......<!DOCTYPE html>..<html class="no-js ">.. [if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7 " lang="en"> <![endif]-->.. [if IE 7]> <html class="no-js lt-ie9 lt-ie8 " lang="en"> <![endif]-->.. [if IE 8]> <html class="no-js lt-ie9 " lang="en"> <![endif]-->.. [if gt IE 8]> > <html class="no-js gt-ie9 " lang="en"> <![endif]-->....<head>.... Page meta -->.. <meta http-equiv="X-UA-Compatible" content="IE=11" />.. <meta http-equiv="content-type" content="text/html; charset=UTF-8">.... [if gt IE 8]> > <meta name="viewport" content="width=device-width, initial-scale=1" /> <![endif]-->.... <title>Your Choices and Controls</title>.... <meta http-equiv="keywords" content="">.. <meta http-equiv="description" content="">.. .. <meta http-equiv="Robots" content="INDEX, FOLLOW">.. <meta http-equiv="page-title" content="AT&T Privacy Policy">.. <link rel="canonical" href="https://about.att.com/content/privacy/choices-and-co

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (322)
Category:	downloaded
Size (bytes):	9414
Entropy (8bit):	5.481814015406924
Encrypted:	false
SSDEEP:	192:YYAtUZwr2p3VvVIKbRSdRsQgDsppiPuUG:MpULs2G
MD5:	C02929ED273FC8670DAD4BDC84FB1017
SHA1:	06B8C60472BE251A601A68D801DF53BF9A200EFA
SHA-256:	2A1C6C8AF0E75B409E787ADD164EA4DF83E61DB5BA82E24BB4D56CA5C9456787
SHA-512:	FD77B48B6BA698E677C6FE079FEBB4DAF3256EAAFFD8C428555928F6E8CA88FCB91D1EAC168D3F068CE00C8C75F2E2A8D7B17D693348914D22215ACA18B1D221
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/eComm_Visitor_DIR.js
Preview:	/* Marketing Rules version: 3012 */.//Rule: eComm_Visitor_DIR.//ATTUID: mk667s.//Version: 1.0 12/23/2019..//-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=START DCM-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=.//ECAP-20665 Included new domains..//Main Consumer CM360 account 6100125.if (!pageSMB) {..gtag('event', 'conversion', {...'allow_custom_scripts': true,...'u19': domainURL+pathURL, 'u91': sourceCode, 'u92': wExtndSource, 'u95' : dnt,...'u20': userUUID,...'u30': vMCID,...'u70': productType,...'u75': pageFlowCode,......'send_to': 'DC-6100125/ecomm0/ecomm0+unique'..});...//Main Consumer AW account 1049001539..//VAC - Owner (cv207h)..gtag('event', 'conversion', {...'send_to': 'AW-1049001539/JsbSCKHm2_0BEMP8mfQD',...'loggedIn': loggedIn === 1 ? 'Logged In' : "(not set)",...'customerType': pageCustomerType,...'pageType-hit': pageTypeFunction,...'pageType-session': pageTypeFunction,...'flowCode': pageFlowCode,...'language': pageLanguage,...'liabilitytype': pageLiabilityType,...'customerprodu

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	4.6894839881975425
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65fKjKNTH1JJTkdhth03+/l4vumVw6/3cpCqEBmDl7iHA2:tzBXuXMMAYnJTkU3+wumKpCzBmDl7H2
MD5:	55ADF983E8653AF9041C6211A0EFE20B
SHA1:	9F0E5AF756CAE49D103E4112149C6E5044000AC3
SHA-256:	F8169D27DFEA25BAD0A2AE2C801CE94FB7BAF545B25F73B93D0D7423D429CF3C
SHA-512:	B5AAB16CB383C38A810480BF95CC0DC72531AE05B4F94CE040F0C065071339F2ACB797DE33F7FAB9B9FF2D8153A5A5837BBE6273CD3A159E7CD5F9CCCD592FC2
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/identity-ui/assets/img/help-white.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16 8.597C17.5 7.325 21.296 5 29 5H30V25H29C22.188 25 19.346 26.875 17.646 27.997C17.154 28.321 16.585 28.492 16 28.492C15.415 28.492 14.845 28.321 14.354 27.997C12.654 26.875 9.812 25 3 25H2V5H3C10.704 5 14.5 7.325 16 8.597ZM4 7.014V23.014C10.151 23.182 13.233 24.892 15 26.03V10.39C14.254 9.662 11.234 7.223 4 7.014ZM28 23.014C21.848 23.182 18.766 24.892 17 26.031V10.392C17.757 9.653 20.78 7.223 28 7.015V23.014ZM19 13H26V15H19V13ZM19 18H26V20H19V18Z" fill="white"/>.</svg>.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=*;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	10901
Entropy (8bit):	4.977690286315416
Encrypted:	false
SSDEEP:	96:jLKmB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDA0/t:jLqBHczCVvKRC7Wi4xi18tH/0gCk
MD5:	CD5B466DEFB355B27B94795E77D45A79
SHA1:	188D8392D978A205D16C2BA50C53E14062966A9A
SHA-256:	25334B34D9FA1B6563E80AF0E400CC07210954E077861780254D032231C2D864
SHA-512:	87C3F48ADDE97A07C52D6BBDEC77A31E2AC598F22DB8B365A610160F53020B7FB09BC068E2D578E5E70195847963969FB80437C3BBB7057B1F535CE2B8B1235F
Malicious:	false
Reputation:	low
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955891719,"h.cr":"233e3d43383ecef76e41cd5b2be9327a77ba4ccd-8921eae8-fb0f3170","session_id":"4b6dcad1-967c-4de3-95f2-5d4a5ae7d32f","site_domain":"att.com","beacon_url":"//173bf106.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 23384, version 1.0
Category:	downloaded
Size (bytes):	23384
Entropy (8bit):	7.978899328138744
Encrypted:	false
SSDEEP:	384:alJKw7b1S1XzwjNYe5amzvuKQ5yuhSn0GD0kHwhnvFLJcL2EwZv0QYt5tX:IVdS1yBRzvuK4yuPGD0zGd6ct5l
MD5:	8C3EFF1BADFA42401657859284DA6E32
SHA1:	FFE6A3AD9307A0FE28B25F102E80400D0AF8853C
SHA-256:	9FD21E6B9DEC5CFA594219E83C197897158642EF7F6F3E614B6872E6E15A6892
SHA-512:	56DF34F9D85D872947D4680FDC8546746C887F4952D9C1A40587F2763E7868F9C53B0F587F5992EA8CC463BA740996CB05C36A0F8014B26907430BEE07A3793C
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_It.woff
Preview:	wOFF......[X................................GDEF..KT........&X'.GPOS..K.......)..{.-GSUB..V.............OS/2.......Y...`e.P.cmap...`...g...f.X.Wcvt ...........F....fpgm............./.7gasp..KH............glyf...<..:...a&.T..head.......6...6.](.hhea......."...$....hmtx...X..........1.loca............V.>.maxp....... ... .W..name..J<........,YY.post..K0....... ...nprep...x......................8_.<...........I...........................x.c`d``....H../..=.n...W...c.............p.A...H......./.a...f......x.%.5..a....5.. 9p..&...L4@c\|.......9..I.....I.`Z.S...........h9b.........&.E.....N...x.....dI...s.zmwgm.m.6..m...c.m....z6ZM./...N.m.c....^.75X..z\.u...u..T_..cz>..Cb=.E.....=h#.7..0..C.].....4..r..n....L.f..l.J....i...pW..o.6..].G'.q.......Sp...E.......$:.g..U..9....z5^.9./..o...../Q.o..}.g.z.........W.>..Kq.{"...(k.}.._.~y+.gi.........o.4.....3..;......{.m.A!..I=...k.e...2=...?.Z.B..=..KX.?.".G....n....[?&.}...K.......N..8.ws....u.z..O.....)..z."..o...Sg[7_.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (725)
Category:	downloaded
Size (bytes):	29382
Entropy (8bit):	5.27233641861696
Encrypted:	false
SSDEEP:	768:h3H6/wGDAv9XkbOidk20CcFEHltlpN48dIUVIcnHpf64jVd1BGk/GCb7r3hiDPg4:tH6/wGDAv9Xkb/dd0CcFEHltlpN48dIT
MD5:	9104121BB8179AEA76E818D62491E67B
SHA1:	5F667B4B6C34D37B47309F1C369CAEE759C16410
SHA-256:	D5656F7E469EC03EBF7DB03B6F3DF29797066EB31F449FA015496DAE21296044
SHA-512:	A44336E293B0A4D706DD915185022DA9835FF44560DECA029064886908172E371F40EF5560287160074655C687EAD18963308A1073EF7E7E74D377316E4EC6BE
Malicious:	false
Reputation:	low
URL:	https://about.att.com/etc.clientlibs/snr/components/page/clientlibs-base.min.js
Preview:	Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(p){var e=this;if(!document.documentElement.contains(e))return null;do{if(e.matches(p))return e;e=e.parentElement\|\|e.parentNode}while(null!==e&&1===e.nodeType);return null});.(function(){function p(c){function H(a){g._config=a;a.element.removeAttribute("data-cmp-is");p(a.options);r(a.element);g._elements.item&&(g._elements.item=Array.isArray(g._elements.item)?g._elements.item:[g._elements.item],g._elements.button=Array.isArray(g._elements.button)?g._elements.button:[g._elements.button],g._elements.panel=Array.isArray(g._elements.panel)?g._elements.panel:[g._elements.panel],g._properties.singleExpansion&&(a=q(),0===a.length&&w(0),1<a.length&&w(a.length-1)),z(),l(),e());.window.Granite&&window.Granite.author&&window.Granite.author.MessageChannel&&(window.CQ.CoreComponents.MESSAGE_CHANNEL=window.CQ

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12834
Entropy (8bit):	7.882967481951929
Encrypted:	false
SSDEEP:	384:v7e6z0q2f1TVg7bfXThnEykpkQLpAabbFKH:De40q2NBkbbCykDLpAabbFm
MD5:	E9B3AC738FDD30627B24A08163BC2D12
SHA1:	8F0DB196E24DDA3E4C4A4732349CDB874491EAFF
SHA-256:	4DFE63095CB11A097964F7A1A6EACF0D0E4B4B5516BA98C9B848655512B9BDA9
SHA-512:	29DF772CE099F39557BA209B3BEFEEABCFF053EA59586CB939DA228E4ADF449E4846DEAADCF8930C84FA4267DB6C1720AF5FEBCBD0ACCB7193815F999613E671
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<..1.IDATx...\|.E.....!..x.x.x.L.@@E..T........@.u.]!....=<W}W].....E.Nf..x........~.OM7.,b ].............)E......"mDZ..f"....oX$).^d....OE..D..l.....^..........Vd..},R.vnv...$....;Y.Q..v..c..X.<k]..z.Hd.k,...D........t......"..tr..]..;....f..\|...."[....{+e.._d..-9g.>>(....m...;b.d...WU.@a....X..{w.j...;...8..o.@.....L.@.u.t....'R.:.AE..o .e.....sCT?V.....".w....1o!r....e.O.K...D..m.....H..W..<.:..]g.zq..0S.Tz<...X.Lj......EwW.H.................._.l.o{.wJ.."...&....""m].....L.y].-r......}.+}.a.+...4.@h9Y...+E...}...i.,2_.I..E.X.K..........6g/..N.B>...l"N..-............?ae.;j.......^...P.`..^...'"S...U..PO.\}.r.....y.m."...D....h....0.."..D.(..9"y.R.u..........@.+r39#./.3.......7...r..'.M.l..W....X\|...4A...<...7.$.t.>....\|./.,si..7C........]F.h.8r6.......vZ..F....4..WD/...I..;......l..(..0s`.Y.^.h..ms....../...?.o(....?.....9..K$.vnX......l<...t..B....l..O.Y.I.eAa

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/inc/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.408816387539087
Encrypted:	false
SSDEEP:	24:4HksCAq5/Jz2pRNrBZJuvu8goqc0ioNhc+r4+mI:2yz2bNrVENtmN+7+j
MD5:	EBEE93828DF7BDC775416E2FFB76CFA6
SHA1:	FEBAD004151E4CAF7970DFAE89BF45BF90FBE6D6
SHA-256:	F4CE4C484E3990D2F3F735B02BB8EFD0D74011723B1D035764A1C875CDD92A29
SHA-512:	6EAAE82F0B741D2854D843968116045CEBE16A33FA14B260EE46E6AE1BF321CFEDA904DC33C16ED8D22CCD1C85111D194919E7E9AB6A4A5945DFDD77B52AE099
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="bDZEAw4eso9k4IZbyxYWwQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1707955925736');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2213)
Category:	downloaded
Size (bytes):	121319
Entropy (8bit):	5.538456353033634
Encrypted:	false
SSDEEP:	1536:kojyRTvrlTsea0ujfGooBhb3fNZI5fXylrC7Obn4ncBeDju0r5U+ypklpBA5:ko+hvrlC0uTovSaeObn4KeDju0rKOs
MD5:	0C1C4EF2B0891649745E8811651EB3EA
SHA1:	FB3B19C9046B9D2C51C877CD6204B58CAB77D5B0
SHA-256:	AA57CFCACFD20C790BBAE9C2CE99CA0CC82066A31A771C09151F88246B397016
SHA-512:	35E88761D102762D410AFCAD55A0BD13BD12099C4DA603EF0B1FB8F49664AD0B3585EB5B2F55A932F48B6A244CB28109B362C4D61447C5319E6A46FBF9FCB936
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-P3VL32
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[],. "predicates":[],. "rules":[].},."runtime":[ .]..........};...var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ea=function(a){return a.raw=a},ha=function(a,b){a.raw=b;return a},ia=function(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ca(a)};throw Error(String(a)+" is not an iterable or ArrayLike");},ja=funct

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38843)
Category:	downloaded
Size (bytes):	39827
Entropy (8bit):	5.70781817847857
Encrypted:	false
SSDEEP:	768:j9Te7L2iWIO+aEFqc9+PT3CKKlq6xm8T0o4gww/Hk:j9C7L2xGB/oTSKvobw0k
MD5:	7552B3A711352DA20360C1CC07D958FF
SHA1:	7A98C3A7FB2C6285560895D2B6269077A6D11B99
SHA-256:	29EF35D4653C0FDA0FD74B8CBB9E040EA5AE2390C608E8C2EAF34819C649D9D6
SHA-512:	EBA152C625630FCA67FA22F0BAB3511418559314C7B740D0D3DB9C86735C0072DD8CF0E5F6E03F3081D75126DD23AE40566B870D7C15809A7F7AB8F202D2713A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/Ke811GU8D9oP10uMu54EDqWuI5DGCOjC6vNIGcZJ2dY.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==. (function(){function z(U){return U}var Q=this\|\|self,Z=function(U){return z.call(this,U)},R=function(U,D,F,S,E){if((E=(S=Q.trustedTypes,F),!S)\|\|!S.createPolicy)return E;try{E=S.createPolicy(D,{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(a){if(Q.console)Q.console[U](a.message)}return E};(0,eval)(function(U,D){return(D=R("error","bg",null))&&1===U.eval(D.createScript("1"))?function(F){return D.createScript(F)}:function(F){return""+F}}(Q)(Array(7824*Math.random()\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==',.'(function(){var

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=*;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30995)
Category:	downloaded
Size (bytes):	104276
Entropy (8bit):	5.476970557839934
Encrypted:	false
SSDEEP:	1536:2NOqKI0B6yO7So9OtL8+OF6s29g7zv8odCLfMo6CwyFZeie9vHOFpprA4+:XlZHtY++8WUodC7MIwyFNesfSN
MD5:	33FA7CF30B31B49C494A35EB8852850F
SHA1:	6FDB9D39030EE5681AB7E97057591011755180A1
SHA-256:	1CD3ED909A0E9061CAD66F91A1B469366E7259AE661BA0F63681C7FDBD9D5A68
SHA-512:	CA3768A509503F9B8ADB83C5FF12DB41948DAC400543C965C67A70E076E6A4E21296DF7E32D02889634D5E13EBE23799EFD2E7D3F087B159B0BA2301D324C381
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	6594
Entropy (8bit):	7.819486685544312
Encrypted:	false
SSDEEP:	96:hTNPau8YU9e1gMICreK19HdC3h4TkPArOJZWWHs+t6FuERan9pco5:9sMIjKbHUuc6t+rE09pco5
MD5:	5C5B2075986AFE954C0B653227CBB1BB
SHA1:	DA1CCA95731A3F08B20C6387D4E4696B91714B56
SHA-256:	394C8C705D03B7FD70425B35D63F8CD71D5BD638E056893688FB45302F207051
SHA-512:	4069577CDE9D3452D04794A9A33B5EDA0B746172770E69984923C219329436D0B67E429BCE3E6F0235716662355EF9A722271D3455D8301087BBFEC7B274060F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...dIDATx...;l...`R..-.E..7...-S.....n+J..p..q.H.q.....!....Qp.....YD.. .KiH......)....(.!%..3..`....rg8...9...............!.....!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.... ..@... ..A......!..B.....T.\|...V.U...s.\|&.t.............H.Z.....y.Pz..K..'...7..... .4.Z-....y.....AXz.j..S.q.....a....^Z;m.............d..................C.$\ooo.a!..,...........jq.......0......p.._..vq..~./..7O.h8...z._;.R.v..k.....N.....$.LLL......$..G.c.....T.8.Z........k...w.-k.........#..Wr....J%<..;....Y.<...7...H..a+..fa.z......m...ccck...g[..........!..?.^..l......W...{....p....e.-B8].ti.Q.....799..'.q888.z.Yd{O...X..}....o~./.h.{.[.>...?N.Q.....).Dh.Z-d.J=Q....R....?..L....:$.C..?.q.....U.R...8.'.q..0..8.W:T.AXn{O.._..\....{..W.yS.q.!./].T......a.7..8.?~.s.p..x.D...`.r.h.qnn...G../...955588.......dBB......h..q.n...=.....:A(

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (621)
Category:	downloaded
Size (bytes):	2172
Entropy (8bit):	5.681461032384786
Encrypted:	false
SSDEEP:	48:NOniQFlPuQ9iM1V3zV3NVHPIp5vXBvQ0iFTaozG99A8:yieuQ9ioRTNPIjvRvQVx8
MD5:	6396B049231628A43C93E5C40E51C83C
SHA1:	BBC8D5A2A557208C61657049882B74F1B3A85292
SHA-256:	C97E954BE362B39ED9CFA11122CAB30A04678058DD98838B9188730408EFC14D
SHA-512:	04E57217D8BFEE7B69099089A92F3D1DDE491E4741E31C011BD61994D84A622209B9D5D088C525CD36DED88ABBF6C5029237C12C60A1F2689EFF1CCFC4691FE1
Malicious:	false
Reputation:	low
URL:	https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>.var url = "about.att.com%2Fprivacy%2Fchoices-and-controls.html";.var DNT = "0";.if (DNT==="0"&&(url.indexOf("%2Fsecurity%2Fsecure-family-app%2F") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Fdeeplink%3Fselectedban%3D365027028481%26selectedctn%3D8305637768%26soc%3DFPROPP%26level%3DFTR") > -1..\|\| url.indexOf("%2Facctmgmt%2Fwireless%2Fdevice%2Faddondeeplink%2Fconfirm") > -1)) {...new Image().src = 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';.}..</script><script>.var url = "about.att.com%2Fprivacy%2Fchoices-and-controls.html";.var productType = "";..if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1..\|\| url.indexOf("%2Finternet%2F") > -1..\|\| url.indexOf("%2Finternet%2Ffiber%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") > -1..\|\| url.indexOf("buy%2Fbroadband%2F") >

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16162
Entropy (8bit):	6.018769115967963
Encrypted:	false
SSDEEP:	384:I68dRqCs1YrJBEXYv69h3GXp4jtCUWGSqn7:kdRqsrPe3EejAGb
MD5:	BF2C7380010AD0C8D04DBEB3F6A3D013
SHA1:	09E6C6463D77039CF3D72E7B1EDFE0BE77590FBE
SHA-256:	CF03655102CBBC585E3605B3B384D20E85757066F30D90B82F3AD52DA29B6ADA
SHA-512:	06A1CBF8EE9E09F0BD1FAF00F558D8946D7EE0A8B42F26B9FDDEAC69B49001848B1B89601CDA883666C825473D187C6058AD8E06AE86C2B1688011E47AB4DDF2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=m202402080201&st=env
Preview:	{"sodar_query_id":"01bNZY2WNd-SqMwP_ZuxuAs","injector_basename":"sodar2","bg_hash_basename":"Ke811GU8D9oP10uMu54EDqWuI5DGCOjC6vNIGcZJ2dY","bg_binary":"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

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 127 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3519
Entropy (8bit):	7.734703009081747
Encrypted:	false
SSDEEP:	48:O11LvnLwfbrMuIJ3LMWd+3LkJRxRaA2EqtIkJ5bunZg7XlSd8NxQZFKosBZGICj7:0lMEu0d6LYjgIkWZWX42NmZ0tOTdt
MD5:	E016DE8AFD5A19F4919E697BC4A0383E
SHA1:	C0CB302E18F8422C01AE2A006AE1727BFE8AA497
SHA-256:	550B28344326C8F9E6B8F14F6D8B7C12047EC5003F7785153F56DD32D64A9793
SHA-512:	D12D029DA4F29FE327E693ECA68A370B3EFE07703609BA7DDF39E80D37201772F5A0A47C21E3E78734E56C1CF7DE4CC4B8AAAC22BB358D1418E9693D62E8757C
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/images/logo_att-white-text.png
Preview:	.PNG........IHDR.......3......'......tEXtSoftware.Adobe ImageReadyq.e<...piTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b812ec4c-f9d5-49a0-ace2-ae652f680f05" xmpMM:DocumentID="xmp.did:D1B9301E170E11EBA385D16C7D24EFBE" xmpMM:InstanceID="xmp.iid:D1B9301D170E11EBA385D16C7D24EFBE" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CF80E86FD09011E888F9F9AE26B6A09A" stRef:documentID="xmp.did:CF80E870D09011E888F9F9AE26B6A09A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>T......IDATx..\.l.E..bi.r.......-.#xV<P..

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65098)
Category:	downloaded
Size (bytes):	213725
Entropy (8bit):	5.361679936162521
Encrypted:	false
SSDEEP:	3072:z63NGm+mJgNeQQi8iqGHIKnJUtpT+BsbNLZ9ip0q:INGmYaGH5Urcso0q
MD5:	F1D54743DBCC9A03EB08F14D0DE65DA4
SHA1:	16B96431016B503517462F0797901AD8DAC94481
SHA-256:	4E973E1B8E6B798931086CF372B83E40C417E33C0922087DAD0EB2F89FA891AC
SHA-512:	209CC5643F2EFEB7E0EDD8CF015FCFF122BC355FE89694650A0CE7761FA1B22284A26CE218FE6A5337E9DCA6F7704A7AE523B997413338FF98AE10FC54804736
Malicious:	false
Reputation:	low
URL:	https://s.go-mpulse.net/boomerang/WPDUB-APVCN-LTNDE-ZPC3E-YKMHC
Preview:	/. Copyright (c) 2011, Yahoo! Inc. All rights reserved.. * Copyright (c) 2011-2012, Log-Normal, Inc. All rights reserved.. * Copyright (c) 2012-2017, SOASTA, Inc. All rights reserved.. * Copyright (c) 2017-2022, Akamai Technologies, Inc. All rights reserved.. * Copyrights licensed under the BSD License. See the accompanying LICENSE.txt file for terms.. /./ Boomerang Version: 1.766.0 c28975a504c1aa46de14fe358f4875ace2917401 */..BOOMR_start=(new Date).getTime();function BOOMR_check_doc_domain(e){if(window){if(!e){if(window.parent===window\|\|!document.getElementById("boomr-if-as"))return;if(window.BOOMR&&BOOMR.boomerang_frame&&BOOMR.window)try{BOOMR.boomerang_frame.document.domain!==BOOMR.window.document.domain&&(BOOMR.boomerang_frame.document.domain=BOOMR.window.document.domain)}catch(t){BOOMR.isCrossOriginError(t)\|\|BOOMR.addError(t,"BOOMR_check_doc_domain.domainFix")}e=document.domain}if(e&&-1!==e.indexOf(".")&&window.parent){try{window.parent.document;return}catch(t){try{document

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	7.251724568882901
Encrypted:	false
SSDEEP:	48:IABeLZilkO0kNinNuixOJJ3bL8zVIOUZd:WZ2nP8NaL6VI5Zd
MD5:	00D7E082117668D1297A3AAB9AE3FD93
SHA1:	D4697A54F2082D1DB925B97E8C6356F846074413
SHA-256:	3F38674D47EFF49BE6BCA61A0BCF45FE88089A05D2ED7E7D403D564226DA6960
SHA-512:	203CDEEF076461651683AD01E4CFCE8FB9B5E7CD1EFE5535F1EB33FDB90897263CD1F4EE2CBEB8D660F710E2363355CBECC0BC828092A5ABC04ECE69971D78C2
Malicious:	false
Reputation:	low
Preview:	GIF89a..............................................G......................................M................................P.............s..=.......*..t..B...........r..A..p...............C..........3..+..\....u.....!....Q.....T.........................E..X.....j.....l..R..8..........P..........f...........v..5..'..f........@.........................m..`.....c........b..1..t........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:457ADC5C

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4681
Entropy (8bit):	4.855320955077783
Encrypted:	false
SSDEEP:	96:cJU/N9scOLOy9WYOo9QT7IUaO12O8O+O3OQOROroqNBX9u9G9nB96d93c9V7zUoL:gU16cGnpdyTMUau2z7itiSJBXsUhBId+
MD5:	FA928623936A29CD877BFBBA73D8FDC2
SHA1:	69C6C48E2E9EF3E2B86ACD9EAA2158836DB35BC2
SHA-256:	4405612DD24A1AABEC9F835809CDC033EBCF8C0F147AF2B5B298DBFF6695C6FC
SHA-512:	ACDE2515C730A7D2F8A1A02E895AF927217733F30089695FE23200820DAD3AE5AEB708DD5A0E3E1A05A01A43C235B68775BCFD4EE0DB044A56F3CDCE98EA5C70
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/nav/navigation?navconfig=success
Preview:	{"nav-items":[{"title":"Company","url":"https://about.att.com/pages/corporate_profile","target":"","className":"","subNav":[{"title":"AT&T Mexico","url":"https://www.att.com.mx/newsroom/","target":"_blank","subNav":null},{"title":"Diversity, Equity & Inclusion","url":"https://about.att.com/pages/diversity","target":"","subNav":null},{"title":"Corporate Responsibility","url":"https://about.att.com/csr/home.html","target":"","subNav":null},{"title":"Public Policy","url":"https://www.attconnects.com/?utm_source=ATT001&utm_content=GlobalNav","target":"_blank","subNav":null},{"title":"Ethics & Compliance","url":"https://about.att.com/pages/ethics","target":"","subNav":null},{"title":"Careers","url":"https://www.att.jobs","target":"_blank","subNav":null},{"title":"Shop","url":"https://www.att.com/?source=EPcc000000000000U&wtExtndSource=Homepage_Newsroom_DGen","target":"_blank","subNav":null}]},{"title":"What We Do","url":"https://about.att.com/pages/what-we-do","target":"","className":"what-

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3863
Entropy (8bit):	7.635242599993547
Encrypted:	false
SSDEEP:	96:BRPB3lUrUjVgyAAsREsTsj4RBcvLQ6OcSLQpj6PSQGU:Hpz3AAsRFsEDcvr5SLQZup
MD5:	5FB20583D0B4166C6C83864EA51E40DE
SHA1:	3674E1E45939E58E21364C286907492FA5EA62C3
SHA-256:	10FF57336749FBA95BFD11EDFA31C565092BCD0B7CFA27D0C67460FB8A9A7C88
SHA-512:	4F87C6BDEDD55944E7DE55D7557AFD9B93ADFC95EAB362AFBFD1CDA2B13A0DCDA8033648DC53091D119D725C2C012D21143FC865C4C2164B5110D51378E148C0
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/preferences-icon-134.png
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx....U.J....6......sH.1.\....@...... ..L.!.<. l.Y...f,#.[...9s...2g&....I......o..}....#+...{..;....K..A>>._...kV...\|\.....X.O..+.....?.1..U....Xh.._.al,.......~>.B...i(.R.m.7.Ye....x...2....Jze._.2....%..a>...m.........'..L......6.O.e.M...u.O..gA..k].eA..5..`..%E.e....."....j....<..x.......W......g..{...f'.._...`.`I..g.C.$T..........}...R........^..o......I....y......~...3......fkz..&...^g..v2..'..%?...\|.?...h%j._~W~..<..,.VB.m.>.e...`..@UAx^.....V.....c...y...\...J.........t?......,.......0l..`.{?j.j]\..d..6^w..^..T.,K...t...R......<W..._yA..~.E..P.6.>W.........K....;....8._.e.......e....M?...UO....9.t.I...>.........9.{.w./...i..P<...Y....F..oz.9.Su...7.....-@.zf...~E...}...G..%...Iy.1....k.?M..@7.@Z.}mx.IE......#_..(,..O,_k.k.!......#;...d.O.6...".\|N~./.<.y....0s.....o.M_.5kp.O...Fv..C.yE .b.[.wr.....t/...~zr...ds?...m.8..*@f.[...CS..........._.g..7...f..?....-..:

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 162, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11683
Entropy (8bit):	7.956378811235422
Encrypted:	false
SSDEEP:	192:kEGy2AH7voOLvnSNUe6dzt6HEWoexB+/tmHsjeLGCkbh+UFkgdOZxu7v21zM1LWH:kQgOLblmMexgmHRLG9cwku97v2FgyZTd
MD5:	786F0812367339CAAE670D457C46F741
SHA1:	D744A0B554ECFF4E8571A9D596A6C91DF20A1934
SHA-256:	7BABB5C688C92AF125B8253DFF422F0F81968BD8DFFD0F6D619ECCAF0B9B6E62
SHA-512:	25961D02F553BBD70CC3A861B9120995BD409E251467FE47AE118483A09A133FFE01955BA21427DE8D41CB1A1CACCC1452030A23745DED75B0DBD0F597A46BCA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............%V.....tEXtSoftware.Adobe ImageReadyq.e<..-EIDATx..}...Gyg...ol.,..kd.p....\.w.....l."..p........r.H0.k..$.VK..%...>..F.`.@.Q.G....c..,.V/.`.?.............Y....j.....O=..z.B.X.b.Jw.v...._.b..z.;8.8n,.xY.x..+UF..4..........Z.u.(.8..C&..{.{.-5S.6.;.m..s.......6....O\|.._?Z..........1.=...:...R.g.~.J}.....).IJ.q........:.i...$a.....:........).......h.}.wp...,x....].......C...8F....u........A...d...X....O\..9sq..,..TZ.A.Q.X:....%...!<Nx_=/e....{......FTU..F>..>..c:I[R...4x0 .@.k..s...c.2}l~l...\|..Ye....1C..."...u...S....w.>..3m...C...o.....E;.I....p.E.O.p..1.....?8F ..J.@...........G..>...O'....;.Xj...2...R....b.........j.}.Wx...5........i`E.o+.`.s3...9...j(.X.A..?.g.2..4.2..m.........Xd.i.....;tD....`..W...^.d8g\.2...3.U..........m..U.....``.)....E.c,U.f.+.K.y.J.#...0.....{..&.D....;.mT..4.`....P.....sK..i....[pba....gxa..a~.......d[..d..l.\`%)`...[.>..T..).(..Z.Z....$.VF...F`.9.T.h......5._..G....s.6..&.....L..(

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	75
Entropy (8bit):	4.71681748494578
Encrypted:	false
SSDEEP:	3:GZbCrScG4gXKUsth1SNFEplCCz:8XcGnKr1XCCz
MD5:	E98EA2DF280C11E052A566D09FFE35D3
SHA1:	B9251FD6B7E94AFFC9CB2FB5C4D98C3B1FB9272A
SHA-256:	5327990483E51BA00389A96268715628DB794880A7947DCAC33E638BDA7D37B7
SHA-512:	47C7EEEF09506C0AE97E7D5004ACA2A7EEEFD2C531E495ABD4A601652A4E1C89A31F3C3BDA40BF7A0006CE880DCFB0975A989EF92ED4D50BC9D9B890C97BCEDD
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/global_all_cms_globalnav/web-components/2.0/attwc-globalnav/p-da828625.js
Preview:	const a=()=>"GNVer1.1.202",e=()=>"Date : 02/14/2024";export{e as a,a as g};

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/8597/?che=0.5190743972107625&omid=03604370663548075242715929808033793837
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 8 bits/pixel
Category:	dropped
Size (bytes):	2238
Entropy (8bit):	6.825668419353433
Encrypted:	false
SSDEEP:	48:1XqulG/1qW8HHN163bxtEXVE6BhUSPvv46R5OeI79696rQLzAG6KV:d1lG/12H763wXCCaso6R/q696rQLzAfm
MD5:	B4A54644FDFAF3D444B14AC9E46603FB
SHA1:	4252725C4E31053573B35409D8DC529C39B3E2A8
SHA-256:	17AA7C3AE67AECB088E82DE571EA54228F0196C9F3F9D3EA300DAC15435CA1F2
SHA-512:	EC74DAEB354EB37212CAFC7BA5378254A02DDA780071034F5AD7675DD265A8A161719E4B2B5C17BA115998F9BEAD76F9B2211BEC9E04BF3B5EE9477DA7E716F1
Malicious:	false
Reputation:	low
Preview:	...... ..............(... ...@................................m.......r..)6D.....cr...]...A}.$1?.4@N..X.......b...e..........,9I.,8G.<J[.r....9m......a..ESe.,-+.....m}...m...~..\j\|..V..3AT. J...w..0<L..[..y.....+......C..y...L......................(2=.......#.\l......!$$.(Cf...".(4C..T...^...........h...w..441..!...=s. R..20(.....Qat.....0;E.!3.."-.#0?.!.>......Y......%),..&>.....))%..$5..F...,<.t...../.`o...x..JYn..w...~....-.......%..&6.+7F.05.fv..7DS.. %...).GVj..&7......"2..o...y..1?Q.........."3.....1-$......(9..'7.,6B..#0....... .Xg\|.M]p..):.. 1.05;..(8.eu..0<I..$2..`..........$/<. ,:..........%6.....hx......%2A.>N^..&4..$4..4\..;.{....#3.".<..<.l}..ix...j...,>."0B...(.'>]...,..'6..)8.#',.@Ob..0X..)7...!..)>..;L...........-.-//......(.."6......!2.2?N.&(%......s......v....*9..):..!1..N..~.......O^s.$O..........Ygv.....BQi.18A..$3..`...$2..t.............../Z.o........:b.;Ja......\|...{..........#.;..+<..f...h...! .........jy......!/A.............=IU..&5.(6I..:I..H..9GX.!1H. -

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3005), with no line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	6.0063354217254865
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08yERNWXQrGwW5YGG95lE9UB:wsbSUtJfxrqLWWWdV6j12ERNqrDOe9UB
MD5:	8A0EA96B27F17499AD0C211D0A8E42FA
SHA1:	FF5AD80BE0A45962B846BB66BD60015712FA4796
SHA-256:	FCA08CD6D9DEEF90BF8C02C856A1F78408D8D8512EF59D7D0AC0DF7EF1E2C198
SHA-512:	65EA6D04209E366FC32B6C7AD0501AB095296FF6A1913A7F380C7254ED0D67FEA79E5D379BF5EFFDDAD49953067F58A4EE22A8655AB85B199929087E732E206A
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1049001539/?random=1707955914833&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	133
Entropy (8bit):	5.814922383540832
Encrypted:	false
SSDEEP:	3:yionv//thPlSt2/HxdlWmoVCRHH8k/gQapbLzTvgk/UJIdp:6v/lhPY2cmbn8CgL1rgkAAp
MD5:	5CBABD7F4B13F240387FEF448313CA77
SHA1:	C58218936BDA7908186750CB2B85D09DE0941BCA
SHA-256:	0AEB7E679625A0A1FD277CDA44370787C09AD7271AF7A2918EA616D2ECA20C1A
SHA-512:	F1A6B29019B5968BB7FFB875EFCE0682D42DC46B931069E053031CDEFB0906D6A94915745F1D7BA90C3E955BA0CD16FC3AA0DCF8BD69E1960470C2FCAB175BC4
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/menu_icon.png
Preview:	.PNG........IHDR..............xl0...LIDAT8.cd...?....-....,.......?A....."...E.q.....#.h.L....iIA. "....BA4.L..........=....IEND.B`.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2117)
Category:	downloaded
Size (bytes):	246821
Entropy (8bit):	5.654610597702104
Encrypted:	false
SSDEEP:	6144:gdMtMIsS6URzc0+WSYWGMFZNWXqfKxHoD2xXLNe5:XMpyLSYWpvj
MD5:	BAD7A2ADF1181E2AED4826D7626C0CF8
SHA1:	A7A0B80211176107023C90D287B75E482932A208
SHA-256:	AE478FAD39B0D5F5F795D8B89A0D2D71CDA4A243E944F3EBAADCFFA91D9C613F
SHA-512:	EFA74683822E5E6ACCFA051972D809B21BF173D49E39D9141F49665E7B0081F97FB18820162CB09A4402DA6C8BE1EE5FA3BD90743734A2A644DCAF0A0D6AFB21
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/fpwd/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><script type="text/javascript" src="https://www.att.com/public/16bcb117a2aabc1ca8666233c9dc954522001624dcc5" ></script><script type="text/javascript" data-dtconfig="rid=RID_-1087794619\|rpid=-976309011\|domain=att.com\|reportUrl=//dynatrace.att.com/bf/fc09f351-c4e7-46dc-afb8-cd98de60285e\|app=a75ea7b2824f5aea\|dsss=1\|ssc=1\|auto=1\|cors=1\|featureHash=ICA27NVfghjoqrtux\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=910bdnkt\|mel=100000\|md=mdcc1=crxVisitor,mdcc3=caccessDomain,mdcc4=ccAuthNState,mdcc5=cidse_stack,mdcc6=cSI,mdcc7=cTSN,mdcc8=cidpcloud_stacks,mdcc9=bdT_.version,mdcc11=cpartner,mdcc12=bnavigator.userAgent\|iub=^bs/msapi^bs/alertms^bs/v1^bs/notifications^bs/globalnotifications^c att^bs.inq^bs.com^bs/chatskins^bs/launch/^c ^bs/scripts^bs/touchcommerce^bs/inqChat^bs.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3803)
Category:	downloaded
Size (bytes):	804348
Entropy (8bit):	5.512678523408864
Encrypted:	false
SSDEEP:	6144:x/orgPumNPVBsC2KAQyjYmMbXkIXVZa6MfYJgWrq19ixm4uWKLzfVrg+VBosgZHZ:poc7sgojYmIGfYJgJ1j4uWI0+VBoR
MD5:	29FA27A168B508CC18DC72C842DE7F70
SHA1:	8386183E3664688664F757CF80B6F73BB7E79481
SHA-256:	35BB0FA0260F4604BD3212EB41E815DECAD82CB85BD33D4C30C9A0494A5802C5
SHA-512:	37EF9DA4DEFB12ECF8F2EE79DD5066A9EDC6D8E5FF5ED944630F06BCD45C649422D0DCB8C18DDCD5C1FEBEE9B54AAF5F00433F97C06933B0A591C8ADBD4A0A1A
Malicious:	false
Reputation:	low
URL:	https://cdn.quantummetric.com/qscripts/quantum-att.js
Preview:	/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att 484b0a2a3406d37e477a1c295adffbeb231244be /./ Copyright Pako by Vitaly Puzrin and Andrei Tuputcyn https://github.com/nodeca/pako/blob/master/LICENSE */.(function() {.var setInterval = window['__zone_symbol__setInterval'] \|\| window.setInterval;.var clearInterval = window['__zone_symbol__clearInterval'] \|\| window.clearInterval;.var setTimeout = window['__zone_symbol__setTimeout'] \|\| window.setTimeout;.var console = window['console'];.var clearTimeout = window['__zone_symbol__clearTimeout'] \|\| window.clearTimeout;.var MutationObserver = window['__zone_symbol__MutationObserver'] \|\| window.MutationObserver;.var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;.var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; var x;function aa(a){var b=0;return function(){r

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	127350
Entropy (8bit):	5.641883098955388
Encrypted:	false
SSDEEP:	3072:mCN2YDwOt74SoqkuHs7iQEelnxb1c6d0q20:mm2YDn74SHrHs7iQEelnxmU0q20
MD5:	15864E7AF66712B13D8B14367255ACEC
SHA1:	EDA68AD735EC7B4FB558A2C9516A3036018877FC
SHA-256:	0F4A38A1A647BE255AC6B9797F9D87C9A1866934791D8FB559A22D7F2CBD9490
SHA-512:	87AEA4745A945D0C76A5B705B5C0AB52B5452137EE68B06CD47678AAA6EC3F9C142517736435A02B257ADA0A09F2166859DADDE420F9411C33E907371B1324BA
Malicious:	false
Reputation:	low
URL:	https://solutions.invocacdn.com/js/invoca-latest.min.js
Preview:	/*. InvocaJS Version: 4.30.6. * Updated: 01/23/2024. . The information and software code below,. * located at http://solutions.invocacdn.com/js/invoca-4.30.6.min.js,. * are confidential and are the sole property of Invoca.. * Your application or use of this information in any way is subject to. * Invoca's Terms of Service, which are located at. * http://www.invoca.com/terms-of-service/. In accordance with those terms, your. * use of this information and code may be terminated by Invoca at any time. * for any reason. The rights granted to you under those terms are expressly. * non-exclusive. You may not sell, assign, sublicense, or otherwise transfer or. * agree to transfer all or any portion of those rights without Invoca's. * prior written consent. You agree not to copy, republish, frame, download,. * transmit, modify, rent, lease, loan, sell, assign, distribute, license,. * sublicense, reverse engineer, or create derivative works based on the. * information and/or software co

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	5.4194305921220085
Encrypted:	false
SSDEEP:	3:fkreWdsRphgbqdtdkUtcO216yJpF+FIwhGkxCO216yJxFfXNgbqdtdkUB:fIdsRLgGdtGvTZjF+FIbTZ7F/NgGdtGa
MD5:	483E5A216B4FEA892B01B4A9B6F5C50B
SHA1:	8969A8DC0EC70A01FBA77640143C4F5D527676E3
SHA-256:	F518F7050B3B02665A8641DCA5DFAE5EB4D52CEC13AFA2E1206EC774A1009619
SHA-512:	2DEF3EA4B8B404FDCB3AA9CF5D6DE3A2805BE07BFDD2F888A88BB4268CFDD5C38FB1EFEEA3484BDA3471211C16B95A8BE6E07FBEF4B36DD2AAB8F5B77E444947
Malicious:	false
Reputation:	low
URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff
Preview:	failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff: no link named "ATTAleckSans_W_Md.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	54610
Entropy (8bit):	4.926091968033823
Encrypted:	false
SSDEEP:	384:898XGlWhNsK0f8oDKNDNoTBir9taJlLgTULcl9M0OhgWhbFYRzEB1Vk+iF+t55N0:N9tX
MD5:	9859CCEA3DB2E769B8B2F95BD487A3C4
SHA1:	629AB7BD0500FE10DB5ADE9F6B4AFE7D93A9C7ED
SHA-256:	FD7609AC7C56A8DEC71E4113B6EC4B7DCC5C5AD88E5495D829DEA1B45FBB2BDC
SHA-512:	3484C6E5C61DA5AFF6DBFE1E26E212D5C058D0C43010A6FEFEF6E83D2562DA7CE049B54FF9B2E5959CE315BF470FF609B997BCE8EE6397BE4ACED0FD6D501C6F
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/attmonetization/js/attmonetization.config.js
Preview:	/* attmonetization.config PROD - PROD - 18 */.'use strict';.var appMonetizationFtrUnitsConfig = {. "att.com/my": {. "global": {. exclusions: ['login', 'forgot', 'fpwd', 'passcode', 'Payment', 'accountOverview'],. sponsoredAds: 0,. gpttagconfig: [{. memberId: 9367,. debug: false,. enableAd: true,. adRefreshEnabled: true,. tags: [. { breakpoint: 768, windowSizes:[768, 1024] , tagId: "/22674080263/att_web//services//global//Global", customProps: { sizes: [[728, 90]], }, },. { breakpoint: 414, windowSizes:[414, 896], tagId: "/22674080263/att_web//services//global//Global", customProps: { sizes: [[320, 50], [300, 50]], }, },. { breakpoint: 1024, windowSizes:[1024, 768], tagId: "/22674080263/att_web//services//global//Global", customProps: { sizes: [[728, 90], [970, 90], [970, 250]], }, },. ],. targetId: "myatt_global_unit", title: "Advertisement",. sendHitNow: true. }],. },. },. "

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2488612
Entropy (8bit):	5.48909099793399
Encrypted:	false
SSDEEP:	49152:lvYPt3LDhEMwPCtFK7jrAjrgjrojrzjrKkHdXAeAJAzAUADAlA9APA6AYEAeyPL0:cEMwPCtFHk44G4KA
MD5:	8225B2540C0F52F0F2358CA1DC3A73C0
SHA1:	813ED38BCFBFA09E89C157E991D22BB0589CE18D
SHA-256:	9AA8E4B09C2222332A1BDCD3E5513522B4E602030B9769257A20070F7B53ED0F
SHA-512:	59330BF8BCC727EF7FBCA066C415DF02B1D731320ECEEFD672C2F01DBD0834F0500F02CCF0EE4BDA8A679ED3D99608EEE3CF5B11D5ACFE2B10C4DECA960FB034
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/static/js/0.76b451cb.chunk.js
Preview:	webpackJsonp([0,73],{1185:function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=i(3803);t.default=n.default},1287:function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=i(1338);t.default=n.default},1296:function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Configuration=void 0;var n=i(3285),r=function(){function e(){this.stateManager=n.StateProvider.getStateManagerInstance(),this.selectedEnv="production",this.waitTimeInitializeRegistrationLinkingResponse=7e3,this.saveIDMergeNativeHandoffDelay=7e3,this.waitTimeForConfirmID=2e3,this.redirectToCollectEmailWhenPostalAndOneEmailFlag=!1,this.showCombineIDForAuthFlow=!0,this.showCombineIDForUnAuthFlow=!1,this.waitTimeForSyncDestination=6e5,this.haloCRegFirstNetUTFMechIdTest="m15690",this.haloCRegFirstNetUTFMechIdProd="m20067",this.featureFlagConstants={FEATURE_TOGGLE_REDIRECT_COMBINEID_TO_RECOMMENDER_FLOW:"svc-idm-reg-redirect-combineid-to-recommender-flow",F

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23741)
Category:	downloaded
Size (bytes):	23801
Entropy (8bit):	5.202176657983327
Encrypted:	false
SSDEEP:	384:2iX4NU1QEhHI06zYJxfWycBN+VfbLCeldB++pcLIx0MX4+SS9OSd9Wzlscec7KRs:2iX4iFw+ZV50kl9OSdgzlscecmPU
MD5:	10731F4073D0272FA91A1F9ECB799B2D
SHA1:	C2761CD28A60F529B35262037157584CDD723684
SHA-256:	F36817D33F10200019D323A31542B5B409E4404D86D4F705DC937084030D5C4A
SHA-512:	1896466B6C1D180BA3FAB8603E21B789DD17714FE001DEBBDE8AE5A0C9B46CE04D7B506749946DC1CDCFA3D48CD96C595EE5FAD82C3C2E3BCF8A3C31E5E89B26
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/base.js
Preview:	/!. . Slides JS. * Generated by CoffeeScript 1.6.1. */.(function(){!function(a,b,c){var d,e,f;f="slidesjs",e={width:940,height:528,start:1,navigation:{active:!0,effect:"slide"},pagination:{active:!0,effect:"slide"},play:{active:!1,effect:"slide",interval:5e3,auto:!1,swap:!0,pauseOnHover:!1,restartDelay:2500},effect:{slide:{speed:500},fade:{speed:300,crossfade:!0}},callback:{loaded:function(){},start:function(){},complete:function(){}}},d=function(){function b(b,c){this.element=b,this.options=a.extend(!0,{},e,c),this._defaults=e,this._name=f,this.init()}return b}(),d.prototype.init=function(){var c,d,e,f,g=this;return c=a(this.element),this.data=a.data(this),a.data(this,"animating",!1),a.data(this,"total",c.children().not(".slidesjs-navigation",c).length),a.data(this,"current",this.options.start-1),a.data(this,"vendorPrefix",this._getVendorPrefix()),"undefined"!=typeof TouchEvent&&(a.data(this,"touch",!0),this.options.effect.slide.speed=this.options.effect.slide.speed/2),c.css({ove

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8369
Entropy (8bit):	4.302782781327462
Encrypted:	false
SSDEEP:	192:SkqhyM/vAzOjErEmOEZQwEPPa6M17V85k2Yp:GhjBRgQwEPi6IV85k2Yp
MD5:	651E53A3A906F20864AEDC525F526A37
SHA1:	3DB1539E7CD71B3A644AC803AA65A8DE901ED9B9
SHA-256:	6982FBE858E30068DE9301B49438C83838BC7BEB058146703B22B701E6709C7E
SHA-512:	91520D6075B6104FCF79190D8659B036E2643826AD933643EDD07F6695CAA1D72E8A45246FA004BBCEF05283456E2E29C13591048C82207DC434C9A72DF7D275
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg viewBox="0 0 61 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: sketchtool 54.1 (76490) - https://sketchapp.com -->. <title>B98BD28D-25EE-43D7-A2B5-7516982DFB80</title>. <desc>Created with sketchtool.</desc>. <defs>. <polygon id="path-1" points="0 1.73611111e-05 25.025641 1.73611111e-05 25.025641 25 0 25"></polygon>. </defs>. <g id="Web" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Desktop---Sign-In---Active-State" transform="translate(-689.000000, -144.000000)">. <g id="Logo" transform="translate(688.125000, 144.000000)">. <g id="Group-6" transform="translate(0.875000, 0.000000)">. <path d="M40.5990974,17.5087674 C40.4364308,17.5087674 40.3239892,17.3962674 40.3239892,17.2334201 L40.3239892,9.17144097 L37.5838553,9.17144097 C37.4211886,9.17144097 37.3085732,9.05894097 37.308

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1331)
Category:	downloaded
Size (bytes):	270703
Entropy (8bit):	4.867586195100206
Encrypted:	false
SSDEEP:	1536:wL3KvBDejg3hKfQaPA6XaFAStYD32iRSccEiS4Gm2NdWVeLRwpRwGGeGZbWNig7b:cKv8759Eq3dW2iwg7geibFuDO6Me
MD5:	9B98E661F7A01E3FAFB5EC07CB79E580
SHA1:	E911115F4B7027CCC7D1CE2B3D1D245D8F8CBAC4
SHA-256:	9CFA32AC812E69BC2984405D4A4917572E1A304E2006DC1F2A3166465CCC31ED
SHA-512:	CB5506681C9692D9D8981080374017554AA42DFD31495A4C90C14A82827DACA2338EF5B530161621EEC22D07F2B5DA3876F2E1D8A3710E8EC1B5F33211A16065
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/styles/privacy-redesign.css
Preview:	@charset "UTF-8";./CONFIGS/./Fonts/./Colors/./Grid/./Nav/.@-webkit-keyframes slide-in {. 100% {. -webkit-transform: translateX(0%);. transform: translateX(0%); } }.@keyframes slide-in {. 100% {. -webkit-transform: translateX(0%);. transform: translateX(0%); } }..@-webkit-keyframes slide-out {. 0% {. -webkit-transform: translateX(0%);. transform: translateX(0%); }. 100% {. -webkit-transform: translateX(-100%);. transform: translateX(-100%); } }..@keyframes slide-out {. 0% {. -webkit-transform: translateX(0%);. transform: translateX(0%); }. 100% {. -webkit-transform: translateX(-100%);. transform: translateX(-100%); } }...main-privacy-container .underline {. text-decoration: underline; }...main-privacy-container .bold {. font-weight: 700; }...main-privacy-container .medium, .main-privacy-container .intro-text, .main-privacy-container h1, .main-privacy-container .reveal h1, .reveal .main-

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2117)
Category:	downloaded
Size (bytes):	246836
Entropy (8bit):	5.6545062381089535
Encrypted:	false
SSDEEP:	6144:8dMtMIsS6URzc0+WSYWGMFZNWXqfKxHoD2xXLNeK:jMpyLSYWpvI
MD5:	97FF5EA9026A734EB8BC9AE49EE74EF9
SHA1:	99DFC9C65501A051CF05FD31F0E453AC5B8905DA
SHA-256:	88C22B0B1F1E01175883E79D19D64E7C6B30CA042C4B6347ED418B1BA06C448C
SHA-512:	4329BC67304EB102F6C297BE3B888C19E74AEF599137A764ED8C4A7FD6EE81B451F2D27BD5204C82CBA967724B38318F5F1C792937632C07B52CC0C6E40C0249
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/registration?origination_point=OP
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><script type="text/javascript" src="https://www.att.com/public/16bcb117a2aabc1ca8666233c9dc954522001624dcc5" ></script><script type="text/javascript" data-dtconfig="rid=RID_-1880750182\|rpid=-1905117446\|domain=att.com\|reportUrl=//dynatrace.att.com/bf/fc09f351-c4e7-46dc-afb8-cd98de60285e\|app=a75ea7b2824f5aea\|dsss=1\|ssc=1\|auto=1\|cors=1\|featureHash=ICA27NVfghjoqrtux\|vcv=2\|rdnt=1\|uxrgce=1\|bp=3\|cuc=910bdnkt\|mel=100000\|md=mdcc1=crxVisitor,mdcc3=caccessDomain,mdcc4=ccAuthNState,mdcc5=cidse_stack,mdcc6=cSI,mdcc7=cTSN,mdcc8=cidpcloud_stacks,mdcc9=bdT_.version,mdcc11=cpartner,mdcc12=bnavigator.userAgent\|iub=^bs/msapi^bs/alertms^bs/v1^bs/notifications^bs/globalnotifications^c att^bs.inq^bs.com^bs/chatskins^bs/launch/^c ^bs/scripts^bs/touchcommerce^bs/inqChat^bs

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	4.989766174423453
Encrypted:	false
SSDEEP:	24:uhyhzk2/OVsaJ4zQe3QxYaaa/vdKVDaaaaal3Ldaaaagaat3KUg+sa/:DVk2RaKmOaaa/vdKVDaaaaaddaaaaga8
MD5:	8CC5501351F013DE0CE76FA0A2C59D50
SHA1:	CCC13EA6E1BF7CA9FE31B0DD997981FA8EC6A2E1
SHA-256:	42938B72E2EC54515EB9C49145F42B8728CFC0B70170F80AEF58CE93032B1C1D
SHA-512:	BB41B6338F83027723F628D0724EB533A2BCA18956776C985BF2D6E03267D1E3C6E1C45F0A8A1316726F847DCDD16C1570AB0E8BAFFFA03D5DD663B0FAD385CA
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/favicon.ico
Preview:	............ .h.......(....... ..... .....@.....................................................................................................\|...z...~...w...p...o...y..................................\|...E......)........"...P...............................................................3...^...............r.........^.. .................*...l...z...{...............5...Q........................G............k..........7..............................................$.......................B........................4......k.................K.........................Q............F.....................................................$......................./.......................'......X............_..O..(.........................W.............a..............I..............d...S...]...v..........D...>...............................................................................k...-..............

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2505337
Entropy (8bit):	5.6641651552472165
Encrypted:	false
SSDEEP:	24576:VLwPVfMwcSTwBx77bmtiwVj6TXhAW46yFK19pGvgWaN:V4VftKCtiwVj6TXhAWqFKwvgWk
MD5:	3A917CCAC03B0E66B489A7770C7757D8
SHA1:	89FA9463B07DF5EA544500D34563D8453A1CAAA0
SHA-256:	813728FA4C4D7E8FB26447EB1AC953D24626657132046946744676CA69E2231A
SHA-512:	0E4C7788CA2798730E5FC4A172E962C23E8AFE2E36F3A8290E960B5B1252751DA08104B4892342CB8C0E504CEC8500594654A36B10729E66A9AC292BA2937B1E
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/b854ee52/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18648, version 1.0
Category:	downloaded
Size (bytes):	18648
Entropy (8bit):	7.9875716664872085
Encrypted:	false
SSDEEP:	384:/0DW/LIHS+OYvV8fSUHHc0CTP8y62zZQ84vm:S2IyNpncxPjhVX
MD5:	A2D24DEEB37E8B4A64B5536ECB11897A
SHA1:	AFCAABA991FF5BFFCEDA661DFA5E8E8F1E2D11AE
SHA-256:	37A1212CC1AB5C935D9A3FEE05C98C940EAA895A23510E5F83D550DFBB0D763F
SHA-512:	1FF4A0AB5B9EF504F562168124984D74DD600A9B99522A5C6C08B252B4032F3A3EC395917875167C30170D1F35FD5EFF223FDE46FCA60363867A4ADA27AF3FD7
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Bd.woff2
Preview:	wOF2......H...........Hs..........................n..0....`..f..4..W.....l..I.6.$..@..b.. .... .......I.[U. .\|...q..6....../..?).1...P.YZ&.......^.j.{=.2jVA..3!z{...$../..i..A.e"..i F.3.;ij.....>Z.......\l7.\dg?........F.r...P....9.9N._.h.)hOIDs..;..r..-.$"..... .....4...6.'.y......{....n.rc.....p~...s.+.-.L...X`.pn...E...t..]..H...R.....y.#..}.?..`..X^.Qx.Fjf',.\|.......;.KTT.2......E.G..z..VF..m.\$kr..X$l......D...!w........^..^5..?.{.n..J....w...R........_.l~........nA.D+.%.DA..s.....5..9...H6P..uL...k.A..5..A.......7J....]...........g.XR.k......C...M........+S..G.....]........->.<..Ty.d...u4.?...D.J..$.h...I...?.x.....Q....@.4.w.KO-K..%A...H<w.......\.t..hx.....{.q...Z.f...vK..X......2..........A \|.6n....l.`0....5 .W..3.lw.....:..).K=....\....]`wf.D$.........t............\Q.....>.:.=(\..L.rLE.uQ..\.).n...K.\|S..2'@K..NQ......t..2.2h..=X.H.....^...T.... .+.K'.?.Z,...5......q@...\|uf...S.....#..'.x..F.....p,.....7......(.,......;..E.A4.<.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1815
Entropy (8bit):	7.167000052394706
Encrypted:	false
SSDEEP:	48:3kNinNuiAaCJJ3bXAZ3hzM1zBXzpLKazfac:08N+vLGM1zBXFHac
MD5:	ABD3BFF57AFC444BE6F78801334E6C10
SHA1:	011429AC96709C9B05CDA6F29C3C2ECAC6158391
SHA-256:	F7582FD23DB2B0F03A798169C070E6EF14A4BAF31D2B6DB9F3083FDE8ACED2E3
SHA-512:	524B44202F62D22CD8981F697E385C719EB5346F32437655CC62327A135E966CBA5237D80304C4EAE76952F72E0078B3784114239E6895C71845CD284D1287A0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:AA5BD89B936B11E88350D001543530E9" xmpMM:InstanceID="xmp.iid:AA5BD89A936B11E88350D001543530E9" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" stRef:documentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65468)
Category:	downloaded
Size (bytes):	164803
Entropy (8bit):	5.633785306802398
Encrypted:	false
SSDEEP:	1536:RIn+cJj0CdY4HOKBteCeVZ85UTTDTJd1nxBp1aaeYOq0cPH55Iwkq:y+c0lHwLeVgUPeYR7Dcq
MD5:	CDFA1EF5078596B7B2E8A622F4DC9527
SHA1:	2448D99388F999EF01D97FDDD485C719FFDA8F04
SHA-256:	87F356323AE6CD6F224A477677CCB25B6BC590AE35FF9F9843D793FF46831536
SHA-512:	11A971969E35E286169CBF0AADD4F1E73C2286E0E35DC784D0A0EC69542A911DFA2FECE5B75EBB9F19839AD71D284599CB0C12F95D02ECEC14828DC612AB6CAD
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/styles/base.css
Preview:	/!. . Base CSS - 180207. . /@font-face{font-family:'Omnes';src:url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02.eot");src:url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02.eot?#iefix") format("embedded-opentype"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02.woff") format("woff"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02.ttf") format("truetype"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02.svg#webfont") format("svg")}@font-face{font-family:'Omnes-Light';src:url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02-Light.eot");src:url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02-Light.eot?#iefix") format("embedded-opentype"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02-Light.woff") format("woff"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02-Light.ttf") format("truetype"),url("/ui/corpcomm_internet_attus/1.0.0/fonts/Omnes_ATTW02-Light.svg#webfont") format("svg")}@font-face{font-family:'Omn

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955895264
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	367278
Entropy (8bit):	4.938890737945097
Encrypted:	false
SSDEEP:	3072:3LoNjKzjmSdWrKZrHGPQugRfmDIn1IRaT/nE546iyhFLqd60bg2urnOPXChZBhz/:3cN2f81Hj/3I65c/Ff+
MD5:	75F860D186B61C492AB547C1DCCE1A10
SHA1:	50BF49656E47F6C1BAC3B7BCE86A8D72DE1D0729
SHA-256:	F06A993843591B4CD057C35230AEAC839488809B604DE92EC8F6FE312A5E0715
SHA-512:	6A857CF5AAC825FBFA5CC154520FC214CE2720147F68EB8458957CAE828FDC150D327C7FE3D003D42861A2755CF596BDFCB034B254598F72A752540A6C6455F6
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/upperfunnel/1.0.58/styles/main.css
Preview:	@charset 'UTF-8';/!==:cms:module:marquee:==!/.marquee-wrapper .disable-border-top,.marquee-wrapper .disable-border-top .slide{border-top:none!important}.marquee-wrapper .disable-border-bottom,.marquee-wrapper .disable-border-bottom .slide{border-bottom:none!important}.marquee-wrapper .marquee .slick-next:before,.marquee-wrapper .marquee .slick-prev:before{content:none}.email-sub #email-subscription input,.email-sub .description,.email-sub h2{font-style:italic;font-family:font-regular}.comparison-table .row ol,.multi-column .container ol{list-style-position:inside}.marquee-wrapper{width:100%;overflow:hidden;position:relative}.marquee-wrapper .marquee-last{display:none}.marquee-wrapper .desktop-tablet-block{display:block}.marquee-wrapper .desktop-tablet-inline{display:inline-block}.marquee-wrapper .mobile-block,.marquee-wrapper .mobile-inline,.marquee-wrapper .tablet-block{display:none}.marquee-wrapper .background-fade{opacity:0;-ms-filter:"progid:DXImageTransform.Microsoft.Alpha(Opaci

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28701)
Category:	downloaded
Size (bytes):	253903
Entropy (8bit):	5.561188567801579
Encrypted:	false
SSDEEP:	3072:CMIgfQS2uFKoR5j8DAizObuFqjqyRyDaXjVZECVO7Y0Faq/Cz8mpSloKO:v/2oK130W0yDaXjVZEC07Y0FaENYSY
MD5:	514F0DDC93F194D2CEA13C96CA0C5E9A
SHA1:	7E5494D22D154F77A0164AB691D5948AAB1E9604
SHA-256:	E2418B349BE1805CBFA68594920AB9C1C5C5732B4416E3018CD0D794416358AA
SHA-512:	E10A005DAB66614CC47EEFB0992B7E16D30BE3A91D15C28C28FF93D8234FA9DDA932B8FC4AE060617D19D5A2F514D08F26E830F7FF46640AAA6DF4F854C3D8CE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-1049001539&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":50,"vtp_instanceDestinationId":"AW-1049001539","tag_id":44},{"function":"__ogt_1p_data_v2","priority":40,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_re

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955908422
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4854), with no line terminators
Category:	downloaded
Size (bytes):	4854
Entropy (8bit):	5.669141734717483
Encrypted:	false
SSDEEP:	96:YyRkctyPg3OOWnLqGRb8HOREZqyLmT1iqvmcUq2mTvqgmyWlqLXm0InaKuncFOqj:yayPg3OPL3ZQpqZ0qO7qv7q1bqyzknqj
MD5:	EE39DD697202AE6BD944309E0A01C798
SHA1:	209DF93B580413D408CF068033942E71D3A9D1C6
SHA-256:	A4BBEDB19E225EDE6CD54411D80C55E95C3A983F4694DE2C232AABE2477A104C
SHA-512:	0B4E2A3BF719D887B43E493D6140A0D180EB84AE841CDF3767C0827F23C3C3BA775FA3D31037D062E577CCA27617269A2EE919905FD0612BE7D16803412504C7
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html?
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":46656000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7566711756","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVA4A!3sAAptDV6wuWpr"],"userBiddingSignals":[null,null,1707955936322275],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685075200372\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685075200372","1","

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2515
Entropy (8bit):	5.080547539144607
Encrypted:	false
SSDEEP:	48:9gXyXGJYS9bS9P9y6uEBKAnBVJy55fd1V5eSM4YuoSxf0+lFht:ei2JM9y6uEKGQB1VRM/7wf0+lvt
MD5:	CFB1A1A06FB4512F04BF3C968880B16A
SHA1:	CA3FDF1755373791E23AF3DA31AD609653EDD1A4
SHA-256:	B632A6A0334C1702BA8C2D5B4E49FF79059B32AF6599C747D27C373799C1AF28
SHA-512:	35296410810A0229D4FC86F8FB549AB4657826471E211E85AF92AB1778882AB5843A7745215901C28824D775B9B79258FE64AC2766A10E823A8D9623E5ED0CC3
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/Flashtalking_Consumer.js
Preview:	var ft_onetag_13503 = {.. ft_vars: {.. "friendlypagename": ddo && ddo.getVar("page.pageInfo.friendlyPageName") ? ddo.getVar("page.pageInfo.friendlyPageName") : "",.. "lineOfBusiness": ddo && ddo.getVar("page.pageInfo.lineOfBusiness") ? ddo.getVar("page.pageInfo.lineOfBusiness") : "",.. "language": ddo && ddo.getVar("page.pageInfo.language") ? ddo.getVar("page.pageInfo.language") : "",.. "customerType": ddo && ddo.getVar("user.customerType") ? ddo.getVar("user.customerType") : "",.. "flowCode": ddo && ddo.getVar("page.pageInfo.flowCode") ? ddo.getVar("page.pageInfo.flowCode") : "",.. "liabilityType": ddo && ddo.getVar("user.account.liabilityType") ? ddo.getVar("user.account.liabilityType") : "",.. "productSegment": ddo && ddo.getVar("user.account.productSegment") ? ddo.getVar("user.account.productSegment") : "",.. "slidAssocAccts": ddo && ddo.getVar("user.account.slidAssocAccts") ? ddo.getVar("user.account.slidAssocAccts") : "",

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12236)
Category:	downloaded
Size (bytes):	12275
Entropy (8bit):	5.289655035665955
Encrypted:	false
SSDEEP:	192:nOnlzWlyuZ+3gzM73yoXKXmT9jys4v7WXADp70o+dAV4aqU6lzfdT:n0lzWgMYgzMrycJys4DWXADpgVM0vlz5
MD5:	0112C2618BBF8B19E6A8BE39CD508D06
SHA1:	B0B6AB27D6FA2C0F852CFA55040A16F0FC0ED86C
SHA-256:	E1DBB2FAD201F916F27D06D7BDA058AF7B58FF457D3357A2F9D90EF0E09DF24D
SHA-512:	01A62122B8019F80C31065407A9E2E713E163DAEBB0928CEADA1710EC0111E88F2311A79263A9D2C71386270ACD2929B5A7634F446A249EE2FA6C4FC26DFDD59
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/attmonetization/js/attmonetization.min.js
Preview:	/* attmonetization PROD - PROD - 18 */."use strict";var gptEvent,AdUnitDiv,GptTags={},gptConfigs={},TagFired={};window.googletag=window.googletag\|\|{cmd:[]};var js_gb_adc={gptTagConfig:{},refreshAdTargetIds:[],adViewedCheckTargetIds:[],target_ids:[],pageVisibilityChangeEventRegistered:!1,currentRootElement:"",logEnabled:!1,gpttagUrl:"https://securepubads.g.doubleclick.net/tag/js/gpt.js",currentBreakpoint:null,noBidHandled:!1,current:window.location.href,logMessage:function(e){js_gb_adc.logEnabled&&console.log(e)},intializeTags:function(e,t){(e.enableAd\|\|void 0!==window.adobe&&void 0!==window.adobe.target.showAdvertisements&&window.adobe.target.showAdvertisements)&&(js_gb_adc.current!==window.location.href&&(sessionStorage.removeItem("targetId"),js_gb_adc.target_ids=[],GptTags={},googletag.cmd.push(function(){googletag.destroySlots()}),js_gb_adc.current=window.location.href),js_gb_adc.checkUserConsent(),js_gb_adc.setupHtml(e,t))},setupHtml:function(e,t){const{prevPageFullUrl:n,prevFriend

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47351)
Category:	downloaded
Size (bytes):	157622
Entropy (8bit):	5.367193020386141
Encrypted:	false
SSDEEP:	3072:4PwOqIHS4CfyFqD47gu/yg77noYfObCQH7I2bI2f7LM:+tqcCfyFqiKg77noYfOmQzM
MD5:	BF7D22DB1B2F2B4BDEF9F7B7A977E90A
SHA1:	A11445F7FB4638B59CF38B5F75977D8806F5934F
SHA-256:	D50815416D5CFD5DA15567826B7A14D4C8E9BC87485020E0662EDDC7A8EFA1C8
SHA-512:	8C617DEA11C5E5E749D0569676E78CD6B6FC0AB5DF4CEC4D85D691DF73DECFCD3D8D2C626AA6B20925FB153EF18208433F99D968BF4F4489920FF36D164899B5
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/virtual/detm-container-hdr.js
Preview:	/* detm-container-hdr 79 prod */.detmScriptLoader.component={UNKNOWN:{ordinal:0},GOLDENEYE:{ordinal:1,launch:"onpageload",restrictions:"target",forceasync:"goldeneye"},ADOBETARGET:{ordinal:2,launch:"static",restrictions:"target",forceasync:"adobetarget"},VIPR:{ordinal:3,launch:"onpageload"},QUANTUM:{ordinal:4,launch:"dynamic"},UC:{ordinal:5,launch:"dynamic",legacy:!1},DATAMANAGER:{ordinal:6,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},DATADEFINITION:{ordinal:7,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},SATELLITELIB:{ordinal:8,launch:"dynamic",trigger:"script.dataset.trigger.dtm",satellite:!0},DETM_ADOBE:{ordinal:9,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},THIRD_PARTY:{ordinal:10,launch:"dynamic"},ENGAGE:{ordinal:11,launch:"dynamic"}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(0);)c=c.substring(1,c.length);if(0===c.indexOf("mid="))return c.substring("

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	385039
Entropy (8bit):	5.634976648892773
Encrypted:	false
SSDEEP:	6144:5Z0KsNwkrkAx3gB6kBseTNziIy68u9U8gua:2rkAx3ylBHTNzVU8m
MD5:	3791DDECDEACA6386E3A3378DF6B99C1
SHA1:	5149E10911A451E1CBC4F81C908CC98B1DC98C3C
SHA-256:	D8E8E671B5B53992B5476CFA3898CFB824090FD296823C13FB7F01A9996D7D52
SHA-512:	9EF0A4C03EA7D44101648B98F655F6624325720818649F06BCD31D0E87DE20B56036F844CCFDF85659B0D75D23D351B1F0C2107037FE49AD38C971AFBD9DE6E2
Malicious:	false
Reputation:	low
Preview:	{ "hash": "f9276c0ae7d238a3e1121013b02922ec4e1c77a8d197856747a76e436a2fb660", "parentConfigurationHash": null, "hostname": "mf.webcontentassessor.com", "version": "2.0", "debug": false, "attributes": ["allow-forms", "allow-pointer-lock", "allow-popups", "allow-popups-to-escape-sandbox", "allow-same-origin", "allow-scripts", "allow-top-navigation-by-user-activation"], "sdk": {"runtime": {"sdk-enabled": true, "sdk-enabled-events": true, "sdk-enabled-filter": true}, "web-view-delegates-android": ["com.google.android.gms.internal.ads", "com.google.android.gms.ads.internal", "com.applovin.impl.adview", "com.applovin.adview.AppLovinFullscreenActivity"], "web-view-delegates-ios": ["GADWebViewController", "GADFullScreenAdViewController", "ALWKWebView", "ALAAppLovinVideoViewController"]}, "setup": {"disableEventLogging": false, "disableImpressionTracking": false, "eventLevels": [1, 2, 3, 4], "eventMessages": false, "gptSampleEvent": "slotRenderEnded", "userReport": false, "userReportedAds": fal

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (519)
Category:	downloaded
Size (bytes):	14583
Entropy (8bit):	5.487552107568547
Encrypted:	false
SSDEEP:	384:X+msuHc7wc6ne16yW2EsEGaD6+aWGraiEnUnoDen0rtCJhGTSD5l:X+msGcpb16yWV3Ga6+jGGiNoSn0rtCJt
MD5:	EEB74615EFBF636CC7B78B17C6A933C7
SHA1:	34BF4DC348CF19180C5A022D7AB98B221D60DAD2
SHA-256:	74A7A53097F5335E794968F4F7C27D089701FD635C8698C5F5FDA7F30356CACB
SHA-512:	31CEFCB902B1F836DEB72B9AC0F61E9E23975164BCFF56F0A265FC5ACDEDAC11CD71E8C731016F8AC5554B6372B6520635A6917062E401640DF2E33E8ACD24B2
Malicious:	false
Reputation:	low
URL:	https://p11.techlab-cdn.com/e/65257_1825232097.js
Preview:	/. Compiled on Thu Dec 01 2022 12:38:00 GMT+0000 (Coordinated Universal Time) (1825232097) /.'use strict';(function(J){function m(f){if(B[f])return B[f].exports;var l=B[f]={xa:f,ta:!1,exports:{}};J[f].call(l.exports,l,l.exports,m);l.ta=!0;return l.exports}var B={};m.c=B;m.d=function(f,l,p){m.ua(f,l)\|\|Object.defineProperty(f,l,{enumerable:!0,get:p})};m.r=function(f){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(f,Symbol.toStringTag,{value:"Module"});Object.defineProperty(f,"__esModule",{value:!0})};m.t=function(f,l){l&1&&(f=m(f));if(l&8)return f;if(l&4&&"object"===.typeof f&&f&&f.sa)return f;var p=Object.create(null);m.r(p);Object.defineProperty(p,"default",{enumerable:!0,value:f});if(l&2&&"string"!=typeof f)for(var E in f)m.d(p,E,function(y){return f[y]}.bind(null,E));return p};m.n=function(f){var l=f&&f.sa?function(){return f["default"]}:function(){return f};m.d(l,"a",l);return l};m.ua=function(f,l){return Object.prototype.hasOwnProperty.call(f,l)};m.p="";re

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	454153
Entropy (8bit):	5.568927061357719
Encrypted:	false
SSDEEP:	1536:n/LuX3dHJT5V6d3XH33+K8iTJO7eLASaaSviz9kHNNbglEl51afT8zTSGE5YOoLN:nhTJrkHNNxH8DorSDOoNEE1okPTjFds
MD5:	987774B304F0B8B3AE8D1CDD4DB98CA4
SHA1:	49843699F13DD941D91A9438216BDF517770E1F8
SHA-256:	5A0BE46ED556A433E2FE60590D9BE2E6BB00AF358547864C63863955066B753E
SHA-512:	7036ECA50046C0AB90660FD26E65EBB8C98F4B1BA5A5D29329DC7BF1F819BE0730C407BD5D9CB77DC8448AA269F26B906BC399F70970776D4D7FA5533E48BEC3
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/static/css/main.12caf8146129630eda26.css
Preview:	@font-face{font-display:swap;font-family:font-thin;src:url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Th.woff2") format("woff2"),url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Th.woff") format("woff");font-weight:400;font-style:normal}@font-face{font-display:swap;font-family:att_thin;font-style:normal;font-weight:400;src:url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Th.woff2") format("woff2"),url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Th.woff") format("woff")}@font-face{font-display:swap;font-family:font-light;src:url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Lt.woff2") format("woff2"),url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Lt.woff") format("woff");font-weight:400;font-style:normal}@font-face{font-display:swap;font-family:att_light;font-style:normal;font-weight:400;src:url("https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Lt.woff2") format("woff2"),url("https://www.att.com/ui/frameworks/fo

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3631), with no line terminators
Category:	downloaded
Size (bytes):	3631
Entropy (8bit):	5.947720106089064
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j1qEREQt8vyURgu3:JrPWwwPRETvd2g
MD5:	F1EF07526FA8514F99FBEFA701E4628A
SHA1:	D1893EF899DCE7FDBDB2A92BEBEE7058B74ED827
SHA-256:	688365DE2C1331876B1122CC154D76D5C38B20739C7E8C4B55515AC7746BF80D
SHA-512:	F915E930B2EA172298BEB2BE643F595E2441EC9DD4C8BE1CA015754A3EDD05C02DF38F3FC5E77582A96D1C51E08DCE6DC775CB9FCFF56A24EC68D2FC29419653
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1049001539/?random=1707955935313&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11649
Entropy (8bit):	5.354573658253496
Encrypted:	false
SSDEEP:	192:gNIjpzlE+DC+9u6AoeOC3fQ9TfEBkCSodihXBD4rKUC/yQDPl7XhZ7hnX4wYoENT:g4Dpub/PzqcihxDKY/Dl7xXnX0nTG95o
MD5:	8E19CA092C5836CF9B2B9AF96D0677A2
SHA1:	D59AD08B3D0F448DAEA6A30ACDFD0EC28CDCEDE7
SHA-256:	DAA33B643734A0C99D40551B3B6DFCB70D860136363A5671AAF1305AA079FD3C
SHA-512:	6B2FB8DECD347BE554DA7FC499B3A33BE247391ED5B3674C293EC484D5E80C7410B4E557ACEDE11AA433376988E050903F4AA9F01F1BD70650A534431A73CDEE
Malicious:	false
Reputation:	low
URL:	https://www.att.com/idpcms/services/prod/common.cmsfeed.js
Preview:	{"idp-cms-feed":{"feedID":"34cf2119ee8f2b383a69796408a4b502","feedTimeStamp":"2023-10-25T19:16:34.016Z","docId":"f889c87b-bb60-316b-b023-c72ad0b8538d","common":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/common"},"contentFragments":{"commonLinkSection":{"docId":"a1440db7-3325-3c23-a775-5e6dee249f18","docName":"commonLinkSection","_type":"scmsFragment","scmsCompId":"commonLinkSection","hideOnDefault":false,"master":{"heading":"I need to...","quickLinks":[{"docId":"e5fb706d-ddcf-3c5d-a6a2-1b7469524578","docName":"linksection1","_type":"scmsFragment","scmsCompId":"linksection1","master":{"iconUrl":"_","label":"Pay by text","pageKey":"PAYBYTEXT","pageUrl":"_","variationID":"e5fb706d-ddcf-3c5d-a6a2-1b7469524578"}},{"docId":"65610962-fd51-3f95-a636-e271241295fb","docName

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 127 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3519
Entropy (8bit):	7.734703009081747
Encrypted:	false
SSDEEP:	48:O11LvnLwfbrMuIJ3LMWd+3LkJRxRaA2EqtIkJ5bunZg7XlSd8NxQZFKosBZGICj7:0lMEu0d6LYjgIkWZWX42NmZ0tOTdt
MD5:	E016DE8AFD5A19F4919E697BC4A0383E
SHA1:	C0CB302E18F8422C01AE2A006AE1727BFE8AA497
SHA-256:	550B28344326C8F9E6B8F14F6D8B7C12047EC5003F7785153F56DD32D64A9793
SHA-512:	D12D029DA4F29FE327E693ECA68A370B3EFE07703609BA7DDF39E80D37201772F5A0A47C21E3E78734E56C1CF7DE4CC4B8AAAC22BB358D1418E9693D62E8757C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......3......'......tEXtSoftware.Adobe ImageReadyq.e<...piTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:b812ec4c-f9d5-49a0-ace2-ae652f680f05" xmpMM:DocumentID="xmp.did:D1B9301E170E11EBA385D16C7D24EFBE" xmpMM:InstanceID="xmp.iid:D1B9301D170E11EBA385D16C7D24EFBE" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CF80E86FD09011E888F9F9AE26B6A09A" stRef:documentID="xmp.did:CF80E870D09011E888F9F9AE26B6A09A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>T......IDATx..\.l.E..bi.r.......-.#xV<P..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3192), with no line terminators
Category:	downloaded
Size (bytes):	3192
Entropy (8bit):	6.007126633649326
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j13ERN5lpgOOxRg8bTPx:JrPWwwURN5FOx28fx
MD5:	2BE053220A59388FBF5516DCB3153552
SHA1:	97220E1B5A837A1A696DAD4D5E268DC66F4E4B30
SHA-256:	50F1EF402BF0F0BF2FC09604B9DCD7C62EC4EF22C973463EEC4527DA6419BAC2
SHA-512:	EF2749CF8AC85B9BEC69FB782FDE99F6A71CEA07D7E39F24754ABDB9320E18437212FC6BD13E7D2844A7B22BF9B94E523AD5ADCB72B6CEE868D90518E2E68F35
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1049001539/?random=1707955924541&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (507)
Category:	downloaded
Size (bytes):	2675
Entropy (8bit):	5.590980700456143
Encrypted:	false
SSDEEP:	48:DEyM5GnVXjOlZDWFomJqiOGgzaR6flHqDe6vuEVgfAfBtRsJ/8Ee8Lfa+:oyJnxjwkFjJqdtdK/udfA0/8b8r9
MD5:	0E7BC16532936D718F36DC47D8FEB332
SHA1:	A2C67B619FAAC3A4ABA0407CB4F34D844F4D2071
SHA-256:	422AA4E7BA5FF626A830DBBEE358CB5055122A03B5C36B5F7608E1B34999E529
SHA-512:	F94140B4AB0E5D441FFF70F740AE780A293837EFE446261C3B22D4644F65D1925BD780A33F781F8A79579BF180D75E4C30618E978CB65985C0CA48F7DBB5675D
Malicious:	false
Reputation:	low
URL:	https://p11.techlab-cdn.com/e/64885_1825202523.js
Preview:	/. Compiled on Sun Apr 24 2022 11:59:28 GMT+0000 (Coordinated Universal Time) (1825202523) /.'use strict';(function(){let g,l,e,y,z,d,n=!1,t=0;class E{constructor(a,b,c,f,m,p,q){this.salt=b;this.J=p;this.K=l.d.f(f);this.L=a;this.H=m;this.I=c.a;a=c.d;this.A=a.i;this.D=a.b;this.g=a.f;this.F=a.a;this.C=a.c;this.B=q}static ["a"](){if(l.j.q){var a=F();a?(d=a,d["#$S^"]\|\|G()):(d={},u());e.t.l(2,()=>{d&&(d["#$S^"]=t,1==t?g.v.h.j(document,"X-AK-PIM-INJECT=sync;path=/;"):g.v.h.j(document,`X-AK-PIM-INJECT=;Expires=${(new Date).toUTCString()};Max-Age=0;`),u())});g.n.m.b(()=>{if(!n){const b=Date.now();.for(const c in d){if(!Array.isArray(d[c]))continue;const f=d[c][7];f&&b>f&&delete d[c]}u()}},3E3+g.n.j.f())}}static ["k"](a){return e.a.j(a.u)?2:e.a.i(a.u)?1:0}static ["y"](a,b,c){b=l.d.f(b);return!!(null!=d&&b in d&&d[b][0]===a&&(!c\|\|c&&c==d[b][5]))}static ["m"](a,b,c){let f=a.p;if(d){b=l.d.f(b);var [,,m,p,q,v,,,w]=d[b];if(m!==e.q.x("4")){b=x(p);var r=A(b,q),h=e.j;h.l(a.u,r);f.d.p(a.u,5,m);h.b(a.u

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	170
Entropy (8bit):	4.748419946225032
Encrypted:	false
SSDEEP:	3:YRM9WREaD4cFlQeNL2ysrQaJ9WHeSpXBhnX/QKQUWADMGLUMLP8XREJRBQHY:YsWiARNNLX4QaJHSpXBh4KQPADMGgMbV
MD5:	136AF34ACC3DA2187E4C88D4AC47C055
SHA1:	A75201A3AA3320991441EA1197FF38A5C258BDF8
SHA-256:	513004D0718FBE4DB3278F94447AAE5A44338F3912B821FB9BEF66719E7348B8
SHA-512:	EE11AB2517D2A362FBB3A3C7892854B1A66472F1BE41DF0D452547A81397945508EDDA5B00FC3E96856921C65FBC27046486EC55266DB2701B0DEECEBBB8D5A4
Malicious:	false
Reputation:	low
Preview:	{"timestamp":1707955915919,"status":405,"error":"Method Not Allowed","message":"","path":"/msapi/idmorch/registration/unauth/service/v1/initializeOpenPortalRegistration"}

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6992, version 1.0
Category:	downloaded
Size (bytes):	6992
Entropy (8bit):	6.038512359873817
Encrypted:	false
SSDEEP:	192:g6LRR7AgZ10SA8H6DRQlyU40qdkNLZepW3jV8dlPV2K:BNWnue0q8ad5
MD5:	0628FBD0F36EEEAF0D509CC79AAA171E
SHA1:	A5FF128811B05B8CD33DC80CA0907CA719C2D350
SHA-256:	8D0F4A4201EB7D01DAA2BCAF8007A29EB473F707FB505BA45CDFC531F2BA5C49
SHA-512:	35DB97BE8762575BF0F832CF621DC3050BF45D17E6B613A8B36EDC446CA763127C25103445BE3C4421369BCF730A88B452B7EF66FAF9615548E3DE7370A1DA2A
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/ATT_Icons/att-icons.woff
Preview:	wOFF.......P................................OS/2.......`...`...9cmap...h...\...\.]..gasp................glyf.............e..head...h...6...6&...hhea.......$...$....hmtx............v...loca...D...B...B_.[8maxp....... ... ...Cname.............J..post...0... ... ...............................3...................................@...!.....@...@............... .................................@............. ...!......... ... ..................................................79..................79..................79...........N.../.F.V..%.....#!"&'..58.1<.1465>.7.>.39.2.........0..8.1....;.26?.6&'..+."......4&+.".....;.265.N..................".."..............................E....................................U.........A....................................!.....3.V........%..326740#..#"&'."3.267>.7>.70&.......#"&'0".......3'"&'4".........3267>.54&540.......#'............326764'..'"01......#"&54670.1%.....#"&54672&.............32654&'..'.01'..#".......32654&'.B&\48d(..cOEX....6o$..........

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.515396048773456
Encrypted:	false
SSDEEP:	48:soJoeCq6Pt/YUA5TGkwwG8VHfH68riq+YJZrtHAopQ0KOTxTiLkXl3eWIO1DIM:Xlby/qTNwwG8VHv3riqZXpHAB0o5i8M
MD5:	E73488182AA37117B7FE80FB5667BD23
SHA1:	A6C78BE8C6345D5D9BF09BEAD652A9D2CDD9386A
SHA-256:	70E50944BAE272F6BB767E433EBD30B3AB2F8CA1C6A3E02083A088619BE9DA63
SHA-512:	914B640C3EC89CB44A80465E6C0F23AB44A7A39E9795926230D55EA4F9CBECF9091094D99E2D850641B20A1DE39D80414827761C5465AE29EE4F0307A0B05DFB
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/appeal-or-correct.png
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<...VIDATx...Kl\...qC..E....UIv...".b...."....Z..MAdc..h6....8.EJW.oo"... .pv!wc......E0...AG.3....:...#dy....x.7......T...<.U. eB.......................................................................................................!.Jennnaaa%'n.....z}..Xccc...+MU.U9.........)p.e333^1@..........pz..!d0+.........[..\.tI..!$..F........H.Z.B@........^......BR....BH...B@.I..Z..!.WP..!$..j! ..^A-....+.....z....BR....BH...B@.I..5.G..!.Vph..S..!.V........B..`...q-_@.I..MB....2..l..P.T...!d`+.fgg.e.V..c...bi...!d0+......(..._..e..B..x..%....1.....B.......NOO....Q@......gff&....H.Kccc~...2....)F..!$..6L...BH.l.<B..!].N~S\i+X8....& .t.:..q}..f......~..........`,.3..BH.....W.7T...l.! .t.:.......V.U?S@..Luz..6+..722....!..N/[.f.]...B.R........ .t.:=h...BHy+.... .....k...B..`7Z....z..R.;.B....W.N.P...p.V.... ..n....B....A...Z...B88..h.U.@......P...p0+.J.U.@.....[...B8..l.B....$*.V.U.@.S..-TA.!....... ..&ZA{

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15256), with no line terminators
Category:	downloaded
Size (bytes):	15256
Entropy (8bit):	5.326529558140547
Encrypted:	false
SSDEEP:	384:rwB59pbubV/ysvFWP7YKwEbG1Z6cfbbdzH0DccI9wOjbb9mTp0B0wolC8p4l:rwlpbuZy8FWP7YbMG1Z6cfbbdzH0Dccu
MD5:	4AD8FFE6D747A991A5FF54C0C90004CD
SHA1:	83BFE72794B14374C9A9CF2091539951DD05E14A
SHA-256:	FD96C6235BC9C1A52D6063013E7162CABBED206343C40D638C5E2EDF12A8336E
SHA-512:	52B84FCAB5E431F3510E2E83FB841A9D5C762CF8411A57D5934219F02D95D1F93276C9C625384B5F831206B683D6708D082978366F417C3E731149CAEA66D6C7
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/global_all_cms_globalnav/web-components/2.0/attwc-globalnav/p-9cb43b19.js
Preview:	let t,e,n,s=0,o=!1,l=!1,i=!1,r=!1,c=!1;const a=window,f=document,$={t:0,s:"",jmp:t=>t(),raf:t=>requestAnimationFrame(t),ael:(t,e,n,s)=>t.addEventListener(e,n,s),rel:(t,e,n,s)=>t.removeEventListener(e,n,s)},u=!!f.documentElement.attachShadow,d=(()=>{try{return new CSSStyleSheet,!0}catch(t){}return!1})(),p={},w=new WeakMap,m=t=>w.get(t),h=(t,e)=>w.set(e.o=t,e),g=(t,e)=>e in t,b=t=>console.error(t),y=new Map,v=new Map,_=[],j=[],k=[],S=(t,e)=>n=>{t.push(n),o\|\|(o=!0,e&&4&$.t?M(U):$.raf(U))},x=(t,e)=>{let n=0,s=0;for(;n<t.length&&(s=performance.now())<e;)try{t[n++](s)}catch(t){b(t)}n===t.length?t.length=0:0!==n&&t.splice(0,n)},U=()=>{s++,(t=>{for(let e=0;e<t.length;e++)try{t[e](performance.now())}catch(t){b(t)}t.length=0})(_);const t=2==(6&$.t)?performance.now()+10Math.ceil(s(1/22)):1/0;x(j,t),x(k,t),j.length>0&&(k.push(...j),j.length=0),(o=_.length+j.length+k.length>0)?$.raf(U):s=0},M=t=>Promise.resolve().then(t),R=S(_,!1),L=S(j,!0),O={},C=t=>null!=t,E=t=>t.toLowerCase(),P=t=>"object"==(t

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	45781
Entropy (8bit):	5.915469177506931
Encrypted:	false
SSDEEP:	768:Kr2UnsK32FLUW8ZxzKabSLeLGm4RF5hhR1uicfZOYZn0ASxoARN9:eFnsKmRUW8ZxzKauLeqThqiWbOF9
MD5:	A55F69A80B9F0CA3A9B0D940136A7AA1
SHA1:	B8C2B619188C62ABC78FD3A7EBFC101FD2D58437
SHA-256:	2A89C2D225E7D40C1BDF1A49B10F20B492B26004E916B512CFDDA42C4BCB6AC6
SHA-512:	0AAC9C3B6D89E0FA979BD28D54AE5EB60BD2C8AED485B4CC588BD4CDBBE1C322B1309A0D9DB78F8D5987F909E2BC5198018AC337276BFAE9747A53045622A895
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/_sec/cp_challenge/sec-cpt-4-2.js
Preview:	(function YCnRBDtAsz(){F();d2();Q2();var GU=function(rD,LD){return rD>>LD;};var MD=function(ND){return !ND;};var FD=function(xD,ID){return xD<=ID;};var UD=function(){DD=[QD];};var dD=function(){return ZD.apply(this,[BN,arguments]);};function T2(a,b,c){return a.indexOf(b,c);}var AD=function(){return ZD.apply(this,[UN,arguments]);};var mD=function(pD,BD){return pD%BD;};var PD=function(CD){return ~CD;};var VD=function(){return ZD.apply(this,[pN,arguments]);};var cD=function(sD,KD){return sD\|KD;};var gD=function(qD,XD){return qD<XD;};var tD=function kD(hD,ED){var fD=kD;for(hD;hD!=PN;hD){switch(hD){case VN:{hD+=CN;return lD=WD,DD.pop(),lD;}break;case sN:{hD=cN;for(var zD=TD;gD(zD,vD[M.Nr(jD,wD(bD))]);zD=OD(zD,HD)){var SD=vD[M.sr.call(null,nD,JD)](zD);var YD=RD[SD];GD+=YD;}}break;case gN:{for(var rQ=TD;gD(rQ,LQ[M.Nr.call(null,jD,MQ)]);rQ=OD(rQ,HD)){(function(){DD.push(NQ);var FQ=LQ[rQ];var xQ=gD(rQ,IQ);var UQ=xQ?M.xr(ZQ,wD(AQ)):M.Fr(DQ,MD(TD),QQ,dQ);var mQ=xQ?L[M.Ur(PQ,CQ,wD(VQ),MD(HD))]:L[M

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (8617), with no line terminators
Category:	downloaded
Size (bytes):	8619
Entropy (8bit):	5.325540504806494
Encrypted:	false
SSDEEP:	192:t3QSYJ1RSG810D0wvMw49M80j7TrOZj6tUsuE7d71fSGBwlfmRmdX:O7J1RS56DzR2uHr2j6tUNE7d71aGefH1
MD5:	4B210AA8373C04C554008F491FA32016
SHA1:	A82045AC5B9792D5ED5D600FB531E8450BC658CC
SHA-256:	3A585EAC21CE952E77C3857B16263BE870E133061B468549734E1D0C17C29BA9
SHA-512:	3AB58627D00D2CB2687EFF3D8F52B31CC8FB08C674D8678BAD817A44C0A0A5DE4D352B86DE3D00BEB7B32A1FD598C38A007D4B506ACCDFDCD8B17FBCFEE86A98
Malicious:	false
Reputation:	low
URL:	https://www.att.com/msapi/idp-content-orchestration/v1/scms/shared/global-nav/consumer/footer
Preview:	{"cms-feed":{"feedTimeStamp":"2024-01-04T18:16:51.818Z","feedVersion":"","feedID":"c03e1ead74491b6875600c8dbfc2303a","docId":"ab531682-75db-473a-90b6-116785339efc","pageProperties":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"config":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/consumer/footer"},"seo":{"_type":"scmsSeo","metaSeotitle":"consumer_footer","twittercard":"summary","metaDescription":"consumer_footer","url":"/consumer_footer","metaRobots":"NOINDEX,NOFOLLOW","metaKeywords":"consumer_footer","breadcrumb":[{"url":"/consumer/footer","text":""}]},"release":"prod"},"components":{"default":{"footer":{"variationID":"/shared/global-nav/86f5dd3a-e323-49bb-b970-6744a7835e3a","docId":"86f5dd3a-e323-49bb-b970-6744a7835e3a","_type":"footer","scmsCompId":"consumerFooter","content":{"copyright":{"_type":"footerLinkFields","label":".2022 AT&T Intellectual Property. All rights reserved."},"footerLinks":{"column1":{"columnSection1":{"sectionLinks":[{"d

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4854), with no line terminators
Category:	downloaded
Size (bytes):	4854
Entropy (8bit):	5.670685763162733
Encrypted:	false
SSDEEP:	96:YyRkctyPg3vlOWnLqGRb8HOREZqyLmT1iqvmcUq2mTvqgmyWlqLXm0InaKuncFOo:yayPg3vlPL3ZQpqZ0qO7qv7q1bqyzkno
MD5:	E12AF1F6EB758E9EF3A6EB08FD2DE472
SHA1:	2609422FF75313938CAEC60EC17CB0DD7588C49A
SHA-256:	5CF8EA8905ADFA9FBB7E157B1B225BD6C468D67E60DD57E3AAFD5531E8B54ABD
SHA-512:	EE88077E8EEC7006012989784434E48A87B4F13ADDB3CFAD92661EA78958C9C5F9D8E96F4AB2123D58586FD9569248EEDA6008D1E39350703C6B8EAA6E3CC624
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID?
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":46656000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7566711756","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVAzA!3sAAptDV7D7HOk"],"userBiddingSignals":[null,null,1707955916924329],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685075200372\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685075200372","1","

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16083
Entropy (8bit):	5.237354021413093
Encrypted:	false
SSDEEP:	192:cgbnrCyTDXw1Obkkb82Cwn5BF63s74okKornOBI7fm5eu+yg+zU6bV5owVY15MXo:hBbnv53ujE5yoVYDr
MD5:	38D2011DD2DE301D819F2C852189FE80
SHA1:	7E3EAC9E20F455C3BC92E3B1706FA3224B3B09E8
SHA-256:	166729BC6464E3FCB88CBC6F5A128859B220DCE11EF46BC2B48A5E1461DD413C
SHA-512:	C8D87C4260DE23701884AF78BCA9530B34747035D9C18117120C9FD9ED164D5FB147E1D65534666EDBAF9E5194A0E8CB3FC45D82E3A2FD3CAEA06876AE507A33
Malicious:	false
Reputation:	low
URL:	https://www.att.com/idpcms/services/prod/acctmgmt/forgotpassword.cmsfeed.js
Preview:	{"idp-cms-feed":{"feedID":"cb62ca0db50f1165a031a75009ab5be2","feedTimeStamp":"2023-10-25T19:15:56.893Z","docId":"8c8d534b-e912-3c53-aa77-b093e1a1d466","forgotpassword":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"twittercard":"summary","metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/forgotpassword"},"contentFragments":{"MultipleIDFound":{"docId":"26aff90e-43fe-3929-a1ba-58f60e007954","docName":"MultipleIDFound","_type":"scmsFragment","scmsCompId":"MultipleIDFound","hideOnDefault":false,"master":{"pageTitle":"Which one do you want to reset the password for?","moreInformationDesc":"We found multiple accounts that have the same ID. Please select the password you are trying to recover.","idTypeAccessID":"AT&T Access ID","idTypeAccessIDDescr":"(For accessing one or more accounts with a single user ID)","idTypeDirecTv":"DIRECTV","idTypeGoPho

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46104)
Category:	downloaded
Size (bytes):	46260
Entropy (8bit):	5.311900730391755
Encrypted:	false
SSDEEP:	768:jaOFhhRDUHahpROfRys0LzQRo4TYYyDMFWPKQ:jaOFnRrRURQzQy4ISWiQ
MD5:	36B509FF67355CEC84F18BA35B82B809
SHA1:	8C76DAB1C96374910D4D4F2507A1A1B63B8AC562
SHA-256:	50D8A4EE260B2E8FA86FB0E5A320537054B7DE05427185AD6EF805C97CD874C0
SHA-512:	BE66444296C3FADD939282D1398FAC980CEA30304E56A20898C528A2E159D398F02713CF7E80ECE74D51EB816FE2276E6FFD054422C156AE7B7EDAB2F2E98CC2
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/bing.js
Preview:	/* Marketing Rules version: 3220 */.//hn4276 - 11/14/23 update [SPTANALYTI-25071].//Source: https://bat.bing.com/bat.js.//Beginning MS Bing UET library..function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",d

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11070
Entropy (8bit):	5.198152465424702
Encrypted:	false
SSDEEP:	192:DMnHYNpyZiniIGgikb8my5bmyzb7wW5q9aql8OiYs3TntYqJr0FZsQS62Zmw5rPC:ji4GOq5DfLr2ZI6Cc
MD5:	7EE9ACB08AC20AB2635AE9305197E7BF
SHA1:	BB3BA9769F1169F70039362457106D1CAB72270C
SHA-256:	13A8D85E7DB99566A21071533A17775B649ABD5225B2B2DD63609CD04F79BEF2
SHA-512:	99B05EAC3CBFD9BDABD29B6FD3997C1DABB02C2D6F68D133035DB22931BCB5B9F092727FC0AA00815FFA5D46514DC0044FAF1EE4AF4E17AC7BAC9AB205C7E144
Malicious:	false
Reputation:	low
Preview:	{"idp-cms-feed":{"feedID":"7b5b2cf3fd8f1073606c26b48cbad900","feedTimeStamp":"2023-10-25T19:22:07.155Z","docId":"46cabb0a-6da0-385c-be52-6933dd48cc9d","forgotid":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"_type":"scmsSeo","twittercard":"summary","metaRobots":"INDEX,FOLLOW","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/forgotid"},"contentFragments":{"FindEmailAccount":{"docId":"48dd4bc8-0de3-37a9-9c3e-00813193ebfd","docName":"FindEmailAccount","_type":"scmsFragment","scmsCompId":"FindEmailAccount","hideOnDefault":false,"master":{"pageTitle":"Find your AT&T email account","firstNameLabel":"First name","lastNameLabel":"Last name","zipCodeLabel":"Billing ZIP code","dateOfBirthLabel":"Date of birth","buttonContinueCTA":"Continue","buttonCancelCTA":"Cancel","lastNameCharErrTxt":"Be sure your entry is between 1 and 80 characters.","firstNameCharErrTxt":"Be sure your entry is between

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7691), with no line terminators
Category:	downloaded
Size (bytes):	7691
Entropy (8bit):	5.090750667420583
Encrypted:	false
SSDEEP:	192:RsEcAFFD64StocMrBcgoxCKcUcw25xAxNcf0Nb:mEcAz6hMGgKcUcw25xAxNcMh
MD5:	8A2EA6C594435BE87C782EFEF438F654
SHA1:	C1ED513F0DE01D6853B9D41E7537EDB70CF4216E
SHA-256:	315E447AD1C7052AE04E23A111AEB12621CBADCD1824526019A6E7B2E6FB6DF8
SHA-512:	F4733C911370C488A340098F711AD6927FEA83794FDB7831BC1F83C6091B3A4DB53B21DA0ACDDB19C98D3C0FAF31CD0E42A4D5CBCFC2F436B67CAD94BB20AEFD
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/scripts/privacy-redesign.js
Preview:	$(document).foundation(),$(document).ready(function(){(new NAV).init(),(new TILES).init(),(new SMOOTH_SCROLL).init(),(new PRINT).init(),(new LAGUAGE).init(),(new MODALS).init()});var LAGUAGE=function(){return{init:function(){!function(){var e=$("body").data("allowed-lang");if(e){e=e.split(",");for(var a=0;a<e.length;a++){var n,t=e[a].trim();$(".lang-link[data-lang="+t+"]").addClass("usedlang-link"),"pt"==t&&(n=$("body").data("allowed-lang-href"),$(".lang-link[data-lang="+t+"]").attr("href",n))}$(".lang-link:not(.usedlang-link)").remove(),$(".privacyLanguage .lang-link:first").addClass("current")}else $(".privacy-language").remove()}()}}},SMOOTH_SCROLL=function(){var e=function(){$("a[href*=\\#]").on("click",function(e){this.pathname===window.location.pathname&&(e.preventDefault(),"#"!=(e=this.hash)&&1<e.length&&(a(e),location.hash=e))}),window.location.hash&&window.location.hash.length&&a(window.location.hash)},a=function(a){var n,e;0<$(a).length&&(n=Foundation.MediaQuery.only("small")

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2637
Entropy (8bit):	5.23540428880029
Encrypted:	false
SSDEEP:	48:YYGfGvdw/frocI2RE2TB5hdrs28+bLaR2bbXUWwy+w8lMnagdNa5hd5IM:NIGM5IeAALDbey+9Gaoa5T
MD5:	76154C4B777447D239B9BC73CC2D9B60
SHA1:	96ED737126D0EF4BBFC5BA8AF2EB71EBA3135487
SHA-256:	B1583A74ECDDFBB642D7BAF2AB3614CFF54CA585421EBC3770E6D943EA0F936A
SHA-512:	C9D82D928B1D48BD72088DA2A84EDE85F479A24E8CBDB203CF3ABD4EA0A48B79C82E2BF7C1CDEEB3EBF84474017DA5A912060532A4CB51737712B3CA827A023F
Malicious:	false
Reputation:	low
URL:	https://www.att.com/idpcms/services/prod/overview/iseglobalnav.cmsfeed.js
Preview:	{"idp-cms-feed":{"feedID":"0b69410fff79966132cf4cfc42a2caac","feedTimeStamp":"2023-10-25T19:21:45.314Z","docId":"03e82d3a-6b5b-339f-a73c-789ff5c1d2b1","iseglobalnav":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/iseglobalnav"},"contentFragments":{"OttLander":{"docId":"b5c99c85-86c7-3e34-9609-fab9a64859d6","docName":"OttLander","_type":"scmsFragment","scmsCompId":"OttLander","hideOnDefault":false,"master":{"ottLanderLocalNavCTA":"Account","ottLanderCtxNavMyPackagesCTA":"My TV packages","ottLanderCtxNavMyAddonsCTA":"My add-ons","ottLanderCtxNavMyDiscountsOffersCTA":"My discounts & offers","ottLanderCtxNavFAQHelpCTA":"FAQ & help","variationID":"b5c99c85-86c7-3e34-9609-fab9a64859d6"}},"Support":{"docId":"c828d2fb-3088-3021-bf07-988ce55b3432","docName":"Support","_type":"

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18601), with no line terminators
Category:	downloaded
Size (bytes):	18601
Entropy (8bit):	5.427533633211367
Encrypted:	false
SSDEEP:	384:a3NmbksEkvB8fsC6rTOXklkrAkLcowFDH8lAU+7m+iUE7MWlA:a384sE88UC6OXkl81cowVH8lAU+a+iUB
MD5:	3500CCB2308DBDCD9040AA886CEE3AAD
SHA1:	DDB51FF72920F8D55C66FE3BED4E7616D838702F
SHA-256:	A53934546CA422EE24CCF75AA6B91E96701AD653926DACD589670B444ADC777C
SHA-512:	DBC2464A44AA38013C8E4540A5E3D156EF269A551E3783A2594074F09AA00306274016093B44EC9D15436B010648C94C46F39AF71F579A618417AB5FEE4F675A
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/global_all_cms_globalnav/web-components/2.0/attwc-globalnav/p-39475d66.js
Preview:	let e,t,n="";const a=async e=>{const t=`//www.att.com/scmscontent/cms-services-feedgenerate-nodems/v1/shared/global-nav/${e}/header.prod.json`;return await fetch(t).then(e=>e.json()).then(e=>{const t=e["cms-feed"].components&&e["cms-feed"].components.default&&e["cms-feed"].components.default.header&&e["cms-feed"].components.default.header.content;return e&&Object.keys(t).length?console.info("attwc-globalnav: fetchSanityFeed: uiObject is updated!"):console.warn("attwc-globalnav: fetchSanityFeed: response is: ",t),t}).catch(e=>console.error("attwc-globalnav: fetchSanityFeed: fetch error: ",e))},s=async s=>{if(s===t){if(e)return e;if(e&&n)return Promise.resolve(e);if(e&&""===n)return Promise.resolve(e)}t=s;let o=`/msapi/idp-content-orchestration/v1/scms/shared/global-nav/${s}/header`;return e=await fetch(o).then(async e=>{if(200==e.status)return e;await a(t).then(e=>(n=e,Promise.resolve(n)))}).then(e=>e.json()).then(async e=>(n=e["cms-feed"].components&&e["cms-feed"].components.default&&e

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1815
Entropy (8bit):	7.167000052394706
Encrypted:	false
SSDEEP:	48:3kNinNuiAaCJJ3bXAZ3hzM1zBXzpLKazfac:08N+vLGM1zBXFHac
MD5:	ABD3BFF57AFC444BE6F78801334E6C10
SHA1:	011429AC96709C9B05CDA6F29C3C2ECAC6158391
SHA-256:	F7582FD23DB2B0F03A798169C070E6EF14A4BAF31D2B6DB9F3083FDE8ACED2E3
SHA-512:	524B44202F62D22CD8981F697E385C719EB5346F32437655CC62327A135E966CBA5237D80304C4EAE76952F72E0078B3784114239E6895C71845CD284D1287A0
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/images/favicon.ico
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:AA5BD89B936B11E88350D001543530E9" xmpMM:InstanceID="xmp.iid:AA5BD89A936B11E88350D001543530E9" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F07A94AE50E111E6BCF2C40D8C612C33" stRef:documentID="xmp.did:F07A94AF50E111E6BCF2C40D8C612C33"/> </rdf:Description> </rdf:RDF> </x

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1040), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13810
Entropy (8bit):	5.145036964038904
Encrypted:	false
SSDEEP:	192:cm9ZiqsT8STkhGbDE3t0n6h8x+Zlv/+od384XUxsc3c2ndHp5Qy6KHbcevJP/Hx1:cmLi4d4Hbb/HFHNf
MD5:	D1B01584B4FA08962CC8273DB224F4DD
SHA1:	3F6B963B7F39AAA683CBB28E61511A9EE0726ABE
SHA-256:	5972E155CEA538D502791DCA7A8FEABFA0F1AD020C4A29C6FFE933E6AA9E0DC2
SHA-512:	8A2AE42B65A52CB07B7E04C1D9ADE8E527D8A369C60840A3128D699F4F5644F4E0C41D4E7E51E31B54E6AD65D1870AFF19AD77CEC1E5CADECD9ED22C983D95A5
Malicious:	false
Reputation:	low
URL:	https://about.att.com/error.html
Preview:	..<!DOCTYPE html>.. [if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7"> <![endif]-->.. [if IE 7]> <html class="no-js lt-ie9 lt-ie8"> <![endif]-->.. [if IE 8]> <html class="no-js lt-ie9"> <![endif]-->.. [if gt IE 8]> >..<html lang="en-US" class="no-js">....<head>.. ..<meta charset="utf-8"/>..<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>..<meta name="viewport" content="width=device-width"/>..<meta name="robots" content="INDEX, FOLLOW"/>...... <link rel="stylesheet" href="/etc.clientlibs/snr/components/page/clientlibs-base.min.css" type="text/css">.<script defer src="/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.js"></script>.<script defer src="/etc.clientlibs/snr/components/page/clientlibs-base.min.js"></script>.......... <meta name="SBC-SEARCH-CATEGORY" content="All"/>...<meta name="SBC-SEARCH-TAGS_LIST"/> .. <meta name="SBC-SEARCH-PUBLISHDATE" content="2018-11-13T15:15:00.000-06:00"/>....

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.934656753155064
Encrypted:	false
SSDEEP:	3:ArdFBxcbdNg1+zgBDkA62N/cAONS:Ar7o3gY4DJFcs
MD5:	B606F6387F556D4DD9A588454D6185F7
SHA1:	C501D6589B21C2B091F64DA61FADE9671EAE0806
SHA-256:	411AAE8839794278544C7DC67FF53D9F085735FD20A4837598D6947D605297CB
SHA-512:	21D90FD8EDA56631E767DCBE70E2A839A49EB513A15FF2C8FD293AD409427870E6CF7F61F49289F622C86863AC8B384220B0EBAC2B3BEBC859299AD6C66D6F9B
Malicious:	false
Reputation:	low
URL:	https://pnapi.invoca.net/1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22agent%22%3Anull%2C%22att_tfn%22%3Anull%2C%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22call_type%22%3Anull%2C%22campaign%22%3Anull%2C%22channel%22%3Anull%2C%22device%22%3A%22desktop%22%2C%22directv%22%3Anull%2C%22end_of_call_reason%22%3Anull%2C%22existingService%22%3A%220%22%2C%22experiment%22%3Anull%2C%22fiber_indicator%22%3Anull%2C%22final_routing_intent%22%3Anull%2C%22flowCode%22%3A%22OPR%22%2C%22fnl_actn_obj%22%3Anull%2C%22fnl_afpd_actn%22%3Anull%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22gclid%22%3Anull%2C%22gclsrc%22%3Anull%2C%22gigaAvailResult%22%3Anull%2C%22language%22%3Anull%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22lob_call_center%22%3Anull%2C%22need_lvl_1_txt%22%3Anull%2C%22need_lvl_2_txt%22%3Anull%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_b%22%3Anull%2C%22nsr_b_inv%22%3Anull%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_e1_inv%22%3Anull%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22nsr_fid_inv%22%3Anull%2C%22optional1%22%3Anull%2C%22optional2%22%3Anull%2C%22orderid%22%3Anull%2C%22owner%22%3Anull%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageName%22%3Anull%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22productTypeCart%22%3Anull%2C%22product_category%22%3Anull%2C%22product_purchased%22%3Anull%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912722-1707999122%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22rpet_wrk_func_cd%22%3Anull%2C%22rslt_lvl_1_txt%22%3Anull%2C%22Site_location%22%3Anull%2C%22source_code%22%3Anull%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr2&
Preview:	json_rr2({"invocaId":"i-9628e359-e4d7-41c9-e90e-d778a0c43f73","message":"shared params updated"});

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	227432
Entropy (8bit):	5.475922471024145
Encrypted:	false
SSDEEP:	1536:ZBGu0hZH5NI8p+1vjDMP3If9GmLURpaUHYH/QjJ6TQrqGpFTc+cPUr0I7z/yXE5D:6fNOZXWEWd2UlhRq820o5NNbim8GYaed
MD5:	DCC14470294780B24647B884C1F8871C
SHA1:	2C2F5E6476CAB725C37DE34437FC183649A187B4
SHA-256:	66D537FE9FFBABF408F236213CF9FBDCA2E13FAB6035B3494606DB9485A3D57E
SHA-512:	EE14680EF47DB5993CD41C4A1A6F13D51C4B9B20E1B5F2FF4DCAF9E6E11189AE5920D3E6DAA315A65BB96730D06D0CF067B809F6BA423EF809CAEA22D26F65DB
Malicious:	false
Reputation:	low
Preview:	{"idp-cms-feed":{"feedID":"b60967852deeaca82629117b6049f6ad","feedTimeStamp":"2024-02-02T17:38:22.569Z","docId":"71bc77dc-9232-3c3b-b986-b94ffacf25a9","registration":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercreator":"@ATTExplore","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"enablePersonalization":false,"_type":"scmsConfig","pagePath":"/registration"},"contentFragments":{"QARIsThisYourID":{"docId":"b72b6e51-8d61-3a55-ac57-38838acbbb25","docName":"QARIsThisYourID","_type":"scmsFragment","scmsCompId":"QARIsThisYourID","hideOnDefault":false,"master":{"pageTitle":"Is this your user ID?","foundAnotherAttIDText":"We found an ID that might be yours. If it is, you can link your new account to it.","currentUserIDLabel":"ID","signInWithAlsoText":"You may also be signing in with:","wirelessNumberText":"Wireless number:","attEmailText":"Email:","passwordLabel":"Password","

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11649
Entropy (8bit):	5.354573658253496
Encrypted:	false
SSDEEP:	192:gNIjpzlE+DC+9u6AoeOC3fQ9TfEBkCSodihXBD4rKUC/yQDPl7XhZ7hnX4wYoENT:g4Dpub/PzqcihxDKY/Dl7xXnX0nTG95o
MD5:	8E19CA092C5836CF9B2B9AF96D0677A2
SHA1:	D59AD08B3D0F448DAEA6A30ACDFD0EC28CDCEDE7
SHA-256:	DAA33B643734A0C99D40551B3B6DFCB70D860136363A5671AAF1305AA079FD3C
SHA-512:	6B2FB8DECD347BE554DA7FC499B3A33BE247391ED5B3674C293EC484D5E80C7410B4E557ACEDE11AA433376988E050903F4AA9F01F1BD70650A534431A73CDEE
Malicious:	false
Reputation:	low
Preview:	{"idp-cms-feed":{"feedID":"34cf2119ee8f2b383a69796408a4b502","feedTimeStamp":"2023-10-25T19:16:34.016Z","docId":"f889c87b-bb60-316b-b023-c72ad0b8538d","common":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","twittercard":"summary","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/common"},"contentFragments":{"commonLinkSection":{"docId":"a1440db7-3325-3c23-a775-5e6dee249f18","docName":"commonLinkSection","_type":"scmsFragment","scmsCompId":"commonLinkSection","hideOnDefault":false,"master":{"heading":"I need to...","quickLinks":[{"docId":"e5fb706d-ddcf-3c5d-a6a2-1b7469524578","docName":"linksection1","_type":"scmsFragment","scmsCompId":"linksection1","master":{"iconUrl":"_","label":"Pay by text","pageKey":"PAYBYTEXT","pageUrl":"_","variationID":"e5fb706d-ddcf-3c5d-a6a2-1b7469524578"}},{"docId":"65610962-fd51-3f95-a636-e271241295fb","docName

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5268
Entropy (8bit):	4.146739101627285
Encrypted:	false
SSDEEP:	96:Xxjql8CT+ijJmlwfzaXcoX8w97on/oh9fNqncAYXRZk0XqZLR:Xxj/TijJmEaXT8+Yoh9fNCcdU0aj
MD5:	91762DDE8687FF7CDFD8D2CA754242C4
SHA1:	5A78CA3036ED8C2AE8349B22E763A4EA1BC23880
SHA-256:	00F24C53A8243D72EC3717C929E3FBA0FDE647F199966EA7A043B93787E5C516
SHA-512:	4CF945504AF2E828F0CCEDB561785994B61B61A3BA8E62345C9821235C5843F574A736329B552A29E2484506AAFE9DD1352AEB55B2895CE16A7C5EE334C464E4
Malicious:	false
Reputation:	low
URL:	https://identity.att.com/identity-ui/assets/img/ATT_LOGO.svg
Preview:	<svg width="60" height="24" viewBox="0 0 60 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M39.7891 16.8083C39.6314 16.8083 39.5224 16.7003 39.5224 16.544V8.80451H36.8662C36.7086 8.80451 36.5994 8.69651 36.5994 8.54051V7.47284C36.5994 7.31668 36.7086 7.20868 36.8662 7.20868H43.9375C44.0953 7.20868 44.2043 7.31668 44.2043 7.47284V8.54051C44.2043 8.69651 44.0953 8.80451 43.9375 8.80451H41.2813V16.544C41.2813 16.7003 41.1722 16.8083 41.0143 16.8083H39.7891ZM47.1992 15.5123C46.3984 15.5123 45.7195 14.9245 45.7195 14.0965C45.7195 13.2563 46.2048 12.8365 46.957 12.4162L48.9216 14.5045C48.4969 15.1403 47.9754 15.5123 47.1992 15.5123V15.5123ZM47.7452 8.48051C48.3761 8.48051 48.6913 8.88834 48.6913 9.38068C48.6913 9.90868 48.3273 10.2085 47.4661 10.7005C46.9686 10.1727 46.7508 9.81268 46.7508 9.40451C46.7508 8.87651 47.1143 8.48051 47.7452 8.48051V8.48051ZM53.1182 16.4723L51.0683 14.2762L52.427 11.9725C52.5481 11.7688 52.4389 11.6365 52.2447

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30289)
Category:	downloaded
Size (bytes):	30827
Entropy (8bit):	5.439654958035035
Encrypted:	false
SSDEEP:	384:pv9eV+I8al3vpGGFP5U6fFIfyiktUYvNueu2A3L8O24avB/fSSn36ue:pv98l3vb7lf+61VueVAoO24avYm36ue
MD5:	7DF12A67C161FCAC83F1E8DAEAC6DE71
SHA1:	2F6BDB06B103EE59108CB3615CD0629B9C9909A9
SHA-256:	6FB54E7077433A967F4699F44DFC16D70814F710DD593782E6D89F0F03EC57F1
SHA-512:	D863B3DFC70EE7D6111B6B6360E06B1F84B8C96C38F3E61EF625C87DA7D5BB1FCDC45EB69E97AA6B331B180041F28C98F59768A42FA860245C19121B19063176
Malicious:	false
Reputation:	low
URL:	https://gateway.foresee.com/code/19.22.0-fs/fs.compress.js
Preview:	/**************************************. @preserve. * Copyright (c) 2023 Verint Systems, Inc. All rights reserved.. * ForeSee Web SDK: Compression Library. * Version: 19.22.0. * Built: May 05, 2023 at 09:53:37 EDT. *************************************/._fsDefine(["exports"],(function(t){./. * @preserve. * Pako https://github.com/nodeca/pako. . (C) 1995-2013 Jean-loup Gailly and Mark Adler. * (C) 2014-2017 Vitaly Puzrin and Andrey Tupitsin. * (C) 2019 Verint Systems, Inc. (Modified to remove unused features). */.var e=function(){function t(t,e){return Object.prototype.hasOwnProperty.call(t,e)}function e(e){for(var i=Array.prototype.slice.call(arguments,1);i.length;){var n=i.shift();if(n){if("object"!=typeof n)throw new TypeError(n+"must be non-object");for(var a in n)t(n,a)&&(e[a]=n[a])}}return e}function i(t,e){return t.length===e?t:t.subarray?t.subarray(0,e):(t.length=e,t)}function n(t,e,i,n,a){if(e.subarray&&t.subarray)t.set(e.subarray(i,i+n),a);else for(var s=0;s

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 393x294, components 3
Category:	downloaded
Size (bytes):	55691
Entropy (8bit):	7.9632933838458495
Encrypted:	false
SSDEEP:	768:4YyrtOVVzaBZEg6Z0Pc+JwZBdU2ezMbiO8iCkFe59IHsQrBQNXKbxqMHdAaR4MVK:4POmBMn4u4Rb9lQrBQWxtvqK6uw
MD5:	425C48A40B41AC0A45925F9F2C21465B
SHA1:	8903C27E4D5206FB69986DA89456F1A777CE95B1
SHA-256:	D1CAD36BEC70F0D27A8882D6E2DE499577B0A0BC9C722F737E3B6105B8BC7DBA
SHA-512:	37577262901EF014F9752580CCE8726C27340931886C13EC37334105AA482BA6E207ECE1841840E66D0AC8A8B51C3319CA5E0DC1D28E68BE8CFF96317C268329
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/tiles/can-go-smart-cane.jpg
Preview:	.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1..........................

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11058
Entropy (8bit):	4.9848272146997665
Encrypted:	false
SSDEEP:	96:jDsmB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDA0/e:jIBHczCVvKRC7Wi4xi18tH/0gCbt
MD5:	CD5BD4B8AC1C9B5CE110C40B3DE4DE1F
SHA1:	3DA959AC73BC3576227C14426C38A0B68404DA33
SHA-256:	C4086C8E73486AEE62E5752E59EF5B05E92ECE4F6D91FBD6416C9AFCD2CAB2A9
SHA-512:	020D09AB12B1726123FE8287B4A58A38D6BBB1DB7C14C686DE2F5D1186500C0D657FF0101013DFEC9CC2BCD9A8763F9CD7C94BE4FC82380CA6384A86761CD289
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=WPDUB-APVCN-LTNDE-ZPC3E-YKMHC&d=www.att.com&t=5693186&v=1.766.0&sl=1&si=77347219-a524-4295-8f80-f3f6728d815c-s8vf71&bcn=%2F%2F173bf10b.akstat.io%2F&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=245538"
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955904166,"h.cr":"7648a5cea6ad5dd68056e7fbbb5c1094ac103999-8921eae8-fb0f3170","session_id":"59b21f1b-982e-4c22-96bd-e8e0c993b072","site_domain":"att.com","beacon_url":"//173bf10b.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	3.770942421748537
Encrypted:	false
SSDEEP:	3:1kIJR:1jj
MD5:	2A58482BB45C0D0F04366C183963FBD2
SHA1:	3CF37C684540A64FCD13489A9F1FB5180D29F162
SHA-256:	C7B8CC97154D690799B0A9942EF8E35707058F579FCEC076E8CF45726E1E57BA
SHA-512:	315C3C5E47230EB9B89BF22FCFAB5F438BDE53ACECE8F1F312646E9B007079CBFF03C3A6AF0CCA7AFC65F991F9A7324A0E45D7B51CC1A1C35628FF8DE23CE68F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnfpjBxbnHUWRIFDSKE8YASBQ0PLthP?alt=proto
Preview:	ChIKBw0ihPGAGgAKBw0PLthPGgA=

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4792
Entropy (8bit):	7.665131853384187
Encrypted:	false
SSDEEP:	96:27CTkxvdpx17WIylNXAqbci+ctGul8Lwdns9SYe70to0HSF+Zi5:SC4V97hKTbgul8Lwm9SX0tVHSF+Zi5
MD5:	8C2D890B0482D410277B008F9042198D
SHA1:	9F8348427A1A9C1EE26376650BA72422E6690FA1
SHA-256:	99F170B036C8FBE13D5F544EA33996BA663F5A9EF66AFD5D824C49DED8D6A7B7
SHA-512:	ADAB5529F4BD54A779B93187120BC860AD68561CDB9165960205B2FC72719B99A5B98C8D17556B765CB0FBC039AB3A322B70508733035E7B868ECEEE86D61677
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/firstnet-768.png
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...ZIDATx.....\ey../B)..%...f...b..j..*..H..J..T(u..E.^.PtJK..X...Z....`lAZ.(:...".L.@.r/7.0@..s._B.......>..;I........;..}.Je....e....g..?Wi.....}5..0.^....@....H........ ....$.................@....H........H........ ....$.................@....L...Ze..-~.....f..Ms..F<..T.....o.\|..G<3..q...G[..0?..G<...............v...mNK.....yx....cT<...K...}5.c...x...t._.i..N....m...{"..qu..[F\|....gD\|cH.M.u...m>...\|\.qb..C~.;E..%I.n.....+#>^......9a..............`...V.$b....yk.]........=....v...=..?..u..u...m?...\|..&...>.....E.m.M.{...-.6;.~4..z.....7<....4C^..K.G.`.@.P.7D,..A..L_.....@........I@^.g.d.'{.&.)9..0.. ..h......G.1..Tc..u.8../.]....@K...O"..a.9&9.M....nTm.qLY{M.0.\|..4SN......+..(..a?:.FW.w....sG.}].qo.^..K...1+S.{..........TS...>^....k.0.c..z..=/.s..ie4g...8g..I..e.k...K.f-<.O.....]..+".F..1..=@...Ka....c.."^.)...@..R...w\|.OF.)...@.L.0X..xx..I..?.D.....&.....c.....K5....x....

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 730 x 350, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27927
Entropy (8bit):	7.9148984917448795
Encrypted:	false
SSDEEP:	384:Uo6iFOLW+LgMcCGvksFfOORHJWRMPjiRM/VPBMOyejAZ2mlrSSnDZozRyg7KUjA/:OiFtMYHZ3PuoVaatmlrnDgPK6AjYG
MD5:	5BDD3B225B5AB74EEB122629D9CA7F85
SHA1:	9F12DE79FF677010EF6DEA65892140765A991FBF
SHA-256:	B19D62CDD31970F444976677551C59B4CEA716342A00610DB00CDFEBC32790A6
SHA-512:	B6B9E90ECC397713861AE1D4C69CE605155D642D76E6885B81523131854926808CC7D05830AF712AB0B453E353E6A460C4C44ECD2C00D281A415038142BAECF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......^......'.`...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:snr="snr". dam:Physicalheightininches="-1.0". dam:Physicalwidthininches="-1.0". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-04-13T20:04:24.731Z". dam:Bitsperpixel="32". dam:MIMEtype="image/png". dam:Physicalwidthindpi="-1". dam:Physicalheightindpi="-1". dam:Numberofimages="1". dam:Numberoftextualcomments="0". dam:sha1="0bba050c1a0b76f352b4e45652e62b342b38a9f7". dam:size="26533". tiff:ImageLength="350". tiff:ImageWidth="730". dc:format="image/png". dc:modified="2023-05

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	7.251724568882901
Encrypted:	false
SSDEEP:	48:IABeLZilkO0kNinNuixOJJ3bL8zVIOUZd:WZ2nP8NaL6VI5Zd
MD5:	00D7E082117668D1297A3AAB9AE3FD93
SHA1:	D4697A54F2082D1DB925B97E8C6356F846074413
SHA-256:	3F38674D47EFF49BE6BCA61A0BCF45FE88089A05D2ED7E7D403D564226DA6960
SHA-512:	203CDEEF076461651683AD01E4CFCE8FB9B5E7CD1EFE5535F1EB33FDB90897263CD1F4EE2CBEB8D660F710E2363355CBECC0BC828092A5ABC04ECE69971D78C2
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/images/favicon.gif
Preview:	GIF89a..............................................G......................................M................................P.............s..=.......*..t..B...........r..A..p...............C..........3..+..\....u.....!....Q.....T.........................E..X.....j.....l..R..8..........P..........f...........v..5..'..f........@.........................m..`.....c........b..1..t........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:CBAE199D13206811822AA43317F376F1" xmpMM:DocumentID="xmp.did:457ADC5C

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 22856, version 1.0
Category:	downloaded
Size (bytes):	22856
Entropy (8bit):	7.97782137942263
Encrypted:	false
SSDEEP:	384:01x54e6Zq41p7FOfudHWBj/G2noJgi/HX/zGJN4D9GJ5iI24T7oRWrAIotX:01Ml19FOg2BSH7/3/zG/4D9Q52ymWHol
MD5:	70F8CA0F8BDF491AF6E7015AF1030358
SHA1:	0D55AEA85F5476156BE427AF1A4ADFEBF19C14DC
SHA-256:	07B3A3D0F02092988F8B70FA51992FA109B23BBC82638FC857DEE5EE0E3AD5DC
SHA-512:	66CC63148EFF66E517AC92D377602E7759906AB2851708206F96FB4270FD90C94AE09D2AE8B7423BD965C14840A443B1857FED10DCEC66008DBBA13438EB74DE
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/fonts/Aleck/ATTAleckSans_W_Rg.woff
Preview:	wOFF......YH................................GDEF..H.........&X'.GPOS..I....4..(P...GSUB..T.............OS/2.......Z...`e.P.cmap.......g...f.X.Wcvt .......\|...@.1.Kfpgm...h........./.7gasp..H.............glyf......8"..^H3V.Ehead.......6...6..5.hhea...........$....hmtx...T.........K7.loca...............vmaxp....... ... .<..name..G.........,YY.post..H........ ...:prep.......h....w..N.........mQb_.<...........^........J..................x.c`d``....H~.....0P..0.............p.A...L......./.a...K......x.%.E.Ba..gw........+.8..m.V".{.\|2.-......X.-'Z.H.f.T?.;X.`.....i...P....R..@.z.j.......x....fG....m.y.m....f.6.k.m...S..Y.....LO../. Iz+`.".N...:S...N....h....~q^.j...`.d..~..RA..(.....G\|...XW..t..U.y.q...l!...P..p...M..Ef.2.v.."..R.jH...OO.............8...s..lc...:....(..?pK@..K.d.T.y\....1w...M.}....V..h]cz1....+.k:..n..MK]...s.e..U.a....T..O.../.g[r..^......O........4t\|...>.V)...?..j.P.xOR..t>.e..i/f_%...wTB..?.S]\.j..\|..Zl.sq.....y3.......6E..cm.J..L.

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1654
Entropy (8bit):	5.081049838852463
Encrypted:	false
SSDEEP:	48:Y3DT80So7fz/tqZxHlfTvDUJhHsHGy+hjbm8CaBCT21OLHGc1HwFp+hb:NV1IhYCqd6KRht
MD5:	89F3D69E3180E6033824D89F5091DAE2
SHA1:	C75BB9916BA499F388E490920984BBBA26D92C63
SHA-256:	026399D5C14EC7E63809CBED5F1887270B9D4E08840095BE100536A1081A1716
SHA-512:	D1CEE5B60BF94E2C5954D17D187D25D0F7CB631ABA927EAD29A60FEEF4826D4AC071DB89C369EC0AEF3612FBBE31FC22A23E8AC00E58B9256D26CA0456D4F6B5
Malicious:	false
Reputation:	low
URL:	https://att-app.quantummetric.com/q3/2f0772e2e946694acf73c98d1ebdd4af
Preview:	{"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","t":"1707955896971"},{"i":"388","v":"17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE","t":"1707955896971"},{"i":"3675","v":"17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE?gtf=2024-02-14T23:41:38+00:00 to 2024-02-15T02:11:38+00:00","t":"1707955896971"},{"i":"3162","v":"0","t":"1707955898574"},{"i":"493","v":"fpwd lander","t":"1707955904605"},{"i":"493","v":"registration","t":"1707955913911"},{"i":"192","v":"WF-2440889-XT-RWD-Eureka Currently Mail Confirmation Page \| Experience A","t":"1707955914840"},{"i":"192","v":"WF-2224543-XT-RWD-F2F Upgrade RC Offer \| WF--2224543","t":"1707955914840"},{"i":"125","v":"65cd56b4-1270-a426-5253-52538a80094f","t":"1707955913296"},{"i":"762","v":"NEW_VISITOR","t":"1707955913296"},{"i":"2097","v":"XH+bs480LZL

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 393 x 294, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	191929
Entropy (8bit):	7.987537744028424
Encrypted:	false
SSDEEP:	3072:C8Q4gqKoYybgMcJx1Y95TpJplpn4V7xJJtTR8hw/WEsjyWMFI0FrksO0+lsVFGR9:9SqKJybglm5Tl2bTsw/cYIwrksGqzGR9
MD5:	F39017F2059DB2FDAA8F7475ECE824DD
SHA1:	3AFA9AFFE547A56555833C4CE2ECB43D43BDB671
SHA-256:	55C2C617C78F8CFD7C7EC4676927C7009502D9DB46952068AADC3A2A8AE5F7C4
SHA-512:	DFFE1E488ACA782C631997744EE9D3113F12E907BBBACF9B048D2A76B5DE86DEF918D886B37F78176648B364F8C1DB13758ED1C86DFA0A35417FA04F4254BD89
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&............#iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164050, 2019/10/01-18:03:16 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dam="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". dam:Physicalheightininches="4.082822799682617". dam:Physicalwidthininches="5.457651138305664". dam:Fileformat="PNG". dam:Progressive="no". dam:extracted="2023-03-31T21:13:0

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955902789
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5243
Entropy (8bit):	7.654490494450682
Encrypted:	false
SSDEEP:	96:1e4wZ5MRTbPz2gNReVLCKU7pJjWX9poY8/LYLyKOC7:1e4/NbL7RedU7rWX9C/LJZo
MD5:	3779769A5C227D44F0E601B31C693BD4
SHA1:	4A6076A60FC7F4F43BFFE2D6DADA969B52D3C5C9
SHA-256:	47FCE7DCEB34B4074B77C921A2E0596F9863811CD57C65B8DBDD0D1525FA0C07
SHA-512:	45D5EB4BDD8DBBDAA80F970198867E32A02BE00079AFEC8E1F5349331EC79CC2C0125BCBDDFC9E87DF8154EBF7036597C6F77251DEEF9AF10A60C6AA39164A79
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/california-icon-134.png
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...Qo#.u...E.".6..8I.d1....s_.d@.}...O..'X.....P.....6/.S)..........i..mj...A...jh./...........ZJ.5...s.=.^...l.........\-K.?...;.>...Q.........@..k.?(....rqq!...2.N._.../......w....<...)..........ukpF..,..Y...K.{t:.Y..]]].{*..hs7.......k..........M(&..:I..;....d'..B..........p............Hd..y^...v.<:C...k.1..g.^o^...z..._pe .......&.N....g..........Z..@V..&..................]..lQ.(..Y..D@{.......@..@..[0..+8"_xF@K.J&.#.0.......h.-..Q..5.k.$.d.......@^.....9Wk.K...>..DD{........@N..#.bY..."9.D.9.........b)....m&@,K../.....f..A.....u.......$(....F.`...e>.`.G..................O..........j...k.....G./_..._...D.y...........Z../...........`[<.+.....-...Z.......O........^..q\|\|,a..V.=?W....j.r.......%.\|..GK?...P.?}.Wy..?..'_.............r\|.e......R..}}-gggY..q....@.......t...g.9....."......u.Q...&..4..v........... ...x.b...N.y._.......J.m...S.....v.............$i..3......

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	111753
Entropy (8bit):	7.983499066074463
Encrypted:	false
SSDEEP:	1536:2RFzBzsPcVJX/vkDd35zPUbr92Ey4aIYwL7rdkEQkRdvEdrS76sk2tB2hEf1MxGW:qsMJPsDdJTqrILI4eTXk2tB2hWbljEMk
MD5:	75431674108C62BC5804D52E71EC52DE
SHA1:	E10D0DBA2D4137BF51C1AF334705DE36AC2E5993
SHA-256:	729341C031AFCD52ECE6EEA913459C4AC94A7A51235B6F274832ADFBAB85A862
SHA-512:	D922E641BB9BD85EC064B5F2FC1D3AFBB515596BC5DB41F90E381FBE6313C760D2B152B4213E78FC0648FAAD8B603C64892A8DAA4A9CDBE5D959031265EDA433
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/tFUHPoLMUwk/maxresdefault.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................Q......................!..1.AQa.."2q.B......#Rb.....3Sr.Cs.....$4c......D...T....................................E........................!.1..AQq....."3abc.....2Rr....#4S.B...$5%C.............?..H.{..".H.T.C... .R.....\.......PR......!.R%.....P4U..... J. .D.4.\.r.......W..r..r....".....T.pJ.r.rP..$.U.%...&.9r@..pJ.(@..$J..\.r.9r....... ABT..... .....b1W....E. .8&'...."T.r.W.@... \...R..CEJ.p)@U.$.T...H..T.S...,.\..\.r.9,.\...\. ...AB.B.H......T.rYH..T..K..r...\...B.9r...P.&.. ..$.H..\.(..H. ..BjYH ...J .*jPSl......1.JT.9+R...R.D....&..SF.S.R..4pJ.BpM.8%..T.G....&.c.pL..Mc.....Q...pM..1.hpN...&1.xJ.Brc.......c.....8&1.....Bm.<Ur.u.....R..h..0..8.....A9>K..c.&..#\....8;.~I.....{.\...=.....:?.1.._..'-......\|\|........)\|/..._R...7....u.Zz?K.}..p../...%....N._e

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27343)
Category:	downloaded
Size (bytes):	122700
Entropy (8bit):	5.947371027501341
Encrypted:	false
SSDEEP:	3072:iE/11ci7cpGJPAlXga0Q5F4ngQIcVd0gPgbiT3shR4B+eEg:iE/11ci6lQa0Q5F4ngQIcVd0gPgbiT3j
MD5:	CEABBFB38B6FB241A9842812A29F2A32
SHA1:	B6CCD3C1CEFA5A396B9E1F1AD71640D3FF49ED59
SHA-256:	92AFE67B7F3AC0DDB85818F7241BA48D217FC17D594C7358DC8126ACA3E019A4
SHA-512:	6C6A266222596F8A19845458A04B307F5BC6F7AC61E3036E0224924E54EE5B0C3897CD683116DFF68EEFBE7C95B309D48922328481577A1D497C811D39E9EDD5
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ui/corpcomm_internet_attus/1.0.0/styles/global_nav.css
Preview:	/*. AT&T About Us Global Navigation & Footer for AEM. * by FleishmanHillard, c. 2018. . NOTE: ATTN DEVS!. * Please use this stylesheet for importing SASS partials only. Do not author any SASS or CSS directly in this file.. * Also, please first refer to the _abstracts partials to review the existing global style settings and utilities before creating new ones.. . For style guidelines and coding conventions for this project,. * please consult the README.md in the root of the project.. /./==========. NAVIGATION. ==========/./=========. Abstracts. =========/./=========. VARIABLES. =========/./===========. Breakpoints. ===========/./ we switch from mobile to tablet here /./ we switch from tablet to desktop here /./ max width of standard 15" laptop viewport /./============. Global Sizes. ============/./ Component Margin/Paddings /./ Section Margin/Paddings /./ Line Height /./ Misc /./==================. Responsive Columns. ==================*/./

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://d.agkn.com/pixel/8597/?che=0.6060981865747019&omid=03604370663548075242715929808033793837
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2890
Entropy (8bit):	7.39773086657616
Encrypted:	false
SSDEEP:	48:LbWPHrsRhna1Y4yWkv1uL7g1qDmc7jFq/hUWazu0rQfskf7ldz:XmI5jWkvs7g1qDBs/aWWx0ESl1
MD5:	445BF96D1898D8802D9C795183E75E16
SHA1:	6CCFDDB254B1943340301B839E991C5A19DE5F43
SHA-256:	95E69E3B1AA91AF68A1AC335F5F0CF203C203275D8A9A35DBC253837922A91BC
SHA-512:	3211228F0DCA4FBA4448C64CC1419F86E4AD5E2148384163C12F1EFC23A2D19645F85B5476487507AF47E6D2C283C1A074DD0E7E3986B5F90217A712592E2290
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx...1v.....7EJ..........S.\|..'X...O ....$.@...].Sa....T.F$va..E..1......D...~.....!..........?.A1.]..............q...)...a..B....../.....@?..../..T..@....b....B......._.U^3..........B...$,..o...i..t..@w......_........c!....,..Z.o.........sl...`.N....7..M.....[..M.Ga.;..../P...............~p....@.^..=.^...i.wU..._{...O....;~..b\;\|.....f......W+B....T.....U....,...... ....S..aO...]9X....\|%...v.,......s...r........./...}......l.Y...L....Y~....U..;._..1SS......s..>.q....WS.....@.7..)#S........ ........ ........ ....O..}..M\|.AV.7a...w..5.{.O.o......i..'a....W.=.nvsY...........b.K.f7y..b.k........8L.....).c.?..;..c.P.......hv3}(.........s..0_.4..>/.+....!..@.^=...+..X.i...X.5\|'......[..>4\|.].s.....qY...m....s...i.Nl.}.Z.G...CHX.............Ea.8.....O...EC1.....0?..Km.m1.?........6......t...k..4...i........Mg...yi..&s... .tC.T.?.........:.....P_....9<.8t..H.S......Ks.Yl.3.}....

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 184587
Category:	downloaded
Size (bytes):	30696
Entropy (8bit):	7.992097375327211
Encrypted:	true
SSDEEP:	768:bXswqpo+DRrfJ8IIlks1OkrJAeJMjMorQD4sLdQm3:bXswqpo+5fJXaAqMGbRD3
MD5:	6198352696EB323A7334408D4062E7CD
SHA1:	B3FE819F0E7E55ABD521793B64C358FD80222413
SHA-256:	740754EA3FECBEB6112F77A403D82BF715488C439D2C9E8A153E0DA6AC4DFD09
SHA-512:	B28DC68EF4F134E7128F262B43969E83E0763D0D8D4420E58045C95204AC56D449011CCCDC3B5612D8307E2B139566BB85754858797745E832A105C9817DEC4F
Malicious:	false
Reputation:	low
URL:	http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html
Preview:	.............. .>f.....u.....=KM.....(.c..1d.Y.5.2@V..e5?v.....N....@ ..+...+3.....#.=........_.uP...w7.........v_...L...K.l.y..w7..]........R...p....O.,..}K...?...q.....?....n.=...w..9.T.......<"r......@....;.O..........#...(../..2.K.].....A."...\|w...."!y....]Q~..eD..Au..U^G.6..wi.......).U.w..%!..Qv..........U....o....r..f..._c.O.....k/....#..[......?..oI.7o../..o..N.......4..I....].}{_^6<3..ooI..N.OMu...Y..Q.dI.})!...?5.....\.&..?nc.....-...X.M..........a..i....n....!o...?\|.........o...y..M.P..J..f.....XT...W.y..2.p~h.5....6..H....\n..,._...l:C.N..<.zW,.t..>.u}zD..m.,P.=...e. %.e^...v....O9.M.y.Y...........bd..-..5..q3.N.i..k..4....%.......v[...Eu.d.ys.......W#.........'..#...?.O..j]..R..z...;5.P...Z.W.LO..u.%.I.....CU.....7.n..g.pQ....!.=..?....?."..O.......M....t9.7.V...K..?...M.m..nx.'....P.=...[L.io}j.?.N..nz.f.O...S}...:.N.S{....?..>G.......,..)DI......=.y...Pm.....c.....N.M.....P.{.M..w.S.7...O.S.../..7......<.a.Ib

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65106)
Category:	downloaded
Size (bytes):	228380
Entropy (8bit):	5.295004672103879
Encrypted:	false
SSDEEP:	6144:UtNJwkZBk7GhGVXlI2OqmTVX3sIboKFncrIUUFeNPU:IwkZBk7GhGVXlI2OqmTVX3sIboKFnc4T
MD5:	1C5E18B1C2B09A2D2713E395010019CA
SHA1:	481FFF6270E16B09863CE9DBF4ACF918A4BDDE3C
SHA-256:	541A7EF89691FCBE518432376F5AE8CBBBD58A696D965CE812E422D73D507879
SHA-512:	872C6DE616830C99B3CC8D9A2363127D9CA6D5458A2EC401F8D0C17CE65657103E69FFDA9552C9F7D9930FAA5C5B34BBFED96050A8DE7E25934D32AD88D7D12C
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/engage.min.js
Preview:	/* Engage version: 16 /.var evtAction,evtCode,successFlag,statusMessage,errorType,linkName,linkPosition,linkDestinationUrl,chatInviteType,chatSessionId,chatBusinessUnit,chatAgentGroup,pageName,chatState,chatLaunchedListener,chatEngagedListener,agentAssignedListener,c2cStateChanged,InqRegistry;./! @copyright (c) Thunderhead ONE Ltd v05172021 \| https://www.thunderhead.com */.// LiveChat Rules version: 1969 - reverted version.function demandbase(){return"www.firstnet.com"==document.location.hostname\|\|"www.att.com"==document.location.hostname&&(-1<href.indexOf("/smallbusiness/")\|\|"SMB"==ddo.getVar("user.customerType"))\|\|void 0}-1<document.location.href.indexOf("business.att.com/learn/")\|\|-1<document.location.href.indexOf("zlpv7245.vci.att.com:8190/learn/")\|\|-1<document.location.href.indexOf("wipbusinesssite.aldc.att.com:8000/learn/")\|\|"marketing.web.att.com"!=document.location.host&&"marketingtest.web.att.com"!=document.location.host&&"marketingprod.web.att.com"!=document.location.host&

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	125249
Entropy (8bit):	5.162854637592907
Encrypted:	false
SSDEEP:	1536:z6R/iOCNj2SGgcE+qMvpVg3idBU2QgL+uv5VE3ydL32igi+Wv6V13XdiX35htz:znNetz
MD5:	7C12B99927740C7B2F880EC2BE5DB362
SHA1:	01E01049E943D83216A25A205D421543CE8F21F0
SHA-256:	3F4AFA2BA39C779B46D1378403C26E6A252741235AA2D10EDE0BFFA16AAC7397
SHA-512:	7D488302F166F4176A8A233FEA952E55E84D6841057407F6D98496E0A900563899DC23054F7E03BA55FCDCE4D7DEB9555F2121D0DEE245BAF8BBF8DAC10BB50C
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/frameworks/css/v2.1.0/core-global-styles-fonts.min.css
Preview:	/! last updated 2024-02-13-115017 /:root{font-size:62.5%},:before,:after{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:transparent;box-sizing:border-box;margin:0;padding:0}[class="theme-dark"]{-webkit-tap-highlight-color:rgba(255,255,255,0.3)}html{-webkit-overflow-scrolling:touch;-webkit-text-size-adjust:100%;hanging-punctuation:last;overflow-y:scroll;position:relative}body{background-color:var(--body-bgcolor, #fff);color:var(--body-text-color, #454b52);font-family:font-regular,sans-serif;font-size:1.8rem;font-weight:normal;line-height:1;position:relative;width:100%}:focus{outline:none}a{background-color:transparent;color:var(--a-default-color, #0057b8);text-decoration:var(--a-default-decoration, none)}a:hover{text-decoration:underline}a.color-ui-white:focus,a.color-white:focus{color:#ffffff}.is-tabbing a:not([class="btn-"]):not(.card):not([class="tabs"]):focus{box-shadow:0 0 0 1px #000;outline:1px dotted #fff;outline-offset:0}

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 600 x 342, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7945
Entropy (8bit):	7.748490113078029
Encrypted:	false
SSDEEP:	96:zyjxDIUN+iODQRb2pQXkkvoFQUPZalGQ3pRqORSvhQXQZSov9JMBNT30wDddwMjK:zy1bbQQbomUPZWZRT1XDEbMN/wSYF
MD5:	25DA3CB2B689E8E67EA3BC986313C1E2
SHA1:	E009D4604F601F5167D805BF4354FA32EF7CA702
SHA-256:	7656E7A17574FD74D9FEBCAA852B660872F7D899B2124E9C99BF887E8CB69EE7
SHA-512:	7236B432CB80C6B85AF6875ADD366A8D541F2D8DB90F18D29FB6846B8EC46950D76175889187F76B5FB8430C23C818C839BC84C352249340E72917DC47EA120B
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/csr/privacy-redesign/2023-graphics/track-a-request.png
Preview:	.PNG........IHDR...X...V.....:.tf....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....k....q..D?.4...l...xL}g.6.:.X".....}..{...../...Ph....-.%...n..:..../H...KB...1d...$....[..w.3.-...<.U..X.4Z.K...3..........~.._.(... ......................................................................................................................t.Y.A.X.%_+..bq.._./&.}...:. ../...{.....T.J>..+..j.&t=...F:..A.[$.$...^..+.NL...X,...$ %.%.y... .R.$..i>.v.e_.W...\|o......Dxi.. lo.I..._.Dri.d..T...a....@..8l67.B..qs../.......W.7..E.F.L)...-.........(.jD. .."..\.O#...!..[..~m.MQ2..l...&.1l$._.....@.....o....;.k........HF&.s.ND../R.-S....S...@.6...\..r;!...1.q.Rt....6MSBQ..'%.an=+7.D.....B..(.g.......(...O.E..j.g>8*.......a:.!... <E..z..~..BB.~.v"J..5.......:Ec)..:.%3r.Y........Q.P...b.N.B.')%./..C..a.IHH..5.F./...r.x.X,>3=+Op.n.............#K...!".....Q-...@.@LOd."%`....\.x.}]O.L..q. ..x..K.y.R.....[^Y~....(..TQ.X<x.].Tj<.iZ.X..up.6c....{.?..D&3..........V....>.{F.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.312814895472355
Encrypted:	false
SSDEEP:	3:qy6sJMIzn:qy6sJME
MD5:	187C5FCDD5C7D82A7C12A869A50FDEB7
SHA1:	932D4842D1D53B22B7E2FD46D6C00B8BE6D774AD
SHA-256:	121D7327471295D2AA1878EF94C8AB756375856D08AE24D3DF11FA549E241633
SHA-512:	175341CB356A4F299D1BBBE524AC8A888AED04CE92EC84A8A767CFDB247E310DD4E25F81205108829B1714CFEA392B862BA9207871D4C54D7D0274425D3FC254
Malicious:	false
Reputation:	low
URL:	https://fls.doubleclick.net/json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955931744
Preview:	var s_3_Integrate_DFA_get_0={"ec":"nh"};

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60888)
Category:	downloaded
Size (bytes):	61142
Entropy (8bit):	5.3549581255262275
Encrypted:	false
SSDEEP:	768:paGAe0RMY5csG199Xc68X8jgSn2UkFbqivfTiL7mxDf/AXNBDOWl1v5C:spe0RBXG199S3vfTiuxDHAd0Q5C
MD5:	490BDE56CA70C2878E031EBD8AEEDE7C
SHA1:	1B1A1CC3F16F768F6566D5B41F020C81FC9033AD
SHA-256:	ECE5B089E34F84D19294518BA592AB4AA3DD293C2769ED622349F8AEAB143D45
SHA-512:	7E0A3E4C440177186778B7473AE5363C17C22969638A1238FDE0877932306C98701747F07754E45FF1CADEA40BC09CF9A336A811FED157580FFE48C14725B0D4
Malicious:	false
Reputation:	low
URL:	https://gateway.foresee.com/code/19.22.0-fs/fs.utils.js
Preview:	/**************************************. @preserve. * Copyright (c) 2023 Verint Systems, Inc. All rights reserved.. * ForeSee Web SDK: Utils Library. * Version: 19.22.0. * Built: May 05, 2023 at 09:53:37 EDT. ***************************************/._fsDefine(["fs",_fsNormalizeUrl("$fs.compress.js"),"exports"],(function(e,t,i){var n=window,r=n.document,s=!!n.sessionStorage,o=r.getElementsByTagName("head"),a=n.sessionStorage;o=o&&o.length>0?o[0]:r.body;try{s&&(a.setItem("_",""),a.removeItem("_"))}catch(Ie){s=!1}var c=function(t,i){var n,r,s,o;for(e.isNodeList(t)\|\|e.isArray(t)\|\|(t=[t]),i=i.trim().split(" "),n=0,r=t.length;n<r;n++)if(o=t[n],e.isElement(o))for(s=0;s<i.length;s++)o.classList.add(i[s])},l=function(t,i){var n,r,s,o;for(e.isNodeList(t)\|\|e.isArray(t)\|\|(t=[t]),i=i.trim().split(" "),n=0,r=t.length;n<r;n++)if(o=t[n],e.isElement(o))for(s=0;s<i.length;s++)o.classList.remove(i[s])},u=function(t,i){return e.isElement(t)&&t.classList&&t.classList.contains(i)},d=function(e,t){return

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 134, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3863
Entropy (8bit):	7.635242599993547
Encrypted:	false
SSDEEP:	96:BRPB3lUrUjVgyAAsREsTsj4RBcvLQ6OcSLQpj6PSQGU:Hpz3AAsRFsEDcvr5SLQZup
MD5:	5FB20583D0B4166C6C83864EA51E40DE
SHA1:	3674E1E45939E58E21364C286907492FA5EA62C3
SHA-256:	10FF57336749FBA95BFD11EDFA31C565092BCD0B7CFA27D0C67460FB8A9A7C88
SHA-512:	4F87C6BDEDD55944E7DE55D7557AFD9B93ADFC95EAB362AFBFD1CDA2B13A0DCDA8033648DC53091D119D725C2C012D21143FC865C4C2164B5110D51378E148C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............j.......tEXtSoftware.Adobe ImageReadyq.e<....IDATx....U.J....6......sH.1.\....@...... ..L.!.<. l.Y...f,#.[...9s...2g&....I......o..}....#+...{..;....K..A>>._...kV...\|\.....X.O..+.....?.1..U....Xh.._.al,.......~>.B...i(.R.m.7.Ye....x...2....Jze._.2....%..a>...m.........'..L......6.O.e.M...u.O..gA..k].eA..5..`..%E.e....."....j....<..x.......W......g..{...f'.._...`.`I..g.C.$T..........}...R........^..o......I....y......~...3......fkz..&...^g..v2..'..%?...\|.?...h%j._~W~..<..,.VB.m.>.e...`..@UAx^.....V.....c...y...\...J.........t?......,.......0l..`.{?j.j]\..d..6^w..^..T.,K...t...R......<W..._yA..~.E..P.6.>W.........K....;....8._.e.......e....M?...UO....9.t.I...>.........9.{.w./...i..P<...Y....F..oz.9.Su...7.....-@.zf...~E...}...G..%...Iy.1....k.?M..@7.@Z.}mx.IE......#_..(,..O,_k.k.!......#;...d.O.6...".\|N~./.<.y....0s.....o.M_.5kp.O...Fv..C.yE .b.[.wr.....t/...~zr...ds?...m.8..*@f.[...CS..........._.g..7...f..?....-..:

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	downloaded
Size (bytes):	677
Entropy (8bit):	4.9644149769775385
Encrypted:	false
SSDEEP:	12:j5/3xOM0Cc5fBcijAgiEBfITXICScrFcB+GyAZ9uBXbPSfxx7oxJBVxG:uMiZceiEBfuoSGTZsWP4Y
MD5:	9B336911B5D6294068BB5C63DDBCF99F
SHA1:	757EEF5CAD558CF67EF60BB6079F69448881EF80
SHA-256:	A63FEC76DA0FB2CD4926B016A94C3DD6D5D9733CDFFC14AACDFEAA4DFBEB5190
SHA-512:	3967277F1CC5CCF8B9A9660A2423AE8EE5C01F5CDBE6DA59D728B1D88FD53ED3D7470FAB749F5339A79B1B654B2F481AE4A2F575D3849D6DE9F92C2FF562C61F
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/virtual/detm-container-ftr.js
Preview:	// detm-container-ftr.js 64 prod.var detmExecuteFooter=function(instance){var customEventName;"undefined"==typeof ddo&&("undefined"==typeof jQuery\|\|jQuery.isEmptyObject(ddo))\|\|(ddo.pageLastLine(),0!=detmLoader.loadAsync)\|\|void 0===window.chatAnalytics\|\|window.chatAnalytics.initialize(ddo),void 0!==document.dispatchEvent&&(customEventName="1"==detmLoader.legacyMode?"detmScriptsReady":"detmLegacyScriptsReady",document.dispatchEvent(new CustomEvent(customEventName,{detail:{loader:instance}})))};"undefined"==typeof detmLoader\|\|0==detmLoader.finished?document.addEventListener("detmExecuteFooter",function(e){detmExecuteFooter(e.detail.loader)}):detmExecuteFooter(detmLoader);

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1654
Entropy (8bit):	5.081049838852463
Encrypted:	false
SSDEEP:	48:Y3DT80So7fz/tqZxHlfTvDUJhHsHGy+hjbm8CaBCT21OLHGc1HwFp+hb:NV1IhYCqd6KRht
MD5:	89F3D69E3180E6033824D89F5091DAE2
SHA1:	C75BB9916BA499F388E490920984BBBA26D92C63
SHA-256:	026399D5C14EC7E63809CBED5F1887270B9D4E08840095BE100536A1081A1716
SHA-512:	D1CEE5B60BF94E2C5954D17D187D25D0F7CB631ABA927EAD29A60FEEF4826D4AC071DB89C369EC0AEF3612FBBE31FC22A23E8AC00E58B9256D26CA0456D4F6B5
Malicious:	false
Reputation:	low
Preview:	{"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","t":"1707955896971"},{"i":"388","v":"17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE","t":"1707955896971"},{"i":"3675","v":"17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE?gtf=2024-02-14T23:41:38+00:00 to 2024-02-15T02:11:38+00:00","t":"1707955896971"},{"i":"3162","v":"0","t":"1707955898574"},{"i":"493","v":"fpwd lander","t":"1707955904605"},{"i":"493","v":"registration","t":"1707955913911"},{"i":"192","v":"WF-2440889-XT-RWD-Eureka Currently Mail Confirmation Page \| Experience A","t":"1707955914840"},{"i":"192","v":"WF-2224543-XT-RWD-F2F Upgrade RC Offer \| WF--2224543","t":"1707955914840"},{"i":"125","v":"65cd56b4-1270-a426-5253-52538a80094f","t":"1707955913296"},{"i":"762","v":"NEW_VISITOR","t":"1707955913296"},{"i":"2097","v":"XH+bs480LZL

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4792
Entropy (8bit):	7.665131853384187
Encrypted:	false
SSDEEP:	96:27CTkxvdpx17WIylNXAqbci+ctGul8Lwdns9SYe70to0HSF+Zi5:SC4V97hKTbgul8Lwm9SX0tVHSF+Zi5
MD5:	8C2D890B0482D410277B008F9042198D
SHA1:	9F8348427A1A9C1EE26376650BA72422E6690FA1
SHA-256:	99F170B036C8FBE13D5F544EA33996BA663F5A9EF66AFD5D824C49DED8D6A7B7
SHA-512:	ADAB5529F4BD54A779B93187120BC860AD68561CDB9165960205B2FC72719B99A5B98C8D17556B765CB0FBC039AB3A322B70508733035E7B868ECEEE86D61677
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u......tEXtSoftware.Adobe ImageReadyq.e<...ZIDATx.....\ey../B)..%...f...b..j..*..H..J..T(u..E.^.PtJK..X...Z....`lAZ.(:...".L.@.r/7.0@..s._B.......>..;I........;..}.Je....e....g..?Wi.....}5..0.^....@....H........ ....$.................@....H........H........ ....$.................@....L...Ze..-~.....f..Ms..F<..T.....o.\|..G<3..q...G[..0?..G<...............v...mNK.....yx....cT<...K...}5.c...x...t._.i..N....m...{"..qu..[F\|....gD\|cH.M.u...m>...\|\.qb..C~.;E..%I.n.....+#>^......9a..............`...V.$b....yk.]........=....v...=..?..u..u...m?...\|..&...>.....E.m.M.{...-.6;.~4..z.....7<....4C^..K.G.`.@.P.7D,..A..L_.....@........I@^.g.d.'{.&.)9..0.. ..h......G.1..Tc..u.8../.]....@K...O"..a.9&9.M....nTm.qLY{M.0.\|..4SN......+..(..a?:.FW.w....sG.}].qo.^..K...1+S.{..........TS...>^....k.0.c..z..=/.s..ie4g...8g..I..e.k...K.f-<.O.....]..+".F..1..=@...Ka....c.."^.)...@..R...w\|.OF.)...@.L.0X..xx..I..?.D.....&.....c.....K5....x....

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (644)
Category:	downloaded
Size (bytes):	677
Entropy (8bit):	4.9644149769775385
Encrypted:	false
SSDEEP:	12:j5/3xOM0Cc5fBcijAgiEBfITXICScrFcB+GyAZ9uBXbPSfxx7oxJBVxG:uMiZceiEBfuoSGTZsWP4Y
MD5:	9B336911B5D6294068BB5C63DDBCF99F
SHA1:	757EEF5CAD558CF67EF60BB6079F69448881EF80
SHA-256:	A63FEC76DA0FB2CD4926B016A94C3DD6D5D9733CDFFC14AACDFEAA4DFBEB5190
SHA-512:	3967277F1CC5CCF8B9A9660A2423AE8EE5C01F5CDBE6DA59D728B1D88FD53ED3D7470FAB749F5339A79B1B654B2F481AE4A2F575D3849D6DE9F92C2FF562C61F
Malicious:	false
Reputation:	low
URL:	https://about.att.com/scripts/adobe/virtual/detm-container-ftr.js
Preview:	// detm-container-ftr.js 64 prod.var detmExecuteFooter=function(instance){var customEventName;"undefined"==typeof ddo&&("undefined"==typeof jQuery\|\|jQuery.isEmptyObject(ddo))\|\|(ddo.pageLastLine(),0!=detmLoader.loadAsync)\|\|void 0===window.chatAnalytics\|\|window.chatAnalytics.initialize(ddo),void 0!==document.dispatchEvent&&(customEventName="1"==detmLoader.legacyMode?"detmScriptsReady":"detmLegacyScriptsReady",document.dispatchEvent(new CustomEvent(customEventName,{detail:{loader:instance}})))};"undefined"==typeof detmLoader\|\|0==detmLoader.finished?document.addEventListener("detmExecuteFooter",function(e){detmExecuteFooter(e.detail.loader)}):detmExecuteFooter(detmLoader);

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	10901
Entropy (8bit):	4.9796390963796915
Encrypted:	false
SSDEEP:	96:jh2p2mB7NCBH5XbwlFtUZhZSyjrxVnKepo/aVezkKHxC6QmDi479+p7ivihmtDAc:jh2wBHczCVvKRC7Wi4xi18tH/0gCk
MD5:	CA60582E11CCA85980B1CE312C0107E1
SHA1:	D60585FFA9AC6F44AC30723E4B4C79470F3D893E
SHA-256:	55E9C4989EC099DDA4C9220914CA8D87463BA419BA5D91DC0623BCBE4C6E05C3
SHA-512:	3C46E619FF5BD492A1ABE862FEE2BD8A02310CCF8421E306C4EF57AE289E6B87700097D0D9B780F1F07267D62A382DE6DBF677A8870BC62E5BB17A816D9E65E0
Malicious:	false
Reputation:	low
URL:	"https://c.go-mpulse.net/api/config.json?key=WPDUB-APVCN-LTNDE-ZPC3E-YKMHC&d=identity.att.com&t=5693186&v=1.766.0&sl=1&si=77347219-a524-4295-8f80-f3f6728d815c-s8vf71&bcn=%2F%2F173bf10b.akstat.io%2F&plugins=AK,ConfigOverride,Continuity,PageParams,IFrameDelay,AutoXHR,SPA,History,Angular,Backbone,Ember,RT,CrossDomain,BW,PaintTiming,NavigationTiming,ResourceTiming,Memory,CACHE_RELOAD,Errors,TPAnalytics,UserTiming,Akamai,Early,EventTiming,LOGN&acao=&ak.ai=700527"
Preview:	{"h.key":"WPDUB-APVCN-LTNDE-ZPC3E-YKMHC","h.d":"att.com","h.t":1707955895835,"h.cr":"c448596dec79734721489ad2170e22671d65e98f-8921eae8-fb0f3170","session_id":"0c00d264-0cbd-4e52-a25f-a1517eea45c7","site_domain":"att.com","beacon_url":"//173bf108.akstat.io/","autorun":false,"instrument_xhr":true,"beacon_interval":60,"BW":{"enabled":false},"RT":{"session_exp":1800},"ResourceTiming":{"enabled":true,"splitAtPath":true},"History":{"enabled":true,"auto":true},"Errors":{"enabled":true,"monitorTimeout":true,"monitorEvents":true,"maxErrors":25,"sendAfterOnload":true,"sendInterval":1000},"Continuity":{"enabled":true},"PageParams":{"xhr":"match","pageGroups":[{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone-upgrade-program","parameter2":"iPhone Upgrade Program","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/brand\\/apple\\/iphone","parameter2":"Apple iPhone","on":["navigation"]},{"type":"Regexp","parameter1":"\\.com\\/bundles\\/u-verse","parameter2":"Uverse Bundle","on

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3186), with no line terminators
Category:	downloaded
Size (bytes):	3186
Entropy (8bit):	5.994660498496716
Encrypted:	false
SSDEEP:	96:wsbSUtJfxrqLWWWdV6j1bERXrHhOUwCXRgIq:JrPWwwgRXr0no2n
MD5:	316806153644224503087251E83181BC
SHA1:	A188A6B7B93F75F46090E2EF8B0DDA76954E3660
SHA-256:	BF7A480063A64530D6F2AED73A27810D49434FA947E78227269FBA115E5661F0
SHA-512:	726439593F44834A5722CC89EFF7630D973DC0198FECCCC224BDF7ED8A90B770766E06F1F562BE4E841A1DA3CF9855CA4F9571F1E464C555BA113CA241C496F6
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1049001539/?random=1707955915917&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	921
Entropy (8bit):	5.309586617704554
Encrypted:	false
SSDEEP:	24:NfSC2H3BOEOHorfOpOmAnLjpLmIoR9rcHRWCfUcssjzr:ZufOHG2An/pKzQHwJcssjzr
MD5:	9CB85681FCC5E3D0B1271B4B8852CADD
SHA1:	546E5CEB21C28F5C9F8786F5F87D33A86FFC068E
SHA-256:	43C524B62D6695984914E650AFE412B561FA7AFB6B59EE0C2CEC04069D310B85
SHA-512:	9244EE1A202AE4A065D40711D546A5CE68C9AC7AB87E77A69DD08F69F4535DF5E614B64F5744C8F62A6A952AA527E0DFD344D725BF857CDBF119B5EBDF2508C5
Malicious:	false
Reputation:	low
URL:	https://www.att.com/scripts/adobe/prod/mktg-rules/global/eComm_Universal_Facebook.js
Preview:	/* Marketing Rules version: 3034 /.//Rule: eComm_Universal_Facebook.//Owner: ml916s..var attSid = "";.if (typeof s_att !== "undefined") {..var attSid = visitor.getMarketingCloudVisitorID();.}.var scriptUrl = (window.location.hostname.indexOf('finalstage.att.com') > -1) ? "https://finalstage.att.com/scripts/adobe/prod/facebook.js" : "https://www.att.com/scripts/adobe/prod/facebook.js";.! function (f, b, e, v, n, t, s) {..if (f.fbq) return;..n = f.fbq = function () {...n.callMethod ?....n.callMethod.apply(n, arguments) : n.queue.push(arguments)..};..if (!f._fbq) f._fbq = n;..n.push = n;..n.loaded = !0;..n.version = '2.0';..n.queue = [];..t = b.createElement(e);..t.async = !0;..t.src = v;..s = b.getElementsByTagName(e)[0];..s.parentNode.insertBefore(t, s).}(window, document, 'script',..scriptUrl);../.if ((GPI == 1) \|\| (DNS == 1) \|\| (dnt == 1)){..fbq('consent','revoke');.} else {..fbq('consent', 'grant');.}.*/

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19596, version 1.0
Category:	downloaded
Size (bytes):	19596
Entropy (8bit):	7.987550513502273
Encrypted:	false
SSDEEP:	384:pVSj7HEnLFyuiZ4zFwZHtUuzHcH23RmR22ukZyC2uxokeNtFXPKNM:Oj7wLcY+ZfQWF2z1o/NbXPKNM
MD5:	0C6016D2601693FB28B079401732E491
SHA1:	A6BEA66C36ADA118FDA165E09FDED89EE5ED6B1A
SHA-256:	59EA63B5FFE0F060E37C24A44B6406943DF9E4FCA39E2EF43023C2AE9783F220
SHA-512:	CA78EBA91FEC9DFB4762CFE5D2019F6F730B66CF74DF12F672E1E0C4412AA88B04AA0E73BDFA1547F4407B2FACF3C9D8BF2D8D73095ADA54D63CF53AA8903C16
Malicious:	false
Reputation:	low
URL:	https://www.att.com/ui/frameworks/fonts/ATTAleckSans_W_Md.woff2
Preview:	wOF2......L...........L)..........................n..z....`..f..X..W.....p..>.6.$..@..b.. .... ..~...7pnN..(...X...lD....C..Q.l..0.........C..]U......wD .'.F..6.'.Y3s...N..[_.#.....Il.....f.....8..C..f.N.CG%Bq....#...)...YC.x..K.....eQ..v>.'~.{..{..l.!....Vf.FP_..8hb.......o0jG/..2...{.e..z..O..-.q2.9...Cg`......'...}..{fA(.H.Ag.A....q[....#....^N......h........s...$..l....rY.@<.j8.:.....U..Sv....<.o._9......:...DE..#.BZD`.Y.........v........7...b.6?..B.f&.$l.o\|..0.....)'....."~....z..?5.:?...t.v...!Q..@Y.n....0..6.........B..:..'.).+].'.Y.....r.//0.)xz.....s\.....I.c.....s.3.]....?8V..v.>.'B.]..@N. @,...5..Z0.z...*.............n7\I4.T!3Q...~.Le.~...h..U.....{.\|$X...bC.Dxx.tq.(..)c..:..........>...@.&T.H......IHW0.J..2..O.T.\H.....Dkr.R.T.f].)m.6g.....V..G..C..uv..Z...;..y...}........!..."....I"T.%......_...o.{......4...Z.w.5L#..\..D..A=.'B..h.4&TB...........B$ w?~n..W.=...+s. ""RH!"""...Z..........#FD..7..}.p.R]42.qG....0.....A..

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2996), with no line terminators
Category:	downloaded
Size (bytes):	2996
Entropy (8bit):	6.032816835249374
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08AvERVoXQrGw05YGG95bhEJ:wsbSUtJfxrqLWWWdV6j1EvERVgrZOW9r
MD5:	7416F5093FC527F5F9C2F93D40C78631
SHA1:	519DAE36C6D649E316100D6F8AB1C01D2F6EB030
SHA-256:	5DEDB3D174440904CC11B8E85A82271F32F330AB2DBDD02A264EDA48917724AD
SHA-512:	2C012013094E0214A9684E7A7957B28EF14B50F1D3CEBB40846618A054335A909C57E995215187613B252361CE781281BC44E874A1C174E34B35CCE3ACBD1A59
Malicious:	false
Reputation:	low
URL:	https://www.googleadservices.com/pagead/conversion/1049001539/?random=1707955916010&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	300
Entropy (8bit):	4.701082071424367
Encrypted:	false
SSDEEP:	6:3vJjFF2aRzwXLjQLMzmezXXhCvNijtcdpwr2GV/cgGTO:fJbpULbhcNipcdpKV/cDTO
MD5:	CA074EB50BAA56EE623B5992B61AE813
SHA1:	841A21CAF4986A981268D9FEA32D111FCE2645E9
SHA-256:	ADC0FBDD6AF43AEFE131C0BA6582E378E31FFC0357D16A485E499B61C8A51B95
SHA-512:	7B558CC443D76BF1E530E13A2517B70405B8E0D859D0755AC441E1C4BFB71FDD6004AC00143E9C22B68447D07AE79869910650EF15802128349C24B009C8DD78
Malicious:	false
Reputation:	low
URL:	https://www.att.com/acctmgmt/manifest.json
Preview:	{. "short_name": "IDSE BuyFlow",. "name": "IDSE Buy Flow base app",. "icons": [. {. "src": "favicon.ico",. "sizes": "192x192",. "type": "image/png". }. ],. "start_url": "./index.html",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	33
Entropy (8bit):	4.369707376737533
Encrypted:	false
SSDEEP:	3:wZkKaQ0x6d:wZDIcd
MD5:	7FC8633AB4063FC68D1E25FA8A90C53D
SHA1:	C3EAC2CF2AE24B5B11E94FD882B5EA0144FE728D
SHA-256:	6EC1D233D26BC2F7A2F292476FD567238FFBB188582250325E68E22914CAD031
SHA-512:	F3B7BB8DD539E3CB94EA227C9175757F3280C63169E566043D9F844F0ABA8F51137C190C439E37316F47DD59B2D9373F3215C325C084B7DBE959EB9F74D70BDF
Malicious:	false
Reputation:	low
Preview:	FL(BF)\|Error=Beacon body is empty

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16083
Entropy (8bit):	5.237354021413093
Encrypted:	false
SSDEEP:	192:cgbnrCyTDXw1Obkkb82Cwn5BF63s74okKornOBI7fm5eu+yg+zU6bV5owVY15MXo:hBbnv53ujE5yoVYDr
MD5:	38D2011DD2DE301D819F2C852189FE80
SHA1:	7E3EAC9E20F455C3BC92E3B1706FA3224B3B09E8
SHA-256:	166729BC6464E3FCB88CBC6F5A128859B220DCE11EF46BC2B48A5E1461DD413C
SHA-512:	C8D87C4260DE23701884AF78BCA9530B34747035D9C18117120C9FD9ED164D5FB147E1D65534666EDBAF9E5194A0E8CB3FC45D82E3A2FD3CAEA06876AE507A33
Malicious:	false
Reputation:	low
Preview:	{"idp-cms-feed":{"feedID":"cb62ca0db50f1165a031a75009ab5be2","feedTimeStamp":"2023-10-25T19:15:56.893Z","docId":"8c8d534b-e912-3c53-aa77-b093e1a1d466","forgotpassword":{"analytics":{"lineOfBusiness":"General","_type":"scmsAnalytics"},"seo":{"twittercard":"summary","metaRobots":"INDEX,FOLLOW","_type":"scmsSeo","disableBreadCrumbs":false},"release":"prod","configuration":{"_type":"scmsConfig","enablePersonalization":false,"pagePath":"/forgotpassword"},"contentFragments":{"MultipleIDFound":{"docId":"26aff90e-43fe-3929-a1ba-58f60e007954","docName":"MultipleIDFound","_type":"scmsFragment","scmsCompId":"MultipleIDFound","hideOnDefault":false,"master":{"pageTitle":"Which one do you want to reset the password for?","moreInformationDesc":"We found multiple accounts that have the same ID. Please select the password you are trying to recover.","idTypeAccessID":"AT&T Access ID","idTypeAccessIDDescr":"(For accessing one or more accounts with a single user ID)","idTypeDirecTv":"DIRECTV","idTypeGoPho

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 52, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3284
Entropy (8bit):	7.919176008417911
Encrypted:	false
SSDEEP:	96:whmBrfJbFAe3M5ZaO8jzfdunjW8z3d0QRNE:whmBJqec5ZQ/fdun68OJ
MD5:	072FD9D2BB54D755712B8F41D80B5F5A
SHA1:	E67BE8D502F363E3B242E62254BE82A4540B8BC4
SHA-256:	92329A101DAB051A4C91CCE3418307D65D8E65B5CB4CE73AA3F11300470BBD7A
SHA-512:	58B8C1CEEEECC00F0E841F27E196A60697A4BD6298133C3BB7EC95D0F6E0F90A5A123693FF7565BD2158B544BE1F851EF5F6B96C1C669E119A3858E040778DD8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|...4.....H.\.....IDATx...{..uy....!7.\..B.r..-".@HU."...%U..P6 F. -2P..Z;."..H;..+.h..x.:........]("W......I.xv....}.y/.i8........}~.\.......,...1..`-...i.j.........\|....a..0.....S..........?.g.l,..........4.a_c...M.Y.+.....#9 .....wG..1.V.Y.5./.I.1..n.i...Q..u......p=.h.F3....4y~3..Ec\|Gwe.4lg...&`.f.s..a....S.k.>...9.W..).P.O..o..Z.Y~..I.'..F../.Q...\|.{I..*...1....6<.O.7q.4.L.Y8....!....p.....d.....}q...&/.........C..".Z"M.-d...h.....6[x.1.....+.H....I...=.....+.I.S;....v.... aK..th....p....[...6.-..l....B.O...d.TY........=......,..gV.....E...#:.,....@..S;.........T.Ta...\..W..i.HW.E.{a?.........1W.,..[K....(4....K........+.......!.dL.L.]........b.gK..@...xK..f........j...y...q.n..p.'........Bir...x\|...cG#...Qi.j..O8.....7qb..PM.\|...G......i.'....p...r._..>..%Ti.o...+M..7.X..V..Q. MN-.=.KE...>....?..xb...N.w...^..x...-..u...m.1.U..T{[.l.&.&.a'..~.N.S..D.........o..!`].....(....Y9.....k.....Q..,.J.....jg..o.^...\.+

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36332)
Category:	downloaded
Size (bytes):	98701
Entropy (8bit):	5.71341148807158
Encrypted:	false
SSDEEP:	1536:3me7WfVF8MK3utvbop3MlN2rdyw1gSgpPdtvZBsFjy:JWfdAMXedB1gXBsF+
MD5:	E0947AB64FFD0A53B98AC39D667F1143
SHA1:	84F92EAEEB0CF7E70E4A8BE5D94421A9E33051E3
SHA-256:	DF371B80E2D0FEB66ED9D370684A6C85F62F3C5052A05F1F0D0FE48572897748
SHA-512:	06E43C05C437676422DCB511655ACC53FA2E7B3BA0E1FACEE2526EE55506EECAB69537BEFF18598EEC0225E9D3B84EF4DDB7AE60FB17AEC5E0AC48C3265CEB03
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},fa={},u=function(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},v=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47351)
Category:	downloaded
Size (bytes):	157622
Entropy (8bit):	5.367193020386141
Encrypted:	false
SSDEEP:	3072:4PwOqIHS4CfyFqD47gu/yg77noYfObCQH7I2bI2f7LM:+tqcCfyFqiKg77noYfOmQzM
MD5:	BF7D22DB1B2F2B4BDEF9F7B7A977E90A
SHA1:	A11445F7FB4638B59CF38B5F75977D8806F5934F
SHA-256:	D50815416D5CFD5DA15567826B7A14D4C8E9BC87485020E0662EDDC7A8EFA1C8
SHA-512:	8C617DEA11C5E5E749D0569676E78CD6B6FC0AB5DF4CEC4D85D691DF73DECFCD3D8D2C626AA6B20925FB153EF18208433F99D968BF4F4489920FF36D164899B5
Malicious:	false
Reputation:	low
URL:	https://about.att.com/scripts/adobe/virtual/detm-container-hdr.js
Preview:	/* detm-container-hdr 79 prod */.detmScriptLoader.component={UNKNOWN:{ordinal:0},GOLDENEYE:{ordinal:1,launch:"onpageload",restrictions:"target",forceasync:"goldeneye"},ADOBETARGET:{ordinal:2,launch:"static",restrictions:"target",forceasync:"adobetarget"},VIPR:{ordinal:3,launch:"onpageload"},QUANTUM:{ordinal:4,launch:"dynamic"},UC:{ordinal:5,launch:"dynamic",legacy:!1},DATAMANAGER:{ordinal:6,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},DATADEFINITION:{ordinal:7,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},SATELLITELIB:{ordinal:8,launch:"dynamic",trigger:"script.dataset.trigger.dtm",satellite:!0},DETM_ADOBE:{ordinal:9,launch:"dynamic",trigger:"script.dataset.trigger",legacy:!0},THIRD_PARTY:{ordinal:10,launch:"dynamic"},ENGAGE:{ordinal:11,launch:"dynamic"}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(0);)c=c.substring(1,c.length);if(0===c.indexOf("mid="))return c.substring("

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], comment: "Optimized by JPEGmini 3.14.12.71901706 0xb05caf1b", baseline, precision 8, 768x575, components 3
Category:	downloaded
Size (bytes):	66264
Entropy (8bit):	7.971147971109916
Encrypted:	false
SSDEEP:	1536:UwIObgqgaMaSnW7QlQQp1hC+LANoUSZG49G7:UOrgaPSF1hvANoUoGr
MD5:	D3BF6F1C3ABEBC1BD4A106A1BB8B0602
SHA1:	69974CB0B1F6219D8679BDB642E680CB5EB06B27
SHA-256:	7BB5EA9B613403EAFD1F5C56B9D9C1A269D35DFCBA48F11DE874579E7EDF1150
SHA-512:	CFEB71FA7F761CE794FE5D100C2D731B76648B40A486E2A359A7C61772FB0F5BE2C2D9B2437896818EF441EFB8022CC63B4365899422316EBF9ACC6121798775
Malicious:	false
Reputation:	low
URL:	https://about.att.com/ecms/dam/sites/accessibility/featured-items/768x575_featured_aging.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:26b6b441-3b67-4d98-b512-e968930b795e" xmpMM:DocumentID="xmp.did:4F759060549B11E98732934EE3B31F51" xmpMM:InstanceID="xmp.iid:4F75905F549B11E98732934EE3B31F51" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:48bfae3f-0171-4a55-a0a4-7d2281c1bda5" stRef:documentID="adobe:docid:photoshop:89f0f842-b9ec-117b-b255-e8510ef22a00"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d........4Optimized by JPEGmin

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45943)
Category:	dropped
Size (bytes):	71477
Entropy (8bit):	4.727277777174713
Encrypted:	false
SSDEEP:	1536:PmU5gViWdUmfkknzXlvOzDg9EeXOwDaPPw7O38:PDyViWqmfRlWz4N6Pz8
MD5:	B1806C720095B52689406BD976C543C7
SHA1:	85223E17A0C90674CB4FE72A38A2CCFDC95FDB04
SHA-256:	02433A62F3BC96003E78509EC45872FE3330C330204FA77415039F40A043224B
SHA-512:	359A81D7AAEBA4092466D2902EF752B534D4D18BC6E8B37E156DE9F694B49467E4B255C216710BC2577B935F9270AF5BC474FD1589446E3B905DB3700433B592
Malicious:	false
Reputation:	low
Preview:	/. Compiled on Thu Jul 06 2023 07:07:08 GMT+0000 (Coordinated Universal Time) (1825232128) /.'use strict';(function(u){function h(c){if(q[c])return q[c].exports;var e=q[c]={s:c,i:!1,exports:{}};u[c].call(e.exports,e,e.exports,h);e.i=!0;return e.exports}var q={};h.c=q;h.d=function(c,e,n){h.j(c,e)\|\|Object.defineProperty(c,e,{enumerable:!0,get:n})};h.r=function(c){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(c,Symbol.toStringTag,{value:"Module"});Object.defineProperty(c,"__esModule",{value:!0})};h.t=function(c,e){e&1&&(c=h(c));if(e&8)return c;if(e&4&&"object"===typeof c&&.c&&c.h)return c;var n=Object.create(null);h.r(n);Object.defineProperty(n,"default",{enumerable:!0,value:c});if(e&2&&"string"!=typeof c)for(var t in c)h.d(n,t,function(v){return c[v]}.bind(null,t));return n};h.n=function(c){var e=c&&c.h?function(){return c["default"]}:function(){return c};h.d(e,"a",e);return e};h.j=function(c,e){return Object.prototype.hasOwnProperty.call(c,e)};h.p="";return h(

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 15, 2024 01:11:10.674468040 CET	192.168.2.4	1.1.1.1	0x61dd	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.674597025 CET	192.168.2.4	1.1.1.1	0x46d4	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:10.675071955 CET	192.168.2.4	1.1.1.1	0xbcea	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.675273895 CET	192.168.2.4	1.1.1.1	0x81a6	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:12.406285048 CET	192.168.2.4	1.1.1.1	0xc7eb	Standard query (0)	suez.fromthemachine.org	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:12.406478882 CET	192.168.2.4	1.1.1.1	0xad17	Standard query (0)	suez.fromthemachine.org	65	IN (0x0001)	false
Feb 15, 2024 01:11:13.212738991 CET	192.168.2.4	1.1.1.1	0x6b72	Standard query (0)	signin.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:13.213310957 CET	192.168.2.4	1.1.1.1	0xedce	Standard query (0)	signin.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:14.025558949 CET	192.168.2.4	1.1.1.1	0x8731	Standard query (0)	signin.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:14.026024103 CET	192.168.2.4	1.1.1.1	0xb1e2	Standard query (0)	signin.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:15.110109091 CET	192.168.2.4	1.1.1.1	0xf2a4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.110982895 CET	192.168.2.4	1.1.1.1	0x2518	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:25.254245043 CET	192.168.2.4	1.1.1.1	0x9dad	Standard query (0)	www.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:25.255012989 CET	192.168.2.4	1.1.1.1	0x3e6b	Standard query (0)	www.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:26.735718012 CET	192.168.2.4	1.1.1.1	0x238a	Standard query (0)	signin-static-js.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:26.736185074 CET	192.168.2.4	1.1.1.1	0xb867	Standard query (0)	signin-static-js.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:29.238775969 CET	192.168.2.4	1.1.1.1	0x503c	Standard query (0)	s2.go-mpulse.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.239031076 CET	192.168.2.4	1.1.1.1	0xfa60	Standard query (0)	s2.go-mpulse.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:29.531956911 CET	192.168.2.4	1.1.1.1	0x4c4a	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.532229900 CET	192.168.2.4	1.1.1.1	0x489a	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:29.534745932 CET	192.168.2.4	1.1.1.1	0x76f0	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.535232067 CET	192.168.2.4	1.1.1.1	0xb118	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:29.763096094 CET	192.168.2.4	1.1.1.1	0x2d83	Standard query (0)	www.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.763746023 CET	192.168.2.4	1.1.1.1	0x5dae	Standard query (0)	www.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:30.165935993 CET	192.168.2.4	1.1.1.1	0x5c76	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.166326046 CET	192.168.2.4	1.1.1.1	0x3439	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:30.299597979 CET	192.168.2.4	1.1.1.1	0xd3a4	Standard query (0)	smetrics.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.299834013 CET	192.168.2.4	1.1.1.1	0x15c5	Standard query (0)	smetrics.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:30.517338037 CET	192.168.2.4	1.1.1.1	0x941a	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.517509937 CET	192.168.2.4	1.1.1.1	0x488c	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:30.927812099 CET	192.168.2.4	1.1.1.1	0xf4a4	Standard query (0)	smetrics.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.928108931 CET	192.168.2.4	1.1.1.1	0x1483	Standard query (0)	smetrics.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:30.937475920 CET	192.168.2.4	1.1.1.1	0xc7c5	Standard query (0)	attservicesinc.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.937736988 CET	192.168.2.4	1.1.1.1	0xc497	Standard query (0)	attservicesinc.tt.omtrdc.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:31.171071053 CET	192.168.2.4	1.1.1.1	0xe3d8	Standard query (0)	c.go-mpulse.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.171365976 CET	192.168.2.4	1.1.1.1	0x92b2	Standard query (0)	c.go-mpulse.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:31.650368929 CET	192.168.2.4	1.1.1.1	0x45f3	Standard query (0)	fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.650568008 CET	192.168.2.4	1.1.1.1	0x1460	Standard query (0)	fls.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:31.715924978 CET	192.168.2.4	1.1.1.1	0x2ca6	Standard query (0)	attservicesinc.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.716257095 CET	192.168.2.4	1.1.1.1	0x7048	Standard query (0)	attservicesinc.tt.omtrdc.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.241146088 CET	192.168.2.4	1.1.1.1	0xfcd8	Standard query (0)	dynatrace.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.241642952 CET	192.168.2.4	1.1.1.1	0x7334	Standard query (0)	dynatrace.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.323858976 CET	192.168.2.4	1.1.1.1	0xaf7d	Standard query (0)	www.directv.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.324085951 CET	192.168.2.4	1.1.1.1	0xfbdd	Standard query (0)	www.directv.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.514498949 CET	192.168.2.4	1.1.1.1	0xc1d8	Standard query (0)	identity.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.514707088 CET	192.168.2.4	1.1.1.1	0x3859	Standard query (0)	identity.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.537384033 CET	192.168.2.4	1.1.1.1	0x6189	Standard query (0)	173bf10b.akstat.io	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.537923098 CET	192.168.2.4	1.1.1.1	0x7105	Standard query (0)	173bf10b.akstat.io	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.731601000 CET	192.168.2.4	1.1.1.1	0x6d66	Standard query (0)	trial-eum-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.731919050 CET	192.168.2.4	1.1.1.1	0x6554	Standard query (0)	trial-eum-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:32.733058929 CET	192.168.2.4	1.1.1.1	0x862b	Standard query (0)	trial-eum-clienttons-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.733357906 CET	192.168.2.4	1.1.1.1	0xb748	Standard query (0)	trial-eum-clienttons-s.akamaihd.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:33.003715992 CET	192.168.2.4	1.1.1.1	0xbbd1	Standard query (0)	dynatrace.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.004189968 CET	192.168.2.4	1.1.1.1	0x9b22	Standard query (0)	dynatrace.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:33.025681973 CET	192.168.2.4	1.1.1.1	0xdf56	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.025846004 CET	192.168.2.4	1.1.1.1	0xe557	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:33.067078114 CET	192.168.2.4	1.1.1.1	0xf244	Standard query (0)	att-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.067487955 CET	192.168.2.4	1.1.1.1	0xe81b	Standard query (0)	att-sync.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:34.472057104 CET	192.168.2.4	1.1.1.1	0xc33e	Standard query (0)	s.go-mpulse.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:34.472707033 CET	192.168.2.4	1.1.1.1	0x46b1	Standard query (0)	s.go-mpulse.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:35.800409079 CET	192.168.2.4	1.1.1.1	0x6e57	Standard query (0)	signin.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:35.800682068 CET	192.168.2.4	1.1.1.1	0x801	Standard query (0)	signin.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:36.029946089 CET	192.168.2.4	1.1.1.1	0x8597	Standard query (0)	identity.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:36.030101061 CET	192.168.2.4	1.1.1.1	0x7bee	Standard query (0)	identity.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:38.111097097 CET	192.168.2.4	1.1.1.1	0x5dfb	Standard query (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.111593962 CET	192.168.2.4	1.1.1.1	0x459e	Standard query (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:38.342962980 CET	192.168.2.4	1.1.1.1	0x95e6	Standard query (0)	att-sync.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.343219042 CET	192.168.2.4	1.1.1.1	0xdd14	Standard query (0)	att-sync.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:38.365875006 CET	192.168.2.4	1.1.1.1	0xd507	Standard query (0)	ingest.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.366012096 CET	192.168.2.4	1.1.1.1	0xb232	Standard query (0)	ingest.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:38.366544008 CET	192.168.2.4	1.1.1.1	0x7246	Standard query (0)	att-app.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.366740942 CET	192.168.2.4	1.1.1.1	0x7cbf	Standard query (0)	att-app.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:39.060878992 CET	192.168.2.4	1.1.1.1	0x32c6	Standard query (0)	att-app.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:39.061045885 CET	192.168.2.4	1.1.1.1	0xbf37	Standard query (0)	att-app.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:40.432161093 CET	192.168.2.4	1.1.1.1	0x4453	Standard query (0)	p11.techlab-cdn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.432759047 CET	192.168.2.4	1.1.1.1	0xfba4	Standard query (0)	p11.techlab-cdn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:40.784758091 CET	192.168.2.4	1.1.1.1	0x9265	Standard query (0)	cdn.quantummetric.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.785550117 CET	192.168.2.4	1.1.1.1	0xffaf	Standard query (0)	cdn.quantummetric.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:41.120126009 CET	192.168.2.4	1.1.1.1	0x3740	Standard query (0)	p11.techlab-cdn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:41.120909929 CET	192.168.2.4	1.1.1.1	0x8dd6	Standard query (0)	p11.techlab-cdn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:42.881231070 CET	192.168.2.4	1.1.1.1	0x7613	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:42.922360897 CET	192.168.2.4	1.1.1.1	0x5a02	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:44.200041056 CET	192.168.2.4	1.1.1.1	0x2c54	Standard query (0)	mboxedge34.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:44.200905085 CET	192.168.2.4	1.1.1.1	0x748f	Standard query (0)	mboxedge34.tt.omtrdc.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:46.836965084 CET	192.168.2.4	1.1.1.1	0xb472	Standard query (0)	attreg.att.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:46.837313890 CET	192.168.2.4	1.1.1.1	0xc464	Standard query (0)	attreg.att.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:49.036869049 CET	192.168.2.4	1.1.1.1	0x7ccf	Standard query (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a-clientnsv4-s.akamaihd.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:49.037185907 CET	192.168.2.4	1.1.1.1	0xd5f4	Standard query (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a-clientnsv4-s.akamaihd.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:55.924499035 CET	192.168.2.4	1.1.1.1	0x99f0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:55.924923897 CET	192.168.2.4	1.1.1.1	0x29e0	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.091630936 CET	192.168.2.4	1.1.1.1	0x9fb0	Standard query (0)	solutions.invocacdn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.091897011 CET	192.168.2.4	1.1.1.1	0x4e6d	Standard query (0)	solutions.invocacdn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.300966024 CET	192.168.2.4	1.1.1.1	0xb87b	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.301099062 CET	192.168.2.4	1.1.1.1	0xc0ae	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.402472973 CET	192.168.2.4	1.1.1.1	0xb89d	Standard query (0)	6100125.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.402621031 CET	192.168.2.4	1.1.1.1	0xccb7	Standard query (0)	6100125.fls.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.436449051 CET	192.168.2.4	1.1.1.1	0x6afb	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.436620951 CET	192.168.2.4	1.1.1.1	0xae1	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.437576056 CET	192.168.2.4	1.1.1.1	0xd8c0	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.437839985 CET	192.168.2.4	1.1.1.1	0x8efe	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.438303947 CET	192.168.2.4	1.1.1.1	0x28b6	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.438596010 CET	192.168.2.4	1.1.1.1	0xde0e	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.516293049 CET	192.168.2.4	1.1.1.1	0x21b4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.516629934 CET	192.168.2.4	1.1.1.1	0x10e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:56.552433014 CET	192.168.2.4	1.1.1.1	0xf152	Standard query (0)	fid.agkn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.552838087 CET	192.168.2.4	1.1.1.1	0x9751	Standard query (0)	fid.agkn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.000958920 CET	192.168.2.4	1.1.1.1	0x1bf8	Standard query (0)	scripts.webcontentassessor.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.001147032 CET	192.168.2.4	1.1.1.1	0x2f43	Standard query (0)	scripts.webcontentassessor.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.036633968 CET	192.168.2.4	1.1.1.1	0x77b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.036633968 CET	192.168.2.4	1.1.1.1	0xa3db	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.091434002 CET	192.168.2.4	1.1.1.1	0x24fd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.091675043 CET	192.168.2.4	1.1.1.1	0x73ad	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.175818920 CET	192.168.2.4	1.1.1.1	0x59	Standard query (0)	fid.agkn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.176083088 CET	192.168.2.4	1.1.1.1	0xdba0	Standard query (0)	fid.agkn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.341870070 CET	192.168.2.4	1.1.1.1	0x42d2	Standard query (0)	about.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.342092037 CET	192.168.2.4	1.1.1.1	0x41b3	Standard query (0)	about.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.471168995 CET	192.168.2.4	1.1.1.1	0x1f1f	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.471343040 CET	192.168.2.4	1.1.1.1	0xdb7a	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.505352974 CET	192.168.2.4	1.1.1.1	0xe729	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.509318113 CET	192.168.2.4	1.1.1.1	0x6735	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:57.946861029 CET	192.168.2.4	1.1.1.1	0x975	Standard query (0)	scripts.webcontentassessor.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.946969032 CET	192.168.2.4	1.1.1.1	0x6be9	Standard query (0)	scripts.webcontentassessor.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.028877020 CET	192.168.2.4	1.1.1.1	0x1cd2	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.029004097 CET	192.168.2.4	1.1.1.1	0x8684	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.039602041 CET	192.168.2.4	1.1.1.1	0xd5a1	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.039886951 CET	192.168.2.4	1.1.1.1	0x9d3f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.060401917 CET	192.168.2.4	1.1.1.1	0xd197	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.060729980 CET	192.168.2.4	1.1.1.1	0xfbf5	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.101864100 CET	192.168.2.4	1.1.1.1	0x4743	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.102150917 CET	192.168.2.4	1.1.1.1	0x4dba	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.619839907 CET	192.168.2.4	1.1.1.1	0xa52a	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.620698929 CET	192.168.2.4	1.1.1.1	0x60de	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.644556999 CET	192.168.2.4	1.1.1.1	0xf402	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.645086050 CET	192.168.2.4	1.1.1.1	0x7aa7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Feb 15, 2024 01:11:58.926032066 CET	192.168.2.4	1.1.1.1	0x317a	Standard query (0)	pnapi.invoca.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.926156998 CET	192.168.2.4	1.1.1.1	0x140b	Standard query (0)	pnapi.invoca.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:59.047528028 CET	192.168.2.4	1.1.1.1	0x2c5d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.048048019 CET	192.168.2.4	1.1.1.1	0x4f24	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:11:59.791188955 CET	192.168.2.4	1.1.1.1	0xb7f3	Standard query (0)	about.att.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.791486025 CET	192.168.2.4	1.1.1.1	0x5a57	Standard query (0)	about.att.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:01.610107899 CET	192.168.2.4	1.1.1.1	0x7974	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.610454082 CET	192.168.2.4	1.1.1.1	0x6290	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:02.197484970 CET	192.168.2.4	1.1.1.1	0xd175	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.217847109 CET	192.168.2.4	1.1.1.1	0xd2b3	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:02.594768047 CET	192.168.2.4	1.1.1.1	0x3337	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.595201015 CET	192.168.2.4	1.1.1.1	0x9f20	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.081511021 CET	192.168.2.4	1.1.1.1	0xfe38	Standard query (0)	gateway.foresee.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.081615925 CET	192.168.2.4	1.1.1.1	0xdddd	Standard query (0)	gateway.foresee.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.355242968 CET	192.168.2.4	1.1.1.1	0x84de	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.356204033 CET	192.168.2.4	1.1.1.1	0xd688	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.356760025 CET	192.168.2.4	1.1.1.1	0xa75b	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.357642889 CET	192.168.2.4	1.1.1.1	0x4fb7	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.418330908 CET	192.168.2.4	1.1.1.1	0xbaeb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.418447018 CET	192.168.2.4	1.1.1.1	0xb8de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.463540077 CET	192.168.2.4	1.1.1.1	0x2834	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.464031935 CET	192.168.2.4	1.1.1.1	0xf044	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.652709961 CET	192.168.2.4	1.1.1.1	0xac33	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.655672073 CET	192.168.2.4	1.1.1.1	0x9543	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:04.933917046 CET	192.168.2.4	1.1.1.1	0x8b4d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.934086084 CET	192.168.2.4	1.1.1.1	0x3190	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:05.647429943 CET	192.168.2.4	1.1.1.1	0x25e0	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.647670984 CET	192.168.2.4	1.1.1.1	0x2afd	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:05.863571882 CET	192.168.2.4	1.1.1.1	0xe0d0	Standard query (0)	brain.foresee.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.863877058 CET	192.168.2.4	1.1.1.1	0xea31	Standard query (0)	brain.foresee.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:06.451773882 CET	192.168.2.4	1.1.1.1	0x4d9e	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.452112913 CET	192.168.2.4	1.1.1.1	0x2747	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:06.553829908 CET	192.168.2.4	1.1.1.1	0x5171	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.554766893 CET	192.168.2.4	1.1.1.1	0x7c75	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:06.584261894 CET	192.168.2.4	1.1.1.1	0xe53b	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.584908009 CET	192.168.2.4	1.1.1.1	0xf3bd	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:06.712543011 CET	192.168.2.4	1.1.1.1	0xae48	Standard query (0)	brain.foresee.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.712755919 CET	192.168.2.4	1.1.1.1	0x31a	Standard query (0)	brain.foresee.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:07.200946093 CET	192.168.2.4	1.1.1.1	0x66f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.201286077 CET	192.168.2.4	1.1.1.1	0xe886	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:10.454586029 CET	192.168.2.4	1.1.1.1	0xb367	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:10.455353022 CET	192.168.2.4	1.1.1.1	0xf6f1	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:15.760627031 CET	192.168.2.4	1.1.1.1	0x4157	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:15.761183977 CET	192.168.2.4	1.1.1.1	0x412d	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:16.546633959 CET	192.168.2.4	1.1.1.1	0x27d8	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:16.546972990 CET	192.168.2.4	1.1.1.1	0xb1d8	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Feb 15, 2024 01:12:34.713705063 CET	192.168.2.4	1.1.1.1	0x37b4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.713799953 CET	192.168.2.4	1.1.1.1	0xc3f8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Feb 15, 2024 01:12:35.736700058 CET	192.168.2.4	1.1.1.1	0x2546	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.736845016 CET	192.168.2.4	1.1.1.1	0x7903	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792581081 CET	1.1.1.1	192.168.2.4	0x61dd	No error (0)	clients.l.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.792763948 CET	1.1.1.1	192.168.2.4	0xbcea	No error (0)	accounts.google.com		74.125.138.84	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:10.793313980 CET	1.1.1.1	192.168.2.4	0x46d4	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.641385078 CET	1.1.1.1	192.168.2.4	0xad17	No error (0)	suez.fromthemachine.org	ty.fromthemachine.org		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.641385078 CET	1.1.1.1	192.168.2.4	0xad17	No error (0)	ty.fromthemachine.org	www.fromthemachine.org		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.641385078 CET	1.1.1.1	192.168.2.4	0xad17	No error (0)	www.fromthemachine.org	bafybeidpq3cmso7h7wpz4i6fwbwhupx3hr542tdgevwn3alivjmbswxkcq.ipfs.dweb.link		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.835968018 CET	1.1.1.1	192.168.2.4	0xc7eb	No error (0)	suez.fromthemachine.org	ty.fromthemachine.org		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.835968018 CET	1.1.1.1	192.168.2.4	0xc7eb	No error (0)	ty.fromthemachine.org	www.fromthemachine.org		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.835968018 CET	1.1.1.1	192.168.2.4	0xc7eb	No error (0)	www.fromthemachine.org	bafybeidpq3cmso7h7wpz4i6fwbwhupx3hr542tdgevwn3alivjmbswxkcq.ipfs.dweb.link		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:12.835968018 CET	1.1.1.1	192.168.2.4	0xc7eb	No error (0)	bafybeidpq3cmso7h7wpz4i6fwbwhupx3hr542tdgevwn3alivjmbswxkcq.ipfs.dweb.link		209.94.90.1	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:13.330364943 CET	1.1.1.1	192.168.2.4	0x6b72	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:13.330364943 CET	1.1.1.1	192.168.2.4	0x6b72	No error (0)	clcontent.att.com		144.161.77.234	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:13.331623077 CET	1.1.1.1	192.168.2.4	0xedce	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:14.143132925 CET	1.1.1.1	192.168.2.4	0x8731	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:14.143132925 CET	1.1.1.1	192.168.2.4	0x8731	No error (0)	clcontent.att.com		144.161.77.234	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:14.143609047 CET	1.1.1.1	192.168.2.4	0xb1e2	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.106	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.104	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.105	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.227732897 CET	1.1.1.1	192.168.2.4	0xf2a4	No error (0)	www.google.com		173.194.219.147	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:15.228272915 CET	1.1.1.1	192.168.2.4	0x2518	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:25.372369051 CET	1.1.1.1	192.168.2.4	0x9dad	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:25.373183012 CET	1.1.1.1	192.168.2.4	0x3e6b	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:26.853981972 CET	1.1.1.1	192.168.2.4	0x238a	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:26.853981972 CET	1.1.1.1	192.168.2.4	0x238a	No error (0)	clcontent.att.com		144.161.77.234	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:26.854026079 CET	1.1.1.1	192.168.2.4	0xb867	No error (0)	signin-static-js.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.356687069 CET	1.1.1.1	192.168.2.4	0xfa60	No error (0)	s2.go-mpulse.net	ip46s2.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.356731892 CET	1.1.1.1	192.168.2.4	0x503c	No error (0)	s2.go-mpulse.net	ip46s2.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.84.108.222	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.202.146.4	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.220.197.185	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.236.141.196	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.230.124.132	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.230.48.140	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.210.219.201	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649178028 CET	1.1.1.1	192.168.2.4	0x4c4a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		50.19.211.243	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649616003 CET	1.1.1.1	192.168.2.4	0x489a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649616003 CET	1.1.1.1	192.168.2.4	0x489a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.649616003 CET	1.1.1.1	192.168.2.4	0x489a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.652105093 CET	1.1.1.1	192.168.2.4	0x76f0	No error (0)	cdn.quantummetric.com		172.67.20.158	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.652105093 CET	1.1.1.1	192.168.2.4	0x76f0	No error (0)	cdn.quantummetric.com		104.22.53.252	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.652105093 CET	1.1.1.1	192.168.2.4	0x76f0	No error (0)	cdn.quantummetric.com		104.22.52.252	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.652512074 CET	1.1.1.1	192.168.2.4	0xb118	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:29.824246883 CET	1.1.1.1	192.168.2.4	0xa3ac	No error (0)	windowsupdatebg.s.llnwi.net		69.164.42.0	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:29.881160021 CET	1.1.1.1	192.168.2.4	0x5dae	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:29.881642103 CET	1.1.1.1	192.168.2.4	0x2d83	No error (0)	www.att.com	prod-www.zr-att.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.184678078 CET	1.1.1.1	192.168.2.4	0x89ec	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.184678078 CET	1.1.1.1	192.168.2.4	0x89ec	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.196.32.2	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.195.181.57	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.202.181.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.236.141.196	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.205.94.9	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.225.227.199	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.55.26.210	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283581972 CET	1.1.1.1	192.168.2.4	0x5c76	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.218.34.171	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283668995 CET	1.1.1.1	192.168.2.4	0x3439	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283668995 CET	1.1.1.1	192.168.2.4	0x3439	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.283668995 CET	1.1.1.1	192.168.2.4	0x3439	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.417243958 CET	1.1.1.1	192.168.2.4	0x15c5	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.417804003 CET	1.1.1.1	192.168.2.4	0xd3a4	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.634748936 CET	1.1.1.1	192.168.2.4	0x941a	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:30.634979963 CET	1.1.1.1	192.168.2.4	0x488c	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.046243906 CET	1.1.1.1	192.168.2.4	0xf4a4	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.046257973 CET	1.1.1.1	192.168.2.4	0x1483	No error (0)	smetrics.att.com	smetrics.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	attservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056086063 CET	1.1.1.1	192.168.2.4	0xc7c5	No error (0)	adobetarget.data.adobedc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.056430101 CET	1.1.1.1	192.168.2.4	0xc497	No error (0)	attservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.288763046 CET	1.1.1.1	192.168.2.4	0x92b2	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.288834095 CET	1.1.1.1	192.168.2.4	0xe3d8	No error (0)	c.go-mpulse.net	wildcard46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.767738104 CET	1.1.1.1	192.168.2.4	0x45f3	No error (0)	fls.doubleclick.net		173.194.219.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.767738104 CET	1.1.1.1	192.168.2.4	0x45f3	No error (0)	fls.doubleclick.net		173.194.219.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	attservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834253073 CET	1.1.1.1	192.168.2.4	0x2ca6	No error (0)	adobetarget.data.adobedc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:31.834417105 CET	1.1.1.1	192.168.2.4	0x7048	No error (0)	attservicesinc.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.361315966 CET	1.1.1.1	192.168.2.4	0x7334	No error (0)	dynatrace.att.com	dt-appgw-prod.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.362723112 CET	1.1.1.1	192.168.2.4	0xfcd8	No error (0)	dynatrace.att.com	dt-appgw-prod.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.442120075 CET	1.1.1.1	192.168.2.4	0xfbdd	No error (0)	www.directv.com	glbprod.directv.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.442132950 CET	1.1.1.1	192.168.2.4	0xaf7d	No error (0)	www.directv.com	glbprod.directv.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.637927055 CET	1.1.1.1	192.168.2.4	0x3859	No error (0)	identity.att.com	lsreg.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.645931005 CET	1.1.1.1	192.168.2.4	0xc1d8	No error (0)	identity.att.com	lsreg.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.645931005 CET	1.1.1.1	192.168.2.4	0xc1d8	No error (0)	eip-ntt.lsreg.att.com.akahost.net		184.31.10.246	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:32.655101061 CET	1.1.1.1	192.168.2.4	0x7105	No error (0)	173bf10b.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.656872034 CET	1.1.1.1	192.168.2.4	0x6189	No error (0)	173bf10b.akstat.io	wildcard46.akstat.io.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.849458933 CET	1.1.1.1	192.168.2.4	0x6d66	No error (0)	trial-eum-clientnsv4-s.akamaihd.net	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.849554062 CET	1.1.1.1	192.168.2.4	0x6554	No error (0)	trial-eum-clientnsv4-s.akamaihd.net	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.851022005 CET	1.1.1.1	192.168.2.4	0xb748	No error (0)	trial-eum-clienttons-s.akamaihd.net	trial-eum.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.851022005 CET	1.1.1.1	192.168.2.4	0xb748	No error (0)	trial-eum.cname.clienttons.com	a1024.dscg.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.851057053 CET	1.1.1.1	192.168.2.4	0x862b	No error (0)	trial-eum-clienttons-s.akamaihd.net	trial-eum.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:32.851057053 CET	1.1.1.1	192.168.2.4	0x862b	No error (0)	trial-eum.cname.clienttons.com	a1024.dscg.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:33.121534109 CET	1.1.1.1	192.168.2.4	0xbbd1	No error (0)	dynatrace.att.com	dt-appgw-prod.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:33.122204065 CET	1.1.1.1	192.168.2.4	0x9b22	No error (0)	dynatrace.att.com	dt-appgw-prod.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		146.148.37.220	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		34.28.99.254	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		34.123.176.21	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		35.232.23.205	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		34.170.140.79	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		35.193.46.160	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		35.184.149.120	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		34.173.148.48	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		35.202.73.49	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.144109964 CET	1.1.1.1	192.168.2.4	0xdf56	No error (0)	ingest.quantummetric.com		34.31.11.132	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.184967041 CET	1.1.1.1	192.168.2.4	0xf244	No error (0)	att-sync.quantummetric.com		35.188.81.186	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.184967041 CET	1.1.1.1	192.168.2.4	0xf244	No error (0)	att-sync.quantummetric.com		104.197.213.79	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.184967041 CET	1.1.1.1	192.168.2.4	0xf244	No error (0)	att-sync.quantummetric.com		34.135.199.11	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.184967041 CET	1.1.1.1	192.168.2.4	0xf244	No error (0)	att-sync.quantummetric.com		35.192.6.162	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:33.184967041 CET	1.1.1.1	192.168.2.4	0xf244	No error (0)	att-sync.quantummetric.com		34.170.150.109	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:34.589653969 CET	1.1.1.1	192.168.2.4	0xc33e	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:34.590008974 CET	1.1.1.1	192.168.2.4	0x46b1	No error (0)	s.go-mpulse.net	ip46.go-mpulse.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:35.917772055 CET	1.1.1.1	192.168.2.4	0x6e57	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:35.917772055 CET	1.1.1.1	192.168.2.4	0x6e57	No error (0)	clcontent.att.com		144.160.125.207	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:35.918140888 CET	1.1.1.1	192.168.2.4	0x801	No error (0)	signin.att.com	clcontent.att.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:36.149225950 CET	1.1.1.1	192.168.2.4	0x8597	No error (0)	identity.att.com	lsreg.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:36.149225950 CET	1.1.1.1	192.168.2.4	0x8597	No error (0)	eip-ntt.lsreg.att.com.akahost.net		184.31.10.246	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:36.155173063 CET	1.1.1.1	192.168.2.4	0x7bee	No error (0)	identity.att.com	lsreg.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:38.259377003 CET	1.1.1.1	192.168.2.4	0x5dfb	No error (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa-clientnsv4-s.akamaihd.net	kg2tssvyd4fpmzonk22q-f-9a28c56fa.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:38.259377003 CET	1.1.1.1	192.168.2.4	0x5dfb	No error (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:38.260247946 CET	1.1.1.1	192.168.2.4	0x459e	No error (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa-clientnsv4-s.akamaihd.net	kg2tssvyd4fpmzonk22q-f-9a28c56fa.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:38.260247946 CET	1.1.1.1	192.168.2.4	0x459e	No error (0)	kg2tssvyd4fpmzonk22q-f-9a28c56fa.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:38.461049080 CET	1.1.1.1	192.168.2.4	0x95e6	No error (0)	att-sync.quantummetric.com		34.135.199.11	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.461049080 CET	1.1.1.1	192.168.2.4	0x95e6	No error (0)	att-sync.quantummetric.com		35.192.6.162	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.461049080 CET	1.1.1.1	192.168.2.4	0x95e6	No error (0)	att-sync.quantummetric.com		34.170.150.109	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.461049080 CET	1.1.1.1	192.168.2.4	0x95e6	No error (0)	att-sync.quantummetric.com		35.188.81.186	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.461049080 CET	1.1.1.1	192.168.2.4	0x95e6	No error (0)	att-sync.quantummetric.com		104.197.213.79	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		35.238.147.169	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		35.188.52.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		35.202.116.164	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		34.68.237.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		34.72.247.107	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		34.67.167.57	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		34.71.14.57	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		35.232.17.88	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		35.226.179.177	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.483428001 CET	1.1.1.1	192.168.2.4	0xd507	No error (0)	ingest.quantummetric.com		34.42.132.243	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.486218929 CET	1.1.1.1	192.168.2.4	0x7246	No error (0)	att-app.quantummetric.com		35.226.68.60	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.486218929 CET	1.1.1.1	192.168.2.4	0x7246	No error (0)	att-app.quantummetric.com		34.27.58.117	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.486218929 CET	1.1.1.1	192.168.2.4	0x7246	No error (0)	att-app.quantummetric.com		35.238.24.177	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:38.486218929 CET	1.1.1.1	192.168.2.4	0x7246	No error (0)	att-app.quantummetric.com		34.135.80.45	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:39.180351019 CET	1.1.1.1	192.168.2.4	0x32c6	No error (0)	att-app.quantummetric.com		34.135.80.45	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:39.180351019 CET	1.1.1.1	192.168.2.4	0x32c6	No error (0)	att-app.quantummetric.com		34.27.58.117	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:39.180351019 CET	1.1.1.1	192.168.2.4	0x32c6	No error (0)	att-app.quantummetric.com		35.226.68.60	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:39.180351019 CET	1.1.1.1	192.168.2.4	0x32c6	No error (0)	att-app.quantummetric.com		35.238.24.177	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.549552917 CET	1.1.1.1	192.168.2.4	0x4453	No error (0)	p11.techlab-cdn.com	p11.techlab-cdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:40.551049948 CET	1.1.1.1	192.168.2.4	0xfba4	No error (0)	p11.techlab-cdn.com	p11.techlab-cdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:40.901942015 CET	1.1.1.1	192.168.2.4	0x9265	No error (0)	cdn.quantummetric.com		104.22.52.252	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.901942015 CET	1.1.1.1	192.168.2.4	0x9265	No error (0)	cdn.quantummetric.com		104.22.53.252	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.901942015 CET	1.1.1.1	192.168.2.4	0x9265	No error (0)	cdn.quantummetric.com		172.67.20.158	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:40.902900934 CET	1.1.1.1	192.168.2.4	0xffaf	No error (0)	cdn.quantummetric.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:41.238040924 CET	1.1.1.1	192.168.2.4	0x3740	No error (0)	p11.techlab-cdn.com	p11.techlab-cdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:41.239427090 CET	1.1.1.1	192.168.2.4	0x8dd6	No error (0)	p11.techlab-cdn.com	p11.techlab-cdn.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:42.998934031 CET	1.1.1.1	192.168.2.4	0x7613	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:42.998934031 CET	1.1.1.1	192.168.2.4	0x7613	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:42.998934031 CET	1.1.1.1	192.168.2.4	0x7613	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:42.998934031 CET	1.1.1.1	192.168.2.4	0x7613	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:42.998934031 CET	1.1.1.1	192.168.2.4	0x7613	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:43.039833069 CET	1.1.1.1	192.168.2.4	0x5a02	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:43.039833069 CET	1.1.1.1	192.168.2.4	0x5a02	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:43.151210070 CET	1.1.1.1	192.168.2.4	0x2425	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:43.151210070 CET	1.1.1.1	192.168.2.4	0x2425	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:44.317795038 CET	1.1.1.1	192.168.2.4	0x2c54	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:44.317795038 CET	1.1.1.1	192.168.2.4	0x2c54	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:44.317795038 CET	1.1.1.1	192.168.2.4	0x2c54	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		35.169.173.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:44.317795038 CET	1.1.1.1	192.168.2.4	0x2c54	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		54.205.210.54	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:44.317795038 CET	1.1.1.1	192.168.2.4	0x2c54	No error (0)	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		23.20.189.8	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:44.318178892 CET	1.1.1.1	192.168.2.4	0x748f	No error (0)	mboxedge34.tt.omtrdc.net	mboxedge44.ethos103-prod-va6.ethos.adobe.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:44.318178892 CET	1.1.1.1	192.168.2.4	0x748f	No error (0)	mboxedge44.ethos103-prod-va6.ethos.adobe.net	ethos103-prod-va6-k8s-pub2-0-a833405ff04c4bff.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:47.495425940 CET	1.1.1.1	192.168.2.4	0xb472	No error (0)	attreg.att.net		144.160.149.45	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:49.166058064 CET	1.1.1.1	192.168.2.4	0xd5f4	No error (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a-clientnsv4-s.akamaihd.net	kg2tssvyd4fpmzonk3ba-f-fc39dff1a.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:49.166058064 CET	1.1.1.1	192.168.2.4	0xd5f4	No error (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:49.172650099 CET	1.1.1.1	192.168.2.4	0x7ccf	No error (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a-clientnsv4-s.akamaihd.net	kg2tssvyd4fpmzonk3ba-f-fc39dff1a.ipv4-only.cname.clienttons.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:49.172650099 CET	1.1.1.1	192.168.2.4	0x7ccf	No error (0)	kg2tssvyd4fpmzonk3ba-f-fc39dff1a.ipv4-only.cname.clienttons.com	a248.b.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.041970968 CET	1.1.1.1	192.168.2.4	0x99f0	No error (0)	googleads.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.041970968 CET	1.1.1.1	192.168.2.4	0x99f0	No error (0)	googleads.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.041970968 CET	1.1.1.1	192.168.2.4	0x99f0	No error (0)	googleads.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.041970968 CET	1.1.1.1	192.168.2.4	0x99f0	No error (0)	googleads.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.042385101 CET	1.1.1.1	192.168.2.4	0x29e0	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:11:56.210282087 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	solutions.invocacdn.com	d1vb8d7cedz7p0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.210282087 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	d1vb8d7cedz7p0.cloudfront.net		18.244.202.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.210282087 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	d1vb8d7cedz7p0.cloudfront.net		18.244.202.101	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.210282087 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	d1vb8d7cedz7p0.cloudfront.net		18.244.202.11	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.210282087 CET	1.1.1.1	192.168.2.4	0x9fb0	No error (0)	d1vb8d7cedz7p0.cloudfront.net		18.244.202.80	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.210352898 CET	1.1.1.1	192.168.2.4	0x4e6d	No error (0)	solutions.invocacdn.com	d1vb8d7cedz7p0.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.418597937 CET	1.1.1.1	192.168.2.4	0xc0ae	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.419114113 CET	1.1.1.1	192.168.2.4	0xb87b	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.520263910 CET	1.1.1.1	192.168.2.4	0xb89d	No error (0)	6100125.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.520263910 CET	1.1.1.1	192.168.2.4	0xb89d	No error (0)	dart.l.doubleclick.net		64.233.176.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.520263910 CET	1.1.1.1	192.168.2.4	0xb89d	No error (0)	dart.l.doubleclick.net		64.233.176.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.520561934 CET	1.1.1.1	192.168.2.4	0xccb7	No error (0)	6100125.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.553812981 CET	1.1.1.1	192.168.2.4	0x6afb	No error (0)	td.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.553812981 CET	1.1.1.1	192.168.2.4	0x6afb	No error (0)	td.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.553812981 CET	1.1.1.1	192.168.2.4	0x6afb	No error (0)	td.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.553812981 CET	1.1.1.1	192.168.2.4	0x6afb	No error (0)	td.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.554850101 CET	1.1.1.1	192.168.2.4	0xd8c0	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.554850101 CET	1.1.1.1	192.168.2.4	0xd8c0	No error (0)	scontent.xx.fbcdn.net		31.13.88.13	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.555264950 CET	1.1.1.1	192.168.2.4	0x8efe	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.555567980 CET	1.1.1.1	192.168.2.4	0x28b6	No error (0)	ad.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.555567980 CET	1.1.1.1	192.168.2.4	0x28b6	No error (0)	ad.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.556169987 CET	1.1.1.1	192.168.2.4	0xde0e	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.106	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.147	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.104	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.105	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633583069 CET	1.1.1.1	192.168.2.4	0x21b4	No error (0)	www.google.com		142.250.9.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.633912086 CET	1.1.1.1	192.168.2.4	0x10e9	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	fid.agkn.com	fabrick.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	fabrick.agkn.com	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		3.212.181.219	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		52.7.164.58	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		44.207.27.158	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.669863939 CET	1.1.1.1	192.168.2.4	0xf152	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		52.204.214.231	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:56.670300961 CET	1.1.1.1	192.168.2.4	0x9751	No error (0)	fid.agkn.com	fabrick.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:56.670300961 CET	1.1.1.1	192.168.2.4	0x9751	No error (0)	fabrick.agkn.com	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.119302034 CET	1.1.1.1	192.168.2.4	0x1bf8	No error (0)	scripts.webcontentassessor.com	k3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.119494915 CET	1.1.1.1	192.168.2.4	0x2f43	No error (0)	scripts.webcontentassessor.com	k3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.153985023 CET	1.1.1.1	192.168.2.4	0x77b	No error (0)	ad.doubleclick.net		142.251.15.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.153985023 CET	1.1.1.1	192.168.2.4	0x77b	No error (0)	ad.doubleclick.net		142.251.15.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.154150963 CET	1.1.1.1	192.168.2.4	0xa3db	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.208693981 CET	1.1.1.1	192.168.2.4	0x24fd	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.209054947 CET	1.1.1.1	192.168.2.4	0x73ad	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	fid.agkn.com	fabrick.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	fabrick.agkn.com	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		52.7.164.58	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		52.204.214.231	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		3.212.181.219	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293191910 CET	1.1.1.1	192.168.2.4	0x59	No error (0)	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		44.207.27.158	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293972969 CET	1.1.1.1	192.168.2.4	0xdba0	No error (0)	fid.agkn.com	fabrick.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.293972969 CET	1.1.1.1	192.168.2.4	0xdba0	No error (0)	fabrick.agkn.com	ActivationEdge-fabrick-1457061833.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.460535049 CET	1.1.1.1	192.168.2.4	0x41b3	No error (0)	about.att.com	about.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.461731911 CET	1.1.1.1	192.168.2.4	0x42d2	No error (0)	about.att.com	about.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.588618994 CET	1.1.1.1	192.168.2.4	0x1f1f	No error (0)	adservice.google.com		142.250.105.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.588618994 CET	1.1.1.1	192.168.2.4	0x1f1f	No error (0)	adservice.google.com		142.250.105.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.588618994 CET	1.1.1.1	192.168.2.4	0x1f1f	No error (0)	adservice.google.com		142.250.105.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.588618994 CET	1.1.1.1	192.168.2.4	0x1f1f	No error (0)	adservice.google.com		142.250.105.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:57.589027882 CET	1.1.1.1	192.168.2.4	0xdb7a	No error (0)	adservice.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:57.622792006 CET	1.1.1.1	192.168.2.4	0xe729	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:57.626420021 CET	1.1.1.1	192.168.2.4	0x6735	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.064650059 CET	1.1.1.1	192.168.2.4	0x975	No error (0)	scripts.webcontentassessor.com	k3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.065037966 CET	1.1.1.1	192.168.2.4	0x6be9	No error (0)	scripts.webcontentassessor.com	k3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.129	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.20	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146161079 CET	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.41	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146285057 CET	1.1.1.1	192.168.2.4	0x8684	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.146285057 CET	1.1.1.1	192.168.2.4	0x8684	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.157020092 CET	1.1.1.1	192.168.2.4	0x9d3f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:11:58.157233953 CET	1.1.1.1	192.168.2.4	0xd5a1	No error (0)	ad.doubleclick.net		172.217.215.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.157233953 CET	1.1.1.1	192.168.2.4	0xd5a1	No error (0)	ad.doubleclick.net		172.217.215.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.179394960 CET	1.1.1.1	192.168.2.4	0xd197	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.179394960 CET	1.1.1.1	192.168.2.4	0xd197	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.179424047 CET	1.1.1.1	192.168.2.4	0xfbf5	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.219310045 CET	1.1.1.1	192.168.2.4	0x4743	No error (0)	adservice.google.com		173.194.219.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.219310045 CET	1.1.1.1	192.168.2.4	0x4743	No error (0)	adservice.google.com		173.194.219.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.219310045 CET	1.1.1.1	192.168.2.4	0x4743	No error (0)	adservice.google.com		173.194.219.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.219310045 CET	1.1.1.1	192.168.2.4	0x4743	No error (0)	adservice.google.com		173.194.219.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.219798088 CET	1.1.1.1	192.168.2.4	0x4dba	No error (0)	adservice.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.48	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.102	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.87	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.737690926 CET	1.1.1.1	192.168.2.4	0xa52a	No error (0)	d2ctznuk6ro1vp.cloudfront.net		99.84.208.113	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.738799095 CET	1.1.1.1	192.168.2.4	0x60de	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.738799095 CET	1.1.1.1	192.168.2.4	0x60de	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.762032032 CET	1.1.1.1	192.168.2.4	0xf402	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:58.762032032 CET	1.1.1.1	192.168.2.4	0xf402	No error (0)	star-mini.c10r.facebook.com		31.13.65.36	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:58.762892962 CET	1.1.1.1	192.168.2.4	0x7aa7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.044287920 CET	1.1.1.1	192.168.2.4	0x317a	No error (0)	pnapi.invoca.net	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.044287920 CET	1.1.1.1	192.168.2.4	0x317a	No error (0)	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com		44.197.54.80	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.044287920 CET	1.1.1.1	192.168.2.4	0x317a	No error (0)	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com		52.6.11.247	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.044287920 CET	1.1.1.1	192.168.2.4	0x317a	No error (0)	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com		54.156.121.228	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.044344902 CET	1.1.1.1	192.168.2.4	0x140b	No error (0)	pnapi.invoca.net	pnapi-stateless-868251922.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165241003 CET	1.1.1.1	192.168.2.4	0x2c5d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165241003 CET	1.1.1.1	192.168.2.4	0x2c5d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165241003 CET	1.1.1.1	192.168.2.4	0x2c5d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165241003 CET	1.1.1.1	192.168.2.4	0x2c5d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165241003 CET	1.1.1.1	192.168.2.4	0x2c5d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:11:59.165429115 CET	1.1.1.1	192.168.2.4	0x4f24	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.909461021 CET	1.1.1.1	192.168.2.4	0x5a57	No error (0)	about.att.com	about.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:11:59.911206961 CET	1.1.1.1	192.168.2.4	0xb7f3	No error (0)	about.att.com	about.att.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		172.217.215.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		108.177.122.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		172.217.215.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		108.177.122.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.251.15.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.250.9.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		172.217.215.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.251.15.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		108.177.122.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.250.9.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.250.9.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		172.217.215.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.250.9.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		142.251.15.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727359056 CET	1.1.1.1	192.168.2.4	0x7974	No error (0)	youtube-ui.l.google.com		108.177.122.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727834940 CET	1.1.1.1	192.168.2.4	0x6290	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:01.727834940 CET	1.1.1.1	192.168.2.4	0x6290	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:12:02.314932108 CET	1.1.1.1	192.168.2.4	0xd175	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:02.314932108 CET	1.1.1.1	192.168.2.4	0xd175	No error (0)	securepubads46.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.314932108 CET	1.1.1.1	192.168.2.4	0xd175	No error (0)	securepubads46.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.314932108 CET	1.1.1.1	192.168.2.4	0xd175	No error (0)	securepubads46.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.314932108 CET	1.1.1.1	192.168.2.4	0xd175	No error (0)	securepubads46.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.335730076 CET	1.1.1.1	192.168.2.4	0xd2b3	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.712086916 CET	1.1.1.1	192.168.2.4	0x3337	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:02.772305965 CET	1.1.1.1	192.168.2.4	0x269	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:02.772305965 CET	1.1.1.1	192.168.2.4	0x269	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:03.397339106 CET	1.1.1.1	192.168.2.4	0xbfc1	No error (0)	pagead-googlehosted.l.google.com		142.250.105.132	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199362040 CET	1.1.1.1	192.168.2.4	0xdddd	No error (0)	gateway.foresee.com	d279u996ipxqqp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199575901 CET	1.1.1.1	192.168.2.4	0xfe38	No error (0)	gateway.foresee.com	d279u996ipxqqp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199575901 CET	1.1.1.1	192.168.2.4	0xfe38	No error (0)	d279u996ipxqqp.cloudfront.net		108.139.15.115	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199575901 CET	1.1.1.1	192.168.2.4	0xfe38	No error (0)	d279u996ipxqqp.cloudfront.net		108.139.15.90	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199575901 CET	1.1.1.1	192.168.2.4	0xfe38	No error (0)	d279u996ipxqqp.cloudfront.net		108.139.15.81	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.199575901 CET	1.1.1.1	192.168.2.4	0xfe38	No error (0)	d279u996ipxqqp.cloudfront.net		108.139.15.125	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.472774982 CET	1.1.1.1	192.168.2.4	0x84de	No error (0)	googleads.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.472774982 CET	1.1.1.1	192.168.2.4	0x84de	No error (0)	googleads.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.472774982 CET	1.1.1.1	192.168.2.4	0x84de	No error (0)	googleads.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.472774982 CET	1.1.1.1	192.168.2.4	0x84de	No error (0)	googleads.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.473496914 CET	1.1.1.1	192.168.2.4	0xd688	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:04.474080086 CET	1.1.1.1	192.168.2.4	0xa75b	No error (0)	static.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.474080086 CET	1.1.1.1	192.168.2.4	0xa75b	No error (0)	static.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.535927057 CET	1.1.1.1	192.168.2.4	0xbaeb	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.536026955 CET	1.1.1.1	192.168.2.4	0xb8de	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:12:04.580902100 CET	1.1.1.1	192.168.2.4	0x2834	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:04.580902100 CET	1.1.1.1	192.168.2.4	0x2834	No error (0)	photos-ugc.l.googleusercontent.com		64.233.177.132	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.581381083 CET	1.1.1.1	192.168.2.4	0xf044	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:04.770381927 CET	1.1.1.1	192.168.2.4	0xac33	No error (0)	ad.doubleclick.net		142.250.9.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.770381927 CET	1.1.1.1	192.168.2.4	0xac33	No error (0)	ad.doubleclick.net		142.250.9.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:04.773017883 CET	1.1.1.1	192.168.2.4	0x9543	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:05.051589012 CET	1.1.1.1	192.168.2.4	0x8b4d	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:05.051589012 CET	1.1.1.1	192.168.2.4	0x8b4d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.051589012 CET	1.1.1.1	192.168.2.4	0x8b4d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.051589012 CET	1.1.1.1	192.168.2.4	0x8b4d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.051589012 CET	1.1.1.1	192.168.2.4	0x8b4d	No error (0)	securepubads46.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.051747084 CET	1.1.1.1	192.168.2.4	0x3190	No error (0)	securepubads.g.doubleclick.net	securepubads46.g.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:05.764695883 CET	1.1.1.1	192.168.2.4	0x25e0	No error (0)	ad.doubleclick.net		74.125.138.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.764695883 CET	1.1.1.1	192.168.2.4	0x25e0	No error (0)	ad.doubleclick.net		74.125.138.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.765000105 CET	1.1.1.1	192.168.2.4	0x2afd	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:05.981853962 CET	1.1.1.1	192.168.2.4	0xea31	No error (0)	brain.foresee.com	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	brain.foresee.com	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.156.103.28	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.161.209.41	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		52.70.93.247	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.147.224.12	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:05.982717037 CET	1.1.1.1	192.168.2.4	0xe0d0	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.156.77.55	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.569494963 CET	1.1.1.1	192.168.2.4	0x4d9e	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.671199083 CET	1.1.1.1	192.168.2.4	0x5171	No error (0)	googleads.g.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.671199083 CET	1.1.1.1	192.168.2.4	0x5171	No error (0)	googleads.g.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.671199083 CET	1.1.1.1	192.168.2.4	0x5171	No error (0)	googleads.g.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.671199083 CET	1.1.1.1	192.168.2.4	0x5171	No error (0)	googleads.g.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.672156096 CET	1.1.1.1	192.168.2.4	0x7c75	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:06.701613903 CET	1.1.1.1	192.168.2.4	0xe53b	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:06.701613903 CET	1.1.1.1	192.168.2.4	0xe53b	No error (0)	photos-ugc.l.googleusercontent.com		172.253.124.132	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.702271938 CET	1.1.1.1	192.168.2.4	0xf3bd	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	brain.foresee.com	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.147.224.12	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.156.77.55	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		52.70.93.247	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.161.209.41	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830537081 CET	1.1.1.1	192.168.2.4	0xae48	No error (0)	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		54.156.103.28	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:06.830620050 CET	1.1.1.1	192.168.2.4	0x31a	No error (0)	brain.foresee.com	ab1cbac537de54f43b214b172032a880-1825732961.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		64.233.177.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		64.233.176.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		172.253.124.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		172.253.124.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		64.233.177.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		142.250.105.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		142.250.105.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		74.125.136.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		172.253.124.190	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		74.125.136.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		142.250.105.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		172.253.124.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		64.233.177.136	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		74.125.136.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		64.233.177.91	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318362951 CET	1.1.1.1	192.168.2.4	0x66f	No error (0)	youtube-ui.l.google.com		142.250.105.93	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318921089 CET	1.1.1.1	192.168.2.4	0xe886	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:07.318921089 CET	1.1.1.1	192.168.2.4	0xe886	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Feb 15, 2024 01:12:10.572581053 CET	1.1.1.1	192.168.2.4	0xb367	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:10.572581053 CET	1.1.1.1	192.168.2.4	0xb367	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:10.572581053 CET	1.1.1.1	192.168.2.4	0xb367	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:10.572581053 CET	1.1.1.1	192.168.2.4	0xb367	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:15.878093958 CET	1.1.1.1	192.168.2.4	0x4157	No error (0)	ad.doubleclick.net		142.250.105.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:15.878093958 CET	1.1.1.1	192.168.2.4	0x4157	No error (0)	ad.doubleclick.net		142.250.105.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:15.878551960 CET	1.1.1.1	192.168.2.4	0x412d	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:16.664057970 CET	1.1.1.1	192.168.2.4	0x27d8	No error (0)	ad.doubleclick.net		64.233.177.149	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:16.664057970 CET	1.1.1.1	192.168.2.4	0x27d8	No error (0)	ad.doubleclick.net		64.233.177.148	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:16.664242983 CET	1.1.1.1	192.168.2.4	0xb1d8	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
Feb 15, 2024 01:12:23.686711073 CET	1.1.1.1	192.168.2.4	0x350	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 15, 2024 01:12:23.686711073 CET	1.1.1.1	192.168.2.4	0x350	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.138	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.100	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.139	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.101	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.102	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:34.831260920 CET	1.1.1.1	192.168.2.4	0x37b4	No error (0)	play.google.com		74.125.138.113	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.100	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.138	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.139	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.113	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.101	A (IP address)	IN (0x0001)	false
Feb 15, 2024 01:12:35.853961945 CET	1.1.1.1	192.168.2.4	0x2546	No error (0)	play.google.com		142.251.15.102	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	209.94.90.1	80	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 01:11:12.952611923 CET	500	OUT	GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html HTTP/1.1 Host: suez.fromthemachine.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 01:11:13.083415985 CET	1286	IN	HTTP/1.1 200 OK Server: openresty Date: Thu, 15 Feb 2024 00:09:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output cache-control: public, max-age=29030400, immutable etag: W/"QmWKMh2vobtj9jKwz8DWGMF31x9qJZAFwGTVn3Vb4KmrRC" x-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html x-ipfs-roots: QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL,QmWKMh2vobtj9jKwz8DWGMF31x9qJZAFwGTVn3Vb4KmrRC x-ipfs-pop: ipfs-bank1-dc13 timing-allow-origin: * X-IPFS-LB-POP: gateway-bank2-dc13 X-Proxy-Cache: HIT Content-Encoding: gzip Data Raw: 36 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ec bd db 92 e4 c6 91 20 fa 3e 66 f3 0f 98 a2 b5 75 97 08 a0 01 e4 3d 4b 4d 13 c5 91 ce d0 8c d4 83 28 d9 99 63 dc de 31 64 02 59 09 35 f2 32 40 56 17 9a 65 35 3f 76 1e f6 93 f6 17 4e dc 11 17 8f 40 20 ab 9b 2b ed d9 2a b2 Data Ascii: 6000 >fu=KM(c1dY52@Ve5?vN@ +*
Feb 15, 2024 01:11:13.083487034 CET	1286	IN	Data Raw: 2b 33 c2 c3 dd c3 c3 23 dc 3d ae ff f3 ff fd 1f bf dd 5f 0e 75 50 e7 c7 fb 77 37 e5 f1 e6 9b 7f fe a7 00 fd fc 76 5f e6 05 fb 4c be 1f ca 4b 1e 6c f7 79 d3 96 97 77 37 0f 97 5d b4 bc 09 de ca 10 97 ea 52 97 df fc 70 ba af 8e c1 4f db a6 2c 8f bf Data Ascii: +3#=_uPw7v_LKlyw7]RpO,}K?q?n=w9T<"r.@.;O#(/2K]A"\|w*"!y]Q~eDAu.U^G6wi)Uw%!Qv
Feb 15, 2024 01:11:13.083525896 CET	1286	IN	Data Raw: c2 dd 97 f5 f9 4e 74 24 c2 68 62 a3 12 b5 1f aa 73 84 4d c9 f1 84 78 71 e6 3e e7 45 d1 a0 f1 9a 76 4a 62 9a 51 7a 73 c8 6b 45 1d aa e3 1e e9 e0 85 43 87 45 1d 22 05 7b a8 9f 00 d9 e9 79 44 c8 cf a7 3a 38 e1 8c e0 01 e7 05 04 22 30 10 24 cf c5 e5 Data Ascii: Nt$hbsMxq>EvJbQzskECE"{yD:8"0$IE'yaeDHE0> Y>lD"cznPVQD:bJPrwMc{b\|Gq6C`X(QO0kiC)#z{Eg6LqioC5:F
Feb 15, 2024 01:11:13.083564997 CET	1286	IN	Data Raw: 28 92 cc 0a 25 8a e1 03 4d 22 16 af 00 cb 84 88 83 3b 05 31 2a 1b d1 98 88 c4 2b 58 99 58 8b 4c a6 78 1e 54 84 4f 9f 58 e8 f4 1c 63 fd cc 2b ec a0 99 1e 0c eb 83 29 f2 fb ef 94 ee 4f 52 94 7e 4a 1c 2d 39 90 27 2a fb bb 43 59 54 79 f0 a6 77 b4 c8 Data Ascii: (%M";1+XXLxTOXc+)OR~J-9'CYTywD(Df\|-Z-\|TRL^vPI\e*xUV5Qt]]vw:8V#DR)Wj8A7PzIDU)?gJ
Feb 15, 2024 01:11:13.083602905 CET	1286	IN	Data Raw: a4 b5 c2 ab 0e 23 ad 15 5e 9e 18 b4 56 64 e5 62 a4 b5 22 4b 1c 23 ad 15 59 0b f1 b2 56 08 d2 32 45 77 0f 5b 2b 94 6e 58 2b a2 75 9a b5 22 8a a5 59 2b a2 39 9a b5 22 8a a2 59 2b a2 09 9a b5 22 4d ad 59 2b d2 b2 9a b5 22 4d a7 59 2b d2 36 9a b5 a2 Data Ascii: #^Vdb"K#YV2Ew[+nX+u"Y+9"Y+"MY+"MY+6M[+*lZQqVD"nkE4`lHnZIX+"Y""VD4ZViW^hj+h]gv6W5KE",nQ7~Y<u:U{9A
Feb 15, 2024 01:11:13.083642006 CET	1286	IN	Data Raw: 2d f6 eb f1 f5 15 21 b9 2e 64 9f 17 a7 47 23 4f e8 dc b9 29 77 65 d3 e2 1b 1a 1f 10 d1 e8 70 62 87 8f f0 57 a4 7d 8a a0 25 ca e4 cc bb da 0e f8 ce 93 36 2a bb 73 7e 2c cc e1 54 ba e7 e9 0e 6e 47 e9 ca 14 7c a3 ce 93 59 8e de 9f 47 6a 44 26 c9 93 Data Ascii: -!.dG#O)wepbW}%6*s~,TnG\|YGjD&\CD/j5J6JdjflfYm'sqnGs.AqCk/odO{NAQ/{U^OK(io(\])wDBzA5>CLh,X#r
Feb 15, 2024 01:11:13.083679914 CET	1286	IN	Data Raw: 35 ce 09 ff cc 91 61 9a f5 0e 1f fe 4c bd 3a ac 21 af 03 fc 94 ca 87 92 f8 78 94 55 cd 21 4c 33 f4 1f 73 09 b7 55 b3 ad cb 60 8b b2 e6 af 83 ed 27 f2 a7 41 5e 72 3c e3 de 1a f1 1a 29 ce 08 ab cd df 4e d5 f1 dd 6b 52 2b ea 3c ce e2 25 72 08 e7 fb Data Ascii: 5aL:!xU!L3sU`'A^r<)NkR+<%rxy3qF#\|ZL[\|JV/p%uF+5>NHpiwP?PE4I4^WQtdCGD>FV>@=d+Fr:Owd
Feb 15, 2024 01:11:13.083719969 CET	1286	IN	Data Raw: 2c 5c 2e c3 d5 44 ad b4 31 6c 23 5c 7e 83 b6 97 40 bc 34 22 f4 04 07 07 6c 5c 85 31 c3 35 95 a4 11 40 a4 79 5a 8c 64 db 68 5c 1f e6 a1 a1 da ac c2 55 cd c9 56 01 c4 f4 39 ab db e0 5c b0 56 ce 47 47 c7 e2 94 d5 55 27 37 5c 55 69 e1 c2 52 57 4d 8b Data Ascii: ,\.D1l#\~@4"l\15@yZdh\UV9\VGGU'7\UiRWMuBszISh\|fG7d0*8F6W6u\|fFI0+F'(GjG-=>+'<^Y/O\^'yvSZ91'77zen'\|fSe
Feb 15, 2024 01:11:13.083758116 CET	1286	IN	Data Raw: 9c 4e e0 7e 4c a2 b1 cc 23 4a 35 51 09 4a d3 79 ba 4c 37 60 1c 6b 9d e9 d2 a8 88 c9 09 95 0c 4d 95 e7 14 3c 89 f0 7d 54 2a 91 3e c4 55 c9 f8 c7 b9 03 33 32 8a ee 91 80 48 bf 30 4a 40 e0 b7 21 a5 01 4a 79 37 84 87 ca ca f5 9e c0 db 3c 3c ac 55 d9 Data Ascii: N~L#J5QJyL7`kM<}T*>U32H0J@!Jy7<<Uv$,LC)](r:vc"e_K+P6{WU$j0?`_G{^/=7\_2B?y]i`PGt\5bS{}GejyKZo
Feb 15, 2024 01:11:13.083796978 CET	1286	IN	Data Raw: e4 c5 c3 ab e5 cf 47 34 3f 2b 6a 48 1b ba 95 68 24 61 9f 16 b8 82 3c 99 41 18 d3 c9 e5 41 02 2e fc f7 d0 bd f5 c7 24 85 b6 44 d3 00 fd d7 77 71 f6 a0 63 f3 ee f5 e4 b5 da d5 ad aa e2 aa f5 97 d3 93 f6 b1 ba 6c f7 4f 8a 2b 9a 69 23 2e 85 71 b7 26 Data Ascii: G4?+jHh$a<AA.$DwqclO+i#.q&5-$&\|j_rMUf4o$ss(Ct'G'+R9Q-!@#l4rs!#VXEv:6dYf?T]>qm@{z3xDxHyL
Feb 15, 2024 01:11:13.199460030 CET	1286	IN	Data Raw: 47 bc 61 b9 d7 41 27 fb 38 23 64 2b 7b 63 ec e0 37 d6 61 a1 63 17 3e e3 b9 db 94 99 c3 9b c4 94 a6 25 3c d5 43 4f 18 68 54 a1 6e e2 5c b5 c6 b3 cb fd e4 2e 70 89 17 5b 3d 16 d3 ce f2 84 b3 ba d1 4f 16 06 15 19 6a 86 80 1c 23 17 97 11 e6 9d b8 d3 Data Ascii: GaA'8#d+{c7ac>%<COhTn\.p[=Oj#qMeG4K0H?Bk8S&q!07:@'tb(2T2rKjGmXiC)1JTh4/z]``!f%bY7bV`WK;
Feb 15, 2024 01:11:13.548068047 CET	494	OUT	GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff HTTP/1.1 Host: suez.fromthemachine.org Connection: keep-alive Origin: http://suez.fromthemachine.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 01:11:13.677910089 CET	1158	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 15 Feb 2024 00:09:08 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 187 Connection: keep-alive access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output x-content-type-options: nosniff x-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff x-ipfs-pop: ipfs-bank5-dc13 timing-allow-origin: * X-IPFS-LB-POP: gateway-bank2-dc13 Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 4d 64 2e 77 6f 66 66 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 4d 64 2e 77 6f 66 66 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Md.woff: no link named "ATTAleckSans_W_Md.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	209.94.90.1	80	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 01:11:13.109761000 CET	461	OUT	GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css HTTP/1.1 Host: suez.fromthemachine.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 01:11:13.412377119 CET	1123	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 15 Feb 2024 00:08:09 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 160 Connection: keep-alive access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output x-content-type-options: nosniff x-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css x-ipfs-pop: ipfs-bank5-dc13 timing-allow-origin: * X-IPFS-LB-POP: gateway-bank1-dc13 Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 63 73 73 2f 73 74 79 6c 65 73 2e 63 73 73 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 63 73 73 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/css/styles.css: no link named "css" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Feb 15, 2024 01:11:13.547801018 CET	494	OUT	GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff HTTP/1.1 Host: suez.fromthemachine.org Connection: keep-alive Origin: http://suez.fromthemachine.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 01:11:13.675182104 CET	1158	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 15 Feb 2024 00:08:09 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 187 Connection: keep-alive access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output x-content-type-options: nosniff x-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff x-ipfs-pop: ipfs-bank2-dc13 timing-allow-origin: * X-IPFS-LB-POP: gateway-bank1-dc13 Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 52 67 2e 77 6f 66 66 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 41 54 54 41 6c 65 63 6b 53 61 6e 73 5f 57 5f 52 67 2e 77 6f 66 66 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/ATTAleckSans_W_Rg.woff: no link named "ATTAleckSans_W_Rg.woff" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Feb 15, 2024 01:11:14.020984888 CET	504	OUT	GET /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico HTTP/1.1 Host: suez.fromthemachine.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 15, 2024 01:11:14.151252985 CET	1125	IN	HTTP/1.1 404 Not Found Server: openresty Date: Thu, 15 Feb 2024 00:08:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 165 Connection: keep-alive access-control-allow-headers: Content-Type access-control-allow-headers: Range access-control-allow-headers: User-Agent access-control-allow-headers: X-Requested-With access-control-allow-methods: GET access-control-allow-methods: HEAD access-control-allow-methods: OPTIONS access-control-allow-origin: * access-control-expose-headers: Content-Length access-control-expose-headers: Content-Range access-control-expose-headers: X-Chunked-Output access-control-expose-headers: X-Ipfs-Path access-control-expose-headers: X-Ipfs-Roots access-control-expose-headers: X-Stream-Output x-content-type-options: nosniff x-ipfs-path: /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico x-ipfs-pop: ipfs-bank5-dc13 timing-allow-origin: * X-IPFS-LB-POP: gateway-bank1-dc13 Data Raw: 66 61 69 6c 65 64 20 74 6f 20 72 65 73 6f 6c 76 65 20 2f 69 70 66 73 2f 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3a 20 6e 6f 20 6c 69 6e 6b 20 6e 61 6d 65 64 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 75 6e 64 65 72 20 51 6d 63 75 48 4c 45 41 72 77 38 5a 6d 4d 51 39 44 59 37 4d 4d 31 61 41 55 7a 67 78 48 79 66 4d 64 41 69 37 4d 4a 50 36 58 38 68 6f 71 4c 0a Data Ascii: failed to resolve /ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/favicon.ico: no link named "favicon.ico" under QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL
Feb 15, 2024 01:11:59.173329115 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	209.94.90.1	80	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 15, 2024 01:11:58.061748981 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	142.250.105.113	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:11 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:11 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-h6NKlJYNSBh5pvhynfs-VA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 15 Feb 2024 00:11:11 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6253 X-Daystart: 58271 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:11 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 35 33 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 35 38 32 37 31 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6253" elapsed_seconds="58271"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-15 00:11:11 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-15 00:11:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49730	74.125.138.84	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:11 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:11 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-15 00:11:11 UTC	1798	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 15 Feb 2024 00:11:11 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-Zc_VxSsdj7-gdqmvX9iOcQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmLw1JBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQBiIW6O-Wu3rmMTOHD-TSoAnZgXcQ" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:11 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-15 00:11:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:13 UTC	628	OUT	GET /static/siam//en/halo_c/images/logos/att-logo.svg HTTP/1.1 Host: signin.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://suez.fromthemachine.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:14 UTC	430	IN	HTTP/1.1 200 OK accept-ranges: bytes connection: close content-length: 8369 content-type: image/svg+xml date: Wed, 14 Feb 2024 21:04:14 GMT etag: "20b1-60a25d80c0cc0" last-modified: Wed, 15 Nov 2023 00:18:35 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" access-control-allow-origin: * x-frame-options: SAMEORIGIN apser: p579 age: 11219 strict-transport-security: max-age=31536000; includeSubDomains; preload iam_on: 605
2024-02-15 00:11:14 UTC	8369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 39 38 42 44 32 38 44 2d 32 35 45 45 2d 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg viewBox="0 0 61 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 54.1 (76490) - https://sketchapp.com --> <title>B98BD28D-25EE-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:14 UTC	386	OUT	GET /static/siam//en/halo_c/images/logos/att-logo.svg HTTP/1.1 Host: signin.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:14 UTC	430	IN	HTTP/1.1 200 OK accept-ranges: bytes connection: close content-length: 8369 content-type: image/svg+xml date: Wed, 14 Feb 2024 21:04:14 GMT etag: "20b1-60a25d80c0cc0" last-modified: Wed, 15 Nov 2023 00:18:35 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" access-control-allow-origin: * x-frame-options: SAMEORIGIN apser: p579 age: 11220 strict-transport-security: max-age=31536000; includeSubDomains; preload iam_on: 605
2024-02-15 00:11:14 UTC	8369	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 31 20 32 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 73 6b 65 74 63 68 74 6f 6f 6c 20 35 34 2e 31 20 28 37 36 34 39 30 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 61 70 70 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 39 38 42 44 32 38 44 2d 32 35 45 45 2d 34 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg viewBox="0 0 61 25" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: sketchtool 54.1 (76490) - https://sketchapp.com --> <title>B98BD28D-25EE-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-15 00:11:16 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=155650 Date: Thu, 15 Feb 2024 00:11:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	184.31.50.93	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:16 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-15 00:11:16 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=155675 Date: Thu, 15 Feb 2024 00:11:16 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-15 00:11:16 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:27 UTC	1627	OUT	GET /scripts/att_common.js HTTP/1.1 Host: signin-static-js.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_perc_100000_ol_0_mul_1_app-3Aa75ea7b2824f5aea_1; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQXCXRF6Odg6ONAQAAvZcaqgso2hjQAXnnhqmr1YPkZuknOa6V/5DqWK9e6nyZbeQe7JF6iiJGF5ovXWsPT00HX84Nqa/2sdLY5bJtiGQEbWIwNn5wfSMHONAwFqW4Hht2lfK8+QqYTj/tiY9MMg30KkLAJI8D2nYl3P7ks9CLX4fa3Zw9Ty0gyO/peDQI052SjKA8qzAWJF2a1uM6rpaQFofsvaJ2qVw7Ra9wZmr74/MXf4hTRejMqnXVqeotlZYHZV4+unQO+W4aj7KjyxeK2ZVOVdkTTdaX6sRN4jR8wuHerKiBbj9CpuDvN4mE85w1Nm9+QAN/6udOTaSk95fReUrtSrh2ec/ub+m15HTMrsikoLTNdeE=~-1~-1~-1; bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; dtPC=19$355885995_830h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957686009\|1707955886003
2024-02-15 00:11:27 UTC	591	IN	HTTP/1.1 200 OK connection: close content-length: 310870 content-type: application/javascript; charset=UTF-8 date: Thu, 15 Feb 2024 00:11:27 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-frame-options: SAMEORIGIN cache-control: no-cache, no-store, must-revalidate expires: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache iam_on: 605 Set-Cookie: Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; Max-Age=1577847600; Domain=att.com; Path=/; Secure
2024-02-15 00:11:27 UTC	7600	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 57 28 52 29 7b 76 61 72 20 6a 67 3d 7b 7d 2c 6a 69 3d 7b 7d 3b 76 61 72 20 6a 6b 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6a 71 3d 54 79 70 65 45 72 72 6f 72 2c 6a 4a 3d 4f 62 6a 65 63 74 2c 6a 70 3d 52 65 67 45 78 70 2c 6a 62 3d 4e 75 6d 62 65 72 2c 6a 7a 3d 53 74 72 69 6e 67 2c 6a 44 3d 41 72 72 61 79 2c 6a 6a 3d 6a 4a 2e 62 69 6e 64 2c 6a 47 3d 6a 4a 2e 63 61 6c 6c 2c 6a 55 3d 6a 47 2e 62 69 6e 64 28 6a 6a 2c 6a 47 29 2c 69 3d 6a 4a 2e 61 70 70 6c 79 2c 6a 77 3d 6a 55 28 69 29 2c 4f 3d 5b 5d 2e 70 75 73 68 2c 6f 3d 5b 5d 2e 70 6f 70 2c 45 3d 5b 5d 2e 73 6c 69 63 65 2c 49 3d 5b 5d 2e 73 70 6c 69 63 65 2c 6d 3d 5b 5d 2e 6a 6f 69 6e 2c 79 3d 5b 5d 2e 6d 61 70 2c 77 3d 6a 55 28 4f 29 2c 53 3d 6a 55 28 45 29 2c 68 3d 6a Data Ascii: (function W(R){var jg={},ji={};var jk=ReferenceError,jq=TypeError,jJ=Object,jp=RegExp,jb=Number,jz=String,jD=Array,jj=jJ.bind,jG=jJ.call,jU=jG.bind(jj,jG),i=jJ.apply,jw=jU(i),O=[].push,o=[].pop,E=[].slice,I=[].splice,m=[].join,y=[].map,w=jU(O),S=jU(E),h=j
2024-02-15 00:11:27 UTC	106	IN	Data Raw: 66 58 32 4c 79 6a 68 43 59 46 67 42 53 45 63 22 2c 22 2d 51 6b 5a 72 6f 6c 4f 42 51 22 2c 22 32 76 32 35 55 69 44 6a 30 45 33 4d 42 67 22 2c 22 70 6f 77 22 2c 22 43 77 35 50 70 64 51 78 64 61 45 4c 67 44 33 4c 4a 43 34 22 2c 22 44 4c 7a 77 48 7a 4f 4b 35 51 2d 37 46 2d 34 46 6d 70 38 51 74 6b 76 32 76 2d 63 22 2c 22 Data Ascii: fX2LyjhCYFgBSEc","-QkZrolOBQ","2v25UiDj0E3MBg","pow","Cw5PpdQxdaELgD3LJC4","DLzwHzOK5Q-7F-4Fmp8Qtkv2v-c","
2024-02-15 00:11:27 UTC	8191	IN	Data Raw: 38 34 6d 4b 59 6c 62 6f 6b 33 2d 77 64 64 49 53 73 67 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 71 41 73 6b 78 37 4a 70 45 4b 30 59 2d 6d 72 4c 59 53 76 51 53 73 4d 6f 5a 55 38 22 2c 22 62 61 36 65 59 68 50 54 6e 51 7a 30 22 2c 22 44 73 72 6f 52 31 47 33 2d 41 22 2c 22 55 6d 39 30 67 4c 4d 53 4a 4f 42 6c 77 53 53 44 57 44 47 52 4e 64 30 6c 61 47 38 42 68 4c 6f 43 22 2c 22 66 6f 66 35 65 42 2d 63 36 55 44 4e 45 34 41 54 6d 38 73 68 74 57 57 39 6c 38 57 5a 44 47 43 2d 6d 2d 47 55 6c 6e 6a 64 61 4b 4d 58 57 58 53 49 79 6e 63 2d 59 6d 6f 36 4d 78 4b 63 6a 4f 32 4c 67 79 51 22 2c 22 6f 39 72 6b 47 41 71 46 37 41 7a 53 44 51 22 2c 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 2c 22 77 43 Data Ascii: 84mKYlbok3-wddISsg","undefined","onreadystatechange","qAskx7JpEK0Y-mrLYSvQSsMoZU8","ba6eYhPTnQz0","DsroR1G3-A","Um90gLMSJOBlwSSDWDGRNd0laG8BhLoC","fof5eB-c6UDNE4ATm8shtWW9l8WZDGC-m-GUlnjdaKMXWXSIync-Ymo6MxKcjO2LgyQ","o9rkGAqF7AzSDQ","querySelectorAll","wC
2024-02-15 00:11:27 UTC	2	IN	Data Raw: 37 32 Data Ascii: 72
2024-02-15 00:11:27 UTC	8191	IN	Data Raw: 35 7a 6a 64 52 79 43 75 63 48 66 6a 36 48 46 31 71 57 4b 69 4f 77 69 49 53 6f 55 52 6c 6d 55 58 51 6e 33 55 6a 45 62 71 49 5a 30 49 52 46 76 41 7a 56 54 56 75 56 4a 33 31 37 47 65 59 54 4e 4a 6b 70 72 33 31 53 7a 7a 62 74 61 34 31 54 34 4c 5f 43 6a 31 44 54 79 47 78 32 2d 4e 61 31 35 43 61 33 6d 6c 76 51 4e 68 47 70 71 57 78 63 38 5f 46 74 67 75 44 4d 6c 71 55 44 38 38 58 35 31 65 41 6d 42 57 78 4b 52 73 59 76 76 30 30 34 38 46 36 34 64 79 6c 41 6f 62 33 6a 30 43 59 4e 73 66 69 6a 38 41 4d 59 37 66 34 4c 61 6c 4d 51 77 79 41 58 49 77 78 38 6a 51 6c 7a 73 62 66 58 6d 2d 6f 6b 36 43 32 54 32 49 39 6e 6b 45 65 66 78 54 75 67 6d 50 71 5a 45 71 79 6a 79 53 69 4f 43 54 7a 6c 79 58 52 57 5f 4c 36 6e 4c 39 46 4b 77 65 37 74 6e 4c 64 70 5f 45 4a 30 7a 5f 5f 46 61 Data Ascii: 5zjdRyCucHfj6HF1qWKiOwiISoURlmUXQn3UjEbqIZ0IRFvAzVTVuVJ317GeYTNJkpr31Szzbta41T4L_Cj1DTyGx2-Na15Ca3mlvQNhGpqWxc8_FtguDMlqUD88X51eAmBWxKRsYvv0048F64dylAob3j0CYNsfij8AMY7f4LalMQwyAXIwx8jQlzsbfXm-ok6C2T2I9nkEefxTugmPqZEqyjySiOCTzlyXRW_L6nL9FKwe7tnLdp_EJ0z__Fa
2024-02-15 00:11:27 UTC	8188	IN	Data Raw: 63 33 35 57 6d 36 55 6c 31 79 7a 22 2c 22 33 65 76 61 5a 47 57 6c 70 32 76 4e 65 59 39 35 6a 37 34 22 2c 22 63 2d 37 38 55 57 53 6b 2d 42 6e 44 42 50 51 22 2c 22 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 22 2c 22 56 48 31 54 75 5f 77 44 58 71 52 63 6c 69 37 6e 22 2c 22 4b 78 45 38 79 62 42 36 48 4d 63 46 33 6e 47 4e 61 6b 75 71 22 2c 22 74 6b 56 69 67 2d 45 4b 53 64 51 22 2c 22 71 4b 43 45 61 77 65 50 68 45 75 4a 57 49 64 54 71 64 74 63 6e 54 65 35 78 36 37 33 22 2c 22 62 35 50 58 61 7a 57 51 32 55 32 30 64 76 38 7a 74 41 22 2c 22 37 48 64 32 78 65 55 47 63 36 78 4b 77 6a 61 66 22 2c 22 68 65 44 79 42 54 71 63 34 44 66 45 22 2c 22 72 6f 75 6e 64 22 2c 22 6e 6d 35 65 68 59 70 53 4e 62 4d 36 67 69 6d 74 53 67 22 2c 22 63 61 74 63 68 22 2c 22 6e 7a 51 5a Data Ascii: c35Wm6Ul1yz","3evaZGWlp2vNeY95j74","c-78UWSk-BnDBPQ","OffscreenCanvas","VH1Tu_wDXqRcli7n","KxE8ybB6HMcF3nGNakuq","tkVig-EKSdQ","qKCEawePhEuJWIdTqdtcnTe5x673","b5PXazWQ2U20dv8ztA","7Hd2xeUGc6xKwjaf","heDyBTqc4DfE","round","nm5ehYpSNbM6gimtSg","catch","nzQZ
2024-02-15 00:11:27 UTC	8191	IN	Data Raw: 45 22 2c 22 55 31 74 5a 76 63 6b 4d 41 37 64 48 33 6c 5f 76 44 58 75 71 66 65 64 44 22 2c 22 63 6f 73 22 2c 22 37 66 79 6c 50 47 48 42 74 67 7a 4a 53 64 64 78 32 71 52 6c 33 6d 48 6d 32 59 76 45 22 2c 22 6f 70 65 6e 22 2c 22 4e 56 68 30 69 4c 63 43 65 6f 64 50 6a 69 72 39 56 58 6e 45 54 51 22 2c 22 71 30 73 58 2d 66 42 4f 44 4b 6c 5f 75 6e 4b 31 43 48 65 73 50 4a 6b 58 22 2c 22 4b 61 61 67 51 79 72 57 5f 56 66 45 52 61 6f 57 36 4b 45 22 2c 22 56 69 67 44 6a 59 64 44 5a 39 34 46 30 56 79 54 66 67 22 2c 22 76 34 6d 46 65 7a 32 66 72 67 22 2c 22 5f 48 6c 69 69 61 6f 38 47 5a 39 6b 39 44 5f 75 4a 67 65 6a 4d 77 22 2c 22 30 34 61 7a 50 41 53 67 6e 77 5f 48 4c 4c 30 22 2c 22 64 6d 56 6a 77 4f 67 78 63 71 4a 45 68 53 2d 67 22 2c 22 6b 54 67 43 6d 64 4a 4e 54 4e Data Ascii: E","U1tZvckMA7dH3l_vDXuqfedD","cos","7fylPGHBtgzJSddx2qRl3mHm2YvE","open","NVh0iLcCeodPjir9VXnETQ","q0sX-fBODKl_unK1CHesPJkX","KaagQyrW_VfERaoW6KE","VigDjYdDZ94F0VyTfg","v4mFez2frg","_Hliiao8GZ9k9D_uJgejMw","04azPASgnw_HLL0","dmVjwOgxcqJEhS-g","kTgCmdJNTN
2024-02-15 00:11:27 UTC	8191	IN	Data Raw: 33 2c 32 32 35 5d 2c 5b 32 2c 36 38 5d 2c 5b 32 2c 37 39 5d 5d 2c 5b 5b 30 2c 33 39 5d 2c 5b 32 2c 33 34 5d 2c 5b 34 2c 34 34 5d 2c 5b 39 2c 31 39 31 5d 2c 5b 31 2c 36 38 5d 2c 5b 35 2c 33 35 5d 2c 5b 36 2c 35 31 5d 2c 5b 35 2c 31 31 31 5d 2c 5b 39 2c 32 37 5d 2c 5b 38 2c 38 38 5d 2c 5b 38 2c 35 38 5d 2c 5b 32 2c 38 39 5d 2c 5b 33 2c 33 31 5d 2c 5b 33 2c 38 37 5d 2c 5b 33 2c 36 39 5d 2c 5b 38 2c 31 38 31 5d 2c 5b 37 2c 36 34 5d 2c 5b 30 2c 31 37 34 5d 2c 5b 31 2c 32 30 33 5d 2c 5b 36 2c 31 30 5d 2c 5b 37 2c 32 33 38 5d 2c 5b 39 2c 34 31 5d 2c 5b 39 2c 31 31 35 5d 2c 5b 37 2c 31 37 5d 2c 5b 33 2c 32 31 37 5d 2c 5b 31 2c 37 5d 2c 5b 34 2c 38 5d 2c 5b 32 2c 37 36 5d 2c 5b 35 2c 31 30 39 5d 2c 5b 36 2c 32 32 36 5d 2c 5b 34 2c 32 5d 2c 5b 34 2c 32 32 34 5d 2c Data Ascii: 3,225],[2,68],[2,79]],[[0,39],[2,34],[4,44],[9,191],[1,68],[5,35],[6,51],[5,111],[9,27],[8,88],[8,58],[2,89],[3,31],[3,87],[3,69],[8,181],[7,64],[0,174],[1,203],[6,10],[7,238],[9,41],[9,115],[7,17],[3,217],[1,7],[4,8],[2,76],[5,109],[6,226],[4,2],[4,224],
2024-02-15 00:11:27 UTC	2	IN	Data Raw: 2c 31 Data Ascii: ,1
2024-02-15 00:11:27 UTC	8191	IN	Data Raw: 32 5d 2c 5b 37 2c 39 31 5d 2c 5b 33 2c 31 38 36 5d 2c 5b 36 2c 35 32 5d 2c 5b 30 2c 31 33 37 5d 2c 5b 33 2c 31 37 34 5d 2c 5b 33 2c 36 30 5d 2c 5b 37 2c 37 32 5d 2c 5b 39 2c 38 5d 2c 5b 38 2c 31 37 5d 2c 5b 36 2c 31 30 32 5d 2c 5b 32 2c 32 33 37 5d 2c 5b 35 2c 31 37 33 5d 2c 5b 34 2c 37 37 5d 2c 5b 35 2c 33 39 5d 2c 5b 31 2c 35 31 5d 2c 5b 39 2c 31 38 34 5d 2c 5b 39 2c 39 5d 2c 5b 33 2c 32 32 33 5d 2c 5b 36 2c 31 35 39 5d 2c 5b 34 2c 35 30 5d 2c 5b 39 2c 31 33 35 5d 2c 5b 33 2c 32 39 5d 2c 5b 31 2c 37 38 5d 2c 5b 37 2c 35 38 5d 2c 5b 33 2c 32 33 33 5d 2c 5b 33 2c 32 33 35 5d 2c 5b 34 2c 31 36 38 5d 2c 5b 34 2c 32 31 34 5d 2c 5b 32 2c 31 35 30 5d 2c 5b 32 2c 32 33 34 5d 2c 5b 38 2c 32 32 39 5d 2c 5b 38 2c 31 30 30 5d 2c 5b 39 2c 31 39 33 5d 2c 5b 33 2c 32 Data Ascii: 2],[7,91],[3,186],[6,52],[0,137],[3,174],[3,60],[7,72],[9,8],[8,17],[6,102],[2,237],[5,173],[4,77],[5,39],[1,51],[9,184],[9,9],[3,223],[6,159],[4,50],[9,135],[3,29],[1,78],[7,58],[3,233],[3,235],[4,168],[4,214],[2,150],[2,234],[8,229],[8,100],[9,193],[3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49765	172.67.20.158	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:29 UTC	539	OUT	GET /qscripts/quantum-att.js HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:30 UTC	619	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:30 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding etag: W/"170791371961416976407811331691740804464" Cache-Control: public, max-age=300, stale-while-revalidate=21600, stale-if-error=21600 access-control-allow-origin: * access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept x-content-type-options: no-sniff strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 75 Server: cloudflare CF-RAY: 855955794fad677c-ATL alt-svc: h3=":443"; ma=86400
2024-02-15 00:11:30 UTC	750	IN	Data Raw: 37 64 34 36 0d 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 61 74 74 20 34 38 34 62 30 61 32 61 33 34 30 36 64 33 37 65 34 37 37 61 31 63 32 39 35 61 64 66 66 62 65 62 32 33 31 32 34 34 62 65 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 50 61 6b 6f Data Ascii: 7d46/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att 484b0a2a3406d37e477a1c295adffbeb231244be // Copyright Pako
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 73 79 6d 62 6f 6c 5f 5f 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 3b 0a 76 61 72 20 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 5f 7a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 5f 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 71 75 65 75 65 4d 69 63 72 6f 74 61 73 6b 3b 0a 76 61 72 20 50 72 6f 6d 69 73 65 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 5f 7a 6f 6e 65 5f 73 79 6d 62 6f 6c 5f 5f 50 72 6f 6d 69 73 65 27 5d 20 7c 7c 20 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 3b 20 76 61 72 20 78 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: symbol__MutationObserver'] \|\| window.MutationObserver;var queueMicrotask = window['__zone_symbol__queueMicrotask'] \|\| window.queueMicrotask;var Promise = window['__zone_symbol__Promise'] \|\| window.Promise; var x;function aa(a){var b=0;return function(){
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 76 61 72 20 70 61 3d 6f 61 28 74 68 69 73 29 2c 71 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 Data Ascii: ar b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var pa=oa(this),qa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 68 69 73 2e 42 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 6e 75 6c 6c 21 3d 67 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 77 61 28 67 29 3a 0a 74 68 69 73 2e 64 61 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 4f 28 6b 29 3b 72 65 74 75 72 6e 7d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 68 3f 74 68 69 73 2e 45 61 28 68 2c 67 29 3a 74 68 69 Data Ascii: his.Ba(g);else{a:switch(typeof g){case "object":var h=null!=g;break a;case "function":h=!0;break a;default:h=!1}h?this.wa(g):this.da(g)}};b.prototype.wa=function(g){var h=void 0;try{h=g.then}catch(k){this.O(k);return}"function"==typeof h?this.Ea(h,g):thi
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 6f 6e 65 3b 6e 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6e 2e 76 61 6c 75 65 29 2e 55 63 28 68 2c 6b 29 7d 29 7d 3b 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 7a 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6b 2e 64 6f 6e 65 3f 64 28 5b 5d 29 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 71 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 5b 71 5d 3d 74 3b 70 2d 2d 3b 30 3d 3d 70 26 26 6c 28 72 29 7d 7d 76 61 72 20 72 3d 5b 5d 2c 70 3d 30 3b 64 6f 20 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 70 2b 2b 2c 64 28 6b 2e 76 61 6c 75 65 29 2e 55 63 28 6d 28 72 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 Data Ascii: one;n=l.next())d(n.value).Uc(h,k)})};b.all=function(g){var h=z(g),k=h.next();return k.done?d([]):new b(function(l,n){function m(q){return function(t){r[q]=t;p--;0==p&&l(r)}}var r=[],p=0;do r.push(void 0),p++,d(k.value).Uc(m(r.length-1),n),k=h.next();while
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 52 3d 7b 22 72 65 74 75 72 6e 22 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 69 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 29 7b 61 2e 67 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 62 3b 61 2e 4a 3d 63 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 61 2e 4a 3d 62 7c 7c 30 3b 76 61 72 20 63 3d 61 2e 52 2e 6b 67 3b 61 2e 52 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 7a 61 3b 74 68 69 73 2e 42 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 2c 62 29 Data Ascii: =function(a){this.R={"return":a};this.g=this.ia};function F(a,b,c){a.g=c;return{value:b}}function G(a){a.g=0}function Ca(a,b,c){a.g=b;a.J=c\|\|0}function Da(a,b){a.J=b\|\|0;var c=a.R.kg;a.R=null;return c}function Ea(a){this.g=new za;this.B=a}function Fa(a,b)
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 67 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 66 2c 65 29 7d 66 28 61 2e 6e 65 78 74 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 28 6e 65 77 20 49 61 28 6e 65 77 20 45 61 28 61 29 29 29 7d 76 61 72 20 4d 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 4f 62 6a 65 Data Ascii: alue):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})}function I(a){return Ja(new Ia(new Ea(a)))}var Ma="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Obje
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 72 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 4e 61 28 74 68 69 73 2c 62 2c 22 69 6e 63 6c 75 64 65 73 22 29 2e 69 6e 64 65 78 4f 66 28 62 2c 63 7c 7c 30 29 7d 7d 29 3b 0a 72 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 4e 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f Data Ascii: a regular expression");return a+""}ra("String.prototype.includes",function(a){return a?a:function(b,c){return-1!==Na(this,b,"includes").indexOf(b,c\|\|0)}});ra("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=Na(this,b,"endsWith");vo
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 2c 34 35 2c 37 39 2c 36 35 2c 36 39 2c 38 30 5d 29 2c 53 61 3d 4f 61 28 5b 38 32 2c 38 33 2c 36 35 2c 34 35 2c 37 39 2c 36 35 2c 36 39 2c 38 30 2c 34 35 2c 35 30 2c 35 33 2c 35 34 5d 29 2c 54 61 3d 4f 61 28 5b 36 35 2c 35 30 2c 35 33 2c 35 34 2c 36 37 2c 36 36 2c 36 37 5d 29 2c 55 61 3d 2f 5c 73 2a 2c 5c 73 2a 2f 2c 56 61 3d 7b 75 74 6d 5f 73 6f 75 72 63 65 3a 2d 35 36 2c 75 74 6d 5f 6d 65 64 69 75 6d 3a 2d 35 37 2c 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3a 2d 35 38 2c 75 74 6d 5f 74 65 72 6d 3a 2d 35 39 2c 75 74 6d 5f 63 6f 6e 74 65 6e 74 3a 2d 36 30 2c 75 74 6d 5f 69 64 3a 2d 36 31 7d 2c 57 61 3d 2f 71 75 61 6e 74 75 6d 2f 69 2c 58 61 3d 2f 63 76 76 7c 63 76 63 7c 6d 6f 6e 74 68 7c 79 65 61 72 7c 62 69 72 74 68 7c 63 69 64 7c 63 73 63 7c 63 76 6e 7c 73 65 Data Ascii: ,45,79,65,69,80]),Sa=Oa([82,83,65,45,79,65,69,80,45,50,53,54]),Ta=Oa([65,50,53,54,67,66,67]),Ua=/\s,\s/,Va={utm_source:-56,utm_medium:-57,utm_campaign:-58,utm_term:-59,utm_content:-60,utm_id:-61},Wa=/quantum/i,Xa=/cvv\|cvc\|month\|year\|birth\|cid\|csc\|cvn\|se
2024-02-15 00:11:30 UTC	1369	IN	Data Raw: 6b 65 79 26 26 62 2e 6e 65 77 56 61 6c 75 65 26 26 61 2e 4a 28 4a 53 4f 4e 2e 70 61 72 73 65 28 62 2e 6e 65 77 56 61 6c 75 65 29 29 7d 29 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 51 45 76 65 6e 74 43 68 61 6e 6e 65 6c 22 29 7d 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 64 62 28 29 7b 74 68 69 73 2e 44 3d 74 68 69 73 2e 4c 66 3d 6e 75 6c 6c 7d 64 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 4c 66 3b 72 65 74 75 72 6e 20 61 3f 61 3a 74 68 69 73 2e 4c 66 3d 74 68 69 73 2e 4b 28 29 7d 3b 64 62 2e 70 72 6f 74 Data Ascii: key&&b.newValue&&a.J(JSON.parse(b.newValue))});window.addEventListener("pagehide",function(){window.localStorage.removeItem("QEventChannel")})};function db(){this.D=this.Lf=null}db.prototype.ma=function(){var a=this.Lf;return a?a:this.Lf=this.K()};db.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49764	54.84.108.222	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:29 UTC	709	OUT	GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1707955888931 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:30 UTC	821	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:30 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1476 Connection: close X-TID: hpOU3+TOT3s= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.att.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcscanary-prod-va6-1-v068-03e773a1f.edge-va6.demdex.com 2 ms set-cookie: demdex=03880614951140241342725460080740716815; Max-Age=15552000; Expires=Tue, 13 Aug 2024 00:11:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-02-15 00:11:30 UTC	1476	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"03604370663548075242715929808033793837","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49772	34.196.32.2	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:30 UTC	519	OUT	GET /id?d_visid_ver=3.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=55633F7A534535110A490D44%40AdobeOrg&d_nsid=0&ts=1707955888931 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=03880614951140241342725460080740716815
2024-02-15 00:11:30 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:30 GMT Content-Type: application/json;charset=utf-8 Content-Length: 1476 Connection: close X-TID: S5oYEhhHTfk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v054-05e6a213b.edge-va6.demdex.com 3 ms set-cookie: demdex=03880614951140241342725460080740716815; Max-Age=15552000; Expires=Tue, 13 Aug 2024 00:11:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-02-15 00:11:30 UTC	1476	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 32 31 22 2c 22 74 74 6c 22 3a 31 34 34 30 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 30 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 30 2c 22 75 72 6c 22 3a 5b 22 2f 2f 61 61 2e 61 67 6b 6e 2e Data Ascii: {"d_mid":"03604370663548075242715929808033793837","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"21","ttl":14400,"tag":"img","fireURLSync":0,"syncOnPage":0,"url":["//aa.agkn.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49780	63.140.39.150	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:31 UTC	692	OUT	POST /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: attservicesinc.tt.omtrdc.net Connection: keep-alive Content-Length: 2071 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:31 UTC	2071	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 35 33 36 38 63 61 30 36 35 66 65 34 34 39 33 66 39 64 63 39 30 31 33 35 38 62 36 61 63 66 32 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"5368ca065fe4493f9dc901358b6acf29","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-02-15 00:11:31 UTC	837	IN	HTTP/1.1 200 OK date: Thu, 15 Feb 2024 00:11:31 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.att.com access-control-allow-credentials: true x-request-id: 4b188018-5d30-4dc5-8a23-0f46b7f52c27 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-02-15 00:11:31 UTC	13432	IN	Data Raw: 33 34 37 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 35 33 36 38 63 61 30 36 35 66 65 34 34 39 33 66 39 64 63 39 30 31 33 35 38 62 36 61 63 66 32 39 22 2c 22 63 6c 69 65 6e 74 22 3a 22 61 74 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 36 63 63 30 39 61 32 36 36 64 31 37 34 32 30 37 39 35 38 32 62 38 38 63 36 30 66 36 36 32 30 32 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 Data Ascii: 3470{"status":200,"requestId":"5368ca065fe4493f9dc901358b6acf29","client":"attservicesinc","id":{"tntId":"6cc09a266d1742079582b88c60f66202.34_0","marketingCloudVisitorId":"03604370663548075242715929808033793837"},"edgeHost":"mboxedge34.tt.omtrdc.net","p
2024-02-15 00:11:31 UTC	5555	IN	Data Raw: 31 35 61 36 0d 0a 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 6d 6f 74 69 6f 6e 43 6c 69 63 6b 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 77 66 32 32 32 34 35 34 33 50 72 6f 6d 6f 74 69 6f 6e 73 63 6c 69 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 77 66 32 32 32 34 35 34 33 50 72 6f 6d 6f 74 69 6f 6e 73 4c 65 67 61 6c 4c 69 6e 6b 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 77 66 32 32 32 34 35 34 33 4d 6f 64 61 6c 63 6c 6f 73 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 77 66 32 Data Ascii: 15a6 return false;\n }\n }\n\n function promotionClick() {\n let wf2224543Promotionsclick = document.querySelector('.wf2224543PromotionsLegalLink');\n let wf2224543Modalclose = document.querySelector('.wf2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49786	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:32 UTC	769	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955891151 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:32 UTC	881	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 15-Feb-2024 00:26:32 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:32 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 63 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nc"};
2024-02-15 00:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49787	63.140.38.217	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:32 UTC	447	OUT	GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: attservicesinc.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:32 UTC	450	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 15 Feb 2024 00:11:32 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-02-15 00:11:32 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-02-15 00:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49795	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:32 UTC	3726	OUT	GET /identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=0&tt=0&bcn=%2F%2F173bf10b.akstat.io%2F"; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; dtPC=19$355885995_830h16vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:33 UTC	942	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:33 GMT Content-Length: 8898 Connection: close Set-Cookie: PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; Path=/; Secure; HttpOnly Set-Cookie: IAM_ON=S103; path=/; domain=.identity.att.com; secure; HttpOnly Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955893.552defe2 Server-Timing: ak_p; desc="1707955892833_400428362_1429073890_2701_15078_102_141_-";dur=1
2024-02-15 00:11:33 UTC	8898	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49794	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	3698	OUT	GET /identity-ui/static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
2024-02-15 00:11:33 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "df46-600e2f5f6b71c" Last-Modified: Thu, 20 Jul 2023 03:44:09 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:33 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=36 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955893.552defc4 Server-Timing: ak_p; desc="1707955892838_400428362_1429073860_6046_12591_102_109_-";dur=1
2024-02-15 00:11:33 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 20 64 65 74 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 64 72 20 33 32 20 70 72 6f 64 20 2a 2f 0a 64 65 74 6d 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 7b 55 4e 4b 4e 4f 57 4e 3a 7b 6f 72 64 69 6e 61 6c 3a 30 7d 2c 55 43 3a 7b 6f 72 64 69 6e 61 6c 3a 31 7d 2c 51 55 41 4e 54 55 4d 3a 7b 6f 72 64 69 6e 61 6c 3a 32 7d 7d 2c 64 65 74 6d 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 67 65 74 48 61 6c 6f 4d 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 63 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 69 3d 30 3b 69 3c 63 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 66 6f 72 28 76 61 72 20 63 3d 63 61 5b 69 5d 3b 22 20 22 3d 3d 63 2e 63 68 61 72 41 74 28 Data Ascii: 00006000/* detm-container-hdr 32 prod */detmScriptLoader.component={UNKNOWN:{ordinal:0},UC:{ordinal:1},QUANTUM:{ordinal:2}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(
2024-02-15 00:11:33 UTC	8926	IN	Data Raw: 67 43 6c 6f 75 64 53 65 72 76 65 72 53 65 63 75 72 65 3a 7b 7d 2c 6f 76 65 72 77 72 69 74 65 43 72 6f 73 73 44 6f 6d 61 69 6e 4d 43 49 44 41 6e 64 41 49 44 3a 7b 7d 2c 72 65 73 65 74 42 65 66 6f 72 65 56 65 72 73 69 6f 6e 3a 7b 7d 2c 73 64 69 64 50 61 72 61 6d 45 78 70 69 72 79 3a 7b 7d 2c 73 65 72 76 65 72 53 74 61 74 65 3a 7b 7d 2c 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 7b 7d 2c 73 65 63 75 72 65 43 6f 6f 6b 69 65 3a 7b 7d 2c 74 61 6b 65 54 69 6d 65 6f 75 74 4d 65 74 72 69 63 73 3a 7b 7d 2c 74 72 61 63 6b 69 6e 67 53 65 72 76 65 72 3a 7b 7d 2c 74 72 61 63 6b 69 6e 67 53 65 72 76 65 72 53 65 63 75 72 65 3a 7b 7d 2c 77 68 69 74 65 6c 69 73 74 49 66 72 61 6d 65 44 6f 6d 61 69 6e 73 3a 7b 7d 2c 77 68 69 74 65 6c 69 73 74 50 61 72 65 6e 74 44 Data Ascii: gCloudServerSecure:{},overwriteCrossDomainMCIDAndAID:{},resetBeforeVersion:{},sdidParamExpiry:{},serverState:{},sessionCookieName:{},secureCookie:{},takeTimeoutMetrics:{},trackingServer:{},trackingServerSecure:{},whitelistIframeDomains:{},whitelistParentD
2024-02-15 00:11:33 UTC	16384	IN	Data Raw: 30 30 30 30 34 37 35 34 0d 0a 74 75 72 6e 21 31 7d 2c 64 2e 5f 66 69 65 6c 64 73 3d 6e 75 6c 6c 2c 64 2e 5f 66 69 65 6c 64 73 45 78 70 69 72 65 64 3d 6e 75 6c 6c 2c 64 2e 5f 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 30 3b 69 66 28 65 29 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 3d 28 6e 3c 3c 35 29 2d 6e 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 2c 6e 26 3d 6e 3b 72 65 74 75 72 6e 20 6e 7d 2c 64 2e 5f 67 65 6e 65 72 61 74 65 49 44 3d 48 2c 64 2e 5f 67 65 6e 65 72 61 74 65 4c 6f 63 61 6c 4d 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 2e 5f 67 65 6e 65 72 61 74 65 49 44 28 30 29 3b 72 65 74 75 72 6e 20 54 2e 69 73 43 6c 69 65 6e 74 53 69 64 65 4d 61 72 6b 65 74 69 6e 67 Data Ascii: 00004754turn!1},d._fields=null,d._fieldsExpired=null,d._hash=function(e){var t,n=0;if(e)for(t=0;t<e.length;t++)n=(n<<5)-n+e.charCodeAt(t),n&=n;return n},d._generateID=H,d._generateLocalMID=function(){var e=d._generateID(0);return T.isClientSideMarketing
2024-02-15 00:11:33 UTC	1888	IN	Data Raw: 7c 22 29 29 3a 72 2e 66 69 72 65 55 52 4c 53 79 6e 63 26 26 74 68 69 73 2e 63 68 65 63 6b 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 28 72 2c 61 2e 6a 6f 69 6e 28 22 7c 22 29 29 29 3b 6f 26 26 74 68 69 73 2e 6a 73 6f 6e 50 72 6f 63 65 73 73 65 64 2e 70 75 73 68 28 65 29 7d 2c 63 68 65 63 6b 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 76 61 72 20 72 3d 22 73 79 6e 63 4f 6e 50 61 67 65 22 3d 3d 3d 6e 2c 61 3d 72 3f 22 4d 43 53 59 4e 43 53 4f 50 22 3a 22 4d 43 53 59 4e 43 53 22 3b 65 2e 5f 72 65 61 64 56 69 73 69 74 6f 72 28 29 3b 76 61 72 20 73 2c 6f 2c 6c 3d 65 2e 5f 67 65 74 46 69 65 6c 64 28 61 29 2c 64 3d 21 31 2c 63 3d 21 31 2c 75 3d 4d 61 74 68 2e 63 65 69 6c 28 28 6e 65 77 20 44 61 74 65 29 Data Ascii: \|")):r.fireURLSync&&this.checkFirstPartyCookie(r,a.join("\|")));o&&this.jsonProcessed.push(e)},checkFirstPartyCookie:function(t,i,n){var r="syncOnPage"===n,a=r?"MCSYNCSOP":"MCSYNCS";e._readVisitor();var s,o,l=e._getField(a),d=!1,c=!1,u=Math.ceil((new Date)
2024-02-15 00:11:33 UTC	14334	IN	Data Raw: 30 30 30 30 33 37 46 32 0d 0a 3d 21 31 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 6c 65 6e 67 74 68 3f 47 2e 50 4f 53 54 5f 4d 45 53 53 41 47 45 5f 45 4e 41 42 4c 45 44 3f 28 65 3d 69 2b 6e 28 22 2d 2d 2d 64 65 73 74 70 75 62 2d 63 6f 6d 62 69 6e 65 64 2d 2d 2d 22 29 2b 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 6a 6f 69 6e 28 22 25 30 31 22 29 2c 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 65 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 6e 64 69 6e 67 4d 65 73 73 61 67 65 73 3d 21 31 29 3a 28 65 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 73 68 69 66 74 28 29 2c 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 69 2b 65 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 65 6e 64 Data Ascii: 000037F2=!1),this.messages.length?G.POST_MESSAGE_ENABLED?(e=i+n("---destpub-combined---")+this.messages.join("%01"),this.postMessage(e),this.messages=[],this.sendingMessages=!1):(e=this.messages.shift(),this.postMessage(i+e),setTimeout(function(){t.send
2024-02-15 00:11:33 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49804	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	3674	OUT	GET /identity-ui/cms.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
2024-02-15 00:11:33 UTC	714	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:33 GMT Content-Length: 4187 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=19 Server-Timing: origin; dur=27 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955893.552df1b7 Server-Timing: ak_p; desc="1707955893365_400428362_1429074359_4601_14529_102_116_-";dur=1
2024-02-15 00:11:33 UTC	4187	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49805	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	3684	OUT	GET /_sec/cp_challenge/sec-4-2.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
2024-02-15 00:11:33 UTC	655	IN	HTTP/1.1 200 OK Stored-Attribute-Sha-Checksum: b3f0a51197e77b186f31de4b16a5281246cc58f540f510b3329bc236508a531e Last-Modified: Mon, 22 Jan 2024 20:27:34 GMT ETag: "d03adb0cccd6140628218fde8b13041839954b993b6cf24e5486c5aec062c571" Content-Type: text/css Edge-Cache-Tag: identity.att.com Date: Thu, 15 Feb 2024 00:11:33 GMT Content-Length: 2075 Connection: close Cache-Control: max-age=86400 Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955893.552df1d0 Server-Timing: ak_p; desc="1707955893399_400428362_1429074384_246_3833_102_107_-";dur=1
2024-02-15 00:11:33 UTC	2075	IN	Data Raw: 2e 73 65 63 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 31 34 30 70 78 7d 23 73 65 63 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 7d 23 73 65 63 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 Data Ascii: .sec-container{padding-top:30px;margin:0 auto;width:1140px}#sec-overlay{display:none;position:fixed;top:0;left:0;right:0;bottom:0;z-index:2147483647;background-color:rgba(0,0,0,0.5)}#sec-container{position:absolute;top:50%;left:50%;transform:translate(-50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49806	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	3698	OUT	GET /identity-ui/static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
2024-02-15 00:11:33 UTC	703	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 477 Content-Type: application/javascript ETag: "1dd-600e2f61ab5e5" Last-Modified: Thu, 20 Jul 2023 03:44:11 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:33 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:33 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955893.552df1d1 Server-Timing: ak_p; desc="1707955893400_400428362_1429074385_2998_12950_102_110_-";dur=1
2024-02-15 00:11:33 UTC	477	IN	Data Raw: 2f 2f 20 64 65 74 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 74 72 2e 6a 73 20 33 32 20 70 72 6f 64 0a 76 61 72 20 64 65 74 6d 45 78 65 63 75 74 65 46 6f 6f 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 69 6e 73 74 61 6e 63 65 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 64 6f 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 21 6a 51 75 65 72 79 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 64 6f 29 29 26 26 64 64 6f 2e 70 61 67 65 4c 61 73 74 4c 69 6e 65 28 29 2c 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 64 65 74 6d 53 63 Data Ascii: // detm-container-ftr.js 32 prodvar detmExecuteFooter=function(instance){("undefined"!=typeof ddo\|\|"undefined"!=typeof jQuery&&!jQuery.isEmptyObject(ddo))&&ddo.pageLastLine(),void 0!==document.dispatchEvent&&document.dispatchEvent(new CustomEvent("detmSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49803	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	2495	OUT	GET /scripts/att_common.js HTTP/1.1 Host: signin-static-js.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtCookie=v_4_srv_19_sn_B3DC1D30E3E9DB1F101C04F22009DD03_app-3Aa75ea7b2824f5aea_1_ol_0_perc_100000_mul_1; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"
2024-02-15 00:11:33 UTC	591	IN	HTTP/1.1 200 OK connection: close content-length: 310870 content-type: application/javascript; charset=UTF-8 date: Thu, 15 Feb 2024 00:11:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-frame-options: SAMEORIGIN cache-control: no-cache, no-store, must-revalidate expires: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache iam_on: 605 Set-Cookie: Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; Max-Age=1577847600; Domain=att.com; Path=/; Secure
2024-02-15 00:11:33 UTC	7600	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 57 28 52 29 7b 76 61 72 20 6a 67 3d 7b 7d 2c 6a 69 3d 7b 7d 3b 76 61 72 20 6a 6b 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6a 71 3d 54 79 70 65 45 72 72 6f 72 2c 6a 4a 3d 4f 62 6a 65 63 74 2c 6a 70 3d 52 65 67 45 78 70 2c 6a 62 3d 4e 75 6d 62 65 72 2c 6a 7a 3d 53 74 72 69 6e 67 2c 6a 44 3d 41 72 72 61 79 2c 6a 6a 3d 6a 4a 2e 62 69 6e 64 2c 6a 47 3d 6a 4a 2e 63 61 6c 6c 2c 6a 55 3d 6a 47 2e 62 69 6e 64 28 6a 6a 2c 6a 47 29 2c 69 3d 6a 4a 2e 61 70 70 6c 79 2c 6a 77 3d 6a 55 28 69 29 2c 4f 3d 5b 5d 2e 70 75 73 68 2c 6f 3d 5b 5d 2e 70 6f 70 2c 45 3d 5b 5d 2e 73 6c 69 63 65 2c 49 3d 5b 5d 2e 73 70 6c 69 63 65 2c 6d 3d 5b 5d 2e 6a 6f 69 6e 2c 79 3d 5b 5d 2e 6d 61 70 2c 77 3d 6a 55 28 4f 29 2c 53 3d 6a 55 28 45 29 2c 68 3d 6a Data Ascii: (function W(R){var jg={},ji={};var jk=ReferenceError,jq=TypeError,jJ=Object,jp=RegExp,jb=Number,jz=String,jD=Array,jj=jJ.bind,jG=jJ.call,jU=jG.bind(jj,jG),i=jJ.apply,jw=jU(i),O=[].push,o=[].pop,E=[].slice,I=[].splice,m=[].join,y=[].map,w=jU(O),S=jU(E),h=j
2024-02-15 00:11:33 UTC	106	IN	Data Raw: 66 58 32 4c 79 6a 68 43 59 46 67 42 53 45 63 22 2c 22 2d 51 6b 5a 72 6f 6c 4f 42 51 22 2c 22 32 76 32 35 55 69 44 6a 30 45 33 4d 42 67 22 2c 22 70 6f 77 22 2c 22 43 77 35 50 70 64 51 78 64 61 45 4c 67 44 33 4c 4a 43 34 22 2c 22 44 4c 7a 77 48 7a 4f 4b 35 51 2d 37 46 2d 34 46 6d 70 38 51 74 6b 76 32 76 2d 63 22 2c 22 Data Ascii: fX2LyjhCYFgBSEc","-QkZrolOBQ","2v25UiDj0E3MBg","pow","Cw5PpdQxdaELgD3LJC4","DLzwHzOK5Q-7F-4Fmp8Qtkv2v-c","
2024-02-15 00:11:33 UTC	8191	IN	Data Raw: 38 34 6d 4b 59 6c 62 6f 6b 33 2d 77 64 64 49 53 73 67 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 71 41 73 6b 78 37 4a 70 45 4b 30 59 2d 6d 72 4c 59 53 76 51 53 73 4d 6f 5a 55 38 22 2c 22 62 61 36 65 59 68 50 54 6e 51 7a 30 22 2c 22 44 73 72 6f 52 31 47 33 2d 41 22 2c 22 55 6d 39 30 67 4c 4d 53 4a 4f 42 6c 77 53 53 44 57 44 47 52 4e 64 30 6c 61 47 38 42 68 4c 6f 43 22 2c 22 66 6f 66 35 65 42 2d 63 36 55 44 4e 45 34 41 54 6d 38 73 68 74 57 57 39 6c 38 57 5a 44 47 43 2d 6d 2d 47 55 6c 6e 6a 64 61 4b 4d 58 57 58 53 49 79 6e 63 2d 59 6d 6f 36 4d 78 4b 63 6a 4f 32 4c 67 79 51 22 2c 22 6f 39 72 6b 47 41 71 46 37 41 7a 53 44 51 22 2c 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 2c 22 77 43 Data Ascii: 84mKYlbok3-wddISsg","undefined","onreadystatechange","qAskx7JpEK0Y-mrLYSvQSsMoZU8","ba6eYhPTnQz0","DsroR1G3-A","Um90gLMSJOBlwSSDWDGRNd0laG8BhLoC","fof5eB-c6UDNE4ATm8shtWW9l8WZDGC-m-GUlnjdaKMXWXSIync-Ymo6MxKcjO2LgyQ","o9rkGAqF7AzSDQ","querySelectorAll","wC
2024-02-15 00:11:33 UTC	2	IN	Data Raw: 37 32 Data Ascii: 72
2024-02-15 00:11:33 UTC	8191	IN	Data Raw: 35 7a 6a 64 52 79 43 75 63 48 66 6a 36 48 46 31 71 57 4b 69 4f 77 69 49 53 6f 55 52 6c 6d 55 58 51 6e 33 55 6a 45 62 71 49 5a 30 49 52 46 76 41 7a 56 54 56 75 56 4a 33 31 37 47 65 59 54 4e 4a 6b 70 72 33 31 53 7a 7a 62 74 61 34 31 54 34 4c 5f 43 6a 31 44 54 79 47 78 32 2d 4e 61 31 35 43 61 33 6d 6c 76 51 4e 68 47 70 71 57 78 63 38 5f 46 74 67 75 44 4d 6c 71 55 44 38 38 58 35 31 65 41 6d 42 57 78 4b 52 73 59 76 76 30 30 34 38 46 36 34 64 79 6c 41 6f 62 33 6a 30 43 59 4e 73 66 69 6a 38 41 4d 59 37 66 34 4c 61 6c 4d 51 77 79 41 58 49 77 78 38 6a 51 6c 7a 73 62 66 58 6d 2d 6f 6b 36 43 32 54 32 49 39 6e 6b 45 65 66 78 54 75 67 6d 50 71 5a 45 71 79 6a 79 53 69 4f 43 54 7a 6c 79 58 52 57 5f 4c 36 6e 4c 39 46 4b 77 65 37 74 6e 4c 64 70 5f 45 4a 30 7a 5f 5f 46 61 Data Ascii: 5zjdRyCucHfj6HF1qWKiOwiISoURlmUXQn3UjEbqIZ0IRFvAzVTVuVJ317GeYTNJkpr31Szzbta41T4L_Cj1DTyGx2-Na15Ca3mlvQNhGpqWxc8_FtguDMlqUD88X51eAmBWxKRsYvv0048F64dylAob3j0CYNsfij8AMY7f4LalMQwyAXIwx8jQlzsbfXm-ok6C2T2I9nkEefxTugmPqZEqyjySiOCTzlyXRW_L6nL9FKwe7tnLdp_EJ0z__Fa
2024-02-15 00:11:33 UTC	8188	IN	Data Raw: 63 33 35 57 6d 36 55 6c 31 79 7a 22 2c 22 33 65 76 61 5a 47 57 6c 70 32 76 4e 65 59 39 35 6a 37 34 22 2c 22 63 2d 37 38 55 57 53 6b 2d 42 6e 44 42 50 51 22 2c 22 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 22 2c 22 56 48 31 54 75 5f 77 44 58 71 52 63 6c 69 37 6e 22 2c 22 4b 78 45 38 79 62 42 36 48 4d 63 46 33 6e 47 4e 61 6b 75 71 22 2c 22 74 6b 56 69 67 2d 45 4b 53 64 51 22 2c 22 71 4b 43 45 61 77 65 50 68 45 75 4a 57 49 64 54 71 64 74 63 6e 54 65 35 78 36 37 33 22 2c 22 62 35 50 58 61 7a 57 51 32 55 32 30 64 76 38 7a 74 41 22 2c 22 37 48 64 32 78 65 55 47 63 36 78 4b 77 6a 61 66 22 2c 22 68 65 44 79 42 54 71 63 34 44 66 45 22 2c 22 72 6f 75 6e 64 22 2c 22 6e 6d 35 65 68 59 70 53 4e 62 4d 36 67 69 6d 74 53 67 22 2c 22 63 61 74 63 68 22 2c 22 6e 7a 51 5a Data Ascii: c35Wm6Ul1yz","3evaZGWlp2vNeY95j74","c-78UWSk-BnDBPQ","OffscreenCanvas","VH1Tu_wDXqRcli7n","KxE8ybB6HMcF3nGNakuq","tkVig-EKSdQ","qKCEawePhEuJWIdTqdtcnTe5x673","b5PXazWQ2U20dv8ztA","7Hd2xeUGc6xKwjaf","heDyBTqc4DfE","round","nm5ehYpSNbM6gimtSg","catch","nzQZ
2024-02-15 00:11:33 UTC	8191	IN	Data Raw: 45 22 2c 22 55 31 74 5a 76 63 6b 4d 41 37 64 48 33 6c 5f 76 44 58 75 71 66 65 64 44 22 2c 22 63 6f 73 22 2c 22 37 66 79 6c 50 47 48 42 74 67 7a 4a 53 64 64 78 32 71 52 6c 33 6d 48 6d 32 59 76 45 22 2c 22 6f 70 65 6e 22 2c 22 4e 56 68 30 69 4c 63 43 65 6f 64 50 6a 69 72 39 56 58 6e 45 54 51 22 2c 22 71 30 73 58 2d 66 42 4f 44 4b 6c 5f 75 6e 4b 31 43 48 65 73 50 4a 6b 58 22 2c 22 4b 61 61 67 51 79 72 57 5f 56 66 45 52 61 6f 57 36 4b 45 22 2c 22 56 69 67 44 6a 59 64 44 5a 39 34 46 30 56 79 54 66 67 22 2c 22 76 34 6d 46 65 7a 32 66 72 67 22 2c 22 5f 48 6c 69 69 61 6f 38 47 5a 39 6b 39 44 5f 75 4a 67 65 6a 4d 77 22 2c 22 30 34 61 7a 50 41 53 67 6e 77 5f 48 4c 4c 30 22 2c 22 64 6d 56 6a 77 4f 67 78 63 71 4a 45 68 53 2d 67 22 2c 22 6b 54 67 43 6d 64 4a 4e 54 4e Data Ascii: E","U1tZvckMA7dH3l_vDXuqfedD","cos","7fylPGHBtgzJSddx2qRl3mHm2YvE","open","NVh0iLcCeodPjir9VXnETQ","q0sX-fBODKl_unK1CHesPJkX","KaagQyrW_VfERaoW6KE","VigDjYdDZ94F0VyTfg","v4mFez2frg","_Hliiao8GZ9k9D_uJgejMw","04azPASgnw_HLL0","dmVjwOgxcqJEhS-g","kTgCmdJNTN
2024-02-15 00:11:33 UTC	8191	IN	Data Raw: 33 2c 32 32 35 5d 2c 5b 32 2c 36 38 5d 2c 5b 32 2c 37 39 5d 5d 2c 5b 5b 30 2c 33 39 5d 2c 5b 32 2c 33 34 5d 2c 5b 34 2c 34 34 5d 2c 5b 39 2c 31 39 31 5d 2c 5b 31 2c 36 38 5d 2c 5b 35 2c 33 35 5d 2c 5b 36 2c 35 31 5d 2c 5b 35 2c 31 31 31 5d 2c 5b 39 2c 32 37 5d 2c 5b 38 2c 38 38 5d 2c 5b 38 2c 35 38 5d 2c 5b 32 2c 38 39 5d 2c 5b 33 2c 33 31 5d 2c 5b 33 2c 38 37 5d 2c 5b 33 2c 36 39 5d 2c 5b 38 2c 31 38 31 5d 2c 5b 37 2c 36 34 5d 2c 5b 30 2c 31 37 34 5d 2c 5b 31 2c 32 30 33 5d 2c 5b 36 2c 31 30 5d 2c 5b 37 2c 32 33 38 5d 2c 5b 39 2c 34 31 5d 2c 5b 39 2c 31 31 35 5d 2c 5b 37 2c 31 37 5d 2c 5b 33 2c 32 31 37 5d 2c 5b 31 2c 37 5d 2c 5b 34 2c 38 5d 2c 5b 32 2c 37 36 5d 2c 5b 35 2c 31 30 39 5d 2c 5b 36 2c 32 32 36 5d 2c 5b 34 2c 32 5d 2c 5b 34 2c 32 32 34 5d 2c Data Ascii: 3,225],[2,68],[2,79]],[[0,39],[2,34],[4,44],[9,191],[1,68],[5,35],[6,51],[5,111],[9,27],[8,88],[8,58],[2,89],[3,31],[3,87],[3,69],[8,181],[7,64],[0,174],[1,203],[6,10],[7,238],[9,41],[9,115],[7,17],[3,217],[1,7],[4,8],[2,76],[5,109],[6,226],[4,2],[4,224],
2024-02-15 00:11:33 UTC	2	IN	Data Raw: 2c 31 Data Ascii: ,1
2024-02-15 00:11:33 UTC	8191	IN	Data Raw: 32 5d 2c 5b 37 2c 39 31 5d 2c 5b 33 2c 31 38 36 5d 2c 5b 36 2c 35 32 5d 2c 5b 30 2c 31 33 37 5d 2c 5b 33 2c 31 37 34 5d 2c 5b 33 2c 36 30 5d 2c 5b 37 2c 37 32 5d 2c 5b 39 2c 38 5d 2c 5b 38 2c 31 37 5d 2c 5b 36 2c 31 30 32 5d 2c 5b 32 2c 32 33 37 5d 2c 5b 35 2c 31 37 33 5d 2c 5b 34 2c 37 37 5d 2c 5b 35 2c 33 39 5d 2c 5b 31 2c 35 31 5d 2c 5b 39 2c 31 38 34 5d 2c 5b 39 2c 39 5d 2c 5b 33 2c 32 32 33 5d 2c 5b 36 2c 31 35 39 5d 2c 5b 34 2c 35 30 5d 2c 5b 39 2c 31 33 35 5d 2c 5b 33 2c 32 39 5d 2c 5b 31 2c 37 38 5d 2c 5b 37 2c 35 38 5d 2c 5b 33 2c 32 33 33 5d 2c 5b 33 2c 32 33 35 5d 2c 5b 34 2c 31 36 38 5d 2c 5b 34 2c 32 31 34 5d 2c 5b 32 2c 31 35 30 5d 2c 5b 32 2c 32 33 34 5d 2c 5b 38 2c 32 32 39 5d 2c 5b 38 2c 31 30 30 5d 2c 5b 39 2c 31 39 33 5d 2c 5b 33 2c 32 Data Ascii: 2],[7,91],[3,186],[6,52],[0,137],[3,174],[3,60],[7,72],[9,8],[8,17],[6,102],[2,237],[5,173],[4,77],[5,39],[1,51],[9,184],[9,9],[3,223],[6,159],[4,50],[9,135],[3,29],[1,78],[7,58],[3,233],[3,235],[4,168],[4,214],[2,150],[2,234],[8,229],[8,100],[9,193],[3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49808	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:33 UTC	3663	OUT	GET /identity-ui/runtime.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:34 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "4c9-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:34 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:34 GMT Content-Length: 1225 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df3af Server-Timing: ak_p; desc="1707955893921_400428362_1429074863_2700_15190_103_105_-";dur=1
2024-02-15 00:11:34 UTC	1225	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 76 3d 7b 7d 2c 70 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 72 29 7b 76 61 72 20 65 3d 70 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 70 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 75 29 2c 6e 2e 65 78 70 6f 72 74 73 7d 75 2e 6d 3d 76 2c 72 3d 5b 5d 2c 75 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 61 2c 66 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 63 3d 31 2f 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 6e 3d 72 5b 74 5d 5b 30 Data Ascii: !function(){"use strict";var r,v={},p={};function u(r){var e=p[r];if(void 0!==e)return e.exports;var n=p[r]={exports:{}};return v[r].call(n.exports,n,n.exports,u),n.exports}u.m=v,r=[],u.O=function(e,n,a,f){if(!n){var c=1/0;for(t=0;t<r.length;t++){n=r[t][0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49809	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3665	OUT	GET /identity-ui/polyfills.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:34 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "2f243-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:34 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=28 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df599 Server-Timing: ak_p; desc="1707955894382_400428362_1429075353_5174_12854_102_106_-";dur=1
2024-02-15 00:11:34 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 36 30 31 31 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 73 65 6c 66 26 26 28 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 5f 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 Data Ascii: 00006000(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[429],{60117:function(){"document"in self&&(!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("htt
2024-02-15 00:11:34 UTC	8927	IN	Data Raw: 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 48 26 26 48 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7b 76 61 72 20 4b 3d 53 28 22 6f 6e 22 2b 46 2b 22 70 61 74 63 68 65 64 22 29 3b 69 66 28 21 4e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 4b 29 7c 7c 21 4e 5b 4b 5d 29 7b 64 65 6c 65 74 65 20 48 2e 77 72 69 74 61 62 6c 65 2c 64 65 6c 65 74 65 20 48 2e 76 61 6c 75 65 3b 76 61 72 20 56 3d 48 2e 67 65 74 2c 6b 3d 48 2e 73 65 74 2c 6f 74 3d 46 2e 73 6c 69 63 65 28 32 29 2c 66 74 3d 24 5b 6f 74 5d 3b 66 74 7c 7c 28 66 74 3d 24 5b 6f 74 5d 3d 53 28 22 4f 4e 5f 50 52 4f 50 45 52 54 59 22 2b 6f 74 29 29 2c 48 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 76 74 29 7b 76 61 72 20 79 74 3d 74 68 69 73 3b 21 79 74 26 26 4e 3d 3d 3d 78 26 26 28 79 74 Data Ascii: !0,configurable:!0}),H&&H.configurable){var K=S("on"+F+"patched");if(!N.hasOwnProperty(K)\|\|!N[K]){delete H.writable,delete H.value;var V=H.get,k=H.set,ot=F.slice(2),ft=$[ot];ft\|\|(ft=$[ot]=S("ON_PROPERTY"+ot)),H.set=function(vt){var yt=this;!yt&&N===x&&(yt
2024-02-15 00:11:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 33 44 31 0d 0a 51 29 2c 61 74 7d 7d 28 72 74 29 7d 29 29 2c 50 72 6f 6d 69 73 65 5b 46 2e 5f 5f 73 79 6d 62 6f 6c 5f 5f 28 22 75 6e 63 61 75 67 68 74 50 72 6f 6d 69 73 65 45 72 72 6f 72 73 22 29 5d 3d 6b 2c 44 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 74 6f 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 76 61 72 20 46 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 57 3d 53 28 22 4f 72 69 67 69 6e 61 6c 44 65 6c 65 67 61 74 65 22 29 2c 48 3d 53 28 22 50 72 6f 6d 69 73 65 22 29 2c 47 3d 53 28 22 45 72 72 6f 72 22 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 29 7b 76 61 72 20 66 74 3d 74 68 Data Ascii: 000043D1Q),at}}(rt)})),Promise[F.__symbol__("uncaughtPromiseErrors")]=k,D}),Zone.__load_patch("toString",function(N){var F=Function.prototype.toString,W=S("OriginalDelegate"),H=S("Promise"),G=S("Error"),K=function(){if("function"==typeof this){var ft=th
2024-02-15 00:11:34 UTC	989	IN	Data Raw: 29 3b 76 61 72 20 69 3d 30 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 75 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 69 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 72 6f 77 20 63 7d 2c 66 3a 75 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 Data Ascii: );var i=0,u=function(){};return{s:u,n:function(){return i>=e.length?{done:!0}:{done:!1,value:e[i++]}},e:function(c){throw c},f:u}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have
2024-02-15 00:11:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 73 2e 5f 64 65 6c 61 79 3d 30 2c 74 68 69 73 2e 5f 65 6e 64 44 65 6c 61 79 3d 30 2c 74 68 69 73 2e 5f 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2c 74 68 69 73 2e 5f 69 74 65 72 61 74 69 6f 6e 53 74 61 72 74 3d 30 2c 74 68 69 73 2e 5f 69 74 65 72 61 74 69 6f 6e 73 3d 31 2c 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 3d 30 2c 74 68 69 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 52 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 Data Ascii: 00004000is._delay=0,this._endDelay=0,this._fill="none",this._iterationStart=0,this._iterations=1,this._duration=0,this._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=R}function o(){return t.isDeprecated("Invalid timi
2024-02-15 00:11:34 UTC	12	IN	Data Raw: 61 6e 69 6d 61 74 65 3d 66 75 0d 0a Data Ascii: animate=fu
2024-02-15 00:11:34 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 22 22 3b 72 65 74 75 72 6e 20 6f 26 26 6f 2e 69 64 26 26 28 61 3d 6f 2e 69 64 29 2c 72 2e 74 69 6d 65 6c 69 6e 65 2e 5f 70 6c 61 79 28 72 2e 4b 65 79 66 72 61 6d 65 45 66 66 65 63 74 28 74 68 69 73 2c 65 2c 6f 2c 61 29 29 7d 7d 28 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 69 2c 75 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 61 2a 28 31 2d 75 29 2b 69 2a 75 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 75 3c 2e Data Ascii: 00004000nction(e,o){var a="";return o&&o.id&&(a=o.id),r.timeline._play(r.KeyframeEffect(this,e,o,a))}}(m),function(r,e){function o(a,i,u){if("number"==typeof a&&"number"==typeof i)return a(1-u)+iu;if("boolean"==typeof a&&"boolean"==typeof i)return u<.
2024-02-15 00:11:34 UTC	12	IN	Data Raw: 33 29 2e 72 65 70 6c 61 63 65 0d 0a Data Ascii: 3).replace
2024-02-15 00:11:34 UTC	9830	IN	Data Raw: 30 30 30 30 32 36 35 41 0d 0a 28 2f 30 2b 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 64 2c 68 2c 79 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 28 68 2c 4d 61 74 68 2e 6d 61 78 28 64 2c 79 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 64 29 7b 69 66 28 2f 5e 5c 73 2a 5b 2d 2b 5d 3f 28 5c 64 2a 5c 2e 29 3f 5c 64 2b 5c 73 2a 24 2f 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 64 2c 68 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 79 2c 4f 29 7b 72 65 74 75 72 6e 5b 79 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 53 29 7b 72 65 74 75 72 6e 20 6f 28 61 28 64 2c 68 2c 53 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 64 29 7b Data Ascii: 0000265A(/0+$/,"").replace(/\.$/,"")}function a(d,h,y){return Math.min(h,Math.max(d,y))}function i(d){if(/^\s[-+]?(\d\.)?\d+\s*$/.test(d))return Number(d)}function p(d,h){return function(y,O){return[y,O,function(S){return o(a(d,h,S))}]}}function f(d){
2024-02-15 00:11:34 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 53 3f 28 79 3d 2f 62 6f 74 74 6f 6d 7c 72 69 67 68 74 2f 2e 74 65 73 74 28 53 29 2c 64 5b 68 3d 7b 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 63 65 6e 74 65 72 3a 68 2c 74 6f 70 3a 31 2c 62 6f 74 74 6f 6d 3a 31 7d 5b 53 5d 5d 3d 76 5b 53 5d 2c 22 63 65 6e 74 65 72 22 3d 3d 53 26 26 68 2b 2b 29 3a 28 79 26 26 28 28 53 3d 65 28 53 29 29 5b 22 25 22 5d 3d 28 53 5b 22 25 22 5d 7c 7c 30 29 2b 31 30 30 29 2c 64 5b 68 5d 3d 53 2c 68 2b 2b 2c 79 3d 21 31 29 7d 72 65 74 75 72 6e 5b 64 2c 63 5b 31 5d 5d 7d 7d 76 61 72 20 76 3d 7b 6c 65 66 74 3a 7b 22 25 22 3a 30 7d 2c 63 65 6e 74 65 72 3a 7b 22 25 22 3a 35 30 7d 2c 72 69 67 68 74 3a 7b 22 25 22 3a 31 30 30 7d 2c 74 6f 70 3a 7b 22 25 22 3a 30 7d 2c 62 6f 74 74 6f 6d 3a 7b 22 25 22 3a Data Ascii: 00006000S?(y=/bottom\|right/.test(S),d[h={left:0,right:0,center:h,top:1,bottom:1}[S]]=v[S],"center"==S&&h++):(y&&((S=e(S))["%"]=(S["%"]\|\|0)+100),d[h]=S,h++,y=!1)}return[d,c[1]]}}var v={left:{"%":0},center:{"%":50},right:{"%":100},top:{"%":0},bottom:{"%":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49810	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3705	OUT	GET /identity-ui/ATTAleckSans_W_Rg.woff2 HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://identity.att.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:34 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 18480 Content-Type: font/woff2 ETag: "4830-60f946c452d70" Last-Modified: Tue, 23 Jan 2024 03:20:06 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" Access-Control-Allow-Origin: https://identity.att.com apser: p126 Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1671606 Date: Thu, 15 Feb 2024 00:11:34 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df66e Server-Timing: ak_p; desc="1707955894583_400428362_1429075566_20_13551_102_106_-";dur=1
2024-02-15 00:11:34 UTC	15685	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 48 30 00 11 00 00 00 00 ae 1c 00 00 47 ce 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 6e 1b d0 50 1c 96 02 06 60 00 86 66 08 82 40 09 8d 57 11 0c 0a 81 bf 40 81 a3 07 01 36 02 24 03 8b 40 0b 85 62 00 04 20 05 84 2e 07 20 0c 83 20 1b d7 9b 35 6c 9b 12 3d b9 1d d8 6e cb f7 e7 cd 46 d4 b0 71 00 26 de 4f 19 89 10 36 0e 40 fb e0 58 f6 ff 9f 90 9c 8c e1 e0 05 73 aa 65 f5 90 21 a1 9d b7 1a eb 36 1b 63 26 ae d9 5a c3 8c cc 5c 1a 55 51 2b 2b ae 8a ca 1b 7a 4f 4c 41 17 dd 13 d7 8e ac 09 cf e3 46 32 6c e2 10 bc 97 c0 b0 88 fc e3 0b 4f 91 0d 62 4b 54 db 44 61 d3 29 ec b9 a1 b3 ce ad 03 ad a8 50 48 4d fc 66 77 7c 38 0e e9 ec 1d 67 59 58 a2 7f 14 5e 42 2b 2c 26 a2 e3 06 e9 20 b2 e5 61 29 04 e2 9f e8 ad 04 Data Ascii: wOF2H0GnP`f@W@6$@b . 5l=nFq&O6@Xse!6c&Z\UQ++zOLAF2lObKTDa)PHMfw\|8gYX^B+,& a)
2024-02-15 00:11:34 UTC	2795	IN	Data Raw: b0 e8 c5 d2 92 c1 04 db be 2e 46 f4 ac 0e 33 ac d6 00 02 db 05 3c 83 ab 3e 2e 09 64 22 7d 8c c0 8f e4 86 06 82 08 28 61 2b 3d 13 11 41 c7 49 9d 34 e8 64 60 c3 1a 2b 0e 2c 4e 25 6e 14 48 94 53 c4 90 bb 21 2c 25 ed 82 17 14 92 85 c4 44 5b 1c 4f 98 bc 6c 2a 77 cb f9 8a 82 33 75 d2 bf 37 14 63 2d 19 e3 13 d1 ae 4b 30 13 91 50 96 b3 61 cc 95 74 57 36 f1 26 ab 09 17 08 40 83 14 a2 1a 45 c4 ad 0b 3c bc 68 36 78 0b 0c 04 d8 3c 2f 81 16 8f 5e a4 d2 34 18 c9 18 fb aa ba e8 dd 7b 0a f6 f2 f7 00 e8 56 9d 0a 4e 6a a1 0d e8 82 55 2c f7 44 47 a3 1c 4d 13 ca 29 e2 c2 ad f4 7c 67 d2 66 66 a1 2e 1b d9 5e ad 9d 26 bc c6 10 d8 aa e4 cf cc 18 ed c7 8a 86 e2 7f 9d be 8a 68 e0 ce 60 8b d6 5d 97 5d 65 b9 50 35 a7 76 ac 14 6d cd 73 a2 34 a5 52 53 de 3a 00 23 eb 14 00 c8 fe 6e 54 Data Ascii: .F3<>.d"}(a+=AI4d`+,N%nHS!,%D[Ol*w3u7c-K0PatW6&@E<h6x</^4{VNjU,DGM)\|gff.^&h`]]eP5vms4RS:#nT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49812	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3663	OUT	GET /identity-ui/scripts.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "24611-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=46 Server-Timing: origin; dur=33 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df6aa Server-Timing: ak_p; desc="1707955894660_400428362_1429075626_8893_12630_102_105_-";dur=1
2024-02-15 00:11:35 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: 00006000/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new
2024-02-15 00:11:35 UTC	8927	IN	Data Raw: 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 69 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 7a 2e 74 65 73 74 28 65 2e 6e 6f 64 Data Ascii: ted:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!i.pseudos.empty(e)},header:function(e){return z.test(e.nod
2024-02-15 00:11:35 UTC	14834	IN	Data Raw: 30 30 30 30 33 39 45 36 0d 0a 29 2c 31 3c 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 28 57 5b 65 5d 7c 7c 54 2e 75 6e 69 71 75 65 53 6f 72 74 28 72 29 2c 42 2e 74 65 73 74 28 65 29 26 26 72 2e 72 65 76 65 72 73 65 28 29 29 2c 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5b 5e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 74 68 72 6f 77 20 65 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 3b 74 72 79 7b 65 26 26 70 28 72 3d 65 2e 70 72 6f 6d 69 73 65 29 3f 72 2e 63 61 6c 6c 28 65 29 2e 64 6f 6e 65 28 74 29 2e 66 61 69 6c 28 6e 29 3a 65 26 26 70 28 72 3d 65 2e 74 68 65 6e 29 3f Data Ascii: 000039E6),1<this.length&&(W[e]\|\|T.uniqueSort(r),B.test(e)&&r.reverse()),this.pushStack(r)}});var Q=/[^\x20\t\r\n\f]+/g;function $(e){return e}function z(e){throw e}function X(e,t,n,i){var r;try{e&&p(r=e.promise)?r.call(e).done(t).fail(n):e&&p(r=e.then)?
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 21 63 2e 70 72 65 44 69 73 70 61 74 63 68 7c 7c 21 31 21 3d 3d 63 2e 70 72 65 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 29 29 7b 66 6f 72 28 61 3d 54 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 72 73 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 2c 75 29 2c 74 3d 30 3b 28 72 3d 61 5b 74 2b 2b 5d 29 26 26 21 6c 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 3b 29 66 6f 72 28 6c 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 72 2e 65 6c 65 6d 2c 6e 3d 30 3b 28 6f 3d 72 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 6c 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 3b 29 6c 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 Data Ascii: 00004000!c.preDispatch\|\|!1!==c.preDispatch.call(this,l)){for(a=T.event.handlers.call(this,l,u),t=0;(r=a[t++])&&!l.isPropagationStopped();)for(l.currentTarget=r.elem,n=0;(o=r.handlers[n++])&&!l.isImmediatePropagationStopped();)l.rnamespace&&!1!==o.namesp
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 68 69 73 2e 73 74 61 72 74 29 0d 0a Data Ascii: his.start)
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2a 74 2b 74 68 69 73 2e 73 74 61 72 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 2c 74 68 69 73 2e 6e 6f 77 2c 74 68 69 73 29 2c 6e 26 26 6e 2e 73 65 74 3f 6e 2e 73 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 73 65 74 28 74 68 69 73 29 2c 74 68 69 73 7d 7d 29 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 28 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 3d 7b 5f 64 65 66 61 75 6c 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c Data Ascii: 00004000*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):at.propHooks._default.set(this),this}}).init.prototype=at.prototype,(at.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType\|\|
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 53 65 74 74 69 6e 67 73 2e 66 0d 0a Data Ascii: Settings.f
2024-02-15 00:11:35 UTC	8076	IN	Data Raw: 30 30 30 30 31 46 38 30 0d 0a 6c 61 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 74 29 76 6f 69 64 20 30 21 3d 3d 74 5b 6e 5d 26 26 28 28 72 5b 6e 5d 3f 65 3a 69 7c 7c 28 69 3d 7b 7d 29 29 5b 6e 5d 3d 74 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 69 26 26 54 2e 65 78 74 65 6e 64 28 21 30 2c 65 2c 69 29 2c 65 7d 24 74 2e 68 72 65 66 3d 53 74 2e 68 72 65 66 2c 54 2e 65 78 74 65 6e 64 28 7b 61 63 74 69 76 65 3a 30 2c 6c 61 73 74 4d 6f 64 69 66 69 65 64 3a 7b 7d 2c 65 74 61 67 3a 7b 7d 2c 61 6a 61 78 53 65 74 74 69 6e 67 73 3a 7b 75 72 6c 3a 53 74 2e 68 72 65 66 2c 74 79 70 65 3a 22 47 45 54 22 2c 69 73 4c 6f 63 61 6c 3a 2f 5e 28 3f 3a 61 62 6f 75 74 7c 61 70 70 7c 61 70 70 2d 73 74 6f 72 61 67 65 7c 2e 2b 2d 65 78 74 65 6e 73 69 6f 6e 7c 66 69 Data Ascii: 00001F80latOptions\|\|{};for(n in t)void 0!==t[n]&&((r[n]?e:i\|\|(i={}))[n]=t[n]);return i&&T.extend(!0,e,i),e}$t.href=St.href,T.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:St.href,type:"GET",isLocal:/^(?:about\|app\|app-storage\|.+-extension\|fi
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 54 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 Data Ascii: 00006000:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"text script":function(e){return T.globalEval(e),e}}}),T.ajaxPrefilter("script",function(e){voi
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 65 3c 3d 34 30 29 29 7b 76 61 72 20 74 3d 65 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 2c 74 3e 30 26 26 74 68 69 73 2e 70 72 65 76 28 29 2c 74 3c 30 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 72 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b Data Ascii: .abs(this.touchDeltaX);if(!(e<=40)){var t=e/this.touchDeltaX;this.touchDeltaX=0,t>0&&this.prev(),t<0&&this.next()}},t._addEventListeners=function(){var e=this;this._config.keyboard&&r.default(this._element).on("keydown.bs.carousel",function(t){return e._k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49814	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3662	OUT	GET /identity-ui/vendor.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "aa2a3-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=35 Server-Timing: origin; dur=27 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df6be Server-Timing: ak_p; desc="1707955894676_400428362_1429075646_9663_14058_102_104_-";dur=1
2024-02-15 00:11:35 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 33 36 5d 2c 7b 31 30 37 30 39 3a 66 75 6e 63 74 69 6f 6e 28 48 74 2c 58 65 2c 66 29 7b 66 2e 64 28 58 65 2c 7b 6c 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 2c 5f 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 65 7d 2c 4c 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 7d 2c 5a 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 74 7d 2c 6a 74 3a 66 75 6e 63 74 69 6f Data Ascii: 00006000"use strict";(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[736],{10709:function(Ht,Xe,f){f.d(Xe,{l3:function(){return $},_j:function(){return oe},LC:function(){return Re},ZN:function(){return tt},jt:functio
2024-02-15 00:11:35 UTC	8927	IN	Data Raw: 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 62 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 62 65 7c 7c 24 65 29 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 24 2e 52 30 62 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 2c 24 2e 4c 46 47 28 49 74 2c 38 29 29 7d 2c 24 65 2e 5c 75 30 32 37 35 70 72 6f 76 3d 24 2e 59 7a 37 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 65 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 24 2e 52 30 62 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 2c 24 2e 4c 46 47 28 49 74 2c 38 29 29 7d 2c 74 6f 6b 65 6e 3a 24 65 2c 70 72 6f 76 69 64 65 64 49 6e 3a 22 72 6f 6f 74 22 7d 29 2c 24 65 7d 28 29 2c 50 65 3d 6e 65 77 20 24 2e 4f 6c 50 28 22 6c 69 76 65 41 6e 6e 6f 75 6e 63 65 Data Ascii: fac=function(be){return new(be\|\|$e)($.LFG(O.t4),$.LFG($.R0b),$.LFG(Re.K0),$.LFG(It,8))},$e.\u0275prov=$.Yz7({factory:function(){return new $e($.LFG(O.t4),$.LFG($.R0b),$.LFG(Re.K0),$.LFG(It,8))},token:$e,providedIn:"root"}),$e}(),Pe=new $.OlP("liveAnnounce
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7d 7d 5d 29 2c 71 65 7d 28 29 3b 72 65 74 75 72 6e 20 24 65 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 62 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 62 65 7c 7c 24 65 29 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 29 7d 2c 24 65 2e 5c 75 30 32 37 35 70 72 6f 76 3d 24 2e 59 7a 37 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 65 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 29 7d 2c 74 6f 6b 65 6e 3a 24 65 2c 70 72 6f 76 69 64 65 64 49 6e 3a 22 72 6f 6f 74 22 7d 29 2c 24 65 7d 28 29 7d 2c 32 32 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 48 74 2c 58 65 2c 66 29 7b 66 2e 64 28 58 65 2c 7b 76 54 3a 66 75 6e Data Ascii: 00006000}}]),qe}();return $e.\u0275fac=function(be){return new(be\|\|$e)($.LFG(O.t4),$.LFG(Re.K0))},$e.\u0275prov=$.Yz7({factory:function(){return new $e($.LFG(O.t4),$.LFG(Re.K0))},token:$e,providedIn:"root"}),$e}()},22526:function(Ht,Xe,f){f.d(Xe,{vT:fun
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 28 29 7b 69 66 28 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 29 7b 76 61 72 20 53 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 4a 3d 53 2e 73 74 79 6c 65 2c 43 65 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2c 59 65 3d 4a 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 7c 7c 22 22 2c 5f 74 3d 43 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 7c 7c 22 22 3b 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 3d 21 31 2c 4a 2e 6c 65 66 74 3d 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 48 54 4d 4c 53 74 79 6c 65 73 2e 6c 65 66 74 2c 4a 2e 74 6f 70 3d 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 48 54 4d 4c 53 74 79 6c 65 73 2e 74 6f 70 2c 53 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f Data Ascii: (){if(this._isEnabled){var S=this._document.documentElement,J=S.style,Ce=this._document.body.style,Ye=J.scrollBehavior\|\|"",_t=Ce.scrollBehavior\|\|"";this._isEnabled=!1,J.left=this._previousHTMLStyles.left,J.top=this._previousHTMLStyles.top,S.classList.remo
2024-02-15 00:11:35 UTC	6809	IN	Data Raw: 30 30 30 30 31 41 38 44 0d 0a 74 66 6f 72 6d 2e 69 73 42 72 6f 77 73 65 72 7c 7c 28 30 2c 6e 74 2e 4f 79 29 28 29 29 66 6f 72 28 76 61 72 20 4a 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 22 2e 63 6f 6e 63 61 74 28 52 2c 27 5b 70 6c 61 74 66 6f 72 6d 3d 22 73 65 72 76 65 72 22 5d 2c 20 27 29 2b 22 2e 22 2e 63 6f 6e 63 61 74 28 52 2c 27 5b 70 6c 61 74 66 6f 72 6d 3d 22 74 65 73 74 22 5d 27 29 29 2c 43 65 3d 30 3b 43 65 3c 4a 2e 6c 65 6e 67 74 68 3b 43 65 2b 2b 29 4a 5b 43 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 4a 5b 43 65 5d 29 3b 76 61 72 20 59 65 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b Data Ascii: 00001A8Dtform.isBrowser\|\|(0,nt.Oy)())for(var J=this._document.querySelectorAll(".".concat(R,'[platform="server"], ')+".".concat(R,'[platform="test"]')),Ce=0;Ce<J.length;Ce++)J[Ce].parentNode.removeChild(J[Ce]);var Ye=this._document.createElement("div");
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 2c 4a 3d 74 68 69 73 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 43 65 2c 35 30 30 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 53 2c 52 2c 4a 29 7b 76 61 72 20 43 65 3d 53 2e 63 6c 61 73 73 4c 69 73 74 3b 28 30 2c 6c 2e 45 71 29 28 52 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 59 65 29 7b 59 65 26 26 28 4a 3f 43 65 2e 61 64 64 28 59 65 29 3a 43 65 2e 72 65 6d 6f 76 65 28 59 65 29 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 65 74 61 Data Ascii: 00004000tyle.pointerEvents="none",J=this._ngZone.runOutsideAngular(function(){return setTimeout(Ce,500)})}}},{key:"_toggleClasses",value:function(S,R,J){var Ce=S.classList;(0,l.Eq)(R).forEach(function(Ye){Ye&&(J?Ce.add(Ye):Ce.remove(Ye))})}},{key:"_deta
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 73 3d 22 22 2c 74 68 69 73 2e 0d 0a Data Ascii: s="",this.
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 5f 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3d 22 22 2c 74 68 69 73 2e 5f 77 69 64 74 68 3d 22 22 2c 74 68 69 73 2e 5f 68 65 69 67 68 74 3d 22 22 7d 72 65 74 75 72 6e 28 30 2c 64 2e 5a 29 28 6d 65 2c 5b 7b 6b 65 79 3a 22 61 74 74 61 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 53 29 7b 76 61 72 20 52 3d 53 2e 67 65 74 43 6f 6e 66 69 67 28 29 3b 74 68 69 73 2e 5f 6f 76 65 72 6c 61 79 52 65 66 3d 53 2c 74 68 69 73 2e 5f 77 69 64 74 68 26 26 21 52 2e 77 69 64 74 68 26 26 53 2e 75 70 64 61 74 65 53 69 7a 65 28 7b 77 69 64 74 68 3a 74 68 69 73 2e 5f 77 69 64 74 68 7d 29 2c 74 68 69 73 2e 5f 68 65 69 67 68 74 26 26 21 52 2e 68 65 69 67 68 74 26 26 53 2e 75 70 64 61 74 65 53 69 7a 65 28 7b 68 65 69 67 68 74 3a 74 68 69 Data Ascii: 00004000_justifyContent="",this._width="",this._height=""}return(0,d.Z)(me,[{key:"attach",value:function(S){var R=S.getConfig();this._overlayRef=S,this._width&&!R.width&&S.updateSize({width:this._width}),this._height&&!R.height&&S.updateSize({height:thi
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 0d 0a Data Ascii: function()
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 72 65 74 75 72 6e 20 53 7d 2c 62 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 74 7d 2c 6c 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 65 7d 2c 4f 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 69 7d 2c 45 4d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 61 7d 2c 4a 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 69 7d 2c 4e 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 2c 77 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 62 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 69 7d 2c 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 2c 4d 78 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 00006000{return S},b0:function(){return Pt},lw:function(){return he},OU:function(){return gi},EM:function(){return _a},JF:function(){return Si},NF:function(){return Pa},w_:function(){return O},bD:function(){return mi},q:function(){return j},Mx:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49811	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3660	OUT	GET /identity-ui/main.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "52863-60f9596be87ee" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=30 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df6c6 Server-Timing: ak_p; desc="1707955894685_400428362_1429075654_10012_13090_102_109_-";dur=1
2024-02-15 00:11:35 UTC	15660	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 38 32 35 35 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 66 75 6e 63 74 69 6f 6e 20 52 28 6b 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6b 2b 22 27 22 29 3b 74 68 72 6f 77 20 51 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 51 7d 29 Data Ascii: 00006000(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[179],{98255:function(B){function R(k){return Promise.resolve().then(function(){var Q=new Error("Cannot find module '"+k+"'");throw Q.code="MODULE_NOT_FOUND",Q})
2024-02-15 00:11:35 UTC	8928	IN	Data Raw: 74 20 50 61 73 73 77 6f 72 64 20 53 65 6c 65 63 74 20 52 65 74 72 69 65 76 61 6c 20 4d 65 74 68 6f 64 20 50 67 22 2c 22 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 66 6c 6f 77 43 6f 64 65 22 3a 22 46 50 57 44 22 2c 22 70 61 67 65 2e 6c 6f 63 61 74 69 6f 6e 2e 75 72 6c 22 3a 22 2f 68 61 6c 6f 63 2f 76 69 72 74 75 61 6c 2f 6c 6f 67 69 6e 2f 66 6f 72 67 6f 74 70 77 64 2f 73 65 6c 65 63 74 6d 65 74 68 6f 64 22 7d 2c 22 2f 66 70 77 64 2f 73 65 6c 65 63 74 6f 6e 65 6d 65 74 68 6f 64 22 3a 7b 22 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 66 72 69 65 6e 64 6c 79 50 61 67 65 4e 61 6d 65 22 3a 22 43 6f 6d 6d 6f 6e 20 4c 6f 67 69 6e 20 46 6f 72 67 6f 74 20 50 61 73 73 77 6f 72 64 20 53 65 6c 65 63 74 20 52 65 74 72 69 65 76 61 6c 20 4d 65 74 68 6f 64 20 50 67 22 2c 22 Data Ascii: t Password Select Retrieval Method Pg","page.pageInfo.flowCode":"FPWD","page.location.url":"/haloc/virtual/login/forgotpwd/selectmethod"},"/fpwd/selectonemethod":{"page.pageInfo.friendlyPageName":"Common Login Forgot Password Select Retrieval Method Pg","
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2c 22 6c 69 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 66 69 6c 65 6d 67 74 2e 66 69 72 73 74 6e 65 74 2e 61 74 74 2e 63 6f 6d 2f 69 63 61 6d 2d 66 69 72 73 74 6e 65 74 2f 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 22 2c 22 6c 69 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6e 74 69 6e 75 65 22 2c 22 6c 69 6e 6b 50 6f 73 69 74 69 6f 6e 22 3a 22 42 6f 64 79 22 7d 2c 22 66 6f 72 67 6f 74 2d 70 77 64 2d 73 75 62 6d 69 74 2d 65 72 72 69 63 73 6f 6e 22 3a 7b 22 65 76 65 6e 74 43 6f 64 65 22 3a 22 43 6f 6d 6d 6f 6e 5f 4c 6f 67 69 6e 5f 46 6f 72 67 6f 74 50 57 44 5f 46 69 6e 64 5f 50 61 73 73 77 6f 72 64 5f 53 75 62 6d 69 74 22 2c 22 6c 69 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 22 3a 22 Data Ascii: 00006000,"linkDestinationUrl":"https://profilemgt.firstnet.att.com/icam-firstnet/forgot-password","linkName":"continue","linkPosition":"Body"},"forgot-pwd-submit-erricson":{"eventCode":"Common_Login_ForgotPWD_Find_Password_Submit","linkDestinationUrl":"
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 2c 69 2c 74 2c 72 29 7b 74 68 69 73 2e 64 69 61 6c 6f 67 52 65 66 3d 6f 2c 74 68 69 73 2e 64 61 74 61 53 68 61 72 65 53 65 72 76 69 63 65 3d 69 2c 74 68 69 73 2e 72 6f 75 74 65 72 3d 74 2c 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 3d 72 2c 28 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 2e 69 6e 64 65 78 4f 66 28 22 66 69 64 22 29 3e 2d 31 3f 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 2e 66 69 72 65 45 76 65 6e 74 28 22 2f 63 61 6e 63 65 6c 4d 6f 64 61 6c 22 2c 22 50 61 67 65 5f 4c 6f 61 64 22 29 3a 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 2e 66 69 72 65 45 76 65 6e 74 28 22 2f 70 77 64 63 61 6e 63 65 6c 4d 6f 64 61 6c 22 2c 22 50 61 67 65 5f 4c 6f 61 64 22 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ,i,t,r){this.dialogRef=o,this.dataShareService=i,this.router=t,this.atService=r,(""+window.location.pathname).indexOf("fid")>-1?this.atService.fireEvent("/cancelModal","Page_Load"):this.atService.fireEvent("/pwdcancelModal","Page_Load")}return n.prototype
2024-02-15 00:11:35 UTC	11567	IN	Data Raw: 30 30 30 30 32 44 32 33 0d 0a 22 5d 2c 6f 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 50 72 65 70 61 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 74 74 70 43 6c 69 65 6e 74 2e 70 6f 73 74 28 22 22 2b 74 68 69 73 2e 52 45 53 54 5f 41 50 49 5f 53 45 52 56 45 52 2b 74 68 69 73 2e 61 70 69 43 6f 6e 66 69 67 2e 70 72 65 70 61 69 64 2c 6f 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 61 69 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 65 70 61 69 64 28 6f 29 2e 74 6f 50 72 6f 6d 69 73 65 28 29 7d 2c 6e 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 69 Data Ascii: 00002D23"],o)},n.prototype.validatePrepaid=function(o){return this.httpClient.post(""+this.REST_API_SERVER+this.apiConfig.prepaid,o)},n.prototype.prepaidRequest=function(o){return this.validatePrepaid(o).toPromise()},n.\u0275fac=function(i){return new(i
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 50 61 73 73 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 2e 67 65 74 28 22 70 61 73 73 77 6f 72 64 22 29 2e 76 61 6c 75 65 3d 3d 3d 6f 2e 67 65 74 28 22 63 6f 6e 66 69 72 6d 50 61 73 73 77 6f 72 64 22 29 2e 76 61 6c 75 65 3f 6e 75 6c 6c 3a 7b 6e 6f 74 53 61 6d 65 3a 21 30 7d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 50 61 73 73 77 6f 72 64 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 73 73 77 6f 72 64 54 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 74 68 69 73 2e 70 61 73 73 77 6f 72 64 54 79 70 65 3f 22 74 65 78 74 22 3a 22 70 61 73 73 77 6f 72 64 22 7d 2c 6e 2e 70 72 6f 74 6f 74 Data Ascii: 00004000s})},n.prototype.checkPasswords=function(o){return o.get("password").value===o.get("confirmPassword").value?null:{notSame:!0}},n.prototype.changePasswordType=function(){this.passwordType="password"===this.passwordType?"text":"password"},n.protot
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 6f 76 65 72 72 69 64 65 4d 73 0d 0a Data Ascii: overrideMs
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 67 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 32 22 2c 22 63 6c 61 73 73 22 2c 22 73 75 62 2d 68 65 61 64 65 72 22 2c 33 2c 22 69 6e 6e 65 72 48 54 4d 4c 22 2c 34 2c 22 6e 67 49 66 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 32 22 2c 22 63 6c 61 73 73 22 2c 22 73 75 62 2d 68 65 61 64 65 72 20 66 73 2d 31 36 22 2c 33 2c 22 69 6e 6e 65 72 48 54 4d 4c 22 2c 34 2c 22 6e 67 49 66 22 5d 2c 5b 31 2c 22 66 6f 72 6d 2d 67 72 6f 75 70 22 2c 22 74 65 78 74 2d 63 65 6e 74 65 72 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 33 22 2c 22 63 6c 61 73 73 22 2c 22 62 74 6e 20 63 6f 6e 74 69 6e 75 65 2d 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 22 2c 22 69 64 22 2c 22 63 61 6e 63 65 6c 22 2c 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 Data Ascii: 00006000g"],["tabindex","2","class","sub-header",3,"innerHTML",4,"ngIf"],["tabindex","2","class","sub-header fs-16",3,"innerHTML",4,"ngIf"],[1,"form-group","text-center"],["tabindex","3","class","btn continue-btn btn-primary","id","cancel",3,"translate"
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 73 3d 69 2e 6f 70 73 2e 70 6f 70 28 29 2c 69 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 61 3d 28 61 3d 69 2e 74 72 79 73 29 2e 6c 65 6e 67 74 68 3e 30 26 26 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 36 3d 3d 3d 73 5b 30 5d 7c 7c 32 3d 3d 3d 73 5b 30 5d 29 29 7b 69 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 73 5b 30 5d 26 26 28 21 61 7c 7c 73 5b 31 5d 3e 61 5b 30 5d 26 26 73 5b 31 5d 3c 61 5b 33 5d 29 29 7b 69 2e 6c 61 62 65 6c 3d 73 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 73 5b 30 5d 26 26 69 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 7b 69 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 73 3b 62 72 65 61 6b 7d 69 66 28 61 26 26 69 2e 6c Data Ascii: tinue;case 7:s=i.ops.pop(),i.trys.pop();continue;default:if(!(a=(a=i.trys).length>0&&a[a.length-1])&&(6===s[0]\|\|2===s[0])){i=0;continue}if(3===s[0]&&(!a\|\|s[1]>a[0]&&s[1]<a[3])){i.label=s[1];break}if(6===s[0]&&i.label<a[1]){i.label=a[1],a=s;break}if(a&&i.l
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 65 2e 78 70 36 28 31 29 2c 65 2e 51 36 4a 28 22 74 72 61 6e 73 6c 61 74 65 22 2c 22 66 6f 72 67 6f 74 70 61 73 73 77 6f 72 64 2e 76 61 6c 69 64 61 74 69 6f 6e 73 2e 6d 69 6e 6d 61 78 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 6e 2c 6f 29 7b 69 66 28 31 26 6e 29 7b 76 61 72 20 69 3d 65 2e 45 70 46 28 29 3b 65 2e 54 67 5a 28 30 2c 22 61 72 6b 6f 73 65 22 2c 33 35 29 2c 65 2e 4e 64 4a 28 22 6f 6e 43 6f 6d 70 6c 65 74 65 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 2e 43 48 4d 28 69 29 2c 65 2e 6f 78 77 28 29 2e 6f 6e 43 6f 6d 70 6c 65 74 65 64 28 61 29 7d 29 28 22 6f 6e 45 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 65 2e 43 48 4d 28 69 29 2c 65 2e 6f 78 77 28 29 2e Data Ascii: 00006000(e.xp6(1),e.Q6J("translate","forgotpassword.validations.minmax"))}function en(n,o){if(1&n){var i=e.EpF();e.TgZ(0,"arkose",35),e.NdJ("onCompleted",function(a){return e.CHM(i),e.oxw().onCompleted(a)})("onError",function(a){return e.CHM(i),e.oxw().

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49813	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:34 UTC	3673	OUT	GET /_sec/cp_challenge/sec-cpt-4-2.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:34 UTC	706	IN	HTTP/1.1 200 OK Stored-Attribute-Sha-Checksum: 2a89c2d225e7d40c1bdf1a49b10f20b492b26004e916b512cfdda42c4bcb6ac6 Last-Modified: Mon, 22 Jan 2024 20:27:21 GMT ETag: "218f93008812f61a5c9ebf303c079840d7a472e7c95c0f0d93077edd0cf70f87" Content-Type: application/javascript Edge-Cache-Tag: identity.att.com Date: Thu, 15 Feb 2024 00:11:34 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Cache-Control: max-age=86400 Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955894.552df6cb Server-Timing: ak_p; desc="1707955894686_400428362_1429075659_19_4006_102_112_-";dur=1
2024-02-15 00:11:34 UTC	15678	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 59 43 6e 52 42 44 74 41 73 7a 28 29 7b 46 28 29 3b 64 32 28 29 3b 51 32 28 29 3b 76 61 72 20 47 55 3d 66 75 6e 63 74 69 6f 6e 28 72 44 2c 4c 44 29 7b 72 65 74 75 72 6e 20 72 44 3e 3e 4c 44 3b 7d 3b 76 61 72 20 4d 44 3d 66 75 6e 63 74 69 6f 6e 28 4e 44 29 7b 72 65 74 75 72 6e 20 21 4e 44 3b 7d 3b 76 61 72 20 46 44 3d 66 75 6e 63 74 69 6f 6e 28 78 44 2c 49 44 29 7b 72 65 74 75 72 6e 20 78 44 3c 3d 49 44 3b 7d 3b 76 61 72 20 55 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 44 44 3d 5b 51 44 5d 3b 7d 3b 76 61 72 20 64 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 44 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 42 4e 2c 61 72 67 75 6d 65 6e 74 73 5d 29 3b 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 32 28 Data Ascii: 00006000(function YCnRBDtAsz(){F();d2();Q2();var GU=function(rD,LD){return rD>>LD;};var MD=function(ND){return !ND;};var FD=function(xD,ID){return xD<=ID;};var UD=function(){DD=[QD];};var dD=function(){return ZD.apply(this,[BN,arguments]);};function T2(
2024-02-15 00:11:35 UTC	8910	IN	Data Raw: 2c 54 44 29 3b 2d 2d 72 43 29 7b 4d 5b 47 50 5b 72 43 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4c 43 3d 47 50 5b 72 43 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 4d 43 2c 4e 43 2c 46 43 2c 78 43 29 7b 76 61 72 20 49 43 3d 74 44 28 4d 46 2c 5b 4d 43 2c 4e 43 2c 6e 44 2c 78 43 5d 29 3b 4d 5b 4c 43 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 43 3b 7d 3b 72 65 74 75 72 6e 20 49 43 3b 7d 3b 7d 28 29 3b 7d 57 34 2d 3d 63 49 3b 7d 62 72 65 61 6b 3b 63 61 73 65 20 49 78 3a 7b 57 34 3d 74 46 3b 76 61 72 20 50 41 3d 7a 34 5b 46 4e 5d 3b 7d 62 72 65 61 6b 3b 7d 7d 77 68 69 6c 65 28 57 34 21 3d 49 46 29 3b 7d 3b 76 61 72 20 4f 44 3d 66 75 6e 63 74 69 6f 6e 28 55 43 2c 44 43 29 7b 72 65 74 75 72 6e 20 55 43 2b 44 43 3b 7d 3b Data Ascii: ,TD);--rC){M[GP[rC]]=function(){var LC=GP[rC];return function(MC,NC,FC,xC){var IC=tD(MF,[MC,NC,nD,xC]);M[LC]=function(){return IC;};return IC;};}();}W4-=cI;}break;case Ix:{W4=tF;var PA=z4[FN];}break;}}while(W4!=IF);};var OD=function(UC,DC){return UC+DC;};
2024-02-15 00:11:35 UTC	15393	IN	Data Raw: 30 30 30 30 33 43 31 35 0d 0a 7a 63 28 6a 63 2c 77 63 29 7b 44 44 2e 70 75 73 68 28 68 30 29 3b 69 66 28 6a 63 5b 4d 2e 53 72 28 71 41 2c 4b 5a 2c 7a 70 29 5d 28 4d 2e 56 4c 28 78 64 2c 73 50 2c 67 5a 2c 74 50 29 29 26 26 70 34 28 6a 63 5b 4d 2e 56 4c 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 78 64 2c 58 42 2c 67 5a 2c 71 50 29 5d 2c 4d 2e 63 4c 28 4e 34 2c 5a 30 29 29 29 7b 76 61 72 20 62 63 3d 4c 5b 4d 2e 73 4c 28 53 34 2c 49 30 2c 4f 64 29 5d 5b 4d 2e 4b 4c 28 43 51 2c 71 42 2c 71 5a 2c 77 70 29 5d 28 4d 2e 67 4c 28 64 64 2c 77 44 28 45 30 29 29 29 3b 77 68 69 6c 65 28 62 63 5b 4d 2e 71 4c 28 7a 64 2c 46 41 2c 58 5a 2c 4d 44 28 4d 44 28 7b 7d 29 29 29 5d 29 7b 62 63 5b 4d 2e 58 4c 28 63 70 2c 4d 44 28 4d 44 28 5b 5d 29 29 2c 73 70 2c 78 41 29 5d 28 62 63 5b 4d Data Ascii: 00003C15zc(jc,wc){DD.push(h0);if(jc[M.Sr(qA,KZ,zp)](M.VL(xd,sP,gZ,tP))&&p4(jc[M.VL.call(null,xd,XB,gZ,qP)],M.cL(N4,Z0))){var bc=L[M.sL(S4,I0,Od)][M.KL(CQ,qB,qZ,wp)](M.gL(dd,wD(E0)));while(bc[M.qL(zd,FA,XZ,MD(MD({})))]){bc[M.XL(cp,MD(MD([])),sp,xA)](bc[M
2024-02-15 00:11:35 UTC	5836	IN	Data Raw: 30 30 30 30 31 36 43 30 0d 0a 2c 6e 34 2c 4a 34 2c 4d 42 2c 4e 42 2c 46 42 2c 68 64 2c 6c 64 2c 57 64 2c 7a 64 2c 54 64 2c 76 64 2c 6a 64 2c 62 64 2c 4f 64 2c 53 64 2c 6e 64 2c 4a 64 2c 42 34 2c 43 34 2c 62 44 2c 4a 44 2c 4e 6d 2c 46 6d 2c 6d 70 2c 70 70 2c 42 70 2c 50 70 2c 43 70 2c 56 70 2c 58 42 2c 74 42 2c 6b 42 2c 68 42 2c 45 42 2c 66 42 2c 62 42 2c 4f 42 2c 48 42 2c 53 42 2c 6e 42 2c 4a 42 2c 59 42 2c 78 5a 2c 49 5a 2c 55 5a 2c 44 5a 2c 51 5a 2c 64 5a 2c 58 41 2c 74 41 2c 6b 41 2c 68 41 2c 45 41 2c 51 41 2c 64 41 2c 5a 41 2c 41 41 2c 6d 41 2c 70 41 2c 77 41 2c 62 41 2c 4f 41 2c 48 41 2c 53 41 2c 50 30 2c 43 30 2c 56 30 2c 63 30 2c 73 30 2c 4b 30 2c 67 30 2c 4c 50 2c 4d 50 2c 4e 50 2c 46 50 2c 78 50 2c 71 30 2c 58 30 2c 74 30 2c 6b 30 2c 68 30 2c 45 Data Ascii: 000016C0,n4,J4,MB,NB,FB,hd,ld,Wd,zd,Td,vd,jd,bd,Od,Sd,nd,Jd,B4,C4,bD,JD,Nm,Fm,mp,pp,Bp,Pp,Cp,Vp,XB,tB,kB,hB,EB,fB,bB,OB,HB,SB,nB,JB,YB,xZ,IZ,UZ,DZ,QZ,dZ,XA,tA,kA,hA,EA,QA,dA,ZA,AA,mA,pA,wA,bA,OA,HA,SA,P0,C0,V0,c0,s0,K0,g0,LP,MP,NP,FP,xP,q0,X0,t0,k0,h0,E
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49816	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3697	OUT	GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "1ee5c-6086eedc4035a" Last-Modified: Tue, 24 Oct 2023 04:39:48 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=26 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955895.552df808 Server-Timing: ak_p; desc="1707955895023_400428362_1429075976_3530_14169_102_112_-";dur=1
2024-02-15 00:11:35 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 2a 20 5b 55 6e 69 76 65 72 73 61 6c 20 43 6c 69 65 6e 74 5d 20 20 30 38 2f 33 31 2f 32 30 32 33 20 2d 20 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 32 33 35 20 2a 2f 20 0a 20 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 61 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 65 2c 61 2e 63 3d 74 2c 61 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: 00006000/** [Universal Client] 08/31/2023 - Version: 1.0.235 */ !function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n
2024-02-15 00:11:35 UTC	8927	IN	Data Raw: 43 68 69 6c 64 53 63 6f 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 3d 3d 3d 65 2e 24 69 64 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 24 24 63 68 69 6c 64 48 65 61 64 3b 6e 75 6c 6c 21 3d 6e 3b 29 6e 2e 24 69 64 21 3d 3d 74 3f 28 6e 2e 24 24 63 68 69 6c 64 48 65 61 64 26 26 28 61 3d 74 68 69 73 2e 67 65 74 43 68 69 6c 64 53 63 6f 70 65 28 6e 2c 74 29 29 2c 6e 3d 6e 75 6c 6c 21 3d 3d 61 3f 6e 75 6c 6c 3a 6e 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 29 3a 28 61 3d 6e 2c 6e 3d 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 63 2e 4c 6f 67 67 65 72 2e 6c 6f 67 28 65 2c 63 2e 4c 6f 67 4c 65 76 65 6c 73 2e 65 72 72 6f 72 2c 22 4d 61 70 44 61 74 61 22 29 7d 72 65 74 75 72 6e 20 Data Ascii: ChildScope=function(e,t){var a=null;if(t===e.$id)return e;try{for(var n=e.$$childHead;null!=n;)n.$id!==t?(n.$$childHead&&(a=this.getChildScope(n,t)),n=null!==a?null:n.$$nextSibling):(a=n,n=null)}catch(e){c.Logger.log(e,c.LogLevels.error,"MapData")}return
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 29 7d 7d 2c 72 2e 73 65 6e 64 28 29 7d 29 29 7d 2c 65 2e 70 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6c 29 7b 76 61 72 20 63 3d 21 30 3b 69 66 28 61 26 26 61 2e 65 76 74 44 65 74 61 69 6c 73 26 26 61 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 54 79 70 65 26 26 22 67 65 6e 65 72 61 74 65 50 61 73 73 54 68 72 6f 75 67 68 22 3d 3d 3d 61 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 54 79 70 65 29 73 28 22 73 74 61 74 75 73 43 6f 64 65 3a 69 67 6e 6f 72 65 64 22 29 3b 65 6c 73 65 7b 69 66 28 61 26 26 61 2e 65 76 74 41 63 74 69 6f 6e 29 7b 28 61 2e 65 76 74 41 63 74 69 6f 6e 3d 3d 3d 6f 2e 45 76 65 6e 74 41 63 Data Ascii: 00006000t)}},r.send()}))},e.post=function(t,a){return new Promise((function(s,l){var c=!0;if(a&&a.evtDetails&&a.evtDetails.eventType&&"generatePassThrough"===a.evtDetails.eventType)s("statusCode:ignored");else{if(a&&a.evtAction){(a.evtAction===o.EventAc
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 63 61 73 65 20 35 3a 69 2e 6c 61 62 65 6c 2b 2b 2c 6e 3d 72 5b 31 5d 2c 72 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 72 3d 69 2e 6f 70 73 2e 70 6f 70 28 29 2c 69 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 6f 3d 69 2e 74 72 79 73 2c 28 6f 3d 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 29 7c 7c 36 21 3d 3d 72 5b 30 5d 26 26 32 21 3d 3d 72 5b 30 5d 29 29 7b 69 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 72 5b 30 5d 26 26 28 21 6f 7c 7c 72 5b 31 5d 3e 6f 5b 30 5d 26 26 72 5b 31 5d 3c 6f 5b 33 5d 29 29 7b 69 2e 6c 61 62 65 6c 3d 72 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 72 5b 30 5d 26 26 69 2e 6c 61 62 65 6c 3c 6f 5b 31 5d 29 Data Ascii: case 5:i.label++,n=r[1],r=[0];continue;case 7:r=i.ops.pop(),i.trys.pop();continue;default:if(!(o=i.trys,(o=o.length>0&&o[o.length-1])\|\|6!==r[0]&&2!==r[0])){i=0;continue}if(3===r[0]&&(!o\|\|r[1]>o[0]&&r[1]<o[3])){i.label=r[1];break}if(6===r[0]&&i.label<o[1])
2024-02-15 00:11:35 UTC	2889	IN	Data Raw: 30 30 30 30 30 42 33 44 0d 0a 2e 69 6e 66 6f 2c 65 2e 43 53 43 29 7d 74 68 69 73 2e 70 61 79 6c 6f 61 64 73 2e 6c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 64 6f 6e 65 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 65 72 66 6f 72 6d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 61 6e 66 26 26 74 68 69 73 2e 61 6e 66 2e 68 61 73 72 65 67 69 73 74 65 72 65 64 26 26 74 68 69 73 2e 61 6e 66 2e 6c 69 73 74 65 6e 69 6e 67 26 26 74 68 69 73 2e 61 6e 66 2e 68 61 6e 64 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 74 68 69 73 2e 63 72 69 74 65 72 69 61 2c 65 29 2c 65 2e 65 76 74 41 63 74 69 6f 6e 26 26 28 65 2e 65 76 74 41 63 74 69 6f 6e 3d 3d 3d 64 2e 45 76 65 6e 74 41 63 74 69 Data Ascii: 00000B3D.info,e.CSC)}this.payloads.length=0,this.done=!0},e.prototype.performNotifications=function(e){if(void 0!==this.anf&&this.anf.hasregistered&&this.anf.listening&&this.anf.handleNotification(this.criteria,e),e.evtAction&&(e.evtAction===d.EventActi
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 5b 36 5d 7c 61 2c 6c 5b 38 5d 3d 36 33 26 6c 5b 38 5d 7c 31 32 38 2c 69 29 7b 73 3d 73 7c 7c 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 69 5b 73 2b 63 5d 3d 6c 5b 63 5d 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 6c 29 7d 74 72 79 7b 69 2e 6e 61 6d 65 3d 65 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 69 2e 44 4e 53 3d 74 2e 44 4e 53 2c 69 2e 55 52 4c 3d 74 2e 55 52 4c 2c 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 61 28 38 29 Data Ascii: 00004000l[6]\|a,l[8]=63&l[8]\|128,i){s=s\|\|0;for(var c=0;c<16;++c)i[s+c]=l[c];return i}return(0,n.default)(l)}try{i.name=e}catch(e){}return i.DNS=t.DNS,i.URL=t.URL,i}},function(e,t,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=a(8)
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 74 69 6f 6e 28 29 3a 20 61 74 0d 0a Data Ascii: tion(): at
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 72 69 62 75 74 65 20 61 72 65 20 2e 2e 2e 2e 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3b 76 61 72 20 61 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 2e 65 76 65 6e 74 54 79 70 65 7c 7c 22 67 65 6e 65 72 61 74 65 50 61 73 73 54 68 72 6f 75 67 68 22 21 3d 3d 65 2e 65 76 65 6e 74 54 79 70 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 65 76 65 6e 74 41 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 22 65 76 65 6e 74 43 6f 64 65 22 21 3d 3d 6e 26 26 22 70 72 69 6f 72 69 74 79 70 75 73 68 22 21 3d 3d 6e 26 26 22 64 61 74 61 74 72 61 6e 73 66 6f 72 6d 22 21 3d 3d 6e 26 26 22 70 65 72 73 69 73 74 65 6e 63 65 4c 6f 67 22 21 3d 3d 6e 26 26 22 6c 6f 67 4c 65 76 65 6c 22 21 3d 3d 6e 26 26 28 22 61 64 64 69 74 69 6f Data Ascii: 00004000tribute are ...."+JSON.stringify(e));var a={};if(null===e.eventType\|\|"generatePassThrough"!==e.eventType){for(var n in e)"eventAction"!==n&&"eventCode"!==n&&"prioritypush"!==n&&"datatransform"!==n&&"persistenceLog"!==n&&"logLevel"!==n&&("additio
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 61 70 70 47 6c 6f 62 61 6c 44 0d 0a Data Ascii: appGlobalD
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 74 61 3d 69 7c 7c 7b 7d 2c 64 65 6c 65 74 65 20 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 70 61 67 65 7d 65 6c 73 65 20 65 2e 61 70 70 47 6c 6f 62 61 6c 44 61 74 61 3d 72 2e 67 6c 6f 62 61 6c 41 74 74 72 3f 72 2e 67 6c 6f 62 61 6c 41 74 74 72 3a 7b 7d 7d 69 66 28 65 2e 65 76 74 44 65 74 61 69 6c 73 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 43 6f 64 65 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 41 63 74 69 6f 6e 26 26 28 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 41 63 74 69 6f 6e 3d 74 68 69 73 2e 61 63 74 69 6f 6e 2c 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 43 6f 64 65 3d 74 68 69 73 2e 63 6f 64 65 29 2c Data Ascii: 00006000ata=i\|\|{},delete e.evtDetails.page}else e.appGlobalData=r.globalAttr?r.globalAttr:{}}if(e.evtDetails){if(void 0===e.evtDetails.eventCode&&void 0===e.evtDetails.eventAction&&(e.evtDetails.eventAction=this.action,e.evtDetails.eventCode=this.code),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49817	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3688	OUT	GET /static/thirdparty/quantum/quantum-att-loader.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	683	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "844-60406f882e07e" Last-Modified: Tue, 29 Aug 2023 02:57:25 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Content-Length: 2116 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=33 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955895.552df8d1 Server-Timing: ak_p; desc="1707955895246_400428362_1429076177_4335_13543_102_105_-";dur=1
2024-02-15 00:11:35 UTC	2116	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 76 20 65 35 31 38 32 61 63 62 62 64 35 32 37 31 65 31 37 64 32 37 66 62 36 37 36 37 62 35 30 36 32 39 35 66 63 34 62 64 32 31 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 76 61 72 20 64 3d 30 3b 72 65 74 Data Ascii: /* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula v e5182acbbd5271e17d27fb6767b506295fc4bd21 */function l(a){var d=0;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49818	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3677	OUT	GET /identity-ui/styles.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F&ld=5ms&hd=643"; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:35 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/css ETag: "397cc-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=20 Server-Timing: origin; dur=37 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955895.552df8eb Server-Timing: ak_p; desc="1707955895266_400428362_1429076203_6058_11791_102_106_-";dur=1
2024-02-15 00:11:35 UTC	15675	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 73 6d 61 6c 6c 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 6c 61 72 67 65 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6d 61 74 2d 68 31 2c 2e 6d 61 74 2d 68 65 61 64 6c 69 6e 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 31 7b 66 6f 6e 74 3a 34 30 30 Data Ascii: 00006000.mat-badge-content{font-weight:600;font-size:12px;font-family:Roboto,Helvetica Neue,sans-serif}.mat-badge-small .mat-badge-content{font-size:9px}.mat-badge-large .mat-badge-content{font-size:24px}.mat-h1,.mat-headline,.mat-typography h1{font:400
2024-02-15 00:11:35 UTC	8913	IN	Data Raw: 69 6f 6e 2d 7a 33 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 33 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 33 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 34 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 34 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 35 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 Data Ascii: ion-z3{box-shadow:0 3px 3px -2px rgba(0,0,0,.2),0 3px 4px 0 rgba(0,0,0,.14),0 1px 8px 0 rgba(0,0,0,.12)}.mat-elevation-z4{box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12)}.mat-elevation-z5{box-shadow:0 3px
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 7b Data Ascii: 00006000mat-flat-button.mat-accent,.mat-flat-button.mat-primary,.mat-flat-button.mat-warn,.mat-mini-fab.mat-accent,.mat-mini-fab.mat-primary,.mat-mini-fab.mat-warn,.mat-raised-button.mat-accent,.mat-raised-button.mat-primary,.mat-raised-button.mat-warn{
2024-02-15 00:11:35 UTC	8204	IN	Data Raw: 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c 65 63 74 65 64 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 2c 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 2e 6d 61 74 2d 77 61 72 6e 20 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c Data Ascii: ndar-body-cell-content:not(.mat-calendar-body-selected):not(.mat-calendar-body-comparison-identical),.mat-datepicker-content.mat-warn .mat-calendar-body-cell:not(.mat-calendar-body-disabled):hover>.mat-calendar-body-cell-content:not(.mat-calendar-body-sel
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 61 74 6f 72 2d 69 6e 63 72 65 6d 65 6e 74 2c 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 6c 61 73 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 38 29 7d 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 75 66 66 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 66 69 Data Ascii: 00004000nator-increment,.mat-icon-button[disabled] .mat-paginator-last{border-color:rgba(0,0,0,.38)}.mat-paginator-container{min-height:56px}.mat-progress-bar-background{fill:#cbd0e9}.mat-progress-bar-buffer{background-color:#cbd0e9}.mat-progress-bar-fi
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 74 2d 74 61 62 2d 68 65 61 64 0d 0a Data Ascii: t-tab-head
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 2c 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d Data Ascii: 00004000er-pagination-chevron,.mat-tab-group.mat-background-primary>.mat-tab-link-container .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-header .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-
2024-02-15 00:11:35 UTC	12	IN	Data Raw: 6f 59 53 49 67 62 57 46 7a 61 0d 0a Data Ascii: oYSIgbWFza
2024-02-15 00:11:35 UTC	6093	IN	Data Raw: 30 30 30 30 31 37 43 31 0d 0a 31 56 75 61 58 52 7a 50 53 4a 31 63 32 56 79 55 33 42 68 59 32 56 50 62 6c 56 7a 5a 53 49 67 65 44 30 69 4d 43 49 67 65 54 30 69 4d 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 34 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 45 35 49 6a 34 4e 43 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 67 59 32 78 70 63 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4f 44 67 35 4d 53 41 35 4c 6a 55 33 4e 54 63 32 51 7a 45 33 4c 6a 67 34 4f 54 45 67 4d 54 51 75 4e 44 41 33 4e 79 41 78 4d 79 34 35 4d 44 6b 79 49 44 45 34 4c 6a 4d 79 4e 53 41 35 4c 6a 41 77 4d 44 49 7a 49 44 45 34 4c 6a 4d 79 4e 55 4d 30 4c 6a 41 35 4d 54 45 7a 49 44 45 34 4c 6a Data Ascii: 000017C11VuaXRzPSJ1c2VyU3BhY2VPblVzZSIgeD0iMCIgeT0iMCIgd2lkdGg9IjE4IiBoZWlnaHQ9IjE5Ij4NCjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTcuODg5MSA5LjU3NTc2QzE3Ljg4OTEgMTQuNDA3NyAxMy45MDkyIDE4LjMyNSA5LjAwMDIzIDE4LjMyNUM0LjA5MTEzIDE4Lj
2024-02-15 00:11:35 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 62 74 6e 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 2e 6d 69 64 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 65 72 72 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 38 70 78 7d 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 63 75 73 74 6f 6d 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 32 36 35 2e 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 0000600022px;margin-top:16px}.btn-link{width:100%}input.middle:focus{outline-width:0}input:focus{outline:none}.form-input-error{width:100%;height:48px}body .container{margin-top:6px}.custom-dialog-container .mat-dialog-container{width:265.3px;height:100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49820	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3676	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:35 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:35 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955895.552dfa8f Server-Timing: ak_p; desc="1707955895722_400428362_1429076623_2835_13397_102_105_-";dur=1
2024-02-15 00:11:36 UTC	1195	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:36 UTC	724	IN	Data Raw: 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e Data Ascii: int=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49821	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3696	OUT	GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 4639 Content-Type: application/json ETag: "121f-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=44 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfaff Server-Timing: ak_p; desc="1707955895848_400428362_1429076735_6545_13767_102_108_-";dur=1
2024-02-15 00:11:36 UTC	1190	IN	Data Raw: 7b 0a 20 20 20 20 22 65 72 72 6f 72 43 6f 64 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 31 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d Data Ascii: { "errorCodes": { "400": { "PMS10000": { "message": "errors.PMS10006" }, "PMS10001": { "message": "errors.PMS10004" }, "PMS10002": { "m
2024-02-15 00:11:36 UTC	3449	IN	Data Raw: 53 31 30 30 30 39 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 32 30 30 32 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 32 30 30 32 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 46 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: S10009": { "message": "errors.PFS10009" }, "PMS20020": { "message": "errors.PMS20020" }, "PFS10002": { "message": "errors.PFS10002" },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49822	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3680	OUT	GET /identity-ui/assets/i18n/en.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 23740 Content-Type: application/json ETag: "5cbc-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfb0f Server-Timing: ak_p; desc="1707955895860_400428362_1429076751_2799_13417_102_110_-";dur=1
2024-02-15 00:11:36 UTC	1190	IN	Data Raw: 7b 0a 20 20 22 66 6f 72 67 6f 74 70 61 73 73 77 6f 72 64 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 4c 65 74 27 73 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 2c 0a 20 20 20 20 22 73 75 62 68 65 61 64 65 72 22 3a 20 22 45 6e 74 65 72 20 79 6f 75 72 20 75 73 65 72 20 49 44 20 61 6e 64 20 6c 61 73 74 20 6e 61 6d 65 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 68 65 61 64 65 72 22 3a 22 52 65 73 74 6f 72 65 20 61 63 63 65 73 73 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 53 75 62 68 65 61 64 65 72 22 3a 22 54 6f 6f 20 6d 61 6e 79 20 73 69 67 6e 2d 69 6e 20 61 74 74 65 6d 70 74 73 2e 20 54 6f 20 72 65 73 74 6f 72 65 20 61 63 63 65 73 73 2c 20 6c 65 74 e2 80 99 73 20 6d 61 6b 65 20 73 75 72 65 20 69 74 e2 80 99 Data Ascii: { "forgotpassword": { "header": "Let's reset your password", "subheader": "Enter your user ID and last name", "unlockOtpheader":"Restore access", "unlockOtpSubheader":"Too many sign-in attempts. To restore access, lets make sure it
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 6d 61 74 3a 20 6e 61 6d 65 40 64 6f 6d 61 69 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6d 69 6e 6d 61 78 22 3a 20 22 45 6e 74 65 72 20 62 65 74 77 65 65 6e 20 32 20 61 6e 64 20 35 30 20 63 68 61 72 61 63 74 65 72 73 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 72 72 6f 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 31 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 55 73 65 72 20 49 44 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 32 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 20 20 50 6c 65 73 61 73 65 Data Ascii: mat: name@domain.com", "minmax": "Enter between 2 and 50 characters." }, "errors": { "InvalidPWD1": "Password cannot contain your User ID. Plesase try again.", "InvalidPWD2": "Password cannot contain your email address. Plesase
2024-02-15 00:11:36 UTC	6166	IN	Data Raw: 67 27 73 20 67 6f 6e 65 20 77 72 6f 6e 67 2e 20 20 50 6c 65 61 73 65 20 72 65 66 72 65 73 68 20 74 68 65 20 70 61 67 65 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 22 50 57 44 31 30 30 30 32 22 3a 20 22 43 68 6f 6f 73 65 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 64 6f 65 73 6e 27 74 20 69 6e 63 6c 75 64 65 20 79 6f 75 72 20 75 73 65 72 20 49 44 2e 22 2c 0a 20 20 20 20 22 50 57 44 31 30 30 30 33 22 3a 20 22 43 68 6f 6f 73 65 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 64 6f 65 73 6e 27 74 20 69 6e 63 6c 75 64 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 0a 20 20 20 20 22 50 57 44 31 30 30 30 34 22 3a 20 22 43 68 6f 6f 73 65 20 61 20 70 61 73 73 77 6f 72 64 20 74 68 61 74 20 64 6f 65 73 6e 27 74 Data Ascii: g's gone wrong. Please refresh the page and try again.", "PWD10002": "Choose a password that doesn't include your user ID.", "PWD10003": "Choose a password that doesn't include your email address.", "PWD10004": "Choose a password that doesn't

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49823	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3698	OUT	GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" lang: en-us Accept: application/json, text/plain, / Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 222 Content-Type: application/json ETag: "de-5f7857a471bf4" Last-Modified: Wed, 22 Mar 2023 23:25:37 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=28 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfb18 Server-Timing: ak_p; desc="1707955895867_400428362_1429076760_4513_11705_102_111_-";dur=1
2024-02-15 00:11:36 UTC	222	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49824	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	3704	OUT	GET /identity-ui/undefined HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	762	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Content-Length: 8898 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfb2f Server-Timing: ak_p; desc="1707955895880_400428362_1429076783_2985_12055_102_125_-";dur=1
2024-02-15 00:11:36 UTC	8898	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49825	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:35 UTC	814	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955895264 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-02-15 00:11:36 UTC	1053	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; expires=Sat, 14-Feb-2026 00:11:36 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:36 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:11:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49830	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3659	OUT	GET /identity-ui/styles.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/css ETag: "397cc-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=32 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfc2b Server-Timing: ak_p; desc="1707955896158_400428362_1429077035_5653_13966_102_114_-";dur=1
2024-02-15 00:11:36 UTC	15675	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 73 6d 61 6c 6c 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 6c 61 72 67 65 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6d 61 74 2d 68 31 2c 2e 6d 61 74 2d 68 65 61 64 6c 69 6e 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 31 7b 66 6f 6e 74 3a 34 30 30 Data Ascii: 00006000.mat-badge-content{font-weight:600;font-size:12px;font-family:Roboto,Helvetica Neue,sans-serif}.mat-badge-small .mat-badge-content{font-size:9px}.mat-badge-large .mat-badge-content{font-size:24px}.mat-h1,.mat-headline,.mat-typography h1{font:400
2024-02-15 00:11:36 UTC	8913	IN	Data Raw: 69 6f 6e 2d 7a 33 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 33 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 33 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 34 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 34 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 35 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 Data Ascii: ion-z3{box-shadow:0 3px 3px -2px rgba(0,0,0,.2),0 3px 4px 0 rgba(0,0,0,.14),0 1px 8px 0 rgba(0,0,0,.12)}.mat-elevation-z4{box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12)}.mat-elevation-z5{box-shadow:0 3px
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 7b Data Ascii: 00006000mat-flat-button.mat-accent,.mat-flat-button.mat-primary,.mat-flat-button.mat-warn,.mat-mini-fab.mat-accent,.mat-mini-fab.mat-primary,.mat-mini-fab.mat-warn,.mat-raised-button.mat-accent,.mat-raised-button.mat-primary,.mat-raised-button.mat-warn{
2024-02-15 00:11:36 UTC	8204	IN	Data Raw: 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c 65 63 74 65 64 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 2c 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 2e 6d 61 74 2d 77 61 72 6e 20 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c Data Ascii: ndar-body-cell-content:not(.mat-calendar-body-selected):not(.mat-calendar-body-comparison-identical),.mat-datepicker-content.mat-warn .mat-calendar-body-cell:not(.mat-calendar-body-disabled):hover>.mat-calendar-body-cell-content:not(.mat-calendar-body-sel
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 61 74 6f 72 2d 69 6e 63 72 65 6d 65 6e 74 2c 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 6c 61 73 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 38 29 7d 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 75 66 66 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 66 69 Data Ascii: 00004000nator-increment,.mat-icon-button[disabled] .mat-paginator-last{border-color:rgba(0,0,0,.38)}.mat-paginator-container{min-height:56px}.mat-progress-bar-background{fill:#cbd0e9}.mat-progress-bar-buffer{background-color:#cbd0e9}.mat-progress-bar-fi
2024-02-15 00:11:36 UTC	12	IN	Data Raw: 74 2d 74 61 62 2d 68 65 61 64 0d 0a Data Ascii: t-tab-head
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 2c 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d Data Ascii: 00004000er-pagination-chevron,.mat-tab-group.mat-background-primary>.mat-tab-link-container .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-header .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-
2024-02-15 00:11:36 UTC	12	IN	Data Raw: 6f 59 53 49 67 62 57 46 7a 61 0d 0a Data Ascii: oYSIgbWFza
2024-02-15 00:11:36 UTC	6093	IN	Data Raw: 30 30 30 30 31 37 43 31 0d 0a 31 56 75 61 58 52 7a 50 53 4a 31 63 32 56 79 55 33 42 68 59 32 56 50 62 6c 56 7a 5a 53 49 67 65 44 30 69 4d 43 49 67 65 54 30 69 4d 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 34 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 45 35 49 6a 34 4e 43 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 67 59 32 78 70 63 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4f 44 67 35 4d 53 41 35 4c 6a 55 33 4e 54 63 32 51 7a 45 33 4c 6a 67 34 4f 54 45 67 4d 54 51 75 4e 44 41 33 4e 79 41 78 4d 79 34 35 4d 44 6b 79 49 44 45 34 4c 6a 4d 79 4e 53 41 35 4c 6a 41 77 4d 44 49 7a 49 44 45 34 4c 6a 4d 79 4e 55 4d 30 4c 6a 41 35 4d 54 45 7a 49 44 45 34 4c 6a Data Ascii: 000017C11VuaXRzPSJ1c2VyU3BhY2VPblVzZSIgeD0iMCIgeT0iMCIgd2lkdGg9IjE4IiBoZWlnaHQ9IjE5Ij4NCjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTcuODg5MSA5LjU3NTc2QzE3Ljg4OTEgMTQuNDA3NyAxMy45MDkyIDE4LjMyNSA5LjAwMDIzIDE4LjMyNUM0LjA5MTEzIDE4Lj
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 62 74 6e 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 2e 6d 69 64 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 65 72 72 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 38 70 78 7d 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 63 75 73 74 6f 6d 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 32 36 35 2e 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 0000600022px;margin-top:16px}.btn-link{width:100%}input.middle:focus{outline-width:0}input:focus{outline:none}.form-input-error{width:100%;height:48px}body .container{margin-top:6px}.custom-dialog-container .mat-dialog-container{width:265.3px;height:100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49831	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3676	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=21 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfc3a Server-Timing: ak_p; desc="1707955896181_400428362_1429077050_3116_11489_102_111_-";dur=1
2024-02-15 00:11:36 UTC	1191	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:36 UTC	728	IN	Data Raw: 6e 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e Data Ascii: n_point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49832	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2382	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=28 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfca0 Server-Timing: ak_p; desc="1707955896311_400428362_1429077152_3153_11327_102_120_-";dur=1
2024-02-15 00:11:36 UTC	1192	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:36 UTC	727	IN	Data Raw: 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 Data Ascii: _point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49828	144.160.125.207	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2487	OUT	GET /static/ciam/en/common/js/keepAlive.js HTTP/1.1 Host: signin.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	439	IN	HTTP/1.1 200 OK accept-ranges: bytes connection: close content-length: 1137 content-type: application/javascript date: Wed, 14 Feb 2024 19:03:40 GMT etag: "471-5ec958c0567c0" last-modified: Thu, 03 Nov 2022 18:58:47 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" access-control-allow-origin: * x-frame-options: SAMEORIGIN apser: p893 age: 18476 strict-transport-security: max-age=31536000; includeSubDomains; preload iam_on: D317
2024-02-15 00:11:36 UTC	1137	IN	Data Raw: 2f 2a 2a 0a 20 2a 2a 20 31 29 20 54 68 69 73 20 4a 61 76 61 53 63 72 69 70 74 20 69 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 41 54 26 54 20 43 53 4f 2d 54 67 75 61 72 64 20 47 72 6f 75 70 2e 0a 20 2a 2a 20 32 29 20 49 6d 70 6f 72 74 20 74 68 69 73 20 4a 61 76 61 53 63 72 69 70 74 20 66 69 6c 65 73 20 69 6e 74 6f 20 74 68 65 20 70 61 67 65 73 20 77 68 65 72 65 20 6e 65 65 64 65 64 2e 0a 20 2a 2a 20 33 29 20 54 68 69 73 20 4a 61 76 61 53 63 72 69 70 74 20 77 69 6c 6c 20 72 65 66 72 65 73 68 20 74 68 65 20 73 65 73 73 69 6f 6e 20 77 68 65 6e 20 74 68 65 20 75 73 65 72 20 67 6f 65 73 20 74 6f 20 61 20 64 69 66 66 65 72 65 6e 74 20 70 61 67 65 20 77 68 69 63 68 20 69 73 20 6e 6f 74 20 62 65 68 69 6e 64 20 6f 75 72 20 77 65 62 73 65 61 6c 0a 20 2a 2a 20 34 29 Data Ascii: / 1) This JavaScript is provided by AT&T CSO-Tguard Group. 2) Import this JavaScript files into the pages where needed. 3) This JavaScript will refresh the session when the user goes to a different page which is not behind our webseal ** 4)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49834	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3698	OUT	GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" lang: en-us Accept: application/json, text/plain, / Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 222 Content-Type: application/json ETag: "de-5f7857a471bf4" Last-Modified: Wed, 22 Mar 2023 23:25:37 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfcc3 Server-Timing: ak_p; desc="1707955896360_400428362_1429077187_2695_13030_102_110_-";dur=1
2024-02-15 00:11:36 UTC	222	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49837	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2400	OUT	GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 222 Content-Type: application/json ETag: "de-5f7857a471bf4" Last-Modified: Wed, 22 Mar 2023 23:25:37 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfcf4 Server-Timing: ak_p; desc="1707955896388_400428362_1429077236_5046_12546_102_119_-";dur=1
2024-02-15 00:11:36 UTC	222	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49833	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3667	OUT	GET /static/thirdparty/quantum/quantum-att.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "c7b76-609af8f8f3bbe" Last-Modified: Thu, 09 Nov 2023 03:11:32 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=8 Server-Timing: origin; dur=42 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfcf8 Server-Timing: ak_p; desc="1707955896404_400428362_1429077240_5062_14464_102_106_-";dur=1
2024-02-15 00:11:36 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 61 74 74 20 34 38 34 62 30 61 32 61 33 34 30 36 64 33 37 65 34 37 37 61 31 63 32 39 35 61 64 66 66 62 65 62 32 33 31 32 34 34 62 65 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 Data Ascii: 00006000/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att 484b0a2a3406d37e477a1c295adffbeb231244be // Copyright
2024-02-15 00:11:36 UTC	8926	IN	Data Raw: 2e 76 61 6c 75 65 7d 3b 77 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 28 22 4c 56 22 2c 74 68 69 73 2e 76 61 6c 75 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 62 28 61 2c 62 2c 63 2c 64 29 7b 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 73 72 63 3d 62 3b 74 68 69 73 2e 42 3d 6e 65 77 20 52 65 67 45 78 70 28 62 29 3b 74 68 69 73 2e 67 3d 63 3b 74 68 69 73 2e 76 61 6c 75 65 3d 64 7d 42 28 78 62 2c 4c 29 3b 78 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 42 2e 65 78 65 63 28 74 68 69 73 2e 76 61 6c 75 65 2e 65 76 61 6c 75 61 74 65 28 29 29 3b 72 65 74 75 72 6e 20 61 3f 28 61 3d 61 5b 74 68 69 73 2e 67 Data Ascii: .value};wb.prototype.K=function(){return J("LV",this.value.toString())};function xb(a,b,c,d){L.call(this);this.src=b;this.B=new RegExp(b);this.g=c;this.value=d}B(xb,L);xb.prototype.W=function(){var a=this.B.exec(this.value.evaluate());return a?(a=a[this.g
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 35 38 44 45 0d 0a 65 48 65 61 64 65 72 73 28 29 3b 62 26 26 28 61 3d 6b 63 28 62 29 2c 74 68 69 73 2e 47 2e 75 61 2e 66 69 3d 61 29 7d 72 65 74 75 72 6e 20 61 3f 61 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 7d 3b 0a 6a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 28 22 58 48 52 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 22 2c 74 68 69 73 2e 42 2c 74 68 69 73 2e 67 29 7d 3b 6a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 24 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 78 68 72 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 63 29 7b 6a 63 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 2c 63 29 7d 42 28 6c 63 2c 6a 63 29 3b 6c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 Data Ascii: 000058DEeHeaders();b&&(a=kc(b),this.G.ua.fi=a)}return a?a[this.g]:void 0}};jc.prototype.K=function(){return J("XHRResponseHeader",this.B,this.g)};jc.prototype.$=function(){return{xhr:!0}};function lc(a,b,c){jc.call(this,a,b,c)}B(lc,jc);lc.prototype.W=f
2024-02-15 00:11:36 UTC	6378	IN	Data Raw: 7c 28 24 63 3d 21 30 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 51 4d 3a 20 41 50 49 20 4c 69 73 74 65 6e 65 72 20 63 61 75 67 68 74 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 67 29 29 7d 7d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 61 64 28 61 2c 22 65 76 65 6e 74 22 2c 63 2c 64 29 7d 53 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 73 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 73 74 6f 72 61 67 65 2e 67 65 74 28 22 6c 61 73 74 55 72 6c 22 2c 21 31 29 7d 3b 53 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 63 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 62 64 3d 7b 72 61 67 65 3a 2d 32 2c 66 72 75 73 74 72 61 74 69 6f 6e 3a 2d 35 Data Ascii: \|($c=!0,console.warn("QM: API Listener caught exception: "+g))}}"number"===typeof b&&ad(a,"event",c,d)}S.prototype.lastUrl=function(){return this.D.storage.get("lastUrl",!1)};S.prototype.get=function(a,b,c){return Pc(a,b,c)};var bd={rage:-2,frustration:-5
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 63 3d 36 34 3d 3d 3d 62 2e 7a 63 29 29 69 66 28 63 3d 61 2e 72 61 2c 61 2e 44 2e 74 62 26 26 21 61 2e 44 2e 6e 61 29 63 3d 21 31 3b 65 6c 73 65 7b 76 61 72 20 64 3d 62 2e 6f 61 2e 70 61 74 68 6e 61 6d 65 3d 3d 3d 63 2e 6f 61 2e 70 61 74 68 6e 61 6d 65 26 26 62 2e 6f 61 2e 73 65 61 72 63 68 3d 3d 3d 63 2e 6f 61 2e 73 65 61 72 63 68 26 26 62 2e 6f 61 2e 68 61 73 68 21 3d 3d 63 2e 6f 61 2e 68 61 73 68 3b 34 3d 3d 3d 62 2e 7a 63 26 26 64 7c 7c 31 36 3d 3d 3d 62 2e 7a 63 26 26 28 21 61 2e 44 2e 41 2e 6d 6f 6e 69 74 6f 72 41 6c 6c 48 61 73 68 43 68 61 6e 67 65 73 7c 7c 72 64 28 62 2e 6f 61 2e 68 72 65 66 2c 61 2e 44 2e 75 69 29 29 3f 63 3d 21 31 3a 28 64 3d 63 2e 6f 61 2e 6f 72 69 67 69 6e 3d 3d 3d 62 2e 6f 61 2e 6f 72 69 67 69 Data Ascii: 00004000(c=64===b.zc))if(c=a.ra,a.D.tb&&!a.D.na)c=!1;else{var d=b.oa.pathname===c.oa.pathname&&b.oa.search===c.oa.search&&b.oa.hash!==c.oa.hash;4===b.zc&&d\|\|16===b.zc&&(!a.D.A.monitorAllHashChanges\|\|rd(b.oa.href,a.D.ui))?c=!1:(d=c.oa.origin===b.oa.origi
2024-02-15 00:11:36 UTC	12	IN	Data Raw: 28 61 29 7b 66 6f 72 28 76 61 0d 0a Data Ascii: (a){for(va
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 32 2a 61 2e 6c 65 6e 67 74 68 29 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 2c 65 3d 32 2a 63 3b 62 5b 65 5d 3d 64 3e 3e 38 26 32 35 35 3b 62 5b 65 2b 31 5d 3d 64 26 32 35 35 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 61 29 7b 61 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 3b 63 3c 3d 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 36 35 45 33 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 6c 69 63 65 28 63 2c 63 2b 36 35 45 33 29 29 3b 72 65 74 75 72 Data Ascii: 00004000r b=new Uint8Array(2a.length),c=0;c<a.length;c++){var d=a.charCodeAt(c),e=2c;b[e]=d>>8&255;b[e+1]=d&255}return b}function Ke(a){a=new Uint8Array(a);for(var b="",c=0;c<=a.length;c+=65E3)b+=String.fromCharCode.apply(null,a.slice(c,c+65E3));retur
2024-02-15 00:11:36 UTC	12	IN	Data Raw: 6c 74 2a 3d 22 62 65 61 63 6f 0d 0a Data Ascii: lt*="beaco
2024-02-15 00:11:36 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 61 6e 61 6c 79 74 69 63 73 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 73 70 79 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 74 72 61 63 6b 65 72 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 63 6f 6e 76 65 72 73 69 6f 6e 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 31 78 31 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 75 74 6d 5f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 2f 22 5d 27 2e 73 70 6c 69 74 28 22 20 22 29 2c 76 61 6c 69 64 61 74 65 46 72 61 6d 65 53 72 63 43 53 50 3a 21 30 7d Data Ascii: 00006000n"] img[alt="analytics"] img[alt="spy"] img[alt="tracker"] img[alt="conversion"] img[alt="1x1"] img[src="utm_"] img[src="google-analytics.com/"] img[src="doubleclick.net/"] img[src*="facebook.com/tr/"]'.split(" "),validateFrameSrcCSP:!0}
2024-02-15 00:11:37 UTC	8204	IN	Data Raw: 50 72 6f 70 65 72 74 79 28 22 64 22 29 29 7b 76 61 72 20 63 3d 22 73 22 3d 3d 62 2e 74 2c 64 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 30 3c 61 2e 57 63 7c 7c 63 3f 28 62 2e 64 3d 64 2d 61 2e 57 63 2c 61 2e 57 63 3d 64 29 3a 62 2e 64 3d 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 67 28 61 2c 62 29 7b 69 66 28 21 61 2e 66 61 29 7b 76 61 72 20 63 3d 22 73 22 3d 3d 62 2e 74 3b 62 67 28 61 2c 62 29 3b 61 2e 51 63 26 26 28 62 2e 65 6b 65 79 3d 56 65 28 61 2e 67 61 29 2c 61 2e 51 63 3d 21 31 29 3b 63 3f 61 2e 69 61 2e 75 6e 73 68 69 66 74 28 62 29 3a 61 2e 69 61 2e 70 75 73 68 28 62 29 7d 7d 78 3d 4d 66 2e 70 72 6f 74 6f 74 79 70 65 3b 78 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 30 3d 3d 62 2e 6c 65 6e 67 74 68 29 72 65 Data Ascii: Property("d")){var c="s"==b.t,d=Date.now();0<a.Wc\|\|c?(b.d=d-a.Wc,a.Wc=d):b.d=1}}function ag(a,b){if(!a.fa){var c="s"==b.t;bg(a,b);a.Qc&&(b.ekey=Ve(a.ga),a.Qc=!1);c?a.ia.unshift(b):a.ia.push(b)}}x=Mf.prototype;x.removedNodes=function(a,b){if(0==b.length)re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49835	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2376	OUT	GET /identity-ui/undefined HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	762	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Content-Length: 8898 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfd0b Server-Timing: ak_p; desc="1707955896425_400428362_1429077259_3227_11361_102_107_-";dur=1
2024-02-15 00:11:36 UTC	8898	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49836	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2402	OUT	GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 4639 Content-Type: application/json ETag: "121f-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=64 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfd11 Server-Timing: ak_p; desc="1707955896429_400428362_1429077265_8381_11362_102_106_-";dur=1
2024-02-15 00:11:36 UTC	1189	IN	Data Raw: 7b 0a 20 20 20 20 22 65 72 72 6f 72 43 6f 64 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 31 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d Data Ascii: { "errorCodes": { "400": { "PMS10000": { "message": "errors.PMS10006" }, "PMS10001": { "message": "errors.PMS10004" }, "PMS10002": { "m
2024-02-15 00:11:36 UTC	3450	IN	Data Raw: 46 53 31 30 30 30 39 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 32 30 30 32 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 32 30 30 32 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 46 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: FS10009": { "message": "errors.PFS10009" }, "PMS20020": { "message": "errors.PMS20020" }, "PFS10002": { "message": "errors.PFS10002" },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49838	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2386	OUT	GET /identity-ui/assets/i18n/en.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	701	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 23740 Content-Type: application/json ETag: "5cbc-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=18 Server-Timing: origin; dur=69 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfd0f Server-Timing: ak_p; desc="1707955896429_400428362_1429077263_8638_10200_102_106_-";dur=1
2024-02-15 00:11:36 UTC	1184	IN	Data Raw: 7b 0a 20 20 22 66 6f 72 67 6f 74 70 61 73 73 77 6f 72 64 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 4c 65 74 27 73 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 2c 0a 20 20 20 20 22 73 75 62 68 65 61 64 65 72 22 3a 20 22 45 6e 74 65 72 20 79 6f 75 72 20 75 73 65 72 20 49 44 20 61 6e 64 20 6c 61 73 74 20 6e 61 6d 65 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 68 65 61 64 65 72 22 3a 22 52 65 73 74 6f 72 65 20 61 63 63 65 73 73 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 53 75 62 68 65 61 64 65 72 22 3a 22 54 6f 6f 20 6d 61 6e 79 20 73 69 67 6e 2d 69 6e 20 61 74 74 65 6d 70 74 73 2e 20 54 6f 20 72 65 73 74 6f 72 65 20 61 63 63 65 73 73 2c 20 6c 65 74 e2 80 99 73 20 6d 61 6b 65 20 73 75 72 65 20 69 74 e2 80 99 Data Ascii: { "forgotpassword": { "header": "Let's reset your password", "subheader": "Enter your user ID and last name", "unlockOtpheader":"Restore access", "unlockOtpSubheader":"Too many sign-in attempts. To restore access, lets make sure it
2024-02-15 00:11:36 UTC	6664	IN	Data Raw: 69 73 20 66 6f 72 6d 61 74 3a 20 6e 61 6d 65 40 64 6f 6d 61 69 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6d 69 6e 6d 61 78 22 3a 20 22 45 6e 74 65 72 20 62 65 74 77 65 65 6e 20 32 20 61 6e 64 20 35 30 20 63 68 61 72 61 63 74 65 72 73 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 72 72 6f 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 31 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 55 73 65 72 20 49 44 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 32 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 20 20 50 Data Ascii: is format: name@domain.com", "minmax": "Enter between 2 and 50 characters." }, "errors": { "InvalidPWD1": "Password cannot contain your User ID. Plesase try again.", "InvalidPWD2": "Password cannot contain your email address. P
2024-02-15 00:11:36 UTC	8191	IN	Data Raw: 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 35 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 36 22 3a 20 22 50 61 73 73 77 6f 72 64 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6e 75 6d 62 65 72 20 61 6e 64 20 6f 6e 65 20 6c 65 74 74 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 37 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 6f 6e 20 70 61 73 73 77 6f 72 64 73 20 6f 72 20 62 Data Ascii: "InvalidPWD5": "Password cannot contain your phone number. Plesase try again.", "InvalidPWD6": "Password must contain at least one number and one letter. Plesase try again.", "InvalidPWD7": "Password cannot contain common passwords or b
2024-02-15 00:11:36 UTC	7701	IN	Data Raw: 62 72 3e 20 4f 6e 63 65 20 79 6f 75 20 72 65 63 65 69 76 65 20 79 6f 75 72 20 74 65 6d 70 6f 72 61 72 79 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 6d 61 69 6c 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 73 69 67 6e 20 69 6e 20 61 6e 64 20 74 68 65 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 70 65 72 6d 61 6e 65 6e 74 20 70 61 73 73 77 6f 72 64 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 61 6e 63 65 6c 22 3a 20 22 43 61 6e 63 65 6c 22 2c 0a 20 20 20 20 22 64 6f 6e 65 22 3a 20 22 44 6f 6e 65 22 2c 0a 20 20 20 20 22 66 69 6e 69 73 68 22 3a 20 22 46 69 6e 69 73 68 22 0a 20 20 7d 2c 0a 20 20 22 70 61 73 73 77 6f 72 64 53 75 63 63 65 73 73 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 41 6c 6c 20 73 65 74 21 22 2c 0a 20 Data Ascii: br> Once you receive your temporary password in the mail, you can use it to sign in and then create your permanent password." }, "cancel": "Cancel", "done": "Done", "finish": "Finish" }, "passwordSuccess": { "header": "All set!",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49840	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3676	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:36 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:36 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=11 Server-Timing: origin; dur=26 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfdf2 Server-Timing: ak_p; desc="1707955896656_400428362_1429077490_3654_13778_102_104_-";dur=1
2024-02-15 00:11:36 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:36 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49841	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2382	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=23 Server-Timing: origin; dur=54 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955896.552dfe6a Server-Timing: ak_p; desc="1707955896775_400428362_1429077610_8215_12042_103_105_-";dur=1
2024-02-15 00:11:37 UTC	1195	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:37 UTC	724	IN	Data Raw: 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e Data Ascii: int=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49842	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	3718	OUT	GET /identity-ui/assets/img/ATT_LOGO.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	660	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5268 Content-Type: image/svg+xml ETag: "1494-60f908f42f5d2" Last-Modified: Mon, 22 Jan 2024 22:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p416 Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1508331 Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552dfe9b Server-Timing: ak_p; desc="1707955896825_400428362_1429077659_27_13942_102_110_-";dur=1
2024-02-15 00:11:37 UTC	5268	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 39 2e 37 38 39 31 20 31 36 2e 38 30 38 33 43 33 39 2e 36 33 31 34 20 31 36 2e 38 30 38 33 20 33 39 2e 35 32 32 34 20 31 36 2e 37 30 30 33 20 33 39 2e 35 32 32 34 20 31 36 2e 35 34 34 56 38 2e 38 30 34 35 31 48 33 36 2e 38 36 36 32 43 33 36 2e 37 30 38 36 20 38 2e 38 30 34 35 31 20 33 36 2e 35 39 39 34 20 38 2e 36 39 36 35 Data Ascii: <svg width="60" height="24" viewBox="0 0 60 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M39.7891 16.8083C39.6314 16.8083 39.5224 16.7003 39.5224 16.544V8.80451H36.8662C36.7086 8.80451 36.5994 8.6965

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49843	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:36 UTC	2400	OUT	GET /identity-ui/externcfg/_default_/fid-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 222 Content-Type: application/json ETag: "de-5f7857a471bf4" Last-Modified: Wed, 22 Mar 2023 23:25:37 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552dfecb Server-Timing: ak_p; desc="1707955896866_400428362_1429077707_2955_11253_102_105_-";dur=1
2024-02-15 00:11:37 UTC	222	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49844	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	2618	OUT	GET /identity-ui/ATTAleckSans_W_Md.woff2 HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://identity.att.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://identity.att.com/identity-ui/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 19596 Content-Type: font/woff2 ETag: "4c8c-60f92cf219c5d" Last-Modified: Tue, 23 Jan 2024 01:24:34 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" Access-Control-Allow-Origin: https://identity.att.com apser: p134 Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1606465 Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552dffbe Server-Timing: ak_p; desc="1707955897078_400428362_1429077950_22_13194_102_123_-";dur=1
2024-02-15 00:11:37 UTC	15685	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 4c 8c 00 11 00 00 00 00 b3 f0 00 00 4c 29 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 6e 1b d1 7a 1c 96 02 06 60 00 86 66 08 82 58 09 8d 57 11 0c 0a 81 c8 70 81 ac 3e 01 36 02 24 03 8b 40 0b 85 62 00 04 20 05 84 2e 07 20 0c 83 7e 1b ae a1 37 70 6e 4e f9 c9 28 b7 0d 18 58 c5 a9 ef ba f2 6c 44 0d 1b 07 c6 43 f6 81 51 08 6c 1c 08 30 f7 0f cf fe ff ff 13 92 8d 43 ba b2 5d 55 80 df 83 8a c1 cc 15 77 44 20 ab 27 06 46 05 02 36 b2 27 12 59 33 73 15 aa c4 4e 97 bb 5b 5f cd 23 8d 04 0b 06 03 49 6c aa 83 0e 12 07 66 07 84 c3 c5 94 d7 8e 38 c4 10 43 e1 fb 66 ca 4e 1c 43 47 25 42 71 10 a5 f8 cf 23 14 c3 16 29 0c a1 84 59 43 15 78 ba 98 4b 12 fb f9 db de 65 51 d8 9d da 8e 76 3e 7f 27 7e e9 7b ef 92 0e 7b Data Ascii: wOF2LL)nz`fXWp>6$@b . ~7pnN(XlDCQl0C]UwD 'F6'Y3sN[_#Ilf8CfNCG%Bq#)YCxKeQv>'~{{
2024-02-15 00:11:37 UTC	3911	IN	Data Raw: b9 dd 05 38 79 c9 7d e9 93 e9 bb d3 6f e3 d8 95 29 a6 ef 59 fe 69 ea d3 18 3f 60 46 a7 03 7c 23 5e 60 fc e9 dd 49 4e ad 59 41 4e 90 2c ac c1 74 4d 86 9b d7 01 6b b4 28 bf b0 bf dd f7 c9 cb b6 87 08 79 a3 12 dd 8e d2 8c 7f 57 bc 3d ef 15 62 f9 f6 91 05 6b b3 71 64 27 ad f2 22 e0 90 22 02 16 4a 2a 8d 18 6b 82 c1 a9 b0 64 05 88 ee 69 6d 6a 0c e6 48 19 d7 77 fb 96 e3 2a 81 14 f4 ec f1 b3 29 85 84 7d 86 f0 f0 45 e7 74 ca 73 98 b0 77 9c 90 74 7a 4e be ae d4 77 01 f0 9d f1 5d 7d 53 f9 5c 72 5d d6 97 20 e9 98 f9 0a 2c 4d 0d b8 ee e4 93 a1 82 4a b2 62 dc 35 ca 16 3c ce 0e 9d 41 b9 44 53 a1 a7 c1 08 08 ea 2b 02 7b 62 a3 a0 45 81 33 33 ea c6 05 74 99 14 c1 67 87 23 dc 78 42 8b b5 9c 28 86 84 83 d8 29 f6 08 16 00 e2 84 b0 12 37 22 42 84 ef 00 22 ce 4c bb 70 09 0a 93 Data Ascii: 8y}o)Yi?`F\|#^`INYAN,tMk(yW=bkqd'""JkdimjHw)}EtswtzNw]}S\r] ,MJb5<ADS+{bE33tg#xB()7"B"Lp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49845	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	3680	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" lang: en-us Accept: application/json, text/plain, / Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	701	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=157 Server-Timing: origin; dur=81 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552dffd0 Server-Timing: ak_p; desc="1707955897121_400428362_1429077968_23779_12299_102_105_-";dur=1
2024-02-15 00:11:37 UTC	1193	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:37 UTC	726	IN	Data Raw: 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c Data Ascii: point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49847	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	2420	OUT	GET /identity-ui/assets/img/ATT_LOGO.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
2024-02-15 00:11:37 UTC	660	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 5268 Content-Type: image/svg+xml ETag: "1494-60f908f42f5d2" Last-Modified: Mon, 22 Jan 2024 22:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p416 Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1508331 Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552e0050 Server-Timing: ak_p; desc="1707955897260_400428362_1429078096_23_12228_102_105_-";dur=1
2024-02-15 00:11:37 UTC	5268	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 36 30 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 36 30 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 33 39 2e 37 38 39 31 20 31 36 2e 38 30 38 33 43 33 39 2e 36 33 31 34 20 31 36 2e 38 30 38 33 20 33 39 2e 35 32 32 34 20 31 36 2e 37 30 30 33 20 33 39 2e 35 32 32 34 20 31 36 2e 35 34 34 56 38 2e 38 30 34 35 31 48 33 36 2e 38 36 36 32 43 33 36 2e 37 30 38 36 20 38 2e 38 30 34 35 31 20 33 36 2e 35 39 39 34 20 38 2e 36 39 36 35 Data Ascii: <svg width="60" height="24" viewBox="0 0 60 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M39.7891 16.8083C39.6314 16.8083 39.5224 16.7003 39.5224 16.544V8.80451H36.8662C36.7086 8.80451 36.5994 8.6965

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49848	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	2382	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"
2024-02-15 00:11:37 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:37 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=10 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552e007c Server-Timing: ak_p; desc="1707955897294_400428362_1429078140_3278_12296_102_113_-";dur=1
2024-02-15 00:11:37 UTC	1192	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:37 UTC	727	IN	Data Raw: 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 Data Ascii: _point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49850	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	3749	OUT	GET /identity-ui/assets/img/ATT_Globe.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
2024-02-15 00:11:37 UTC	603	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 2941 Content-Type: image/svg+xml ETag: "b7d-60f92bd4cc803" Last-Modified: Tue, 23 Jan 2024 01:19:35 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p941 Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1900881 Date: Thu, 15 Feb 2024 00:11:37 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552e0167 Server-Timing: ak_p; desc="1707955897535_400428362_1429078375_24_12813_102_121_-";dur=1
2024-02-15 00:11:37 UTC	2941	IN	Data Raw: 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 2e 38 34 36 36 38 20 30 48 Data Ascii: <svg width="26" height="24" viewBox="0 0 26 24" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="26" height="24"><path fill-rule="evenodd" clip-rule="evenodd" d="M0.84668 0H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49851	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:37 UTC	2412	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
2024-02-15 00:11:38 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:38 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955897.552e025a Server-Timing: ak_p; desc="1707955897790_400428362_1429078618_2727_12063_102_106_-";dur=1
2024-02-15 00:11:38 UTC	1192	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:38 UTC	515	IN	Data Raw: 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 Data Ascii: _point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.b
2024-02-15 00:11:38 UTC	212	IN	Data Raw: 20 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 6b 65 79 22 20 3a 20 22 54 42 44 22 2c 0a 20 20 20 20 20 20 20 20 22 64 69 73 61 62 6c 65 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 6d 6f 64 65 22 3a 20 22 6c 69 67 68 74 62 6f 78 22 2c 0a 20 20 20 20 20 20 20 20 22 74 61 72 67 65 74 55 72 6c 22 3a 20 22 2f 66 70 77 64 2f 73 6f 6d 65 74 68 69 6e 67 77 65 6e 74 77 72 6f 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 22 73 72 63 22 20 20 20 3a 20 22 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 2d 61 70 69 2e 61 72 6b 6f 73 65 6c 61 62 73 2e 63 6f 6d 2f 76 32 2f 70 75 62 6c 69 63 4b 65 79 2f 61 70 69 2e 6a 73 22 0a 20 20 20 20 7d 0a 7d 0a Data Ascii: : { "key" : "TBD", "disable": true, "mode": "lightbox", "targetUrl": "/fpwd/somethingwentwrong", "src" : "https://client-api.arkoselabs.com/v2/publicKey/api.js" }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49852	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	2421	OUT	GET /identity-ui/assets/img/ATT_Globe.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; rxvt=1707957691814\|1707955886003; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; dtPC=19$355885995_830h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=1&tt=5gz&bcn=%2F%2F173bf10b.akstat.io%2F"; azure_ssaf_stack=ssafwestus2
2024-02-15 00:11:38 UTC	605	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 2941 Content-Type: image/svg+xml ETag: "b7d-60f92bd4cc803" Last-Modified: Tue, 23 Jan 2024 01:19:35 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p941 Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=1900880 Date: Thu, 15 Feb 2024 00:11:38 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955898.552e02f3 Server-Timing: ak_p; desc="1707955897973_400428362_1429078771_1215_10775_102_110_-";dur=1
2024-02-15 00:11:38 UTC	2941	IN	Data Raw: 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 36 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 22 20 6d 61 73 6b 2d 74 79 70 65 3d 22 61 6c 70 68 61 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 36 22 20 68 65 69 67 68 74 3d 22 32 34 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 2e 38 34 36 36 38 20 30 48 Data Ascii: <svg width="26" height="24" viewBox="0 0 26 24" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0" mask-type="alpha" maskUnits="userSpaceOnUse" x="0" y="0" width="26" height="24"><path fill-rule="evenodd" clip-rule="evenodd" d="M0.84668 0H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49801	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	1953	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897562&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 1054 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:38 UTC	1054	OUT	Data Raw: 78 01 ed 56 7f 6f e2 38 10 fd 2e 96 ba d2 aa 14 12 e7 37 52 75 a2 14 28 5d a0 34 40 5b 38 9d 90 49 4c 70 49 9c 34 71 12 a0 da ef 7e e3 04 ba fb cf dd 27 58 09 c5 2f 93 99 79 e3 f1 e4 85 bf 3f 91 40 6d 94 a1 06 8a 51 5b 6d a0 12 ae d8 56 1a 68 87 da 8e 62 35 d0 e1 62 38 02 50 b0 de 40 df 21 c0 de 52 c3 33 6c c5 f3 7c 55 b7 a8 45 a8 bf a1 54 b1 34 6d 6b 28 ba 6e 41 be 0c b5 4d cb 81 4c 89 64 e8 cc bf cd c1 98 a7 21 dc ec 84 48 b2 76 ab c5 7c ca 05 13 c7 26 11 a2 e9 c5 d1 97 e1 26 67 ad 2d f3 5b 21 e1 3e 4d ff 8a 53 16 30 4e 04 8b f9 3a 89 19 17 b7 22 c8 49 ea 7f 73 a9 c8 53 be 5e b8 a3 db 2a e7 95 d6 b9 c2 7d f8 c5 cc f7 9a cc 4f 9a 5e 18 43 e8 85 00 9e 44 01 81 6b 96 64 d2 8b e4 62 77 59 b1 02 48 1a 80 ed 44 af b4 3e 8f b9 07 eb fd ce 3f dc a9 a7 de 1d 49 Data Ascii: xVo8.7Ru(]4@[8ILpI4q~'X/y?@mQ[mVhb5b8P@!R3l\|UET4mk(nAMLd!Hv\|&&g-[!>MS0N:"IsS^*}O^CDkdbwYHD>?I
2024-02-15 00:11:38 UTC	267	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:38 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:11:38 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 62 61 35 36 63 64 36 35 37 65 38 35 63 34 32 32 65 33 61 65 61 35 61 34 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/ba56cd657e85c422e3aea5a4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49807	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	1983	OUT	POST /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897564&z=1&Q=1&Y=1&X=8fe5c580ccd147e7aedbee0733f50447 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 1746 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:38 UTC	1746	OUT	Data Raw: 78 01 bd 59 6b 77 da 46 10 fd 2b 0a 1f 9a 0f f5 22 9b 24 27 a9 63 bb 07 03 b6 a9 79 15 e4 a4 4e 9d e3 b3 48 0b da 5a d2 aa da 15 36 cd c9 7f ef ac 5e ac 1e 08 12 a7 cd 49 08 a0 9d d9 99 3b 77 ee 3e 38 79 d1 1d 77 8c db 49 4f b3 85 eb 9c 9d 24 af 04 5b 67 27 ba 1d fd 37 67 d6 fa ec e4 05 42 bf 0f 7f 9b 8d 47 57 c6 70 70 fc a5 71 d4 80 17 af 71 dc 90 9f 1b 07 0d dc 38 fe f3 4b a3 95 7e eb 60 6f 09 df ae 60 00 f1 1a 5f bf 7e 3e 68 74 a2 11 1b bb 5e bb 9b d8 65 0f 5f 49 73 69 73 e7 69 1a 58 1d 28 f3 cc 3a d3 fe c4 d8 6a 21 87 7f 8e 2c f6 77 52 37 c1 ce 67 df 38 4d dd f0 61 cf 68 97 21 34 6d 1c 70 22 12 14 43 b1 40 ef f6 ca b1 da 9b 2d 84 8f c8 df 21 5d 25 0e ff 40 37 6d d4 61 ae 8f 05 9d 3b 24 46 3b ab 9f c9 3c 41 bc 74 f2 7e ef 94 58 4b 39 66 37 c4 46 df 18 Data Ascii: xYkwF+"$'cyNHZ6^I;w>8ywIO$[g'7gBGWppqq8K~`o`_~>ht^e_IsisiX(:j!,wR7g8Mah!4mp"C@-!]%@7ma;$F;<At~XK9f7F
2024-02-15 00:11:38 UTC	964	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://identity.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49856	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	1734	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897562&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:38 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49855	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	1764	OUT	GET /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955897564&z=1&Q=1&Y=1&X=8fe5c580ccd147e7aedbee0733f50447 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:38 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49857	35.226.68.60	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:38 UTC	554	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	1106	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:38 GMT Content-Type: application/json Content-Length: 24 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://identity.att.com Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET,POST Access-Control-Max-Age: 31536000 Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:11:39 UTC	24	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 5d 7d Data Ascii: {"abn":"","cv":0,"E":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49863	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:39 UTC	2049	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955898565&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 449 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	449	OUT	Data Raw: 78 01 95 d2 4d b3 9a 30 14 06 e0 ff 92 ad 54 49 42 48 c2 cc 5d 78 11 51 2f 20 82 f8 41 a7 0b 3f 50 11 41 2c 9a 88 8e ff bd 8e bd d3 c5 ed 74 d1 d5 d9 bc cf 39 ef e2 dc 41 92 25 35 30 ee 9f 13 08 64 08 91 10 cf 93 db 21 36 2f a9 65 91 ad 2f 84 23 1d 61 a7 47 56 4e 59 95 48 d2 6a 87 ad b8 d3 4e a7 13 4a 9c ab d7 c3 82 ef 9c 16 71 a3 f7 e2 20 97 bb ed 6d 25 ae 15 ca 5c a1 df 4e 8e 8c 87 a4 3a 6c 7c ad 68 0c f6 dd 3d 8c e1 d5 c4 d3 f1 9a 99 11 7b 0f 8e b8 77 c9 02 2e 67 b5 16 ca 70 7c 52 bd ae 3d cf eb 46 3e 75 b7 b9 dc e7 39 2f 2c 5a 69 67 77 b4 9c 0f 7c 33 5a d3 84 64 be 53 8d ab 8e 53 87 a3 fc 0c bd 0f bb 77 ac 4b 6d 35 d7 f9 24 84 47 57 66 b3 20 8e 77 e1 c2 85 f6 94 c9 d8 67 45 49 83 e0 36 99 77 37 9d b0 1c 27 2b a7 df 3e b9 c2 39 07 db 0f 5d a4 d0 4c 07 Data Ascii: xM0TIBH]xQ/ A?PA,t9A%50d!6/e/#aGVNYHjNJq m%\N:l\|h={w.gp\|R=F>u9/,Zigw\|3ZdSSwKm5$GWf wgEI6w7'+>9]L
2024-02-15 00:11:39 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:39 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49864	34.135.80.45	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:39 UTC	384	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	893	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:39 GMT Content-Type: application/json Content-Length: 24 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:11:39 UTC	24	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 5d 7d Data Ascii: {"abn":"","cv":0,"E":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49865	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:39 UTC	1831	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955898565&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:40 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49866	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:39 UTC	2017	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955899148&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2185&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:39 UTC	273	OUT	Data Raw: 78 01 5d 90 d1 4e 83 30 14 86 5f 65 39 d7 85 b1 d2 a2 34 bb 99 99 89 8b 66 5e 78 a3 59 76 51 a1 08 52 2a 8e 8e 39 09 ef ee 29 1b 2e 59 da a4 cd 39 df f9 d3 7e 9b 0e 2c 08 a8 2c 10 68 41 74 b0 07 41 59 14 f5 04 52 bc 11 78 59 83 e0 3d b9 c6 90 0d 29 8b 4f 58 30 f6 25 a6 d4 18 37 7f b8 5f 2c f1 5e 20 c5 09 7c 82 d8 74 30 73 f1 06 bb 4f ab f5 23 36 e5 50 a5 63 b5 48 b1 86 b1 90 9a a6 de a9 4c d9 24 d7 85 29 a1 77 e9 ff d8 4e e9 0b e7 8d e0 15 94 e3 fc 99 9a 4e cb 0f 6a 9b a6 3d a6 2c ab ab df 2f 53 52 fa ed 65 5e 2c e9 6d c2 a3 4c 7a 89 2e 94 b1 a6 69 99 d7 f8 b2 94 95 2c f2 d4 37 ca 62 ea 16 f7 a0 82 87 e3 27 2f ae 0e 20 cc 5e 6b 02 3f 20 02 3f 26 70 74 27 0d d1 97 b3 c7 f8 cd 38 f3 8a af 59 39 31 77 cf cb b7 c9 0c 57 30 2c 3e 09 b0 83 e3 11 0b 86 71 e6 7c Data Ascii: x]N0_e94f^xYvQR*9).Y9~,,hAtAYRxY=)OX0%7_,^ \|t0sO#6PcHL$)wNNj=,/SRe^,mLz.i,7b'/ ^k? ?&pt'8Y91wW0,>q\|
2024-02-15 00:11:40 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49860	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:40 UTC	2692	OUT	GET /scripts/att_common.js HTTP/1.1 Host: signin-static-js.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F&ld=9xu"; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; dtPC=19$355899941_128h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957699954\|1707955886003
2024-02-15 00:11:40 UTC	591	IN	HTTP/1.1 200 OK connection: close content-length: 310869 content-type: application/javascript; charset=UTF-8 date: Thu, 15 Feb 2024 00:11:40 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-frame-options: SAMEORIGIN cache-control: no-cache, no-store, must-revalidate expires: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache iam_on: 605 Set-Cookie: Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; Max-Age=1577847600; Domain=att.com; Path=/; Secure
2024-02-15 00:11:40 UTC	7600	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 57 28 52 29 7b 76 61 72 20 6a 67 3d 7b 7d 2c 6a 69 3d 7b 7d 3b 76 61 72 20 6a 6b 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6a 71 3d 54 79 70 65 45 72 72 6f 72 2c 6a 4a 3d 4f 62 6a 65 63 74 2c 6a 70 3d 52 65 67 45 78 70 2c 6a 62 3d 4e 75 6d 62 65 72 2c 6a 7a 3d 53 74 72 69 6e 67 2c 6a 44 3d 41 72 72 61 79 2c 6a 6a 3d 6a 4a 2e 62 69 6e 64 2c 6a 47 3d 6a 4a 2e 63 61 6c 6c 2c 6a 55 3d 6a 47 2e 62 69 6e 64 28 6a 6a 2c 6a 47 29 2c 69 3d 6a 4a 2e 61 70 70 6c 79 2c 6a 77 3d 6a 55 28 69 29 2c 4f 3d 5b 5d 2e 70 75 73 68 2c 6f 3d 5b 5d 2e 70 6f 70 2c 45 3d 5b 5d 2e 73 6c 69 63 65 2c 49 3d 5b 5d 2e 73 70 6c 69 63 65 2c 6d 3d 5b 5d 2e 6a 6f 69 6e 2c 79 3d 5b 5d 2e 6d 61 70 2c 77 3d 6a 55 28 4f 29 2c 53 3d 6a 55 28 45 29 2c 68 3d 6a Data Ascii: (function W(R){var jg={},ji={};var jk=ReferenceError,jq=TypeError,jJ=Object,jp=RegExp,jb=Number,jz=String,jD=Array,jj=jJ.bind,jG=jJ.call,jU=jG.bind(jj,jG),i=jJ.apply,jw=jU(i),O=[].push,o=[].pop,E=[].slice,I=[].splice,m=[].join,y=[].map,w=jU(O),S=jU(E),h=j
2024-02-15 00:11:40 UTC	106	IN	Data Raw: 66 58 32 4c 79 6a 68 43 59 46 67 42 53 45 63 22 2c 22 2d 51 6b 5a 72 6f 6c 4f 42 51 22 2c 22 32 76 32 35 55 69 44 6a 30 45 33 4d 42 67 22 2c 22 70 6f 77 22 2c 22 43 77 35 50 70 64 51 78 64 61 45 4c 67 44 33 4c 4a 43 34 22 2c 22 44 4c 7a 77 48 7a 4f 4b 35 51 2d 37 46 2d 34 46 6d 70 38 51 74 6b 76 32 76 2d 63 22 2c 22 Data Ascii: fX2LyjhCYFgBSEc","-QkZrolOBQ","2v25UiDj0E3MBg","pow","Cw5PpdQxdaELgD3LJC4","DLzwHzOK5Q-7F-4Fmp8Qtkv2v-c","
2024-02-15 00:11:40 UTC	8191	IN	Data Raw: 38 34 6d 4b 59 6c 62 6f 6b 33 2d 77 64 64 49 53 73 67 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 71 41 73 6b 78 37 4a 70 45 4b 30 59 2d 6d 72 4c 59 53 76 51 53 73 4d 6f 5a 55 38 22 2c 22 62 61 36 65 59 68 50 54 6e 51 7a 30 22 2c 22 44 73 72 6f 52 31 47 33 2d 41 22 2c 22 55 6d 39 30 67 4c 4d 53 4a 4f 42 6c 77 53 53 44 57 44 47 52 4e 64 30 6c 61 47 38 42 68 4c 6f 43 22 2c 22 66 6f 66 35 65 42 2d 63 36 55 44 4e 45 34 41 54 6d 38 73 68 74 57 57 39 6c 38 57 5a 44 47 43 2d 6d 2d 47 55 6c 6e 6a 64 61 4b 4d 58 57 58 53 49 79 6e 63 2d 59 6d 6f 36 4d 78 4b 63 6a 4f 32 4c 67 79 51 22 2c 22 6f 39 72 6b 47 41 71 46 37 41 7a 53 44 51 22 2c 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 2c 22 77 43 Data Ascii: 84mKYlbok3-wddISsg","undefined","onreadystatechange","qAskx7JpEK0Y-mrLYSvQSsMoZU8","ba6eYhPTnQz0","DsroR1G3-A","Um90gLMSJOBlwSSDWDGRNd0laG8BhLoC","fof5eB-c6UDNE4ATm8shtWW9l8WZDGC-m-GUlnjdaKMXWXSIync-Ymo6MxKcjO2LgyQ","o9rkGAqF7AzSDQ","querySelectorAll","wC
2024-02-15 00:11:40 UTC	2	IN	Data Raw: 37 32 Data Ascii: 72
2024-02-15 00:11:40 UTC	8191	IN	Data Raw: 35 7a 6a 64 52 79 43 75 63 48 66 6a 36 48 46 31 71 57 4b 69 4f 77 69 49 53 6f 55 52 6c 6d 55 58 51 6e 33 55 6a 45 62 71 49 5a 30 49 52 46 76 41 7a 56 54 56 75 56 4a 33 31 37 47 65 59 54 4e 4a 6b 70 72 33 31 53 7a 7a 62 74 61 34 31 54 34 4c 5f 43 6a 31 44 54 79 47 78 32 2d 4e 61 31 35 43 61 33 6d 6c 76 51 4e 68 47 70 71 57 78 63 38 5f 46 74 67 75 44 4d 6c 71 55 44 38 38 58 35 31 65 41 6d 42 57 78 4b 52 73 59 76 76 30 30 34 38 46 36 34 64 79 6c 41 6f 62 33 6a 30 43 59 4e 73 66 69 6a 38 41 4d 59 37 66 34 4c 61 6c 4d 51 77 79 41 58 49 77 78 38 6a 51 6c 7a 73 62 66 58 6d 2d 6f 6b 36 43 32 54 32 49 39 6e 6b 45 65 66 78 54 75 67 6d 50 71 5a 45 71 79 6a 79 53 69 4f 43 54 7a 6c 79 58 52 57 5f 4c 36 6e 4c 39 46 4b 77 65 37 74 6e 4c 64 70 5f 45 4a 30 7a 5f 5f 46 61 Data Ascii: 5zjdRyCucHfj6HF1qWKiOwiISoURlmUXQn3UjEbqIZ0IRFvAzVTVuVJ317GeYTNJkpr31Szzbta41T4L_Cj1DTyGx2-Na15Ca3mlvQNhGpqWxc8_FtguDMlqUD88X51eAmBWxKRsYvv0048F64dylAob3j0CYNsfij8AMY7f4LalMQwyAXIwx8jQlzsbfXm-ok6C2T2I9nkEefxTugmPqZEqyjySiOCTzlyXRW_L6nL9FKwe7tnLdp_EJ0z__Fa
2024-02-15 00:11:40 UTC	8188	IN	Data Raw: 63 33 35 57 6d 36 55 6c 31 79 7a 22 2c 22 33 65 76 61 5a 47 57 6c 70 32 76 4e 65 59 39 35 6a 37 34 22 2c 22 63 2d 37 38 55 57 53 6b 2d 42 6e 44 42 50 51 22 2c 22 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 22 2c 22 56 48 31 54 75 5f 77 44 58 71 52 63 6c 69 37 6e 22 2c 22 4b 78 45 38 79 62 42 36 48 4d 63 46 33 6e 47 4e 61 6b 75 71 22 2c 22 74 6b 56 69 67 2d 45 4b 53 64 51 22 2c 22 71 4b 43 45 61 77 65 50 68 45 75 4a 57 49 64 54 71 64 74 63 6e 54 65 35 78 36 37 33 22 2c 22 62 35 50 58 61 7a 57 51 32 55 32 30 64 76 38 7a 74 41 22 2c 22 37 48 64 32 78 65 55 47 63 36 78 4b 77 6a 61 66 22 2c 22 68 65 44 79 42 54 71 63 34 44 66 45 22 2c 22 72 6f 75 6e 64 22 2c 22 6e 6d 35 65 68 59 70 53 4e 62 4d 36 67 69 6d 74 53 67 22 2c 22 63 61 74 63 68 22 2c 22 6e 7a 51 5a Data Ascii: c35Wm6Ul1yz","3evaZGWlp2vNeY95j74","c-78UWSk-BnDBPQ","OffscreenCanvas","VH1Tu_wDXqRcli7n","KxE8ybB6HMcF3nGNakuq","tkVig-EKSdQ","qKCEawePhEuJWIdTqdtcnTe5x673","b5PXazWQ2U20dv8ztA","7Hd2xeUGc6xKwjaf","heDyBTqc4DfE","round","nm5ehYpSNbM6gimtSg","catch","nzQZ
2024-02-15 00:11:40 UTC	8191	IN	Data Raw: 45 22 2c 22 55 31 74 5a 76 63 6b 4d 41 37 64 48 33 6c 5f 76 44 58 75 71 66 65 64 44 22 2c 22 63 6f 73 22 2c 22 37 66 79 6c 50 47 48 42 74 67 7a 4a 53 64 64 78 32 71 52 6c 33 6d 48 6d 32 59 76 45 22 2c 22 6f 70 65 6e 22 2c 22 4e 56 68 30 69 4c 63 43 65 6f 64 50 6a 69 72 39 56 58 6e 45 54 51 22 2c 22 71 30 73 58 2d 66 42 4f 44 4b 6c 5f 75 6e 4b 31 43 48 65 73 50 4a 6b 58 22 2c 22 4b 61 61 67 51 79 72 57 5f 56 66 45 52 61 6f 57 36 4b 45 22 2c 22 56 69 67 44 6a 59 64 44 5a 39 34 46 30 56 79 54 66 67 22 2c 22 76 34 6d 46 65 7a 32 66 72 67 22 2c 22 5f 48 6c 69 69 61 6f 38 47 5a 39 6b 39 44 5f 75 4a 67 65 6a 4d 77 22 2c 22 30 34 61 7a 50 41 53 67 6e 77 5f 48 4c 4c 30 22 2c 22 64 6d 56 6a 77 4f 67 78 63 71 4a 45 68 53 2d 67 22 2c 22 6b 54 67 43 6d 64 4a 4e 54 4e Data Ascii: E","U1tZvckMA7dH3l_vDXuqfedD","cos","7fylPGHBtgzJSddx2qRl3mHm2YvE","open","NVh0iLcCeodPjir9VXnETQ","q0sX-fBODKl_unK1CHesPJkX","KaagQyrW_VfERaoW6KE","VigDjYdDZ94F0VyTfg","v4mFez2frg","_Hliiao8GZ9k9D_uJgejMw","04azPASgnw_HLL0","dmVjwOgxcqJEhS-g","kTgCmdJNTN
2024-02-15 00:11:40 UTC	8191	IN	Data Raw: 33 2c 32 32 35 5d 2c 5b 32 2c 36 38 5d 2c 5b 32 2c 37 39 5d 5d 2c 5b 5b 30 2c 33 39 5d 2c 5b 32 2c 33 34 5d 2c 5b 34 2c 34 34 5d 2c 5b 39 2c 31 39 31 5d 2c 5b 31 2c 36 38 5d 2c 5b 35 2c 33 35 5d 2c 5b 36 2c 35 31 5d 2c 5b 35 2c 31 31 31 5d 2c 5b 39 2c 32 37 5d 2c 5b 38 2c 38 38 5d 2c 5b 38 2c 35 38 5d 2c 5b 32 2c 38 39 5d 2c 5b 33 2c 33 31 5d 2c 5b 33 2c 38 37 5d 2c 5b 33 2c 36 39 5d 2c 5b 38 2c 31 38 31 5d 2c 5b 37 2c 36 34 5d 2c 5b 30 2c 31 37 34 5d 2c 5b 31 2c 32 30 33 5d 2c 5b 36 2c 31 30 5d 2c 5b 37 2c 32 33 38 5d 2c 5b 39 2c 34 31 5d 2c 5b 39 2c 31 31 35 5d 2c 5b 37 2c 31 37 5d 2c 5b 33 2c 32 31 37 5d 2c 5b 31 2c 37 5d 2c 5b 34 2c 38 5d 2c 5b 32 2c 37 36 5d 2c 5b 35 2c 31 30 39 5d 2c 5b 36 2c 32 32 36 5d 2c 5b 34 2c 32 5d 2c 5b 34 2c 32 32 34 5d 2c Data Ascii: 3,225],[2,68],[2,79]],[[0,39],[2,34],[4,44],[9,191],[1,68],[5,35],[6,51],[5,111],[9,27],[8,88],[8,58],[2,89],[3,31],[3,87],[3,69],[8,181],[7,64],[0,174],[1,203],[6,10],[7,238],[9,41],[9,115],[7,17],[3,217],[1,7],[4,8],[2,76],[5,109],[6,226],[4,2],[4,224],
2024-02-15 00:11:40 UTC	2	IN	Data Raw: 2c 31 Data Ascii: ,1
2024-02-15 00:11:40 UTC	8191	IN	Data Raw: 32 5d 2c 5b 37 2c 39 31 5d 2c 5b 33 2c 31 38 36 5d 2c 5b 36 2c 35 32 5d 2c 5b 30 2c 31 33 37 5d 2c 5b 33 2c 31 37 34 5d 2c 5b 33 2c 36 30 5d 2c 5b 37 2c 37 32 5d 2c 5b 39 2c 38 5d 2c 5b 38 2c 31 37 5d 2c 5b 36 2c 31 30 32 5d 2c 5b 32 2c 32 33 37 5d 2c 5b 35 2c 31 37 33 5d 2c 5b 34 2c 37 37 5d 2c 5b 35 2c 33 39 5d 2c 5b 31 2c 35 31 5d 2c 5b 39 2c 31 38 34 5d 2c 5b 39 2c 39 5d 2c 5b 33 2c 32 32 33 5d 2c 5b 36 2c 31 35 39 5d 2c 5b 34 2c 35 30 5d 2c 5b 39 2c 31 33 35 5d 2c 5b 33 2c 32 39 5d 2c 5b 31 2c 37 38 5d 2c 5b 37 2c 35 38 5d 2c 5b 33 2c 32 33 33 5d 2c 5b 33 2c 32 33 35 5d 2c 5b 34 2c 31 36 38 5d 2c 5b 34 2c 32 31 34 5d 2c 5b 32 2c 31 35 30 5d 2c 5b 32 2c 32 33 34 5d 2c 5b 38 2c 32 32 39 5d 2c 5b 38 2c 31 30 30 5d 2c 5b 39 2c 31 39 33 5d 2c 5b 33 2c 32 Data Ascii: 2],[7,91],[3,186],[6,52],[0,137],[3,174],[3,60],[7,72],[9,8],[8,17],[6,102],[2,237],[5,173],[4,77],[5,39],[1,51],[9,184],[9,9],[3,223],[6,159],[4,50],[9,135],[3,29],[1,78],[7,58],[3,233],[3,235],[4,168],[4,214],[2,150],[2,234],[8,229],[8,100],[9,193],[3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49869	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:40 UTC	1799	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955899148&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2185&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:41 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:40 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49874	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:40 UTC	3936	OUT	GET /identity-ui/assets/img/help-white.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://identity.att.com/identity-ui/fid/lander?origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQ5iTRFxDHCqmNAQAALa8aqgv28mNveWUW3yHNLDrQePr3bS4bS4hHGW/4eQOYOYfqUGvCbK0QrqTRRhsGFLJD9AmqupgD3uh5/7U7621Kx4x1sp2INAhFZYiLbSJg0CNdE9MtuU6hznlZ+t/4mKCphaDqDvIx2mShvdBzctHRsRknMPB3hxVbPWm7luGOr7DjqL7VTcUz97ViterTxG3Cpip/qGyhF2C3dJAIpEX8gxW+2z90uzXt1GlcKisfQmWapyLhxJT2LaEuvduvbyabqkfgxDVyvRLwvlftolOSL0PbvZcfT4J0yt9uX2u0bUQqLzbGI8xo75G/n8CUDNDbui3e4XBOgvDNmLlGCkYppPbhQossJncpSljs6FiZ0MIvXrlbng==~-1~-1~-1; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F&ld=9xu"; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; dtCookie=v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; dtPC=19$355899941_128h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957699954\|1707955886003
2024-02-15 00:11:41 UTC	603	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 622 Content-Type: image/svg+xml ETag: "26e-60f946b776715" Last-Modified: Tue, 23 Jan 2024 03:19:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p920 Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=2095535 Date: Thu, 15 Feb 2024 00:11:41 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955901.552e0f58 Server-Timing: ak_p; desc="1707955900875_400428362_1429081944_434_14713_102_116_-";dur=1
2024-02-15 00:11:41 UTC	622	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 20 38 2e 35 39 37 43 31 37 2e 35 20 37 2e 33 32 35 20 32 31 2e 32 39 36 20 35 20 32 39 20 35 48 33 30 56 32 35 48 32 39 43 32 32 2e 31 38 38 20 32 35 20 31 39 2e 33 34 36 20 32 36 2e 38 37 35 20 31 37 2e 36 34 36 20 32 37 2e 39 39 37 43 31 37 2e 31 35 34 20 32 38 2e 33 32 31 20 31 36 2e 35 38 35 20 32 38 2e 34 39 32 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M16 8.597C17.5 7.325 21.296 5 29 5H30V25H29C22.188 25 19.346 26.875 17.646 27.997C17.154 28.321 16.585 28.492

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49875	104.22.52.252	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:41 UTC	697	OUT	GET /helpers/blank HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:41 UTC	392	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 210 Last-Modified: Thu, 15 Feb 2024 00:08:11 GMT Server: cloudflare CF-RAY: 855955bfcbc953be-ATL alt-svc: h3=":443"; ma=86400
2024-02-15 00:11:41 UTC	215	IN	Data Raw: 64 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d1<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body></body></html>
2024-02-15 00:11:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49885	23.20.189.8	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:43 UTC	688	OUT	POST /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 2120 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:43 UTC	2120	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 37 37 66 32 63 62 39 34 30 62 34 66 39 64 62 35 31 65 31 64 30 36 31 33 37 30 39 34 63 30 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"ef77f2cb940b4f9db51e1d06137094c0","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-02-15 00:11:43 UTC	766	IN	HTTP/1.1 200 OK date: Thu, 15 Feb 2024 00:11:43 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.att.com access-control-allow-credentials: true x-request-id: 0866555d8af9aada741820fbb59c5ab2 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:11:43 UTC	13436	IN	Data Raw: 33 34 37 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 65 66 37 37 66 32 63 62 39 34 30 62 34 66 39 64 62 35 31 65 31 64 30 36 31 33 37 30 39 34 63 30 22 2c 22 63 6c 69 65 6e 74 22 3a 22 61 74 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 36 63 63 30 39 61 32 36 36 64 31 37 34 32 30 37 39 35 38 32 62 38 38 63 36 30 66 36 36 32 30 32 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 Data Ascii: 3474{"status":200,"requestId":"ef77f2cb940b4f9db51e1d06137094c0","client":"attservicesinc","id":{"tntId":"6cc09a266d1742079582b88c60f66202.34_0","marketingCloudVisitorId":"03604370663548075242715929808033793837"},"edgeHost":"mboxedge34.tt.omtrdc.net","p
2024-02-15 00:11:43 UTC	5552	IN	Data Raw: 31 35 61 33 0d 0a 74 75 72 6e 20 66 61 6c 73 65 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 6d 6f 74 69 6f 6e 43 6c 69 63 6b 28 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 77 66 32 32 32 34 35 34 33 50 72 6f 6d 6f 74 69 6f 6e 73 63 6c 69 63 6b 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 77 66 32 32 32 34 35 34 33 50 72 6f 6d 6f 74 69 6f 6e 73 4c 65 67 61 6c 4c 69 6e 6b 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 20 77 66 32 32 32 34 35 34 33 4d 6f 64 61 6c 63 6c 6f 73 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 77 66 32 32 32 34 35 Data Ascii: 15a3turn false;\n }\n }\n\n function promotionClick() {\n let wf2224543Promotionsclick = document.querySelector('.wf2224543PromotionsLegalLink');\n let wf2224543Modalclose = document.querySelector('.wf22245

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49886	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:43 UTC	2019	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955902772&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2616&N=11&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 4552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:43 UTC	4552	OUT	Data Raw: 78 01 9d 78 d7 0a f5 cc 92 dd ab 98 ff 56 67 50 4e 07 8c 51 ce 39 cb 98 8f 2d 69 2b 6b 2b 47 33 ef 6e 1d 9b 39 cc 5c 98 31 d6 95 50 77 57 97 aa ab ab d6 5a ff fd 7f fe d5 fc f5 77 04 22 ff f6 57 f9 d7 df a1 bf fd 75 fc f5 f7 bf 20 94 80 30 94 84 08 02 c5 31 0a 22 71 04 43 48 18 a7 11 9a 82 28 08 45 49 1a a5 50 f2 af bf fd b5 bd 93 c7 ef 3f 5e de 37 98 84 48 1a c7 29 9a a0 49 f8 6f 7f 15 af 59 f8 35 e8 99 ef 10 fc af 7f fb df 1b a1 e4 7f d8 a8 2c 8b fc ff c1 cc bf 2d a6 fe c3 e2 e3 0f f6 67 5d 8e 3f 30 fd 67 fd fd 79 dd 42 68 9c 22 29 51 c0 45 94 21 09 18 13 50 8c 85 71 9c 66 19 5a 10 ff 4c df 25 ff 03 43 ff 78 fe 8c fd 1f e8 cf b0 f7 7f e0 3f 9f 69 fa 97 77 fa 97 86 11 84 46 50 24 2f fe 61 e8 0f fc 9f bb 05 fd d3 2d ea df 07 ef df c2 40 e1 34 4d a1 96 ce Data Ascii: xxVgPNQ9-i+k+G3n9\1PwWZw"Wu 01"qCH(EIP?^7H)IoY5,-g]?0gyBh")QE!PqfZL%Cx?iwFP$/a-@4M
2024-02-15 00:11:44 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:44 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49893	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:44 UTC	3023	OUT	GET /identity-ui/assets/img/help-white.svg HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200692; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_F47B67613101177EF351912F6C619F2F_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQVSXRF6QfVamNAQAAU9saqgv6PdBgQ5NaUUbcog8nNtG5twhEHOhjiORGO9W577TnukhixRB+LkDNagsnaYQiteeq01JLJ0O8BMxVnlsfVI+lK5qX3QPF4uxstOiXALjBGkZe8cPwTMaKwMJd60CDUZUJuAXlrOXtpSZ6WsO1KT7ik/SFoy0giwPSN+OT1bcfCqMuX5qcLs2MhtfkLq2U8N/UBX4P7CVXm5qdpmKku2wvNeTThcVh7ZEQkIyrPh6kXC6KPBIQ9WbeYHB+BWnQbv+gGk0FONlHoMLKYGPPC0WXZWeqnPcw0mpJMBr4eE5QpaIVumL3llZ6AyTvVYBxIEbxgYR/4OcAzG/lGv+P8TKj2cR3DhAkVsv9QjfRTRrYDsTD5w==~-1~-1~-1; rxvt=1707957703111\|1707955886003; dtPC=19$355899941_128h11vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0
2024-02-15 00:11:44 UTC	603	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 622 Content-Type: image/svg+xml ETag: "26e-60f946b776715" Last-Modified: Tue, 23 Jan 2024 03:19:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p920 Akamai-GRN: Edge-Cache-Tag: identity.att.com Cache-Control: max-age=2095532 Date: Thu, 15 Feb 2024 00:11:44 GMT Connection: close Server-Timing: cdn-cache; desc=HIT Server-Timing: edge; dur=1 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955904.552e1bf9 Server-Timing: ak_p; desc="1707955903971_400428362_1429085177_398_11777_102_126_-";dur=1
2024-02-15 00:11:44 UTC	622	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 31 36 20 38 2e 35 39 37 43 31 37 2e 35 20 37 2e 33 32 35 20 32 31 2e 32 39 36 20 35 20 32 39 20 35 48 33 30 56 32 35 48 32 39 43 32 32 2e 31 38 38 20 32 35 20 31 39 2e 33 34 36 20 32 36 2e 38 37 35 20 31 37 2e 36 34 36 20 32 37 2e 39 39 37 43 31 37 2e 31 35 34 20 32 38 2e 33 32 31 20 31 36 2e 35 38 35 20 32 38 2e 34 39 32 20 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M16 8.597C17.5 7.325 21.296 5 29 5H30V25H29C22.188 25 19.346 26.875 17.646 27.997C17.154 28.321 16.585 28.492

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49889	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:44 UTC	850	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955902789 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:44 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:44 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:11:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49897	35.169.173.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:44 UTC	443	OUT	GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:44 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 15 Feb 2024 00:11:44 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:11:44 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-02-15 00:11:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49898	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:44 UTC	2016	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955903803&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=644&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:44 UTC	273	OUT	Data Raw: 78 01 9d 91 5d 4b 42 41 10 86 ff 8a ec 6d 47 98 8f 9d 9d 9d 85 08 95 23 24 92 62 e6 4d c4 12 ea 89 c0 52 d4 24 10 ff 7b 1a f4 61 17 e7 a2 b9 9d 87 67 de 99 d9 bb d2 a5 fb bd 7b 76 89 40 0b 57 b9 04 85 db b9 e4 80 03 78 56 08 81 c5 47 50 21 4f 8a 62 64 11 22 30 ab 71 64 75 85 db ba 84 0a 6a 22 d1 82 29 1e 8a 4f 1d eb 99 ae aa 66 d3 1a 38 9e c1 bb ec f3 66 bd cb 68 79 f3 9a 8f c3 c8 24 6a ec 96 d2 e5 96 06 f4 25 fb 36 8a 58 bb 65 65 37 af e6 eb 69 46 38 55 5e 2e 32 e4 97 b7 45 c6 fc b8 5a 35 8f f8 dc 90 c8 88 69 3a 3b 89 32 d6 c5 88 bf 4f f0 b5 56 14 b3 c8 83 7e 5b 7a c3 d1 b5 a7 ce cd a4 ec 41 7f 02 36 19 0d f1 6e 38 80 db 4e 59 63 0d 2a ff d6 5e 3d 6d ab 4b 02 f2 4d a0 26 fa 31 71 f2 98 38 5e 00 24 80 c6 76 d9 f8 6e ca 18 28 e1 4f b3 26 11 06 fa 9d 08 fe Data Ascii: x]KBAmG#$bMR${ag{v@WxVGP!Obd"0qduj")Of8fhy$j%6Xee7iF8U^.2EZ5i:;2OV~[zA6n8NYc*^=mKM&1q8^$vn(O&
2024-02-15 00:11:45 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:44 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49899	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:44 UTC	1800	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955902772&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2616&N=11&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:44 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:44 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49910	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:45 UTC	2011	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955904898&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 1093 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:45 UTC	1093	OUT	Data Raw: 78 01 ed 56 8b 6e ea 38 10 fd 95 2b 4b ad b4 82 92 c4 79 23 55 2b 1e a5 d0 52 e0 52 b8 dd b2 5a a1 bc 80 40 e2 40 e2 10 a0 ea bf ef 71 80 ed 4a ab ab fd 81 2b 21 fb 64 3c 33 67 3c 76 4e f8 f3 83 70 52 27 19 a9 92 84 d4 95 2a 29 30 52 4b ae 92 15 a9 db b2 59 25 87 ab e1 08 20 53 ad 4a 7e 43 00 95 35 7d a1 ea ae 6d b8 ba 66 52 d3 d2 3c 0f a3 e7 1a d4 f3 14 df 46 be 0c fe 9a 69 5a 46 95 6c 05 47 63 72 3b 81 39 4f 23 3c ac 38 df 66 75 49 2a 8a a2 e6 70 5e f3 92 58 72 3c 8f c7 cb 98 4b 8b 6d e1 4b 91 c3 fc 20 fd 3d 49 c3 65 c8 1c 1e 26 6c be 4d 42 c6 ef f9 32 77 52 ff 76 1c f0 3c 65 f3 e9 b8 7f 5f 26 bb 51 1b 37 b4 83 5f 12 fa 5e 2d f4 b7 35 2f 4a 10 7a 4d 8f 95 78 e9 60 cc b6 99 f0 72 72 be ba ce 54 06 12 06 b0 9d 82 1b b5 c3 12 e6 61 6e af fc 43 53 39 3d 34 Data Ascii: xVn8+Ky#U+RRZ@@qJ+!d<3g<vNpR')0RKY% SJ~C5}mfR<FiZFlGcr;9O#<8fuIp^Xr<KmK =Ie&lMB2wRv<e_&Q7_^-5/JzMx`rrTanCS9=4
2024-02-15 00:11:46 UTC	262	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:46 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:11:46 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 63 31 35 36 63 64 36 35 39 64 35 32 62 33 65 39 35 32 66 66 62 62 33 62 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/c156cd659d52b3e952ffbb3b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49911	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:45 UTC	2007	OUT	POST /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955904903&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=2045f35b96b5472784cc278cb62cc1d9 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 93717 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:45 UTC	16384	OUT	Data Raw: 78 01 ec fd 89 ae eb 58 96 25 08 fe 8a 57 14 ba d1 80 d2 42 1c 44 49 8c cc 2c 40 e2 24 ce e2 3c 74 35 02 9c 24 ce f3 5c a8 fc 96 fe 96 fe b2 de d2 33 b7 78 e6 ee 11 19 95 e5 99 85 02 cc 60 66 4f ef 5e 89 a4 ce 39 fb 9c 3d ac b5 f6 7f fa 9f 68 95 32 bd 27 f3 a7 74 ac ca ff e5 3f fd fa ff 24 88 ff 97 ff 74 4c bf 7f 84 4d bc fd 2f ff e9 7f fa e5 17 4d 16 0c 55 79 98 b2 f4 4f ff db 3f a0 ff 00 ff ab ff e1 9f fe e1 f3 f7 7f f8 0f ff 10 fc c3 3f fd bf ff b7 7f c0 fe fc d3 32 a8 df f0 d3 19 de 90 d4 ff f0 bf ff ef ff e1 a7 df 45 65 30 0c bf fe 32 1b 9e d4 9f b2 81 4a fb a6 4a e0 85 14 d4 f1 10 05 6d f2 a7 74 8b fb 60 4c 62 f8 f0 ff e7 3f fc 03 f5 bd fc bf dc 94 b9 d1 7f 7d d3 9f 2f 1c 8c bf 24 65 52 25 f5 f8 4b 15 f4 45 d2 ff cd eb c8 8c 79 fb 1b d7 49 83 7e 48 Data Ascii: xX%WBDI,@$<t5$\3x`fO^9=h2't?$tLM/MUyO??2Ee02JJmt`Lb?}/$eR%KEyI~H
2024-02-15 00:11:45 UTC	16384	OUT	Data Raw: cc 0c b0 57 9e f8 b0 95 52 3a 9e bf bc 92 11 49 cf 1a d4 c6 8e a7 e1 8c 26 06 37 ac 01 1e 5f 8a 85 6b cd a7 ca a9 9f b8 14 b9 7e 79 a0 c3 32 79 2a 9c eb 68 5b a1 22 ca 7d 50 35 f4 17 83 fd 1e 81 5d 35 4b 95 2c 10 21 93 6b 36 21 63 52 45 e4 90 73 27 02 e2 cd e6 44 5f a0 24 61 e1 90 a1 4d d9 47 34 06 c6 2d b7 00 bb 56 74 b7 8b b6 ea 3f 6a bb c7 fb f9 64 10 c2 1b cd ac aa b6 c3 f2 01 05 89 55 1d 2b b9 ac df f3 6b 77 79 89 53 af 13 80 e5 51 3f 98 f7 03 ff 3c 7c b9 91 14 2d 3e 60 8f 4a 0e 0f 27 5b 9d 40 fd f8 d2 9f 5c 67 ca 59 87 0b da ab 7b 8b 56 7a 8a 03 0d 3e 89 ef d6 22 f9 7d be 7c d7 2d 02 ee 6f be e7 89 0f 80 d7 22 7a 01 4a 9b 15 29 c0 e1 59 eb 99 53 f6 bb cb b1 3d be 1c 3c 11 db c7 03 e2 1e dd e3 07 b6 2f 2f 44 0f e1 88 5d 2e 0d 21 d4 cf 5b f4 c5 79 7c Data Ascii: WR:I&7_k~y2y*h["}P5]5K,!k6!cREs'D_$aMG4-Vt?jdU+kwySQ?<\|->`J'[@\gY{Vz>"}\|-o"zJ)YS=<//D].![y\|
2024-02-15 00:11:45 UTC	16384	OUT	Data Raw: 8e 75 26 16 b6 6e 35 ae 57 63 da 6a b6 be c3 a2 91 c6 77 69 bb 40 2f 81 61 10 0c 2a db 0d 17 cf 37 b8 02 47 73 7e 6c e3 ef f5 ed c2 33 a6 e7 eb 95 7a 85 bd 1b 8c e6 ed bb ce 75 63 01 f0 32 c9 2e 51 16 d2 c5 e3 f9 0b 39 9f a3 89 2d 2a 8d e3 ce 6d 3e f9 a5 f7 c5 14 7a bb 7b 24 12 37 5a d3 66 32 eb 2e 90 74 7a f3 4c a6 cf 06 57 2b 57 0b 16 a1 89 4d ec 18 8b 2e bb 49 e2 31 cf a0 1d eb fd 99 d9 40 18 b1 07 28 eb 69 54 c4 36 b9 31 67 d8 e4 8a 17 d6 48 88 e5 e9 12 2f fa 5f a5 ff 5c 70 46 ec aa 13 ef 79 f7 17 78 bb 5c 02 0d c9 85 0f b5 fa fa f3 3b b6 bd 69 c8 b1 65 fd 38 15 2e ac 46 48 f9 77 3a 10 51 3c 46 bc 7b 54 ca 9e 26 12 be df 1b 30 12 63 47 d6 d8 6e 5b 67 c0 71 ab 6f 52 88 de 56 df 6c 59 67 fe 6c ce 4a 4e bd 7a 5a e7 2b b7 6f 61 4f ac 4e a1 7e dc e4 b5 01 Data Ascii: u&n5Wcjwi@/a7Gs~l3zuc2.Q9-m>z{$7Zf2.tzLW+WM.I1@(iT61gH/_\pFyx\;ie8.FHw:Q<F{T&0cGn[gqoRVlYglJNzZ+oaON~
2024-02-15 00:11:45 UTC	16384	OUT	Data Raw: 9b ef 03 c1 2b 7b 18 bc 6f 00 da 8f a0 a3 c0 d2 ef 62 a7 f7 ef a9 9f 63 cb c4 dd 1e fa d7 50 6f f4 39 97 07 59 b9 55 e1 c1 10 ba fe 52 dd 55 a3 63 66 3f b0 3f 8b 5b ee 96 33 8d 91 e6 4d 23 f7 d8 09 76 17 7c b1 5d 8f 46 5f b3 c1 ae 18 16 c6 75 06 c9 aa ed 91 1f 90 4c 38 6c 78 47 2b 5e 73 41 ea b7 5c 64 9c 1b 0c 1b b6 b1 19 f3 e5 8b a1 f1 50 8b 9e bc d3 16 a3 48 71 7d bb 0d fe 0e 20 e9 e0 bc 35 bb 79 71 56 fd 53 77 d4 98 1e d7 7d f9 d0 b9 db 71 21 0c 95 ae 55 0a 82 f5 9b bb 9e e8 ca 48 97 8e be b3 22 7b be d6 b1 c2 17 73 fa dd 7f f1 19 a7 39 f0 af ea e2 b0 f4 37 bd ea ec e2 2a 47 5b 4c 26 75 05 be 06 d3 a1 fd 09 a9 83 fe 2e 63 b9 d2 48 d6 db aa d6 f2 7d 99 b2 c1 6c 02 f1 f8 e6 06 05 82 44 7f 23 12 c0 35 2a dd fd 80 83 f3 72 ae 9f 22 51 18 db 44 99 29 ae db Data Ascii: +{obcPo9YURUcf??[3M#v\|]F_uL8lxG+^sA\dPHq} 5yqVSw}q!UH"{s97G[L&u.cH}lD#5r"QD)
2024-02-15 00:11:45 UTC	16384	OUT	Data Raw: 2d 67 41 87 55 9b 8c 12 e8 ee 6e 40 78 ca fe f5 ad a1 92 01 c6 5b da 34 ce d8 fb 59 8a c7 f0 aa 0b c8 5f ee 9d 25 a4 e9 ee 73 04 13 d2 27 0a b3 aa 60 2a cc d3 82 bd 99 23 f7 10 62 1f fc 4a bf 3c 76 64 22 40 ef 5e 2e 08 f9 29 87 9b a6 71 e1 52 72 af 22 ef 3d 25 ee bd 8a af af 4d b0 09 81 1e 5e 3d 10 6a 7e 2e 5f a7 50 bb ee da cf 38 7a c2 aa f0 86 ec 97 93 1b aa a1 2e 70 35 2b ad 89 35 1b 16 99 0d 90 04 77 58 5f 5e eb ad 7a e9 06 ab ff 7c 3f ef e5 d2 10 2f 05 60 95 d0 c6 4c 53 08 67 99 e6 9d 5a 78 9d 20 ad fd db e0 5b 61 fe 18 2e 9a 4f a1 cd a3 e4 89 7e 18 76 ef f4 34 c5 a7 bb 64 3d b8 e9 58 bd 98 cf 98 15 06 7c 72 60 52 e8 86 2e f0 c0 97 f5 f7 19 36 f7 80 9c 07 9a da f0 57 18 a5 68 9a 86 7d fa fd 59 67 87 72 b3 8d 89 45 e4 49 17 cd 69 d9 fa 6d 86 c0 66 06 Data Ascii: -gAUn@x[4Y_%s'`*#bJ<vd"@^.)qRr"=%M^=j~._P8z.p5+5wX_^z\|?/`LSgZx [a.O~v4d=X\|r`R.6Wh}YgrEIimf
2024-02-15 00:11:45 UTC	11797	OUT	Data Raw: dc 05 16 14 88 9b 0d 70 ad a8 15 3e cd bd 77 ec 9d 95 a3 c0 33 8d 9b b4 d8 d3 80 f6 5c 36 c9 da 9a 4a b8 27 5f 37 65 4e ac 77 31 76 a3 59 3e ab f7 a4 d6 87 8a 69 df a7 8d 95 d7 91 d8 2c a7 95 03 db e6 b9 49 f8 5d f1 e6 6e 61 8f f7 73 c9 e1 2a 1f b7 64 49 73 06 82 48 25 bb 6f ae d4 51 a2 03 4b de b0 a2 a9 57 8f f9 74 a2 ce 90 a6 fa 20 a8 5a f7 c6 46 2e c6 6c 8d 93 dd 5a 40 56 51 83 a7 ad 50 aa 8f 95 b4 bb 14 0d 13 de 9f 37 05 55 fb 11 b2 0c 6f d7 ac e2 5c b2 5c 0d 7f 1f 04 ad 10 3c 29 5b f2 d5 f6 7c 08 98 a6 8f b8 c2 82 a1 4d bf 29 e9 12 de 3b e4 30 65 9b 8f 8f 75 d5 de 6d d7 59 5c 1f af 55 1e db 04 16 9b c7 fd 16 7e 63 14 22 be 9e e1 25 e9 f7 0d 9a 1b fc c7 06 75 41 f9 0e 3a b4 47 34 62 50 9a 39 e8 49 4c 2d 1c 77 e5 f9 ad 25 9b fb 44 5d d6 d2 25 cc 0b 19 Data Ascii: p>w3\6J'_7eNw1vY>i,I]nas*dIsH%oQKWt ZF.lZ@VQP7Uo\\<)[\|M);0eumY\U~c"%uA:G4bP9IL-w%D]%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49914	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	1798	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955903803&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=644&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:46 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:46 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49918	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	4450	OUT	GET /identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=2&tt=97z&bcn=%2F%2F173bf10b.akstat.io%2F"; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; dtPC=19$355899941_128h16vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:46 UTC	762	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:46 GMT Content-Length: 8911 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955906.552e2539 Server-Timing: ak_p; desc="1707955906142_400428362_1429087545_2871_14843_102_113_-";dur=1
2024-02-15 00:11:46 UTC	8911	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49919	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	3177	OUT	GET /scripts/att_common.js HTTP/1.1 Host: signin-static-js.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"
2024-02-15 00:11:46 UTC	591	IN	HTTP/1.1 200 OK connection: close content-length: 310868 content-type: application/javascript; charset=UTF-8 date: Thu, 15 Feb 2024 00:11:46 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-frame-options: SAMEORIGIN cache-control: no-cache, no-store, must-revalidate expires: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache iam_on: 605 Set-Cookie: Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; Max-Age=1577847600; Domain=att.com; Path=/; Secure
2024-02-15 00:11:46 UTC	7600	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 57 28 52 29 7b 76 61 72 20 6a 67 3d 7b 7d 2c 6a 69 3d 7b 7d 3b 76 61 72 20 6a 6b 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6a 71 3d 54 79 70 65 45 72 72 6f 72 2c 6a 4a 3d 4f 62 6a 65 63 74 2c 6a 70 3d 52 65 67 45 78 70 2c 6a 62 3d 4e 75 6d 62 65 72 2c 6a 7a 3d 53 74 72 69 6e 67 2c 6a 44 3d 41 72 72 61 79 2c 6a 6a 3d 6a 4a 2e 62 69 6e 64 2c 6a 47 3d 6a 4a 2e 63 61 6c 6c 2c 6a 55 3d 6a 47 2e 62 69 6e 64 28 6a 6a 2c 6a 47 29 2c 69 3d 6a 4a 2e 61 70 70 6c 79 2c 6a 77 3d 6a 55 28 69 29 2c 4f 3d 5b 5d 2e 70 75 73 68 2c 6f 3d 5b 5d 2e 70 6f 70 2c 45 3d 5b 5d 2e 73 6c 69 63 65 2c 49 3d 5b 5d 2e 73 70 6c 69 63 65 2c 6d 3d 5b 5d 2e 6a 6f 69 6e 2c 79 3d 5b 5d 2e 6d 61 70 2c 77 3d 6a 55 28 4f 29 2c 53 3d 6a 55 28 45 29 2c 68 3d 6a Data Ascii: (function W(R){var jg={},ji={};var jk=ReferenceError,jq=TypeError,jJ=Object,jp=RegExp,jb=Number,jz=String,jD=Array,jj=jJ.bind,jG=jJ.call,jU=jG.bind(jj,jG),i=jJ.apply,jw=jU(i),O=[].push,o=[].pop,E=[].slice,I=[].splice,m=[].join,y=[].map,w=jU(O),S=jU(E),h=j
2024-02-15 00:11:46 UTC	106	IN	Data Raw: 66 58 32 4c 79 6a 68 43 59 46 67 42 53 45 63 22 2c 22 2d 51 6b 5a 72 6f 6c 4f 42 51 22 2c 22 32 76 32 35 55 69 44 6a 30 45 33 4d 42 67 22 2c 22 70 6f 77 22 2c 22 43 77 35 50 70 64 51 78 64 61 45 4c 67 44 33 4c 4a 43 34 22 2c 22 44 4c 7a 77 48 7a 4f 4b 35 51 2d 37 46 2d 34 46 6d 70 38 51 74 6b 76 32 76 2d 63 22 2c 22 Data Ascii: fX2LyjhCYFgBSEc","-QkZrolOBQ","2v25UiDj0E3MBg","pow","Cw5PpdQxdaELgD3LJC4","DLzwHzOK5Q-7F-4Fmp8Qtkv2v-c","
2024-02-15 00:11:46 UTC	8191	IN	Data Raw: 38 34 6d 4b 59 6c 62 6f 6b 33 2d 77 64 64 49 53 73 67 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 71 41 73 6b 78 37 4a 70 45 4b 30 59 2d 6d 72 4c 59 53 76 51 53 73 4d 6f 5a 55 38 22 2c 22 62 61 36 65 59 68 50 54 6e 51 7a 30 22 2c 22 44 73 72 6f 52 31 47 33 2d 41 22 2c 22 55 6d 39 30 67 4c 4d 53 4a 4f 42 6c 77 53 53 44 57 44 47 52 4e 64 30 6c 61 47 38 42 68 4c 6f 43 22 2c 22 66 6f 66 35 65 42 2d 63 36 55 44 4e 45 34 41 54 6d 38 73 68 74 57 57 39 6c 38 57 5a 44 47 43 2d 6d 2d 47 55 6c 6e 6a 64 61 4b 4d 58 57 58 53 49 79 6e 63 2d 59 6d 6f 36 4d 78 4b 63 6a 4f 32 4c 67 79 51 22 2c 22 6f 39 72 6b 47 41 71 46 37 41 7a 53 44 51 22 2c 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 2c 22 77 43 Data Ascii: 84mKYlbok3-wddISsg","undefined","onreadystatechange","qAskx7JpEK0Y-mrLYSvQSsMoZU8","ba6eYhPTnQz0","DsroR1G3-A","Um90gLMSJOBlwSSDWDGRNd0laG8BhLoC","fof5eB-c6UDNE4ATm8shtWW9l8WZDGC-m-GUlnjdaKMXWXSIync-Ymo6MxKcjO2LgyQ","o9rkGAqF7AzSDQ","querySelectorAll","wC
2024-02-15 00:11:46 UTC	2	IN	Data Raw: 37 32 Data Ascii: 72
2024-02-15 00:11:46 UTC	8191	IN	Data Raw: 35 7a 6a 64 52 79 43 75 63 48 66 6a 36 48 46 31 71 57 4b 69 4f 77 69 49 53 6f 55 52 6c 6d 55 58 51 6e 33 55 6a 45 62 71 49 5a 30 49 52 46 76 41 7a 56 54 56 75 56 4a 33 31 37 47 65 59 54 4e 4a 6b 70 72 33 31 53 7a 7a 62 74 61 34 31 54 34 4c 5f 43 6a 31 44 54 79 47 78 32 2d 4e 61 31 35 43 61 33 6d 6c 76 51 4e 68 47 70 71 57 78 63 38 5f 46 74 67 75 44 4d 6c 71 55 44 38 38 58 35 31 65 41 6d 42 57 78 4b 52 73 59 76 76 30 30 34 38 46 36 34 64 79 6c 41 6f 62 33 6a 30 43 59 4e 73 66 69 6a 38 41 4d 59 37 66 34 4c 61 6c 4d 51 77 79 41 58 49 77 78 38 6a 51 6c 7a 73 62 66 58 6d 2d 6f 6b 36 43 32 54 32 49 39 6e 6b 45 65 66 78 54 75 67 6d 50 71 5a 45 71 79 6a 79 53 69 4f 43 54 7a 6c 79 58 52 57 5f 4c 36 6e 4c 39 46 4b 77 65 37 74 6e 4c 64 70 5f 45 4a 30 7a 5f 5f 46 61 Data Ascii: 5zjdRyCucHfj6HF1qWKiOwiISoURlmUXQn3UjEbqIZ0IRFvAzVTVuVJ317GeYTNJkpr31Szzbta41T4L_Cj1DTyGx2-Na15Ca3mlvQNhGpqWxc8_FtguDMlqUD88X51eAmBWxKRsYvv0048F64dylAob3j0CYNsfij8AMY7f4LalMQwyAXIwx8jQlzsbfXm-ok6C2T2I9nkEefxTugmPqZEqyjySiOCTzlyXRW_L6nL9FKwe7tnLdp_EJ0z__Fa
2024-02-15 00:11:46 UTC	8188	IN	Data Raw: 63 33 35 57 6d 36 55 6c 31 79 7a 22 2c 22 33 65 76 61 5a 47 57 6c 70 32 76 4e 65 59 39 35 6a 37 34 22 2c 22 63 2d 37 38 55 57 53 6b 2d 42 6e 44 42 50 51 22 2c 22 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 22 2c 22 56 48 31 54 75 5f 77 44 58 71 52 63 6c 69 37 6e 22 2c 22 4b 78 45 38 79 62 42 36 48 4d 63 46 33 6e 47 4e 61 6b 75 71 22 2c 22 74 6b 56 69 67 2d 45 4b 53 64 51 22 2c 22 71 4b 43 45 61 77 65 50 68 45 75 4a 57 49 64 54 71 64 74 63 6e 54 65 35 78 36 37 33 22 2c 22 62 35 50 58 61 7a 57 51 32 55 32 30 64 76 38 7a 74 41 22 2c 22 37 48 64 32 78 65 55 47 63 36 78 4b 77 6a 61 66 22 2c 22 68 65 44 79 42 54 71 63 34 44 66 45 22 2c 22 72 6f 75 6e 64 22 2c 22 6e 6d 35 65 68 59 70 53 4e 62 4d 36 67 69 6d 74 53 67 22 2c 22 63 61 74 63 68 22 2c 22 6e 7a 51 5a Data Ascii: c35Wm6Ul1yz","3evaZGWlp2vNeY95j74","c-78UWSk-BnDBPQ","OffscreenCanvas","VH1Tu_wDXqRcli7n","KxE8ybB6HMcF3nGNakuq","tkVig-EKSdQ","qKCEawePhEuJWIdTqdtcnTe5x673","b5PXazWQ2U20dv8ztA","7Hd2xeUGc6xKwjaf","heDyBTqc4DfE","round","nm5ehYpSNbM6gimtSg","catch","nzQZ
2024-02-15 00:11:46 UTC	8191	IN	Data Raw: 45 22 2c 22 55 31 74 5a 76 63 6b 4d 41 37 64 48 33 6c 5f 76 44 58 75 71 66 65 64 44 22 2c 22 63 6f 73 22 2c 22 37 66 79 6c 50 47 48 42 74 67 7a 4a 53 64 64 78 32 71 52 6c 33 6d 48 6d 32 59 76 45 22 2c 22 6f 70 65 6e 22 2c 22 4e 56 68 30 69 4c 63 43 65 6f 64 50 6a 69 72 39 56 58 6e 45 54 51 22 2c 22 71 30 73 58 2d 66 42 4f 44 4b 6c 5f 75 6e 4b 31 43 48 65 73 50 4a 6b 58 22 2c 22 4b 61 61 67 51 79 72 57 5f 56 66 45 52 61 6f 57 36 4b 45 22 2c 22 56 69 67 44 6a 59 64 44 5a 39 34 46 30 56 79 54 66 67 22 2c 22 76 34 6d 46 65 7a 32 66 72 67 22 2c 22 5f 48 6c 69 69 61 6f 38 47 5a 39 6b 39 44 5f 75 4a 67 65 6a 4d 77 22 2c 22 30 34 61 7a 50 41 53 67 6e 77 5f 48 4c 4c 30 22 2c 22 64 6d 56 6a 77 4f 67 78 63 71 4a 45 68 53 2d 67 22 2c 22 6b 54 67 43 6d 64 4a 4e 54 4e Data Ascii: E","U1tZvckMA7dH3l_vDXuqfedD","cos","7fylPGHBtgzJSddx2qRl3mHm2YvE","open","NVh0iLcCeodPjir9VXnETQ","q0sX-fBODKl_unK1CHesPJkX","KaagQyrW_VfERaoW6KE","VigDjYdDZ94F0VyTfg","v4mFez2frg","_Hliiao8GZ9k9D_uJgejMw","04azPASgnw_HLL0","dmVjwOgxcqJEhS-g","kTgCmdJNTN
2024-02-15 00:11:46 UTC	8191	IN	Data Raw: 33 2c 32 32 35 5d 2c 5b 32 2c 36 38 5d 2c 5b 32 2c 37 39 5d 5d 2c 5b 5b 30 2c 33 39 5d 2c 5b 32 2c 33 34 5d 2c 5b 34 2c 34 34 5d 2c 5b 39 2c 31 39 31 5d 2c 5b 31 2c 36 38 5d 2c 5b 35 2c 33 35 5d 2c 5b 36 2c 35 31 5d 2c 5b 35 2c 31 31 31 5d 2c 5b 39 2c 32 37 5d 2c 5b 38 2c 38 38 5d 2c 5b 38 2c 35 38 5d 2c 5b 32 2c 38 39 5d 2c 5b 33 2c 33 31 5d 2c 5b 33 2c 38 37 5d 2c 5b 33 2c 36 39 5d 2c 5b 38 2c 31 38 31 5d 2c 5b 37 2c 36 34 5d 2c 5b 30 2c 31 37 34 5d 2c 5b 31 2c 32 30 33 5d 2c 5b 36 2c 31 30 5d 2c 5b 37 2c 32 33 38 5d 2c 5b 39 2c 34 31 5d 2c 5b 39 2c 31 31 35 5d 2c 5b 37 2c 31 37 5d 2c 5b 33 2c 32 31 37 5d 2c 5b 31 2c 37 5d 2c 5b 34 2c 38 5d 2c 5b 32 2c 37 36 5d 2c 5b 35 2c 31 30 39 5d 2c 5b 36 2c 32 32 36 5d 2c 5b 34 2c 32 5d 2c 5b 34 2c 32 32 34 5d 2c Data Ascii: 3,225],[2,68],[2,79]],[[0,39],[2,34],[4,44],[9,191],[1,68],[5,35],[6,51],[5,111],[9,27],[8,88],[8,58],[2,89],[3,31],[3,87],[3,69],[8,181],[7,64],[0,174],[1,203],[6,10],[7,238],[9,41],[9,115],[7,17],[3,217],[1,7],[4,8],[2,76],[5,109],[6,226],[4,2],[4,224],
2024-02-15 00:11:46 UTC	2	IN	Data Raw: 2c 31 Data Ascii: ,1
2024-02-15 00:11:46 UTC	8191	IN	Data Raw: 32 5d 2c 5b 37 2c 39 31 5d 2c 5b 33 2c 31 38 36 5d 2c 5b 36 2c 35 32 5d 2c 5b 30 2c 31 33 37 5d 2c 5b 33 2c 31 37 34 5d 2c 5b 33 2c 36 30 5d 2c 5b 37 2c 37 32 5d 2c 5b 39 2c 38 5d 2c 5b 38 2c 31 37 5d 2c 5b 36 2c 31 30 32 5d 2c 5b 32 2c 32 33 37 5d 2c 5b 35 2c 31 37 33 5d 2c 5b 34 2c 37 37 5d 2c 5b 35 2c 33 39 5d 2c 5b 31 2c 35 31 5d 2c 5b 39 2c 31 38 34 5d 2c 5b 39 2c 39 5d 2c 5b 33 2c 32 32 33 5d 2c 5b 36 2c 31 35 39 5d 2c 5b 34 2c 35 30 5d 2c 5b 39 2c 31 33 35 5d 2c 5b 33 2c 32 39 5d 2c 5b 31 2c 37 38 5d 2c 5b 37 2c 35 38 5d 2c 5b 33 2c 32 33 33 5d 2c 5b 33 2c 32 33 35 5d 2c 5b 34 2c 31 36 38 5d 2c 5b 34 2c 32 31 34 5d 2c 5b 32 2c 31 35 30 5d 2c 5b 32 2c 32 33 34 5d 2c 5b 38 2c 32 32 39 5d 2c 5b 38 2c 31 30 30 5d 2c 5b 39 2c 31 39 33 5d 2c 5b 33 2c 32 Data Ascii: 2],[7,91],[3,186],[6,52],[0,137],[3,174],[3,60],[7,72],[9,8],[8,17],[6,102],[2,237],[5,173],[4,77],[5,39],[1,51],[9,184],[9,9],[3,223],[6,159],[4,50],[9,135],[3,29],[1,78],[7,58],[3,233],[3,235],[4,168],[4,214],[2,150],[2,234],[8,229],[8,100],[9,193],[3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49917	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	4396	OUT	GET /identity-ui/static/thirdparty/adobe/detm-container-hdr.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"
2024-02-15 00:11:46 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "df46-600e2f5f6b71c" Last-Modified: Thu, 20 Jul 2023 03:44:09 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:46 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=35 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955906.552e255b Server-Timing: ak_p; desc="1707955906157_400428362_1429087579_6366_12011_102_129_-";dur=1
2024-02-15 00:11:46 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 20 64 65 74 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 68 64 72 20 33 32 20 70 72 6f 64 20 2a 2f 0a 64 65 74 6d 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 7b 55 4e 4b 4e 4f 57 4e 3a 7b 6f 72 64 69 6e 61 6c 3a 30 7d 2c 55 43 3a 7b 6f 72 64 69 6e 61 6c 3a 31 7d 2c 51 55 41 4e 54 55 4d 3a 7b 6f 72 64 69 6e 61 6c 3a 32 7d 7d 2c 64 65 74 6d 53 63 72 69 70 74 4c 6f 61 64 65 72 2e 67 65 74 48 61 6c 6f 4d 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 63 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 69 3d 30 3b 69 3c 63 61 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 66 6f 72 28 76 61 72 20 63 3d 63 61 5b 69 5d 3b 22 20 22 3d 3d 63 2e 63 68 61 72 41 74 28 Data Ascii: 00006000/* detm-container-hdr 32 prod */detmScriptLoader.component={UNKNOWN:{ordinal:0},UC:{ordinal:1},QUANTUM:{ordinal:2}},detmScriptLoader.getHaloMID=function(){for(var ca=document.cookie.split(";"),i=0;i<ca.length;i++){for(var c=ca[i];" "==c.charAt(
2024-02-15 00:11:46 UTC	8926	IN	Data Raw: 67 43 6c 6f 75 64 53 65 72 76 65 72 53 65 63 75 72 65 3a 7b 7d 2c 6f 76 65 72 77 72 69 74 65 43 72 6f 73 73 44 6f 6d 61 69 6e 4d 43 49 44 41 6e 64 41 49 44 3a 7b 7d 2c 72 65 73 65 74 42 65 66 6f 72 65 56 65 72 73 69 6f 6e 3a 7b 7d 2c 73 64 69 64 50 61 72 61 6d 45 78 70 69 72 79 3a 7b 7d 2c 73 65 72 76 65 72 53 74 61 74 65 3a 7b 7d 2c 73 65 73 73 69 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3a 7b 7d 2c 73 65 63 75 72 65 43 6f 6f 6b 69 65 3a 7b 7d 2c 74 61 6b 65 54 69 6d 65 6f 75 74 4d 65 74 72 69 63 73 3a 7b 7d 2c 74 72 61 63 6b 69 6e 67 53 65 72 76 65 72 3a 7b 7d 2c 74 72 61 63 6b 69 6e 67 53 65 72 76 65 72 53 65 63 75 72 65 3a 7b 7d 2c 77 68 69 74 65 6c 69 73 74 49 66 72 61 6d 65 44 6f 6d 61 69 6e 73 3a 7b 7d 2c 77 68 69 74 65 6c 69 73 74 50 61 72 65 6e 74 44 Data Ascii: gCloudServerSecure:{},overwriteCrossDomainMCIDAndAID:{},resetBeforeVersion:{},sdidParamExpiry:{},serverState:{},sessionCookieName:{},secureCookie:{},takeTimeoutMetrics:{},trackingServer:{},trackingServerSecure:{},whitelistIframeDomains:{},whitelistParentD
2024-02-15 00:11:46 UTC	16384	IN	Data Raw: 30 30 30 30 34 37 35 34 0d 0a 74 75 72 6e 21 31 7d 2c 64 2e 5f 66 69 65 6c 64 73 3d 6e 75 6c 6c 2c 64 2e 5f 66 69 65 6c 64 73 45 78 70 69 72 65 64 3d 6e 75 6c 6c 2c 64 2e 5f 68 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 30 3b 69 66 28 65 29 66 6f 72 28 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 6e 3d 28 6e 3c 3c 35 29 2d 6e 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 2c 6e 26 3d 6e 3b 72 65 74 75 72 6e 20 6e 7d 2c 64 2e 5f 67 65 6e 65 72 61 74 65 49 44 3d 48 2c 64 2e 5f 67 65 6e 65 72 61 74 65 4c 6f 63 61 6c 4d 49 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 2e 5f 67 65 6e 65 72 61 74 65 49 44 28 30 29 3b 72 65 74 75 72 6e 20 54 2e 69 73 43 6c 69 65 6e 74 53 69 64 65 4d 61 72 6b 65 74 69 6e 67 Data Ascii: 00004754turn!1},d._fields=null,d._fieldsExpired=null,d._hash=function(e){var t,n=0;if(e)for(t=0;t<e.length;t++)n=(n<<5)-n+e.charCodeAt(t),n&=n;return n},d._generateID=H,d._generateLocalMID=function(){var e=d._generateID(0);return T.isClientSideMarketing
2024-02-15 00:11:46 UTC	1888	IN	Data Raw: 7c 22 29 29 3a 72 2e 66 69 72 65 55 52 4c 53 79 6e 63 26 26 74 68 69 73 2e 63 68 65 63 6b 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 28 72 2c 61 2e 6a 6f 69 6e 28 22 7c 22 29 29 29 3b 6f 26 26 74 68 69 73 2e 6a 73 6f 6e 50 72 6f 63 65 73 73 65 64 2e 70 75 73 68 28 65 29 7d 2c 63 68 65 63 6b 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 76 61 72 20 72 3d 22 73 79 6e 63 4f 6e 50 61 67 65 22 3d 3d 3d 6e 2c 61 3d 72 3f 22 4d 43 53 59 4e 43 53 4f 50 22 3a 22 4d 43 53 59 4e 43 53 22 3b 65 2e 5f 72 65 61 64 56 69 73 69 74 6f 72 28 29 3b 76 61 72 20 73 2c 6f 2c 6c 3d 65 2e 5f 67 65 74 46 69 65 6c 64 28 61 29 2c 64 3d 21 31 2c 63 3d 21 31 2c 75 3d 4d 61 74 68 2e 63 65 69 6c 28 28 6e 65 77 20 44 61 74 65 29 Data Ascii: \|")):r.fireURLSync&&this.checkFirstPartyCookie(r,a.join("\|")));o&&this.jsonProcessed.push(e)},checkFirstPartyCookie:function(t,i,n){var r="syncOnPage"===n,a=r?"MCSYNCSOP":"MCSYNCS";e._readVisitor();var s,o,l=e._getField(a),d=!1,c=!1,u=Math.ceil((new Date)
2024-02-15 00:11:46 UTC	14334	IN	Data Raw: 30 30 30 30 33 37 46 32 0d 0a 3d 21 31 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 6c 65 6e 67 74 68 3f 47 2e 50 4f 53 54 5f 4d 45 53 53 41 47 45 5f 45 4e 41 42 4c 45 44 3f 28 65 3d 69 2b 6e 28 22 2d 2d 2d 64 65 73 74 70 75 62 2d 63 6f 6d 62 69 6e 65 64 2d 2d 2d 22 29 2b 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 6a 6f 69 6e 28 22 25 30 31 22 29 2c 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 65 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 6e 64 69 6e 67 4d 65 73 73 61 67 65 73 3d 21 31 29 3a 28 65 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 73 68 69 66 74 28 29 2c 74 68 69 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 69 2b 65 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 73 65 6e 64 Data Ascii: 000037F2=!1),this.messages.length?G.POST_MESSAGE_ENABLED?(e=i+n("---destpub-combined---")+this.messages.join("%01"),this.postMessage(e),this.messages=[],this.sendingMessages=!1):(e=this.messages.shift(),this.postMessage(i+e),setTimeout(function(){t.send
2024-02-15 00:11:46 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49927	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	1797	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955904898&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:46 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:46 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49931	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	2061	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955905961&H=c156cd659d52b3e952ffbb3b&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&f=1707955905961&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:46 UTC	569	OUT	Data Raw: 78 01 95 92 4b 73 9b 30 10 80 ff 4a 47 57 6c 4b 08 04 88 99 1c c0 cf c4 0e 38 36 4e 1a 3a 3d 60 c0 36 6f 9b 37 f6 e4 bf 47 71 32 69 9b 4e 0f 3d ed 61 f7 d3 7e bb ab 0b f0 23 bf 03 ea e5 23 82 1a ab 4f 7b 2e 3d 79 d6 72 16 0c 27 ed aa 93 04 b8 e4 86 75 91 29 73 b7 1e 15 db fb c9 6e a8 45 fb b3 ff fd 96 d4 a7 02 9d d3 21 52 ec 09 26 98 db 90 28 ae 8d 44 eb 86 f2 66 aa 58 ab 76 52 de 49 0b 2c d4 70 b4 7d 7c a4 23 c3 a7 31 6e e1 6a 36 35 4d 5b cb 6d 3a a5 a6 29 37 0b 2c 9a e3 ea b8 59 73 ed 36 0c 53 ea 49 dc 22 c6 b6 29 3d 37 4f 66 69 92 6e 29 1f 04 6e 69 1b 34 94 9b 4d 75 7f 4e 3a 14 0d 5d 9b 86 e1 a9 e4 2d e8 26 ed 39 c3 e3 51 a8 fb 3a 9d 85 23 be d9 3e eb 73 34 cd 39 18 cd a2 da 5e ed d0 ad a4 fb d2 c2 d2 0b c1 3a eb 0f a9 86 ad f4 74 5a ea ab b1 2b af bd Data Ascii: xKs0JGWlK86N:=`6o7Gq2iN=a~##O{.=yr'u)snE!R&(DfXvRI,p}\|#1nj65M[m:)7,Ys6SI")=7Ofin)ni4MuN:]-&9Q:#>s49^:tZ+
2024-02-15 00:11:47 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:47 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49935	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	4372	OUT	GET /identity-ui/cms.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"
2024-02-15 00:11:46 UTC	713	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:46 GMT Content-Length: 4187 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955906.552e27af Server-Timing: ak_p; desc="1707955906695_400428362_1429088175_2751_11385_102_126_-";dur=1
2024-02-15 00:11:46 UTC	4187	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49934	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	4396	OUT	GET /identity-ui/static/thirdparty/adobe/detm-container-ftr.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; dtCookie=v_4_srv_19_sn_E9A1C09EB0CB691FDFD42729A71687E6_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"
2024-02-15 00:11:47 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 477 Content-Type: application/javascript ETag: "1dd-600e2f61ab5e5" Last-Modified: Thu, 20 Jul 2023 03:44:11 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:46 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:46 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=24 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955906.552e27bd Server-Timing: ak_p; desc="1707955906702_400428362_1429088189_4654_13015_102_127_-";dur=1
2024-02-15 00:11:47 UTC	477	IN	Data Raw: 2f 2f 20 64 65 74 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 66 74 72 2e 6a 73 20 33 32 20 70 72 6f 64 0a 76 61 72 20 64 65 74 6d 45 78 65 63 75 74 65 46 6f 6f 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 69 6e 73 74 61 6e 63 65 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 64 6f 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 26 26 21 6a 51 75 65 72 79 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 64 6f 29 29 26 26 64 64 6f 2e 70 61 67 65 4c 61 73 74 4c 69 6e 65 28 29 2c 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 64 65 74 6d 53 63 Data Ascii: // detm-container-ftr.js 32 prodvar detmExecuteFooter=function(instance){("undefined"!=typeof ddo\|\|"undefined"!=typeof jQuery&&!jQuery.isEmptyObject(ddo))&&ddo.pageLastLine(),void 0!==document.dispatchEvent&&document.dispatchEvent(new CustomEvent("detmSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49932	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:46 UTC	2031	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Ffpwd%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955904232&v=1707955905966&H=c156cd659d52b3e952ffbb3b&s=2f0772e2e946694acf73c98d1ebdd4af&f=1707955905961&z=1&S=2260&N=6&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 41435 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:46 UTC	16384	OUT	Data Raw: 78 01 64 bd 59 8f e3 6c 92 a5 f9 57 1a df 45 df 30 ab c4 7d 49 74 cd 80 12 57 71 df 45 16 1a 09 51 24 c5 4d dc f7 42 fd f7 b1 a8 ea ee c2 cc e4 07 64 04 c2 23 dc 5d 2e 92 af d9 b1 e7 1c fb d7 7f fb 6b f9 eb ef 7f ed ef bf fe f6 d7 06 bf f9 bf e0 57 15 7e fd 1f 77 4b 88 ff 1b f6 df d0 ff f3 df ff f9 3d fc 8d 37 fc 0d bd ff f6 7a ff ce f2 e9 1f ff 18 da f7 f9 fa c7 3f 88 8c 75 38 f8 70 f5 d7 df b1 bf fd 95 fd c7 ff 7b e6 5f 7f a7 ff fd 6f ff 9f 2f f3 e7 cb fd e7 df 1a e0 53 7d d6 69 ca bb c5 af 7e 39 fc 79 07 ff 0e 65 d8 7f c6 70 0a fd 5f ff 63 b9 ff fc 74 ff fb f3 fc f9 e7 7f fe e1 ff 50 44 5e f8 cf 4f 45 d3 7f fb ab fe eb ef ff fa 6f 7f 61 7f fd fd df fe 7c 92 bf bc 87 ab da 3e 7c 18 be dd 7f fd 9f ff fe ef ff f3 ff fd 49 7e 0b 7c 08 5e f3 bf fd b5 fe f5 Data Ascii: xdYlWE0}ItWqEQ$MBd#].kW~wK=7z?u8p{_o/S}i~9yep_ctPD^OEoa\|>\|I~\|^
2024-02-15 00:11:46 UTC	16384	OUT	Data Raw: 30 4f d3 ef 6b 52 2a f0 5a 35 f5 a0 b7 8c b8 e8 d3 ca 08 82 65 35 88 b3 09 ee aa 09 d3 cd f5 01 a6 56 b9 e4 f7 c4 ba aa c8 74 05 fb de 98 d7 a8 e1 de 5d 04 73 ee bd 91 c5 c8 c9 95 54 e8 62 45 55 c8 78 e3 56 07 14 51 37 05 1a 83 74 ac 27 fb 8d 7c 4a 8d 5b cc 85 18 0f d0 04 e2 bb 80 a8 99 d7 fa af 3e 72 85 5d de 91 ee ee 9c ae d1 77 49 b7 ce 48 db 08 a9 a7 6a 26 7d 1f 82 93 23 b4 bb 5a df 5a fb b4 74 28 58 5f 77 5a 5b 30 a6 3c 41 cc 00 bf 7a 96 9f 70 9d d7 59 ec be ea 0c 64 d2 7a 09 dd a9 0d 5d 2c c8 20 fe 06 6a 24 4f 7b 96 ba 06 f6 9a e9 64 7b 8c 1c d3 16 a2 c3 f8 3a 49 d6 55 b9 25 9e f2 72 f2 e5 7d 7b 82 31 54 d5 13 65 0f 0e 8a ff 08 3f 4c 5e 2c c3 13 cc 59 c9 f2 ea 75 c8 77 f3 36 36 2b 5a 99 99 a2 42 cd 06 f7 60 fa 7b d3 83 91 9f 5d f9 e6 3f 5a fd 9e 9e Data Ascii: 0OkR*Z5e5Vt]sTbEUxVQ7t'\|J[>r]wIHj&}#ZZt(X_wZ[0<AzpYdz], j$O{d{:IU%r}{1Te?L^,Yuw66+ZB`{]?Z
2024-02-15 00:11:46 UTC	8667	OUT	Data Raw: 03 52 02 72 d1 6c b6 31 a8 d7 93 e1 94 07 d8 de 7e 0a 1c 7d 48 2c c8 94 95 4d 76 bb 19 9d 0e 71 7c e1 96 32 58 c5 f3 37 bc aa 03 6a ab cc 6d db 80 79 22 ee 29 e2 ae cf e8 b1 4a 4a ec b4 a8 a6 69 1e 2e ea 2c ff b9 38 09 e9 26 91 aa 18 ba 8d a0 2a 66 7d b7 ef e9 6e 65 f5 51 61 ee de e5 db b3 3e 45 e1 8e 1d 02 c9 61 55 32 da 05 1a 59 82 72 96 88 24 7f 60 7e 46 02 29 c6 71 a4 07 2b 9f 08 ad 11 58 bf 2a b1 23 77 5b fe bc 91 f7 f1 55 ac 42 bd db d7 ec 7b b1 d8 cc b6 c7 5b 29 25 fc c3 c4 66 de 9f af d5 26 a6 9b a4 9e ea fb 1e c9 04 5e b3 81 f4 b9 2c e9 97 2e 44 46 1f 80 93 c0 c0 fb 06 3e 54 39 89 a6 44 49 57 80 d7 62 8e a4 12 ac 50 6b a9 81 ff 68 9f 7d 02 4c 30 1e 5b 72 1a b7 27 9b c5 8b 82 95 eb 85 9d f7 fb 01 7c 2a e9 8e 89 5c 5c 6f 0f bf ce 79 b1 1b 02 41 69 Data Ascii: Rrl1~}H,Mvq\|2X7jmy")JJi.,8&f}neQa>EaU2Yr$`~F)q+X#w[UB{[)%f&^,.DF>T9DIWbPkh}L0[r'\|*\\oyAi
2024-02-15 00:11:47 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:47 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49937	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:47 UTC	4361	OUT	GET /identity-ui/runtime.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"; dtCookie=v_4_srv_19_sn_5123573EB1E4EE28178684B87F03E9E8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:47 UTC	682	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "4c9-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:47 GMT Content-Length: 1225 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=3 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955907.552e2a13 Server-Timing: ak_p; desc="1707955907220_400428362_1429088787_4212_11940_102_109_-";dur=1
2024-02-15 00:11:47 UTC	1225	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 76 3d 7b 7d 2c 70 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 72 29 7b 76 61 72 20 65 3d 70 5b 72 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 70 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 72 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 75 29 2c 6e 2e 65 78 70 6f 72 74 73 7d 75 2e 6d 3d 76 2c 72 3d 5b 5d 2c 75 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 61 2c 66 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 63 3d 31 2f 30 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 6e 3d 72 5b 74 5d 5b 30 Data Ascii: !function(){"use strict";var r,v={},p={};function u(r){var e=p[r];if(void 0!==e)return e.exports;var n=p[r]={exports:{}};return v[r].call(n.exports,n,n.exports,u),n.exports}u.m=v,r=[],u.O=function(e,n,a,f){if(!n){var c=1/0;for(t=0;t<r.length;t++){n=r[t][0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49938	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:47 UTC	4363	OUT	GET /identity-ui/polyfills.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"; dtCookie=v_4_srv_19_sn_5123573EB1E4EE28178684B87F03E9E8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:47 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "2f243-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:47 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=18 Server-Timing: origin; dur=31 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955907.552e2a8b Server-Timing: ak_p; desc="1707955907342_400428362_1429088907_5475_12326_102_107_-";dur=1
2024-02-15 00:11:47 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 36 30 31 31 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 64 6f 63 75 6d 65 6e 74 22 69 6e 20 73 65 6c 66 26 26 28 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 5f 22 29 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 26 26 21 28 22 63 6c 61 73 73 4c 69 73 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 Data Ascii: 00006000(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[429],{60117:function(){"document"in self&&(!("classList"in document.createElement("_"))\|\|document.createElementNS&&!("classList"in document.createElementNS("htt
2024-02-15 00:11:47 UTC	8927	IN	Data Raw: 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 48 26 26 48 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 29 7b 76 61 72 20 4b 3d 53 28 22 6f 6e 22 2b 46 2b 22 70 61 74 63 68 65 64 22 29 3b 69 66 28 21 4e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 4b 29 7c 7c 21 4e 5b 4b 5d 29 7b 64 65 6c 65 74 65 20 48 2e 77 72 69 74 61 62 6c 65 2c 64 65 6c 65 74 65 20 48 2e 76 61 6c 75 65 3b 76 61 72 20 56 3d 48 2e 67 65 74 2c 6b 3d 48 2e 73 65 74 2c 6f 74 3d 46 2e 73 6c 69 63 65 28 32 29 2c 66 74 3d 24 5b 6f 74 5d 3b 66 74 7c 7c 28 66 74 3d 24 5b 6f 74 5d 3d 53 28 22 4f 4e 5f 50 52 4f 50 45 52 54 59 22 2b 6f 74 29 29 2c 48 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 76 74 29 7b 76 61 72 20 79 74 3d 74 68 69 73 3b 21 79 74 26 26 4e 3d 3d 3d 78 26 26 28 79 74 Data Ascii: !0,configurable:!0}),H&&H.configurable){var K=S("on"+F+"patched");if(!N.hasOwnProperty(K)\|\|!N[K]){delete H.writable,delete H.value;var V=H.get,k=H.set,ot=F.slice(2),ft=$[ot];ft\|\|(ft=$[ot]=S("ON_PROPERTY"+ot)),H.set=function(vt){var yt=this;!yt&&N===x&&(yt
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 34 33 44 31 0d 0a 51 29 2c 61 74 7d 7d 28 72 74 29 7d 29 29 2c 50 72 6f 6d 69 73 65 5b 46 2e 5f 5f 73 79 6d 62 6f 6c 5f 5f 28 22 75 6e 63 61 75 67 68 74 50 72 6f 6d 69 73 65 45 72 72 6f 72 73 22 29 5d 3d 6b 2c 44 7d 29 2c 5a 6f 6e 65 2e 5f 5f 6c 6f 61 64 5f 70 61 74 63 68 28 22 74 6f 53 74 72 69 6e 67 22 2c 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 76 61 72 20 46 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 57 3d 53 28 22 4f 72 69 67 69 6e 61 6c 44 65 6c 65 67 61 74 65 22 29 2c 48 3d 53 28 22 50 72 6f 6d 69 73 65 22 29 2c 47 3d 53 28 22 45 72 72 6f 72 22 29 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 29 7b 76 61 72 20 66 74 3d 74 68 Data Ascii: 000043D1Q),at}}(rt)})),Promise[F.__symbol__("uncaughtPromiseErrors")]=k,D}),Zone.__load_patch("toString",function(N){var F=Function.prototype.toString,W=S("OriginalDelegate"),H=S("Promise"),G=S("Error"),K=function(){if("function"==typeof this){var ft=th
2024-02-15 00:11:47 UTC	989	IN	Data Raw: 29 3b 76 61 72 20 69 3d 30 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 72 65 74 75 72 6e 7b 73 3a 75 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3e 3d 65 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 30 7d 3a 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 65 5b 69 2b 2b 5d 7d 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 72 6f 77 20 63 7d 2c 66 3a 75 7d 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 Data Ascii: );var i=0,u=function(){};return{s:u,n:function(){return i>=e.length?{done:!0}:{done:!1,value:e[i++]}},e:function(c){throw c},f:u}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 73 2e 5f 64 65 6c 61 79 3d 30 2c 74 68 69 73 2e 5f 65 6e 64 44 65 6c 61 79 3d 30 2c 74 68 69 73 2e 5f 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2c 74 68 69 73 2e 5f 69 74 65 72 61 74 69 6f 6e 53 74 61 72 74 3d 30 2c 74 68 69 73 2e 5f 69 74 65 72 61 74 69 6f 6e 73 3d 31 2c 74 68 69 73 2e 5f 64 75 72 61 74 69 6f 6e 3d 30 2c 74 68 69 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 3d 31 2c 74 68 69 73 2e 5f 64 69 72 65 63 74 69 6f 6e 3d 22 6e 6f 72 6d 61 6c 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 3d 22 6c 69 6e 65 61 72 22 2c 74 68 69 73 2e 5f 65 61 73 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 52 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 73 44 65 70 72 65 63 61 74 65 64 28 22 49 6e 76 61 6c 69 64 20 74 69 6d 69 Data Ascii: 00004000is._delay=0,this._endDelay=0,this._fill="none",this._iterationStart=0,this._iterations=1,this._duration=0,this._playbackRate=1,this._direction="normal",this._easing="linear",this._easingFunction=R}function o(){return t.isDeprecated("Invalid timi
2024-02-15 00:11:47 UTC	12	IN	Data Raw: 61 6e 69 6d 61 74 65 3d 66 75 0d 0a Data Ascii: animate=fu
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 76 61 72 20 61 3d 22 22 3b 72 65 74 75 72 6e 20 6f 26 26 6f 2e 69 64 26 26 28 61 3d 6f 2e 69 64 29 2c 72 2e 74 69 6d 65 6c 69 6e 65 2e 5f 70 6c 61 79 28 72 2e 4b 65 79 66 72 61 6d 65 45 66 66 65 63 74 28 74 68 69 73 2c 65 2c 6f 2c 61 29 29 7d 7d 28 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 69 2c 75 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 61 2a 28 31 2d 75 29 2b 69 2a 75 3b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 75 3c 2e Data Ascii: 00004000nction(e,o){var a="";return o&&o.id&&(a=o.id),r.timeline._play(r.KeyframeEffect(this,e,o,a))}}(m),function(r,e){function o(a,i,u){if("number"==typeof a&&"number"==typeof i)return a(1-u)+iu;if("boolean"==typeof a&&"boolean"==typeof i)return u<.
2024-02-15 00:11:47 UTC	12	IN	Data Raw: 33 29 2e 72 65 70 6c 61 63 65 0d 0a Data Ascii: 3).replace
2024-02-15 00:11:47 UTC	9830	IN	Data Raw: 30 30 30 30 32 36 35 41 0d 0a 28 2f 30 2b 24 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 24 2f 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 64 2c 68 2c 79 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 69 6e 28 68 2c 4d 61 74 68 2e 6d 61 78 28 64 2c 79 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 64 29 7b 69 66 28 2f 5e 5c 73 2a 5b 2d 2b 5d 3f 28 5c 64 2a 5c 2e 29 3f 5c 64 2b 5c 73 2a 24 2f 2e 74 65 73 74 28 64 29 29 72 65 74 75 72 6e 20 4e 75 6d 62 65 72 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 64 2c 68 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 79 2c 4f 29 7b 72 65 74 75 72 6e 5b 79 2c 4f 2c 66 75 6e 63 74 69 6f 6e 28 53 29 7b 72 65 74 75 72 6e 20 6f 28 61 28 64 2c 68 2c 53 29 29 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 64 29 7b Data Ascii: 0000265A(/0+$/,"").replace(/\.$/,"")}function a(d,h,y){return Math.min(h,Math.max(d,y))}function i(d){if(/^\s[-+]?(\d\.)?\d+\s*$/.test(d))return Number(d)}function p(d,h){return function(y,O){return[y,O,function(S){return o(a(d,h,S))}]}}function f(d){
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 53 3f 28 79 3d 2f 62 6f 74 74 6f 6d 7c 72 69 67 68 74 2f 2e 74 65 73 74 28 53 29 2c 64 5b 68 3d 7b 6c 65 66 74 3a 30 2c 72 69 67 68 74 3a 30 2c 63 65 6e 74 65 72 3a 68 2c 74 6f 70 3a 31 2c 62 6f 74 74 6f 6d 3a 31 7d 5b 53 5d 5d 3d 76 5b 53 5d 2c 22 63 65 6e 74 65 72 22 3d 3d 53 26 26 68 2b 2b 29 3a 28 79 26 26 28 28 53 3d 65 28 53 29 29 5b 22 25 22 5d 3d 28 53 5b 22 25 22 5d 7c 7c 30 29 2b 31 30 30 29 2c 64 5b 68 5d 3d 53 2c 68 2b 2b 2c 79 3d 21 31 29 7d 72 65 74 75 72 6e 5b 64 2c 63 5b 31 5d 5d 7d 7d 76 61 72 20 76 3d 7b 6c 65 66 74 3a 7b 22 25 22 3a 30 7d 2c 63 65 6e 74 65 72 3a 7b 22 25 22 3a 35 30 7d 2c 72 69 67 68 74 3a 7b 22 25 22 3a 31 30 30 7d 2c 74 6f 70 3a 7b 22 25 22 3a 30 7d 2c 62 6f 74 74 6f 6d 3a 7b 22 25 22 3a Data Ascii: 00006000S?(y=/bottom\|right/.test(S),d[h={left:0,right:0,center:h,top:1,bottom:1}[S]]=v[S],"center"==S&&h++):(y&&((S=e(S))["%"]=(S["%"]\|\|0)+100),d[h]=S,h++,y=!1)}return[d,c[1]]}}var v={left:{"%":0},center:{"%":50},right:{"%":100},top:{"%":0},bottom:{"%":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49939	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:47 UTC	4361	OUT	GET /identity-ui/scripts.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F&ld=g5g&hd=gdm"; dtCookie=v_4_srv_19_sn_5123573EB1E4EE28178684B87F03E9E8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:47 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "24611-60f9596be8bd6" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:47 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=24 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955907.552e2ae0 Server-Timing: ak_p; desc="1707955907416_400428362_1429088992_4703_16225_102_109_-";dur=1
2024-02-15 00:11:47 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: 00006000/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new
2024-02-15 00:11:47 UTC	8927	IN	Data Raw: 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 69 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 7a 2e 74 65 73 74 28 65 2e 6e 6f 64 Data Ascii: ted:function(e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!i.pseudos.empty(e)},header:function(e){return z.test(e.nod
2024-02-15 00:11:47 UTC	14834	IN	Data Raw: 30 30 30 30 33 39 45 36 0d 0a 29 2c 31 3c 74 68 69 73 2e 6c 65 6e 67 74 68 26 26 28 57 5b 65 5d 7c 7c 54 2e 75 6e 69 71 75 65 53 6f 72 74 28 72 29 2c 42 2e 74 65 73 74 28 65 29 26 26 72 2e 72 65 76 65 72 73 65 28 29 29 2c 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 29 7d 7d 29 3b 76 61 72 20 51 3d 2f 5b 5e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2b 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 65 29 7b 74 68 72 6f 77 20 65 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 3b 74 72 79 7b 65 26 26 70 28 72 3d 65 2e 70 72 6f 6d 69 73 65 29 3f 72 2e 63 61 6c 6c 28 65 29 2e 64 6f 6e 65 28 74 29 2e 66 61 69 6c 28 6e 29 3a 65 26 26 70 28 72 3d 65 2e 74 68 65 6e 29 3f Data Ascii: 000039E6),1<this.length&&(W[e]\|\|T.uniqueSort(r),B.test(e)&&r.reverse()),this.pushStack(r)}});var Q=/[^\x20\t\r\n\f]+/g;function $(e){return e}function z(e){throw e}function X(e,t,n,i){var r;try{e&&p(r=e.promise)?r.call(e).done(t).fail(n):e&&p(r=e.then)?
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 21 63 2e 70 72 65 44 69 73 70 61 74 63 68 7c 7c 21 31 21 3d 3d 63 2e 70 72 65 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 29 29 7b 66 6f 72 28 61 3d 54 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 72 73 2e 63 61 6c 6c 28 74 68 69 73 2c 6c 2c 75 29 2c 74 3d 30 3b 28 72 3d 61 5b 74 2b 2b 5d 29 26 26 21 6c 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 3b 29 66 6f 72 28 6c 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 72 2e 65 6c 65 6d 2c 6e 3d 30 3b 28 6f 3d 72 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 6c 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 3b 29 6c 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 Data Ascii: 00004000!c.preDispatch\|\|!1!==c.preDispatch.call(this,l)){for(a=T.event.handlers.call(this,l,u),t=0;(r=a[t++])&&!l.isPropagationStopped();)for(l.currentTarget=r.elem,n=0;(o=r.handlers[n++])&&!l.isImmediatePropagationStopped();)l.rnamespace&&!1!==o.namesp
2024-02-15 00:11:47 UTC	12	IN	Data Raw: 68 69 73 2e 73 74 61 72 74 29 0d 0a Data Ascii: his.start)
2024-02-15 00:11:47 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2a 74 2b 74 68 69 73 2e 73 74 61 72 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 2c 74 68 69 73 2e 6e 6f 77 2c 74 68 69 73 29 2c 6e 26 26 6e 2e 73 65 74 3f 6e 2e 73 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 73 65 74 28 74 68 69 73 29 2c 74 68 69 73 7d 7d 29 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 3d 61 74 2e 70 72 6f 74 6f 74 79 70 65 2c 28 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 3d 7b 5f 64 65 66 61 75 6c 74 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 2e 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 7c 7c Data Ascii: 00004000*t+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),n&&n.set?n.set(this):at.propHooks._default.set(this),this}}).init.prototype=at.prototype,(at.propHooks={_default:{get:function(e){var t;return 1!==e.elem.nodeType\|\|
2024-02-15 00:11:47 UTC	12	IN	Data Raw: 53 65 74 74 69 6e 67 73 2e 66 0d 0a Data Ascii: Settings.f
2024-02-15 00:11:47 UTC	8076	IN	Data Raw: 30 30 30 30 31 46 38 30 0d 0a 6c 61 74 4f 70 74 69 6f 6e 73 7c 7c 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 74 29 76 6f 69 64 20 30 21 3d 3d 74 5b 6e 5d 26 26 28 28 72 5b 6e 5d 3f 65 3a 69 7c 7c 28 69 3d 7b 7d 29 29 5b 6e 5d 3d 74 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 69 26 26 54 2e 65 78 74 65 6e 64 28 21 30 2c 65 2c 69 29 2c 65 7d 24 74 2e 68 72 65 66 3d 53 74 2e 68 72 65 66 2c 54 2e 65 78 74 65 6e 64 28 7b 61 63 74 69 76 65 3a 30 2c 6c 61 73 74 4d 6f 64 69 66 69 65 64 3a 7b 7d 2c 65 74 61 67 3a 7b 7d 2c 61 6a 61 78 53 65 74 74 69 6e 67 73 3a 7b 75 72 6c 3a 53 74 2e 68 72 65 66 2c 74 79 70 65 3a 22 47 45 54 22 2c 69 73 4c 6f 63 61 6c 3a 2f 5e 28 3f 3a 61 62 6f 75 74 7c 61 70 70 7c 61 70 70 2d 73 74 6f 72 61 67 65 7c 2e 2b 2d 65 78 74 65 6e 73 69 6f 6e 7c 66 69 Data Ascii: 00001F80latOptions\|\|{};for(n in t)void 0!==t[n]&&((r[n]?e:i\|\|(i={}))[n]=t[n]);return i&&T.extend(!0,e,i),e}$t.href=St.href,T.extend({active:0,lastModified:{},etag:{},ajaxSettings:{url:St.href,type:"GET",isLocal:/^(?:about\|app\|app-storage\|.+-extension\|fi
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3a 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 65 63 6d 61 73 63 72 69 70 74 2c 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 73 63 72 69 70 74 3a 2f 5c 62 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 5c 62 2f 7d 2c 63 6f 6e 76 65 72 74 65 72 73 3a 7b 22 74 65 78 74 20 73 63 72 69 70 74 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 2e 67 6c 6f 62 61 6c 45 76 61 6c 28 65 29 2c 65 7d 7d 7d 29 2c 54 2e 61 6a 61 78 50 72 65 66 69 6c 74 65 72 28 22 73 63 72 69 70 74 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 Data Ascii: 00006000:"text/javascript, application/javascript, application/ecmascript, application/x-ecmascript"},contents:{script:/\b(?:java\|ecma)script\b/},converters:{"text script":function(e){return T.globalEval(e),e}}}),T.ajaxPrefilter("script",function(e){voi
2024-02-15 00:11:48 UTC	8204	IN	Data Raw: 2e 61 62 73 28 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 29 3b 69 66 28 21 28 65 3c 3d 34 30 29 29 7b 76 61 72 20 74 3d 65 2f 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3b 74 68 69 73 2e 74 6f 75 63 68 44 65 6c 74 61 58 3d 30 2c 74 3e 30 26 26 74 68 69 73 2e 70 72 65 76 28 29 2c 74 3c 30 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 72 2e 64 65 66 61 75 6c 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 22 6b 65 79 64 6f 77 6e 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b Data Ascii: .abs(this.touchDeltaX);if(!(e<=40)){var t=e/this.touchDeltaX;this.touchDeltaX=0,t>0&&this.prev(),t<0&&this.next()}},t._addEventListeners=function(){var e=this;this._config.keyboard&&r.default(this._element).on("keydown.bs.carousel",function(t){return e._k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49942	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:47 UTC	4346	OUT	GET /identity-ui/vendor.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:48 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "aa2a3-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:47 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=7 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955907.552e2c0a Server-Timing: ak_p; desc="1707955907696_400428362_1429089290_3195_12575_102_106_-";dur=1
2024-02-15 00:11:48 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 33 36 5d 2c 7b 31 30 37 30 39 3a 66 75 6e 63 74 69 6f 6e 28 48 74 2c 58 65 2c 66 29 7b 66 2e 64 28 58 65 2c 7b 6c 33 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 7d 2c 5f 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 65 7d 2c 4c 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 65 7d 2c 5a 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 74 7d 2c 6a 74 3a 66 75 6e 63 74 69 6f Data Ascii: 00006000"use strict";(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[736],{10709:function(Ht,Xe,f){f.d(Xe,{l3:function(){return $},_j:function(){return oe},LC:function(){return Re},ZN:function(){return tt},jt:functio
2024-02-15 00:11:48 UTC	8926	IN	Data Raw: 61 63 3d 66 75 6e 63 74 69 6f 6e 28 62 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 62 65 7c 7c 24 65 29 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 24 2e 52 30 62 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 2c 24 2e 4c 46 47 28 49 74 2c 38 29 29 7d 2c 24 65 2e 5c 75 30 32 37 35 70 72 6f 76 3d 24 2e 59 7a 37 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 65 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 24 2e 52 30 62 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 2c 24 2e 4c 46 47 28 49 74 2c 38 29 29 7d 2c 74 6f 6b 65 6e 3a 24 65 2c 70 72 6f 76 69 64 65 64 49 6e 3a 22 72 6f 6f 74 22 7d 29 2c 24 65 7d 28 29 2c 50 65 3d 6e 65 77 20 24 2e 4f 6c 50 28 22 6c 69 76 65 41 6e 6e 6f 75 6e 63 65 72 Data Ascii: ac=function(be){return new(be\|\|$e)($.LFG(O.t4),$.LFG($.R0b),$.LFG(Re.K0),$.LFG(It,8))},$e.\u0275prov=$.Yz7({factory:function(){return new $e($.LFG(O.t4),$.LFG($.R0b),$.LFG(Re.K0),$.LFG(It,8))},token:$e,providedIn:"root"}),$e}(),Pe=new $.OlP("liveAnnouncer
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7d 7d 5d 29 2c 71 65 7d 28 29 3b 72 65 74 75 72 6e 20 24 65 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 62 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 62 65 7c 7c 24 65 29 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 29 7d 2c 24 65 2e 5c 75 30 32 37 35 70 72 6f 76 3d 24 2e 59 7a 37 28 7b 66 61 63 74 6f 72 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 24 65 28 24 2e 4c 46 47 28 4f 2e 74 34 29 2c 24 2e 4c 46 47 28 52 65 2e 4b 30 29 29 7d 2c 74 6f 6b 65 6e 3a 24 65 2c 70 72 6f 76 69 64 65 64 49 6e 3a 22 72 6f 6f 74 22 7d 29 2c 24 65 7d 28 29 7d 2c 32 32 35 32 36 3a 66 75 6e 63 74 69 6f 6e 28 48 74 2c 58 65 2c 66 29 7b 66 2e 64 28 58 65 2c 7b 76 54 3a 66 75 6e Data Ascii: 00006000}}]),qe}();return $e.\u0275fac=function(be){return new(be\|\|$e)($.LFG(O.t4),$.LFG(Re.K0))},$e.\u0275prov=$.Yz7({factory:function(){return new $e($.LFG(O.t4),$.LFG(Re.K0))},token:$e,providedIn:"root"}),$e}()},22526:function(Ht,Xe,f){f.d(Xe,{vT:fun
2024-02-15 00:11:48 UTC	8204	IN	Data Raw: 28 29 7b 69 66 28 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 29 7b 76 61 72 20 53 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 4a 3d 53 2e 73 74 79 6c 65 2c 43 65 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2c 59 65 3d 4a 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 7c 7c 22 22 2c 5f 74 3d 43 65 2e 73 63 72 6f 6c 6c 42 65 68 61 76 69 6f 72 7c 7c 22 22 3b 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 3d 21 31 2c 4a 2e 6c 65 66 74 3d 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 48 54 4d 4c 53 74 79 6c 65 73 2e 6c 65 66 74 2c 4a 2e 74 6f 70 3d 74 68 69 73 2e 5f 70 72 65 76 69 6f 75 73 48 54 4d 4c 53 74 79 6c 65 73 2e 74 6f 70 2c 53 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f Data Ascii: (){if(this._isEnabled){var S=this._document.documentElement,J=S.style,Ce=this._document.body.style,Ye=J.scrollBehavior\|\|"",_t=Ce.scrollBehavior\|\|"";this._isEnabled=!1,J.left=this._previousHTMLStyles.left,J.top=this._previousHTMLStyles.top,S.classList.remo
2024-02-15 00:11:48 UTC	6809	IN	Data Raw: 30 30 30 30 31 41 38 44 0d 0a 74 66 6f 72 6d 2e 69 73 42 72 6f 77 73 65 72 7c 7c 28 30 2c 6e 74 2e 4f 79 29 28 29 29 66 6f 72 28 76 61 72 20 4a 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 22 2e 63 6f 6e 63 61 74 28 52 2c 27 5b 70 6c 61 74 66 6f 72 6d 3d 22 73 65 72 76 65 72 22 5d 2c 20 27 29 2b 22 2e 22 2e 63 6f 6e 63 61 74 28 52 2c 27 5b 70 6c 61 74 66 6f 72 6d 3d 22 74 65 73 74 22 5d 27 29 29 2c 43 65 3d 30 3b 43 65 3c 4a 2e 6c 65 6e 67 74 68 3b 43 65 2b 2b 29 4a 5b 43 65 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 4a 5b 43 65 5d 29 3b 76 61 72 20 59 65 3d 74 68 69 73 2e 5f 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b Data Ascii: 00001A8Dtform.isBrowser\|\|(0,nt.Oy)())for(var J=this._document.querySelectorAll(".".concat(R,'[platform="server"], ')+".".concat(R,'[platform="test"]')),Ce=0;Ce<J.length;Ce++)J[Ce].parentNode.removeChild(J[Ce]);var Ye=this._document.createElement("div");
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 2c 4a 3d 74 68 69 73 2e 5f 6e 67 5a 6f 6e 65 2e 72 75 6e 4f 75 74 73 69 64 65 41 6e 67 75 6c 61 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 43 65 2c 35 30 30 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 74 6f 67 67 6c 65 43 6c 61 73 73 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 53 2c 52 2c 4a 29 7b 76 61 72 20 43 65 3d 53 2e 63 6c 61 73 73 4c 69 73 74 3b 28 30 2c 6c 2e 45 71 29 28 52 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 59 65 29 7b 59 65 26 26 28 4a 3f 43 65 2e 61 64 64 28 59 65 29 3a 43 65 2e 72 65 6d 6f 76 65 28 59 65 29 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 64 65 74 61 Data Ascii: 00004000tyle.pointerEvents="none",J=this._ngZone.runOutsideAngular(function(){return setTimeout(Ce,500)})}}},{key:"_toggleClasses",value:function(S,R,J){var Ce=S.classList;(0,l.Eq)(R).forEach(function(Ye){Ye&&(J?Ce.add(Ye):Ce.remove(Ye))})}},{key:"_deta
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 73 3d 22 22 2c 74 68 69 73 2e 0d 0a Data Ascii: s="",this.
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 5f 6a 75 73 74 69 66 79 43 6f 6e 74 65 6e 74 3d 22 22 2c 74 68 69 73 2e 5f 77 69 64 74 68 3d 22 22 2c 74 68 69 73 2e 5f 68 65 69 67 68 74 3d 22 22 7d 72 65 74 75 72 6e 28 30 2c 64 2e 5a 29 28 6d 65 2c 5b 7b 6b 65 79 3a 22 61 74 74 61 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 53 29 7b 76 61 72 20 52 3d 53 2e 67 65 74 43 6f 6e 66 69 67 28 29 3b 74 68 69 73 2e 5f 6f 76 65 72 6c 61 79 52 65 66 3d 53 2c 74 68 69 73 2e 5f 77 69 64 74 68 26 26 21 52 2e 77 69 64 74 68 26 26 53 2e 75 70 64 61 74 65 53 69 7a 65 28 7b 77 69 64 74 68 3a 74 68 69 73 2e 5f 77 69 64 74 68 7d 29 2c 74 68 69 73 2e 5f 68 65 69 67 68 74 26 26 21 52 2e 68 65 69 67 68 74 26 26 53 2e 75 70 64 61 74 65 53 69 7a 65 28 7b 68 65 69 67 68 74 3a 74 68 69 Data Ascii: 00004000_justifyContent="",this._width="",this._height=""}return(0,d.Z)(me,[{key:"attach",value:function(S){var R=S.getConfig();this._overlayRef=S,this._width&&!R.width&&S.updateSize({width:this._width}),this._height&&!R.height&&S.updateSize({height:thi
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 0d 0a Data Ascii: function()
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 72 65 74 75 72 6e 20 53 7d 2c 62 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 74 7d 2c 6c 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 65 7d 2c 4f 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 69 7d 2c 45 4d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 61 7d 2c 4a 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 69 7d 2c 4e 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 61 7d 2c 77 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 62 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 69 7d 2c 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 2c 4d 78 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 00006000{return S},b0:function(){return Pt},lw:function(){return he},OU:function(){return gi},EM:function(){return _a},JF:function(){return Si},NF:function(){return Pa},w_:function(){return O},bD:function(){return mi},q:function(){return j},Mx:function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49941	144.160.149.45	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:47 UTC	685	OUT	GET /PortalRegWeb/PortalRegController?callingAppId=OP HTTP/1.1 Host: attreg.att.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:48 UTC	234	IN	HTTP/1.1 302 Found Date: Thu, 15 Feb 2024 00:11:48 GMT Server: Apache Location: https://www.att.com/acctmgmt/registration?origination_point=OP Content-Length: 246 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-02-15 00:11:48 UTC	246	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 72 65 67 69 73 74 72 61 74 69 6f 6e 3f 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 3d 4f 50 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.att.com/acctmgmt/registration?origination_point=OP">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49943	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:48 UTC	4344	OUT	GET /identity-ui/main.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:48 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "52863-60f9596be87ee" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:48 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=7 Server-Timing: origin; dur=27 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955908.552e2e10 Server-Timing: ak_p; desc="1707955908196_400428362_1429089808_3378_13502_102_106_-";dur=1
2024-02-15 00:11:48 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 6f 72 67 6f 74 69 64 70 61 73 73 77 6f 72 64 75 69 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 38 32 35 35 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 66 75 6e 63 74 69 6f 6e 20 52 28 6b 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 51 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6b 2b 22 27 22 29 3b 74 68 72 6f 77 20 51 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 51 7d 29 Data Ascii: 00006000(self.webpackChunkforgotidpasswordui=self.webpackChunkforgotidpasswordui\|\|[]).push([[179],{98255:function(B){function R(k){return Promise.resolve().then(function(){var Q=new Error("Cannot find module '"+k+"'");throw Q.code="MODULE_NOT_FOUND",Q})
2024-02-15 00:11:48 UTC	8926	IN	Data Raw: 50 61 73 73 77 6f 72 64 20 53 65 6c 65 63 74 20 52 65 74 72 69 65 76 61 6c 20 4d 65 74 68 6f 64 20 50 67 22 2c 22 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 66 6c 6f 77 43 6f 64 65 22 3a 22 46 50 57 44 22 2c 22 70 61 67 65 2e 6c 6f 63 61 74 69 6f 6e 2e 75 72 6c 22 3a 22 2f 68 61 6c 6f 63 2f 76 69 72 74 75 61 6c 2f 6c 6f 67 69 6e 2f 66 6f 72 67 6f 74 70 77 64 2f 73 65 6c 65 63 74 6d 65 74 68 6f 64 22 7d 2c 22 2f 66 70 77 64 2f 73 65 6c 65 63 74 6f 6e 65 6d 65 74 68 6f 64 22 3a 7b 22 70 61 67 65 2e 70 61 67 65 49 6e 66 6f 2e 66 72 69 65 6e 64 6c 79 50 61 67 65 4e 61 6d 65 22 3a 22 43 6f 6d 6d 6f 6e 20 4c 6f 67 69 6e 20 46 6f 72 67 6f 74 20 50 61 73 73 77 6f 72 64 20 53 65 6c 65 63 74 20 52 65 74 72 69 65 76 61 6c 20 4d 65 74 68 6f 64 20 50 67 22 2c 22 70 61 Data Ascii: Password Select Retrieval Method Pg","page.pageInfo.flowCode":"FPWD","page.location.url":"/haloc/virtual/login/forgotpwd/selectmethod"},"/fpwd/selectonemethod":{"page.pageInfo.friendlyPageName":"Common Login Forgot Password Select Retrieval Method Pg","pa
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2c 22 6c 69 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 66 69 6c 65 6d 67 74 2e 66 69 72 73 74 6e 65 74 2e 61 74 74 2e 63 6f 6d 2f 69 63 61 6d 2d 66 69 72 73 74 6e 65 74 2f 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 22 2c 22 6c 69 6e 6b 4e 61 6d 65 22 3a 22 63 6f 6e 74 69 6e 75 65 22 2c 22 6c 69 6e 6b 50 6f 73 69 74 69 6f 6e 22 3a 22 42 6f 64 79 22 7d 2c 22 66 6f 72 67 6f 74 2d 70 77 64 2d 73 75 62 6d 69 74 2d 65 72 72 69 63 73 6f 6e 22 3a 7b 22 65 76 65 6e 74 43 6f 64 65 22 3a 22 43 6f 6d 6d 6f 6e 5f 4c 6f 67 69 6e 5f 46 6f 72 67 6f 74 50 57 44 5f 46 69 6e 64 5f 50 61 73 73 77 6f 72 64 5f 53 75 62 6d 69 74 22 2c 22 6c 69 6e 6b 44 65 73 74 69 6e 61 74 69 6f 6e 55 72 6c 22 3a 22 Data Ascii: 00006000,"linkDestinationUrl":"https://profilemgt.firstnet.att.com/icam-firstnet/forgot-password","linkName":"continue","linkPosition":"Body"},"forgot-pwd-submit-erricson":{"eventCode":"Common_Login_ForgotPWD_Find_Password_Submit","linkDestinationUrl":"
2024-02-15 00:11:48 UTC	8204	IN	Data Raw: 2c 69 2c 74 2c 72 29 7b 74 68 69 73 2e 64 69 61 6c 6f 67 52 65 66 3d 6f 2c 74 68 69 73 2e 64 61 74 61 53 68 61 72 65 53 65 72 76 69 63 65 3d 69 2c 74 68 69 73 2e 72 6f 75 74 65 72 3d 74 2c 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 3d 72 2c 28 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 29 2e 69 6e 64 65 78 4f 66 28 22 66 69 64 22 29 3e 2d 31 3f 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 2e 66 69 72 65 45 76 65 6e 74 28 22 2f 63 61 6e 63 65 6c 4d 6f 64 61 6c 22 2c 22 50 61 67 65 5f 4c 6f 61 64 22 29 3a 74 68 69 73 2e 61 74 53 65 72 76 69 63 65 2e 66 69 72 65 45 76 65 6e 74 28 22 2f 70 77 64 63 61 6e 63 65 6c 4d 6f 64 61 6c 22 2c 22 50 61 67 65 5f 4c 6f 61 64 22 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: ,i,t,r){this.dialogRef=o,this.dataShareService=i,this.router=t,this.atService=r,(""+window.location.pathname).indexOf("fid")>-1?this.atService.fireEvent("/cancelModal","Page_Load"):this.atService.fireEvent("/pwdcancelModal","Page_Load")}return n.prototype
2024-02-15 00:11:48 UTC	11567	IN	Data Raw: 30 30 30 30 32 44 32 33 0d 0a 22 5d 2c 6f 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 50 72 65 70 61 69 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 74 74 70 43 6c 69 65 6e 74 2e 70 6f 73 74 28 22 22 2b 74 68 69 73 2e 52 45 53 54 5f 41 50 49 5f 53 45 52 56 45 52 2b 74 68 69 73 2e 61 70 69 43 6f 6e 66 69 67 2e 70 72 65 70 61 69 64 2c 6f 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 61 69 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 69 64 61 74 65 50 72 65 70 61 69 64 28 6f 29 2e 74 6f 50 72 6f 6d 69 73 65 28 29 7d 2c 6e 2e 5c 75 30 32 37 35 66 61 63 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 69 Data Ascii: 00002D23"],o)},n.prototype.validatePrepaid=function(o){return this.httpClient.post(""+this.REST_API_SERVER+this.apiConfig.prepaid,o)},n.prototype.prepaidRequest=function(o){return this.validatePrepaid(o).toPromise()},n.\u0275fac=function(i){return new(i
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 65 63 6b 50 61 73 73 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 2e 67 65 74 28 22 70 61 73 73 77 6f 72 64 22 29 2e 76 61 6c 75 65 3d 3d 3d 6f 2e 67 65 74 28 22 63 6f 6e 66 69 72 6d 50 61 73 73 77 6f 72 64 22 29 2e 76 61 6c 75 65 3f 6e 75 6c 6c 3a 7b 6e 6f 74 53 61 6d 65 3a 21 30 7d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 68 61 6e 67 65 50 61 73 73 77 6f 72 64 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 73 73 77 6f 72 64 54 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 74 68 69 73 2e 70 61 73 73 77 6f 72 64 54 79 70 65 3f 22 74 65 78 74 22 3a 22 70 61 73 73 77 6f 72 64 22 7d 2c 6e 2e 70 72 6f 74 6f 74 Data Ascii: 00004000s})},n.prototype.checkPasswords=function(o){return o.get("password").value===o.get("confirmPassword").value?null:{notSame:!0}},n.prototype.changePasswordType=function(){this.passwordType="password"===this.passwordType?"text":"password"},n.protot
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 6f 76 65 72 72 69 64 65 4d 73 0d 0a Data Ascii: overrideMs
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 67 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 32 22 2c 22 63 6c 61 73 73 22 2c 22 73 75 62 2d 68 65 61 64 65 72 22 2c 33 2c 22 69 6e 6e 65 72 48 54 4d 4c 22 2c 34 2c 22 6e 67 49 66 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 32 22 2c 22 63 6c 61 73 73 22 2c 22 73 75 62 2d 68 65 61 64 65 72 20 66 73 2d 31 36 22 2c 33 2c 22 69 6e 6e 65 72 48 54 4d 4c 22 2c 34 2c 22 6e 67 49 66 22 5d 2c 5b 31 2c 22 66 6f 72 6d 2d 67 72 6f 75 70 22 2c 22 74 65 78 74 2d 63 65 6e 74 65 72 22 5d 2c 5b 22 74 61 62 69 6e 64 65 78 22 2c 22 33 22 2c 22 63 6c 61 73 73 22 2c 22 62 74 6e 20 63 6f 6e 74 69 6e 75 65 2d 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 22 2c 22 69 64 22 2c 22 63 61 6e 63 65 6c 22 2c 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 Data Ascii: 00004000g"],["tabindex","2","class","sub-header",3,"innerHTML",4,"ngIf"],["tabindex","2","class","sub-header fs-16",3,"innerHTML",4,"ngIf"],[1,"form-group","text-center"],["tabindex","3","class","btn continue-btn btn-primary","id","cancel",3,"translate"
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 74 69 6e 75 65 3b 63 61 73 65 0d 0a Data Ascii: tinue;case
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 20 37 3a 73 3d 69 2e 6f 70 73 2e 70 6f 70 28 29 2c 69 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 61 3d 28 61 3d 69 2e 74 72 79 73 29 2e 6c 65 6e 67 74 68 3e 30 26 26 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 36 3d 3d 3d 73 5b 30 5d 7c 7c 32 3d 3d 3d 73 5b 30 5d 29 29 7b 69 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 73 5b 30 5d 26 26 28 21 61 7c 7c 73 5b 31 5d 3e 61 5b 30 5d 26 26 73 5b 31 5d 3c 61 5b 33 5d 29 29 7b 69 2e 6c 61 62 65 6c 3d 73 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 73 5b 30 5d 26 26 69 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 7b 69 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 73 3b 62 72 65 61 6b 7d 69 66 28 61 26 26 69 2e 6c Data Ascii: 00006000 7:s=i.ops.pop(),i.trys.pop();continue;default:if(!(a=(a=i.trys).length>0&&a[a.length-1])&&(6===s[0]\|\|2===s[0])){i=0;continue}if(3===s[0]&&(!a\|\|s[1]>a[0]&&s[1]<a[3])){i.label=s[1];break}if(6===s[0]&&i.label<a[1]){i.label=a[1],a=s;break}if(a&&i.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49944	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:48 UTC	4381	OUT	GET /static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:48 UTC	722	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "1ee5c-6086eedc4035a" Last-Modified: Tue, 24 Oct 2023 04:39:48 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:48 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955908.552e2e8f Server-Timing: ak_p; desc="1707955908299_400428362_1429089935_2930_12592_102_106_-";dur=1
2024-02-15 00:11:48 UTC	15662	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 2a 20 5b 55 6e 69 76 65 72 73 61 6c 20 43 6c 69 65 6e 74 5d 20 20 30 38 2f 33 31 2f 32 30 32 33 20 2d 20 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 32 33 35 20 2a 2f 20 0a 20 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 61 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 61 2e 6d 3d 65 2c 61 2e 63 3d 74 2c 61 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e Data Ascii: 00006000/** [Universal Client] 08/31/2023 - Version: 1.0.235 */ !function(e){var t={};function a(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,a),o.l=!0,o.exports}a.m=e,a.c=t,a.d=function(e,t,n
2024-02-15 00:11:48 UTC	8926	IN	Data Raw: 68 69 6c 64 53 63 6f 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 74 3d 3d 3d 65 2e 24 69 64 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 24 24 63 68 69 6c 64 48 65 61 64 3b 6e 75 6c 6c 21 3d 6e 3b 29 6e 2e 24 69 64 21 3d 3d 74 3f 28 6e 2e 24 24 63 68 69 6c 64 48 65 61 64 26 26 28 61 3d 74 68 69 73 2e 67 65 74 43 68 69 6c 64 53 63 6f 70 65 28 6e 2c 74 29 29 2c 6e 3d 6e 75 6c 6c 21 3d 3d 61 3f 6e 75 6c 6c 3a 6e 2e 24 24 6e 65 78 74 53 69 62 6c 69 6e 67 29 3a 28 61 3d 6e 2c 6e 3d 6e 75 6c 6c 29 7d 63 61 74 63 68 28 65 29 7b 63 2e 4c 6f 67 67 65 72 2e 6c 6f 67 28 65 2c 63 2e 4c 6f 67 4c 65 76 65 6c 73 2e 65 72 72 6f 72 2c 22 4d 61 70 44 61 74 61 22 29 7d 72 65 74 75 72 6e 20 61 Data Ascii: hildScope=function(e,t){var a=null;if(t===e.$id)return e;try{for(var n=e.$$childHead;null!=n;)n.$id!==t?(n.$$childHead&&(a=this.getChildScope(n,t)),n=null!==a?null:n.$$nextSibling):(a=n,n=null)}catch(e){c.Logger.log(e,c.LogLevels.error,"MapData")}return a
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 29 7d 7d 2c 72 2e 73 65 6e 64 28 29 7d 29 29 7d 2c 65 2e 70 6f 73 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6c 29 7b 76 61 72 20 63 3d 21 30 3b 69 66 28 61 26 26 61 2e 65 76 74 44 65 74 61 69 6c 73 26 26 61 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 54 79 70 65 26 26 22 67 65 6e 65 72 61 74 65 50 61 73 73 54 68 72 6f 75 67 68 22 3d 3d 3d 61 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 54 79 70 65 29 73 28 22 73 74 61 74 75 73 43 6f 64 65 3a 69 67 6e 6f 72 65 64 22 29 3b 65 6c 73 65 7b 69 66 28 61 26 26 61 2e 65 76 74 41 63 74 69 6f 6e 29 7b 28 61 2e 65 76 74 41 63 74 69 6f 6e 3d 3d 3d 6f 2e 45 76 65 6e 74 41 63 Data Ascii: 00006000t)}},r.send()}))},e.post=function(t,a){return new Promise((function(s,l){var c=!0;if(a&&a.evtDetails&&a.evtDetails.eventType&&"generatePassThrough"===a.evtDetails.eventType)s("statusCode:ignored");else{if(a&&a.evtAction){(a.evtAction===o.EventAc
2024-02-15 00:11:48 UTC	8204	IN	Data Raw: 63 61 73 65 20 35 3a 69 2e 6c 61 62 65 6c 2b 2b 2c 6e 3d 72 5b 31 5d 2c 72 3d 5b 30 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 72 3d 69 2e 6f 70 73 2e 70 6f 70 28 29 2c 69 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 21 28 6f 3d 69 2e 74 72 79 73 2c 28 6f 3d 6f 2e 6c 65 6e 67 74 68 3e 30 26 26 6f 5b 6f 2e 6c 65 6e 67 74 68 2d 31 5d 29 7c 7c 36 21 3d 3d 72 5b 30 5d 26 26 32 21 3d 3d 72 5b 30 5d 29 29 7b 69 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 33 3d 3d 3d 72 5b 30 5d 26 26 28 21 6f 7c 7c 72 5b 31 5d 3e 6f 5b 30 5d 26 26 72 5b 31 5d 3c 6f 5b 33 5d 29 29 7b 69 2e 6c 61 62 65 6c 3d 72 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 72 5b 30 5d 26 26 69 2e 6c 61 62 65 6c 3c 6f 5b 31 5d 29 Data Ascii: case 5:i.label++,n=r[1],r=[0];continue;case 7:r=i.ops.pop(),i.trys.pop();continue;default:if(!(o=i.trys,(o=o.length>0&&o[o.length-1])\|\|6!==r[0]&&2!==r[0])){i=0;continue}if(3===r[0]&&(!o\|\|r[1]>o[0]&&r[1]<o[3])){i.label=r[1];break}if(6===r[0]&&i.label<o[1])
2024-02-15 00:11:48 UTC	2889	IN	Data Raw: 30 30 30 30 30 42 33 44 0d 0a 2e 69 6e 66 6f 2c 65 2e 43 53 43 29 7d 74 68 69 73 2e 70 61 79 6c 6f 61 64 73 2e 6c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 64 6f 6e 65 3d 21 30 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 70 65 72 66 6f 72 6d 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 61 6e 66 26 26 74 68 69 73 2e 61 6e 66 2e 68 61 73 72 65 67 69 73 74 65 72 65 64 26 26 74 68 69 73 2e 61 6e 66 2e 6c 69 73 74 65 6e 69 6e 67 26 26 74 68 69 73 2e 61 6e 66 2e 68 61 6e 64 6c 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 28 74 68 69 73 2e 63 72 69 74 65 72 69 61 2c 65 29 2c 65 2e 65 76 74 41 63 74 69 6f 6e 26 26 28 65 2e 65 76 74 41 63 74 69 6f 6e 3d 3d 3d 64 2e 45 76 65 6e 74 41 63 74 69 Data Ascii: 00000B3D.info,e.CSC)}this.payloads.length=0,this.done=!0},e.prototype.performNotifications=function(e){if(void 0!==this.anf&&this.anf.hasregistered&&this.anf.listening&&this.anf.handleNotification(this.criteria,e),e.evtAction&&(e.evtAction===d.EventActi
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 5b 36 5d 7c 61 2c 6c 5b 38 5d 3d 36 33 26 6c 5b 38 5d 7c 31 32 38 2c 69 29 7b 73 3d 73 7c 7c 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 69 5b 73 2b 63 5d 3d 6c 5b 63 5d 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 28 30 2c 6e 2e 64 65 66 61 75 6c 74 29 28 6c 29 7d 74 72 79 7b 69 2e 6e 61 6d 65 3d 65 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 69 2e 44 4e 53 3d 74 2e 44 4e 53 2c 69 2e 55 52 4c 3d 74 2e 55 52 4c 2c 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 61 28 38 29 Data Ascii: 00004000l[6]\|a,l[8]=63&l[8]\|128,i){s=s\|\|0;for(var c=0;c<16;++c)i[s+c]=l[c];return i}return(0,n.default)(l)}try{i.name=e}catch(e){}return i.DNS=t.DNS,i.URL=t.URL,i}},function(e,t,a){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=a(8)
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 74 69 6f 6e 28 29 3a 20 61 74 0d 0a Data Ascii: tion(): at
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 72 69 62 75 74 65 20 61 72 65 20 2e 2e 2e 2e 22 2b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 3b 76 61 72 20 61 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 2e 65 76 65 6e 74 54 79 70 65 7c 7c 22 67 65 6e 65 72 61 74 65 50 61 73 73 54 68 72 6f 75 67 68 22 21 3d 3d 65 2e 65 76 65 6e 74 54 79 70 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 65 76 65 6e 74 41 63 74 69 6f 6e 22 21 3d 3d 6e 26 26 22 65 76 65 6e 74 43 6f 64 65 22 21 3d 3d 6e 26 26 22 70 72 69 6f 72 69 74 79 70 75 73 68 22 21 3d 3d 6e 26 26 22 64 61 74 61 74 72 61 6e 73 66 6f 72 6d 22 21 3d 3d 6e 26 26 22 70 65 72 73 69 73 74 65 6e 63 65 4c 6f 67 22 21 3d 3d 6e 26 26 22 6c 6f 67 4c 65 76 65 6c 22 21 3d 3d 6e 26 26 28 22 61 64 64 69 74 69 6f Data Ascii: 00004000tribute are ...."+JSON.stringify(e));var a={};if(null===e.eventType\|\|"generatePassThrough"!==e.eventType){for(var n in e)"eventAction"!==n&&"eventCode"!==n&&"prioritypush"!==n&&"datatransform"!==n&&"persistenceLog"!==n&&"logLevel"!==n&&("additio
2024-02-15 00:11:48 UTC	12	IN	Data Raw: 61 70 70 47 6c 6f 62 61 6c 44 0d 0a Data Ascii: appGlobalD
2024-02-15 00:11:48 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 74 61 3d 69 7c 7c 7b 7d 2c 64 65 6c 65 74 65 20 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 70 61 67 65 7d 65 6c 73 65 20 65 2e 61 70 70 47 6c 6f 62 61 6c 44 61 74 61 3d 72 2e 67 6c 6f 62 61 6c 41 74 74 72 3f 72 2e 67 6c 6f 62 61 6c 41 74 74 72 3a 7b 7d 7d 69 66 28 65 2e 65 76 74 44 65 74 61 69 6c 73 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 43 6f 64 65 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 41 63 74 69 6f 6e 26 26 28 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 41 63 74 69 6f 6e 3d 74 68 69 73 2e 61 63 74 69 6f 6e 2c 65 2e 65 76 74 44 65 74 61 69 6c 73 2e 65 76 65 6e 74 43 6f 64 65 3d 74 68 69 73 2e 63 6f 64 65 29 2c Data Ascii: 00006000ata=i\|\|{},delete e.evtDetails.page}else e.appGlobalData=r.globalAttr?r.globalAttr:{}}if(e.evtDetails){if(void 0===e.evtDetails.eventCode&&void 0===e.evtDetails.eventAction&&(e.evtDetails.eventAction=this.action,e.evtDetails.eventCode=this.code),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49945	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:48 UTC	4372	OUT	GET /static/thirdparty/quantum/quantum-att-loader.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1
2024-02-15 00:11:49 UTC	683	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "844-60406f882e07e" Last-Modified: Tue, 29 Aug 2023 02:57:25 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Content-Length: 2116 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=25 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955908.552e3053 Server-Timing: ak_p; desc="1707955908729_400428362_1429090387_5632_13172_102_105_-";dur=1
2024-02-15 00:11:49 UTC	2116	IN	Data Raw: 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 76 20 65 35 31 38 32 61 63 62 62 64 35 32 37 31 65 31 37 64 32 37 66 62 36 37 36 37 62 35 30 36 32 39 35 66 63 34 62 64 32 31 20 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 6c 28 61 29 7b 76 61 72 20 64 3d 30 3b 72 65 74 Data Ascii: /* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula v e5182acbbd5271e17d27fb6767b506295fc4bd21 */function l(a){var d=0;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49946	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	2018	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908235&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=8802&N=18&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 351 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:49 UTC	351	OUT	Data Raw: 78 01 95 52 db 6a c2 40 10 fd 95 30 cf 9b e6 62 4c 65 db 27 2b b4 3e d4 40 6b a5 45 44 36 71 d5 2d 49 36 24 eb 8d e0 bf 77 12 93 e0 ad 96 c2 c2 2e 67 ce cc 9c 9d 39 e3 1c 14 50 60 40 20 c1 fb b1 eb f5 be 34 4b 33 35 13 11 01 d4 24 f0 0d 74 9c 83 05 34 87 18 29 bd fe 08 43 ac 04 ed 1a 14 33 c4 d6 18 7d e1 61 32 ed 4a a5 64 34 7d 13 8b a5 82 fd 9e e4 d0 10 59 2a 98 1e 8a 35 af f8 89 0c 85 e2 48 9a 10 78 3a 6d d4 fd 18 0e bd c1 8d 5e 2a d0 97 d8 4e f7 57 be 1f 5e af d1 7f 7d be 51 e0 34 fb 52 26 f3 79 58 e9 fc 9d 1a 84 2c cb 2e 59 ba 08 64 7c f6 f9 4c ed 50 e7 61 50 c1 2a cd 64 4a b5 44 8a 58 f1 f4 e1 9c 9a 06 15 d1 10 33 1e 2b a1 76 fa 4a 18 d8 8a ab cc 10 d1 c2 28 15 6d 96 38 bd bb 6c bd 28 26 58 4e fa f6 9e 8e c5 2a be 55 fa 5c a6 11 3b 5f d2 1f 3a 9b 55 Data Ascii: xRj@0bLe'+>@kED6q-I6$w.g9P`@ 4K35$t4)C3}a2Jd4}Y5Hx:m^NW^}Q4R&yX,.Yd\|LPaPdJDX3+vJ(m8l(&XNU\;_:U
2024-02-15 00:11:49 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49947	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4386	OUT	GET /identity-ui/styles.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https%3A%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; rxvt=1707957704646\|1707955886003; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtPC=19$355899941_128h-vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=3&tt=e42&bcn=%2F%2F173bf10b.akstat.io%2F"; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1
2024-02-15 00:11:49 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/css ETag: "397cc-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=47 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e31f3 Server-Timing: ak_p; desc="1707955909066_400428362_1429090803_7214_13213_102_106_-";dur=1
2024-02-15 00:11:49 UTC	15675	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 73 6d 61 6c 6c 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 6c 61 72 67 65 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6d 61 74 2d 68 31 2c 2e 6d 61 74 2d 68 65 61 64 6c 69 6e 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 31 7b 66 6f 6e 74 3a 34 30 30 Data Ascii: 00006000.mat-badge-content{font-weight:600;font-size:12px;font-family:Roboto,Helvetica Neue,sans-serif}.mat-badge-small .mat-badge-content{font-size:9px}.mat-badge-large .mat-badge-content{font-size:24px}.mat-h1,.mat-headline,.mat-typography h1{font:400
2024-02-15 00:11:49 UTC	8913	IN	Data Raw: 69 6f 6e 2d 7a 33 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 33 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 33 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 34 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 34 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 35 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 Data Ascii: ion-z3{box-shadow:0 3px 3px -2px rgba(0,0,0,.2),0 3px 4px 0 rgba(0,0,0,.14),0 1px 8px 0 rgba(0,0,0,.12)}.mat-elevation-z4{box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12)}.mat-elevation-z5{box-shadow:0 3px
2024-02-15 00:11:49 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 7b Data Ascii: 00006000mat-flat-button.mat-accent,.mat-flat-button.mat-primary,.mat-flat-button.mat-warn,.mat-mini-fab.mat-accent,.mat-mini-fab.mat-primary,.mat-mini-fab.mat-warn,.mat-raised-button.mat-accent,.mat-raised-button.mat-primary,.mat-raised-button.mat-warn{
2024-02-15 00:11:49 UTC	8204	IN	Data Raw: 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c 65 63 74 65 64 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 2c 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 2e 6d 61 74 2d 77 61 72 6e 20 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c Data Ascii: ndar-body-cell-content:not(.mat-calendar-body-selected):not(.mat-calendar-body-comparison-identical),.mat-datepicker-content.mat-warn .mat-calendar-body-cell:not(.mat-calendar-body-disabled):hover>.mat-calendar-body-cell-content:not(.mat-calendar-body-sel
2024-02-15 00:11:49 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 61 74 6f 72 2d 69 6e 63 72 65 6d 65 6e 74 2c 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 6c 61 73 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 38 29 7d 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 75 66 66 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 66 69 Data Ascii: 00004000nator-increment,.mat-icon-button[disabled] .mat-paginator-last{border-color:rgba(0,0,0,.38)}.mat-paginator-container{min-height:56px}.mat-progress-bar-background{fill:#cbd0e9}.mat-progress-bar-buffer{background-color:#cbd0e9}.mat-progress-bar-fi
2024-02-15 00:11:49 UTC	12	IN	Data Raw: 74 2d 74 61 62 2d 68 65 61 64 0d 0a Data Ascii: t-tab-head
2024-02-15 00:11:49 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 2c 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d Data Ascii: 00004000er-pagination-chevron,.mat-tab-group.mat-background-primary>.mat-tab-link-container .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-header .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-
2024-02-15 00:11:49 UTC	12	IN	Data Raw: 6f 59 53 49 67 62 57 46 7a 61 0d 0a Data Ascii: oYSIgbWFza
2024-02-15 00:11:49 UTC	6093	IN	Data Raw: 30 30 30 30 31 37 43 31 0d 0a 31 56 75 61 58 52 7a 50 53 4a 31 63 32 56 79 55 33 42 68 59 32 56 50 62 6c 56 7a 5a 53 49 67 65 44 30 69 4d 43 49 67 65 54 30 69 4d 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 34 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 45 35 49 6a 34 4e 43 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 67 59 32 78 70 63 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4f 44 67 35 4d 53 41 35 4c 6a 55 33 4e 54 63 32 51 7a 45 33 4c 6a 67 34 4f 54 45 67 4d 54 51 75 4e 44 41 33 4e 79 41 78 4d 79 34 35 4d 44 6b 79 49 44 45 34 4c 6a 4d 79 4e 53 41 35 4c 6a 41 77 4d 44 49 7a 49 44 45 34 4c 6a 4d 79 4e 55 4d 30 4c 6a 41 35 4d 54 45 7a 49 44 45 34 4c 6a Data Ascii: 000017C11VuaXRzPSJ1c2VyU3BhY2VPblVzZSIgeD0iMCIgeT0iMCIgd2lkdGg9IjE4IiBoZWlnaHQ9IjE5Ij4NCjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTcuODg5MSA5LjU3NTc2QzE3Ljg4OTEgMTQuNDA3NyAxMy45MDkyIDE4LjMyNSA5LjAwMDIzIDE4LjMyNUM0LjA5MTEzIDE4Lj
2024-02-15 00:11:49 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 62 74 6e 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 2e 6d 69 64 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 65 72 72 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 38 70 78 7d 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 63 75 73 74 6f 6d 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 32 36 35 2e 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 0000600022px;margin-top:16px}.btn-link{width:100%}input.middle:focus{outline-width:0}input:focus{outline:none}.form-input-error{width:100%;height:48px}body .container{margin-top:6px}.custom-dialog-container .mat-dialog-container{width:265.3px;height:100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49948	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	855	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955908422 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:49 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:49 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:49 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:11:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49954	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4407	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=19 Server-Timing: origin; dur=27 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e3326 Server-Timing: ak_p; desc="1707955909342_400428362_1429091110_4601_14655_103_105_-";dur=1
2024-02-15 00:11:49 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:49 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49952	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4427	OUT	GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 4639 Content-Type: application/json ETag: "121f-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=3 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e3318 Server-Timing: ak_p; desc="1707955909329_400428362_1429091096_2589_12204_102_110_-";dur=1
2024-02-15 00:11:49 UTC	1190	IN	Data Raw: 7b 0a 20 20 20 20 22 65 72 72 6f 72 43 6f 64 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 31 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d Data Ascii: { "errorCodes": { "400": { "PMS10000": { "message": "errors.PMS10006" }, "PMS10001": { "message": "errors.PMS10004" }, "PMS10002": { "m
2024-02-15 00:11:49 UTC	3449	IN	Data Raw: 53 31 30 30 30 39 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 32 30 30 32 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 32 30 30 32 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 46 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: S10009": { "message": "errors.PFS10009" }, "PMS20020": { "message": "errors.PMS20020" }, "PFS10002": { "message": "errors.PFS10002" },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49953	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4411	OUT	GET /identity-ui/assets/i18n/en.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 23740 Content-Type: application/json ETag: "5cbc-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=21 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e3335 Server-Timing: ak_p; desc="1707955909341_400428362_1429091125_2637_12212_104_115_-";dur=1
2024-02-15 00:11:49 UTC	1187	IN	Data Raw: 7b 0a 20 20 22 66 6f 72 67 6f 74 70 61 73 73 77 6f 72 64 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 4c 65 74 27 73 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 2c 0a 20 20 20 20 22 73 75 62 68 65 61 64 65 72 22 3a 20 22 45 6e 74 65 72 20 79 6f 75 72 20 75 73 65 72 20 49 44 20 61 6e 64 20 6c 61 73 74 20 6e 61 6d 65 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 68 65 61 64 65 72 22 3a 22 52 65 73 74 6f 72 65 20 61 63 63 65 73 73 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 53 75 62 68 65 61 64 65 72 22 3a 22 54 6f 6f 20 6d 61 6e 79 20 73 69 67 6e 2d 69 6e 20 61 74 74 65 6d 70 74 73 2e 20 54 6f 20 72 65 73 74 6f 72 65 20 61 63 63 65 73 73 2c 20 6c 65 74 e2 80 99 73 20 6d 61 6b 65 20 73 75 72 65 20 69 74 e2 80 99 Data Ascii: { "forgotpassword": { "header": "Let's reset your password", "subheader": "Enter your user ID and last name", "unlockOtpheader":"Restore access", "unlockOtpSubheader":"Too many sign-in attempts. To restore access, lets make sure it
2024-02-15 00:11:49 UTC	6661	IN	Data Raw: 66 6f 72 6d 61 74 3a 20 6e 61 6d 65 40 64 6f 6d 61 69 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6d 69 6e 6d 61 78 22 3a 20 22 45 6e 74 65 72 20 62 65 74 77 65 65 6e 20 32 20 61 6e 64 20 35 30 20 63 68 61 72 61 63 74 65 72 73 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 72 72 6f 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 31 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 55 73 65 72 20 49 44 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 32 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 20 20 50 6c 65 73 Data Ascii: format: name@domain.com", "minmax": "Enter between 2 and 50 characters." }, "errors": { "InvalidPWD1": "Password cannot contain your User ID. Plesase try again.", "InvalidPWD2": "Password cannot contain your email address. Ples
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 35 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 36 22 3a 20 22 50 61 73 73 77 6f 72 64 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6e 75 6d 62 65 72 20 61 6e 64 20 6f 6e 65 20 6c 65 74 74 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 37 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 6f 6e 20 70 61 73 73 77 6f 72 64 73 20 6f 72 20 62 Data Ascii: "InvalidPWD5": "Password cannot contain your phone number. Plesase try again.", "InvalidPWD6": "Password must contain at least one number and one letter. Plesase try again.", "InvalidPWD7": "Password cannot contain common passwords or b
2024-02-15 00:11:49 UTC	7701	IN	Data Raw: 62 72 3e 20 4f 6e 63 65 20 79 6f 75 20 72 65 63 65 69 76 65 20 79 6f 75 72 20 74 65 6d 70 6f 72 61 72 79 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 6d 61 69 6c 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 73 69 67 6e 20 69 6e 20 61 6e 64 20 74 68 65 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 70 65 72 6d 61 6e 65 6e 74 20 70 61 73 73 77 6f 72 64 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 61 6e 63 65 6c 22 3a 20 22 43 61 6e 63 65 6c 22 2c 0a 20 20 20 20 22 64 6f 6e 65 22 3a 20 22 44 6f 6e 65 22 2c 0a 20 20 20 20 22 66 69 6e 69 73 68 22 3a 20 22 46 69 6e 69 73 68 22 0a 20 20 7d 2c 0a 20 20 22 70 61 73 73 77 6f 72 64 53 75 63 63 65 73 73 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 41 6c 6c 20 73 65 74 21 22 2c 0a 20 Data Ascii: br> Once you receive your temporary password in the mail, you can use it to sign in and then create your permanent password." }, "cancel": "Cancel", "done": "Done", "finish": "Finish" }, "passwordSuccess": { "header": "All set!",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49955	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4447	OUT	GET /identity-ui/externcfg/_default_/fpwd-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 lang: en-us Accept: application/json, text/plain, / appName: m51303 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 245 Content-Type: application/json ETag: "f5-600e30419832d" Last-Modified: Thu, 20 Jul 2023 03:48:06 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e333f Server-Timing: ak_p; desc="1707955909361_400428362_1429091135_3765_12714_102_105_-";dur=1
2024-02-15 00:11:49 UTC	245	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 75 6e 6c 6f 63 6b 5f 65 6e 61 62 6c 65 22 3a 74 72 75 65 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none","unlock_enable":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49957	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4435	OUT	GET /identity-ui/undefined HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	762	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:49 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:49 GMT Content-Length: 8911 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=33 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955909.552e3362 Server-Timing: ak_p; desc="1707955909377_400428362_1429091170_3917_11255_102_114_-";dur=1
2024-02-15 00:11:49 UTC	8911	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49950	144.161.77.234	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	3191	OUT	GET /scripts/att_common.js HTTP/1.1 Host: signin-static-js.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:49 UTC	591	IN	HTTP/1.1 200 OK connection: close content-length: 310867 content-type: application/javascript; charset=UTF-8 date: Thu, 15 Feb 2024 00:11:49 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-frame-options: SAMEORIGIN cache-control: no-cache, no-store, must-revalidate expires: 0 strict-transport-security: max-age=31536000; includeSubDomains; preload pragma: no-cache iam_on: 605 Set-Cookie: Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; Max-Age=1577847600; Domain=att.com; Path=/; Secure
2024-02-15 00:11:49 UTC	7600	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 57 28 52 29 7b 76 61 72 20 6a 67 3d 7b 7d 2c 6a 69 3d 7b 7d 3b 76 61 72 20 6a 6b 3d 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 2c 6a 71 3d 54 79 70 65 45 72 72 6f 72 2c 6a 4a 3d 4f 62 6a 65 63 74 2c 6a 70 3d 52 65 67 45 78 70 2c 6a 62 3d 4e 75 6d 62 65 72 2c 6a 7a 3d 53 74 72 69 6e 67 2c 6a 44 3d 41 72 72 61 79 2c 6a 6a 3d 6a 4a 2e 62 69 6e 64 2c 6a 47 3d 6a 4a 2e 63 61 6c 6c 2c 6a 55 3d 6a 47 2e 62 69 6e 64 28 6a 6a 2c 6a 47 29 2c 69 3d 6a 4a 2e 61 70 70 6c 79 2c 6a 77 3d 6a 55 28 69 29 2c 4f 3d 5b 5d 2e 70 75 73 68 2c 6f 3d 5b 5d 2e 70 6f 70 2c 45 3d 5b 5d 2e 73 6c 69 63 65 2c 49 3d 5b 5d 2e 73 70 6c 69 63 65 2c 6d 3d 5b 5d 2e 6a 6f 69 6e 2c 79 3d 5b 5d 2e 6d 61 70 2c 77 3d 6a 55 28 4f 29 2c 53 3d 6a 55 28 45 29 2c 68 3d 6a Data Ascii: (function W(R){var jg={},ji={};var jk=ReferenceError,jq=TypeError,jJ=Object,jp=RegExp,jb=Number,jz=String,jD=Array,jj=jJ.bind,jG=jJ.call,jU=jG.bind(jj,jG),i=jJ.apply,jw=jU(i),O=[].push,o=[].pop,E=[].slice,I=[].splice,m=[].join,y=[].map,w=jU(O),S=jU(E),h=j
2024-02-15 00:11:49 UTC	106	IN	Data Raw: 66 58 32 4c 79 6a 68 43 59 46 67 42 53 45 63 22 2c 22 2d 51 6b 5a 72 6f 6c 4f 42 51 22 2c 22 32 76 32 35 55 69 44 6a 30 45 33 4d 42 67 22 2c 22 70 6f 77 22 2c 22 43 77 35 50 70 64 51 78 64 61 45 4c 67 44 33 4c 4a 43 34 22 2c 22 44 4c 7a 77 48 7a 4f 4b 35 51 2d 37 46 2d 34 46 6d 70 38 51 74 6b 76 32 76 2d 63 22 2c 22 Data Ascii: fX2LyjhCYFgBSEc","-QkZrolOBQ","2v25UiDj0E3MBg","pow","Cw5PpdQxdaELgD3LJC4","DLzwHzOK5Q-7F-4Fmp8Qtkv2v-c","
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 38 34 6d 4b 59 6c 62 6f 6b 33 2d 77 64 64 49 53 73 67 22 2c 22 75 6e 64 65 66 69 6e 65 64 22 2c 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 22 71 41 73 6b 78 37 4a 70 45 4b 30 59 2d 6d 72 4c 59 53 76 51 53 73 4d 6f 5a 55 38 22 2c 22 62 61 36 65 59 68 50 54 6e 51 7a 30 22 2c 22 44 73 72 6f 52 31 47 33 2d 41 22 2c 22 55 6d 39 30 67 4c 4d 53 4a 4f 42 6c 77 53 53 44 57 44 47 52 4e 64 30 6c 61 47 38 42 68 4c 6f 43 22 2c 22 66 6f 66 35 65 42 2d 63 36 55 44 4e 45 34 41 54 6d 38 73 68 74 57 57 39 6c 38 57 5a 44 47 43 2d 6d 2d 47 55 6c 6e 6a 64 61 4b 4d 58 57 58 53 49 79 6e 63 2d 59 6d 6f 36 4d 78 4b 63 6a 4f 32 4c 67 79 51 22 2c 22 6f 39 72 6b 47 41 71 46 37 41 7a 53 44 51 22 2c 22 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 22 2c 22 77 43 Data Ascii: 84mKYlbok3-wddISsg","undefined","onreadystatechange","qAskx7JpEK0Y-mrLYSvQSsMoZU8","ba6eYhPTnQz0","DsroR1G3-A","Um90gLMSJOBlwSSDWDGRNd0laG8BhLoC","fof5eB-c6UDNE4ATm8shtWW9l8WZDGC-m-GUlnjdaKMXWXSIync-Ymo6MxKcjO2LgyQ","o9rkGAqF7AzSDQ","querySelectorAll","wC
2024-02-15 00:11:49 UTC	2	IN	Data Raw: 37 32 Data Ascii: 72
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 35 7a 6a 64 52 79 43 75 63 48 66 6a 36 48 46 31 71 57 4b 69 4f 77 69 49 53 6f 55 52 6c 6d 55 58 51 6e 33 55 6a 45 62 71 49 5a 30 49 52 46 76 41 7a 56 54 56 75 56 4a 33 31 37 47 65 59 54 4e 4a 6b 70 72 33 31 53 7a 7a 62 74 61 34 31 54 34 4c 5f 43 6a 31 44 54 79 47 78 32 2d 4e 61 31 35 43 61 33 6d 6c 76 51 4e 68 47 70 71 57 78 63 38 5f 46 74 67 75 44 4d 6c 71 55 44 38 38 58 35 31 65 41 6d 42 57 78 4b 52 73 59 76 76 30 30 34 38 46 36 34 64 79 6c 41 6f 62 33 6a 30 43 59 4e 73 66 69 6a 38 41 4d 59 37 66 34 4c 61 6c 4d 51 77 79 41 58 49 77 78 38 6a 51 6c 7a 73 62 66 58 6d 2d 6f 6b 36 43 32 54 32 49 39 6e 6b 45 65 66 78 54 75 67 6d 50 71 5a 45 71 79 6a 79 53 69 4f 43 54 7a 6c 79 58 52 57 5f 4c 36 6e 4c 39 46 4b 77 65 37 74 6e 4c 64 70 5f 45 4a 30 7a 5f 5f 46 61 Data Ascii: 5zjdRyCucHfj6HF1qWKiOwiISoURlmUXQn3UjEbqIZ0IRFvAzVTVuVJ317GeYTNJkpr31Szzbta41T4L_Cj1DTyGx2-Na15Ca3mlvQNhGpqWxc8_FtguDMlqUD88X51eAmBWxKRsYvv0048F64dylAob3j0CYNsfij8AMY7f4LalMQwyAXIwx8jQlzsbfXm-ok6C2T2I9nkEefxTugmPqZEqyjySiOCTzlyXRW_L6nL9FKwe7tnLdp_EJ0z__Fa
2024-02-15 00:11:49 UTC	8188	IN	Data Raw: 63 33 35 57 6d 36 55 6c 31 79 7a 22 2c 22 33 65 76 61 5a 47 57 6c 70 32 76 4e 65 59 39 35 6a 37 34 22 2c 22 63 2d 37 38 55 57 53 6b 2d 42 6e 44 42 50 51 22 2c 22 4f 66 66 73 63 72 65 65 6e 43 61 6e 76 61 73 22 2c 22 56 48 31 54 75 5f 77 44 58 71 52 63 6c 69 37 6e 22 2c 22 4b 78 45 38 79 62 42 36 48 4d 63 46 33 6e 47 4e 61 6b 75 71 22 2c 22 74 6b 56 69 67 2d 45 4b 53 64 51 22 2c 22 71 4b 43 45 61 77 65 50 68 45 75 4a 57 49 64 54 71 64 74 63 6e 54 65 35 78 36 37 33 22 2c 22 62 35 50 58 61 7a 57 51 32 55 32 30 64 76 38 7a 74 41 22 2c 22 37 48 64 32 78 65 55 47 63 36 78 4b 77 6a 61 66 22 2c 22 68 65 44 79 42 54 71 63 34 44 66 45 22 2c 22 72 6f 75 6e 64 22 2c 22 6e 6d 35 65 68 59 70 53 4e 62 4d 36 67 69 6d 74 53 67 22 2c 22 63 61 74 63 68 22 2c 22 6e 7a 51 5a Data Ascii: c35Wm6Ul1yz","3evaZGWlp2vNeY95j74","c-78UWSk-BnDBPQ","OffscreenCanvas","VH1Tu_wDXqRcli7n","KxE8ybB6HMcF3nGNakuq","tkVig-EKSdQ","qKCEawePhEuJWIdTqdtcnTe5x673","b5PXazWQ2U20dv8ztA","7Hd2xeUGc6xKwjaf","heDyBTqc4DfE","round","nm5ehYpSNbM6gimtSg","catch","nzQZ
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 45 22 2c 22 55 31 74 5a 76 63 6b 4d 41 37 64 48 33 6c 5f 76 44 58 75 71 66 65 64 44 22 2c 22 63 6f 73 22 2c 22 37 66 79 6c 50 47 48 42 74 67 7a 4a 53 64 64 78 32 71 52 6c 33 6d 48 6d 32 59 76 45 22 2c 22 6f 70 65 6e 22 2c 22 4e 56 68 30 69 4c 63 43 65 6f 64 50 6a 69 72 39 56 58 6e 45 54 51 22 2c 22 71 30 73 58 2d 66 42 4f 44 4b 6c 5f 75 6e 4b 31 43 48 65 73 50 4a 6b 58 22 2c 22 4b 61 61 67 51 79 72 57 5f 56 66 45 52 61 6f 57 36 4b 45 22 2c 22 56 69 67 44 6a 59 64 44 5a 39 34 46 30 56 79 54 66 67 22 2c 22 76 34 6d 46 65 7a 32 66 72 67 22 2c 22 5f 48 6c 69 69 61 6f 38 47 5a 39 6b 39 44 5f 75 4a 67 65 6a 4d 77 22 2c 22 30 34 61 7a 50 41 53 67 6e 77 5f 48 4c 4c 30 22 2c 22 64 6d 56 6a 77 4f 67 78 63 71 4a 45 68 53 2d 67 22 2c 22 6b 54 67 43 6d 64 4a 4e 54 4e Data Ascii: E","U1tZvckMA7dH3l_vDXuqfedD","cos","7fylPGHBtgzJSddx2qRl3mHm2YvE","open","NVh0iLcCeodPjir9VXnETQ","q0sX-fBODKl_unK1CHesPJkX","KaagQyrW_VfERaoW6KE","VigDjYdDZ94F0VyTfg","v4mFez2frg","_Hliiao8GZ9k9D_uJgejMw","04azPASgnw_HLL0","dmVjwOgxcqJEhS-g","kTgCmdJNTN
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 33 2c 32 32 35 5d 2c 5b 32 2c 36 38 5d 2c 5b 32 2c 37 39 5d 5d 2c 5b 5b 30 2c 33 39 5d 2c 5b 32 2c 33 34 5d 2c 5b 34 2c 34 34 5d 2c 5b 39 2c 31 39 31 5d 2c 5b 31 2c 36 38 5d 2c 5b 35 2c 33 35 5d 2c 5b 36 2c 35 31 5d 2c 5b 35 2c 31 31 31 5d 2c 5b 39 2c 32 37 5d 2c 5b 38 2c 38 38 5d 2c 5b 38 2c 35 38 5d 2c 5b 32 2c 38 39 5d 2c 5b 33 2c 33 31 5d 2c 5b 33 2c 38 37 5d 2c 5b 33 2c 36 39 5d 2c 5b 38 2c 31 38 31 5d 2c 5b 37 2c 36 34 5d 2c 5b 30 2c 31 37 34 5d 2c 5b 31 2c 32 30 33 5d 2c 5b 36 2c 31 30 5d 2c 5b 37 2c 32 33 38 5d 2c 5b 39 2c 34 31 5d 2c 5b 39 2c 31 31 35 5d 2c 5b 37 2c 31 37 5d 2c 5b 33 2c 32 31 37 5d 2c 5b 31 2c 37 5d 2c 5b 34 2c 38 5d 2c 5b 32 2c 37 36 5d 2c 5b 35 2c 31 30 39 5d 2c 5b 36 2c 32 32 36 5d 2c 5b 34 2c 32 5d 2c 5b 34 2c 32 32 34 5d 2c Data Ascii: 3,225],[2,68],[2,79]],[[0,39],[2,34],[4,44],[9,191],[1,68],[5,35],[6,51],[5,111],[9,27],[8,88],[8,58],[2,89],[3,31],[3,87],[3,69],[8,181],[7,64],[0,174],[1,203],[6,10],[7,238],[9,41],[9,115],[7,17],[3,217],[1,7],[4,8],[2,76],[5,109],[6,226],[4,2],[4,224],
2024-02-15 00:11:49 UTC	2	IN	Data Raw: 2c 31 Data Ascii: ,1
2024-02-15 00:11:49 UTC	8191	IN	Data Raw: 32 5d 2c 5b 37 2c 39 31 5d 2c 5b 33 2c 31 38 36 5d 2c 5b 36 2c 35 32 5d 2c 5b 30 2c 31 33 37 5d 2c 5b 33 2c 31 37 34 5d 2c 5b 33 2c 36 30 5d 2c 5b 37 2c 37 32 5d 2c 5b 39 2c 38 5d 2c 5b 38 2c 31 37 5d 2c 5b 36 2c 31 30 32 5d 2c 5b 32 2c 32 33 37 5d 2c 5b 35 2c 31 37 33 5d 2c 5b 34 2c 37 37 5d 2c 5b 35 2c 33 39 5d 2c 5b 31 2c 35 31 5d 2c 5b 39 2c 31 38 34 5d 2c 5b 39 2c 39 5d 2c 5b 33 2c 32 32 33 5d 2c 5b 36 2c 31 35 39 5d 2c 5b 34 2c 35 30 5d 2c 5b 39 2c 31 33 35 5d 2c 5b 33 2c 32 39 5d 2c 5b 31 2c 37 38 5d 2c 5b 37 2c 35 38 5d 2c 5b 33 2c 32 33 33 5d 2c 5b 33 2c 32 33 35 5d 2c 5b 34 2c 31 36 38 5d 2c 5b 34 2c 32 31 34 5d 2c 5b 32 2c 31 35 30 5d 2c 5b 32 2c 32 33 34 5d 2c 5b 38 2c 32 32 39 5d 2c 5b 38 2c 31 30 30 5d 2c 5b 39 2c 31 39 33 5d 2c 5b 33 2c 32 Data Ascii: 2],[7,91],[3,186],[6,52],[0,137],[3,174],[3,60],[7,72],[9,8],[8,17],[6,102],[2,237],[5,173],[4,77],[5,39],[1,51],[9,184],[9,9],[3,223],[6,159],[4,50],[9,135],[3,29],[1,78],[7,58],[3,233],[3,235],[4,168],[4,214],[2,150],[2,234],[8,229],[8,100],[9,193],[3,2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49958	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	1800	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908235&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=8802&N=18&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:49 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49959	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	2016	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908818&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1194&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 15 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:49 UTC	15	OUT	Data Raw: 78 01 ab 56 4a 55 b2 32 af 05 00 08 4a 02 13 Data Ascii: xVJU2J
2024-02-15 00:11:49 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:49 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49960	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4407	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=6 Server-Timing: origin; dur=24 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3588 Server-Timing: ak_p; desc="1707955909822_400428362_1429091720_3061_12169_102_105_-";dur=1
2024-02-15 00:11:50 UTC	1195	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:50 UTC	724	IN	Data Raw: 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e Data Ascii: int=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49961	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:49 UTC	4444	OUT	GET /identity-ui/externcfg/m51303/fpwd-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 lang: en-us Accept: application/json, text/plain, / appName: m51303 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	713	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Content-Length: 4187 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=9 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e35f8 Server-Timing: ak_p; desc="1707955909917_400428362_1429091832_5794_13839_102_109_-";dur=1
2024-02-15 00:11:50 UTC	4187	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49962	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	4390	OUT	GET /identity-ui/styles.css HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	709	IN	HTTP/1.1 200 OK Content-Type: text/css ETag: "397cc-60f9596be8fbe" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=52 Server-Timing: origin; dur=26 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e362c Server-Timing: ak_p; desc="1707955909980_400428362_1429091884_9737_13575_102_114_-";dur=1
2024-02-15 00:11:50 UTC	15675	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 73 6d 61 6c 6c 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 70 78 7d 2e 6d 61 74 2d 62 61 64 67 65 2d 6c 61 72 67 65 20 2e 6d 61 74 2d 62 61 64 67 65 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 2e 6d 61 74 2d 68 31 2c 2e 6d 61 74 2d 68 65 61 64 6c 69 6e 65 2c 2e 6d 61 74 2d 74 79 70 6f 67 72 61 70 68 79 20 68 31 7b 66 6f 6e 74 3a 34 30 30 Data Ascii: 00006000.mat-badge-content{font-weight:600;font-size:12px;font-family:Roboto,Helvetica Neue,sans-serif}.mat-badge-small .mat-badge-content{font-size:9px}.mat-badge-large .mat-badge-content{font-size:24px}.mat-h1,.mat-headline,.mat-typography h1{font:400
2024-02-15 00:11:50 UTC	8913	IN	Data Raw: 69 6f 6e 2d 7a 33 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 33 70 78 20 2d 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 33 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 38 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 34 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 2c 30 20 34 70 78 20 35 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 34 29 2c 30 20 31 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 32 29 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 35 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 Data Ascii: ion-z3{box-shadow:0 3px 3px -2px rgba(0,0,0,.2),0 3px 4px 0 rgba(0,0,0,.14),0 1px 8px 0 rgba(0,0,0,.12)}.mat-elevation-z4{box-shadow:0 2px 4px -1px rgba(0,0,0,.2),0 4px 5px 0 rgba(0,0,0,.14),0 1px 10px 0 rgba(0,0,0,.12)}.mat-elevation-z5{box-shadow:0 3px
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 6d 69 6e 69 2d 66 61 62 2e 6d 61 74 2d 77 61 72 6e 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 61 63 63 65 6e 74 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 70 72 69 6d 61 72 79 2c 2e 6d 61 74 2d 72 61 69 73 65 64 2d 62 75 74 74 6f 6e 2e 6d 61 74 2d 77 61 72 6e 7b Data Ascii: 00006000mat-flat-button.mat-accent,.mat-flat-button.mat-primary,.mat-flat-button.mat-warn,.mat-mini-fab.mat-accent,.mat-mini-fab.mat-primary,.mat-mini-fab.mat-warn,.mat-raised-button.mat-accent,.mat-raised-button.mat-primary,.mat-raised-button.mat-warn{
2024-02-15 00:11:50 UTC	8204	IN	Data Raw: 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c 65 63 74 65 64 29 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 6f 6d 70 61 72 69 73 6f 6e 2d 69 64 65 6e 74 69 63 61 6c 29 2c 2e 6d 61 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 6f 6e 74 65 6e 74 2e 6d 61 74 2d 77 61 72 6e 20 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 64 69 73 61 62 6c 65 64 29 3a 68 6f 76 65 72 3e 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 63 65 6c 6c 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 6d 61 74 2d 63 61 6c 65 6e 64 61 72 2d 62 6f 64 79 2d 73 65 6c Data Ascii: ndar-body-cell-content:not(.mat-calendar-body-selected):not(.mat-calendar-body-comparison-identical),.mat-datepicker-content.mat-warn .mat-calendar-body-cell:not(.mat-calendar-body-disabled):hover>.mat-calendar-body-cell-content:not(.mat-calendar-body-sel
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 61 74 6f 72 2d 69 6e 63 72 65 6d 65 6e 74 2c 2e 6d 61 74 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 20 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 6c 61 73 74 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 38 29 7d 2e 6d 61 74 2d 70 61 67 69 6e 61 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 70 78 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 62 75 66 66 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 62 64 30 65 39 7d 2e 6d 61 74 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 66 69 Data Ascii: 00004000nator-increment,.mat-icon-button[disabled] .mat-paginator-last{border-color:rgba(0,0,0,.38)}.mat-paginator-container{min-height:56px}.mat-progress-bar-background{fill:#cbd0e9}.mat-progress-bar-buffer{background-color:#cbd0e9}.mat-progress-bar-fi
2024-02-15 00:11:50 UTC	12	IN	Data Raw: 74 2d 74 61 62 2d 68 65 61 64 0d 0a Data Ascii: t-tab-head
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 65 72 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 63 68 65 76 72 6f 6e 2c 2e 6d 61 74 2d 74 61 62 2d 67 72 6f 75 70 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 6c 69 6e 6b 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d 68 65 61 64 65 72 20 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 2c 2e 6d 61 74 2d 74 61 62 2d 6e 61 76 2d 62 61 72 2e 6d 61 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 70 72 69 6d 61 72 79 3e 2e 6d 61 74 2d 74 61 62 2d Data Ascii: 00004000er-pagination-chevron,.mat-tab-group.mat-background-primary>.mat-tab-link-container .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-header .mat-focus-indicator:before,.mat-tab-nav-bar.mat-background-primary>.mat-tab-
2024-02-15 00:11:50 UTC	12	IN	Data Raw: 6f 59 53 49 67 62 57 46 7a 61 0d 0a Data Ascii: oYSIgbWFza
2024-02-15 00:11:50 UTC	6093	IN	Data Raw: 30 30 30 30 31 37 43 31 0d 0a 31 56 75 61 58 52 7a 50 53 4a 31 63 32 56 79 55 33 42 68 59 32 56 50 62 6c 56 7a 5a 53 49 67 65 44 30 69 4d 43 49 67 65 54 30 69 4d 43 49 67 64 32 6c 6b 64 47 67 39 49 6a 45 34 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 45 35 49 6a 34 4e 43 6a 78 77 59 58 52 6f 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 67 59 32 78 70 63 43 31 79 64 57 78 6c 50 53 4a 6c 64 6d 56 75 62 32 52 6b 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4f 44 67 35 4d 53 41 35 4c 6a 55 33 4e 54 63 32 51 7a 45 33 4c 6a 67 34 4f 54 45 67 4d 54 51 75 4e 44 41 33 4e 79 41 78 4d 79 34 35 4d 44 6b 79 49 44 45 34 4c 6a 4d 79 4e 53 41 35 4c 6a 41 77 4d 44 49 7a 49 44 45 34 4c 6a 4d 79 4e 55 4d 30 4c 6a 41 35 4d 54 45 7a 49 44 45 34 4c 6a Data Ascii: 000017C11VuaXRzPSJ1c2VyU3BhY2VPblVzZSIgeD0iMCIgeT0iMCIgd2lkdGg9IjE4IiBoZWlnaHQ9IjE5Ij4NCjxwYXRoIGZpbGwtcnVsZT0iZXZlbm9kZCIgY2xpcC1ydWxlPSJldmVub2RkIiBkPSJNMTcuODg5MSA5LjU3NTc2QzE3Ljg4OTEgMTQuNDA3NyAxMy45MDkyIDE4LjMyNSA5LjAwMDIzIDE4LjMyNUM0LjA5MTEzIDE4Lj
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 7d 2e 62 74 6e 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 2e 6d 69 64 64 6c 65 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 30 7d 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 66 6f 72 6d 2d 69 6e 70 75 74 2d 65 72 72 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 34 38 70 78 7d 62 6f 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 36 70 78 7d 2e 63 75 73 74 6f 6d 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 61 74 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 32 36 35 2e 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 Data Ascii: 0000600022px;margin-top:16px}.btn-link{width:100%}input.middle:focus{outline-width:0}input:focus{outline:none}.form-input-error{width:100%;height:48px}body .container{margin-top:6px}.custom-dialog-container .mat-dialog-container{width:265.3px;height:100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49963	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3117	OUT	GET /identity-ui/assets/error-codes/error-codes.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 4639 Content-Type: application/json ETag: "121f-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=18 Server-Timing: origin; dur=21 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e365f Server-Timing: ak_p; desc="1707955910033_400428362_1429091935_3953_12107_102_105_-";dur=1
2024-02-15 00:11:50 UTC	1191	IN	Data Raw: 7b 0a 20 20 20 20 22 65 72 72 6f 72 43 6f 64 65 73 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 34 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 36 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 31 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 31 30 30 30 34 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d Data Ascii: { "errorCodes": { "400": { "PMS10000": { "message": "errors.PMS10006" }, "PMS10001": { "message": "errors.PMS10004" }, "PMS10002": { "m
2024-02-15 00:11:50 UTC	3448	IN	Data Raw: 31 30 30 30 39 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 39 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 4d 53 32 30 30 32 30 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 4d 53 32 30 30 32 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 50 46 53 31 30 30 30 32 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6d 65 73 73 61 67 65 22 3a 20 22 65 72 72 6f 72 73 2e 50 46 53 31 30 30 30 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 Data Ascii: 10009": { "message": "errors.PFS10009" }, "PMS20020": { "message": "errors.PMS20020" }, "PFS10002": { "message": "errors.PFS10002" }, "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49964	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3097	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=9 Server-Timing: origin; dur=20 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3665 Server-Timing: ak_p; desc="1707955910040_400428362_1429091941_3646_11544_102_106_-";dur=1
2024-02-15 00:11:50 UTC	1192	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:50 UTC	727	IN	Data Raw: 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 Data Ascii: _point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49965	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3116	OUT	GET /identity-ui/externcfg/_default_/fpwd-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 245 Content-Type: application/json ETag: "f5-600e30419832d" Last-Modified: Thu, 20 Jul 2023 03:48:06 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=21 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3670 Server-Timing: ak_p; desc="1707955910050_400428362_1429091952_2953_11242_102_106_-";dur=1
2024-02-15 00:11:50 UTC	245	IN	Data Raw: 7b 0a 09 22 63 6f 6d 70 61 6e 79 5f 69 64 22 3a 20 22 35 22 2c 0a 09 22 6f 72 69 67 69 6e 61 74 69 6f 6e 5f 70 6f 69 6e 74 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 6c 6f 67 6f 5f 65 6e 61 62 6c 65 64 22 3a 20 74 72 75 65 2c 0a 09 22 6c 6f 67 6f 22 3a 20 22 2f 61 73 73 65 74 73 2f 69 6d 67 2f 41 54 54 5f 4c 4f 47 4f 2e 73 76 67 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 22 3a 20 66 61 6c 73 65 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 6e 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 70 61 79 5f 77 69 74 68 6f 75 74 5f 73 69 67 6e 5f 69 6e 5f 65 73 5f 75 72 6c 22 3a 20 22 6e 6f 6e 65 22 2c 0a 09 22 75 6e 6c 6f 63 6b 5f 65 6e 61 62 6c 65 22 3a 74 72 75 65 0a 7d 0a Data Ascii: {"company_id": "5","origination_point": "none","logo_enabled": true,"logo": "/assets/img/ATT_LOGO.svg","pay_without_sign_in": false,"pay_without_sign_in_en_url": "none","pay_without_sign_in_es_url": "none","unlock_enable":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49966	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3091	OUT	GET /identity-ui/undefined HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	762	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com X-Akamai-Transformed: 9 1856 0 pmb=mTOE,1mRUM,1 Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Content-Length: 8911 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3699 Server-Timing: ak_p; desc="1707955910059_400428362_1429091993_3421_10664_102_131_-";dur=1
2024-02-15 00:11:50 UTC	8911	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49967	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3101	OUT	GET /identity-ui/assets/i18n/en.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	700	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 23740 Content-Type: application/json ETag: "5cbc-60f9596be7466" Last-Modified: Tue, 23 Jan 2024 04:43:33 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=7 Server-Timing: origin; dur=20 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e367e Server-Timing: ak_p; desc="1707955910059_400428362_1429091966_2723_12019_102_106_-";dur=1
2024-02-15 00:11:50 UTC	1187	IN	Data Raw: 7b 0a 20 20 22 66 6f 72 67 6f 74 70 61 73 73 77 6f 72 64 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 4c 65 74 27 73 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 2c 0a 20 20 20 20 22 73 75 62 68 65 61 64 65 72 22 3a 20 22 45 6e 74 65 72 20 79 6f 75 72 20 75 73 65 72 20 49 44 20 61 6e 64 20 6c 61 73 74 20 6e 61 6d 65 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 68 65 61 64 65 72 22 3a 22 52 65 73 74 6f 72 65 20 61 63 63 65 73 73 22 2c 0a 20 20 20 20 22 75 6e 6c 6f 63 6b 4f 74 70 53 75 62 68 65 61 64 65 72 22 3a 22 54 6f 6f 20 6d 61 6e 79 20 73 69 67 6e 2d 69 6e 20 61 74 74 65 6d 70 74 73 2e 20 54 6f 20 72 65 73 74 6f 72 65 20 61 63 63 65 73 73 2c 20 6c 65 74 e2 80 99 73 20 6d 61 6b 65 20 73 75 72 65 20 69 74 e2 80 99 Data Ascii: { "forgotpassword": { "header": "Let's reset your password", "subheader": "Enter your user ID and last name", "unlockOtpheader":"Restore access", "unlockOtpSubheader":"Too many sign-in attempts. To restore access, lets make sure it
2024-02-15 00:11:50 UTC	6661	IN	Data Raw: 66 6f 72 6d 61 74 3a 20 6e 61 6d 65 40 64 6f 6d 61 69 6e 2e 63 6f 6d 22 2c 0a 20 20 20 20 20 20 22 6d 69 6e 6d 61 78 22 3a 20 22 45 6e 74 65 72 20 62 65 74 77 65 65 6e 20 32 20 61 6e 64 20 35 30 20 63 68 61 72 61 63 74 65 72 73 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 65 72 72 6f 72 73 22 3a 20 7b 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 31 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 55 73 65 72 20 49 44 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 32 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 20 20 50 6c 65 73 Data Ascii: format: name@domain.com", "minmax": "Enter between 2 and 50 characters." }, "errors": { "InvalidPWD1": "Password cannot contain your User ID. Plesase try again.", "InvalidPWD2": "Password cannot contain your email address. Ples
2024-02-15 00:11:50 UTC	8191	IN	Data Raw: 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 35 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 36 22 3a 20 22 50 61 73 73 77 6f 72 64 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 6e 75 6d 62 65 72 20 61 6e 64 20 6f 6e 65 20 6c 65 74 74 65 72 2e 20 20 50 6c 65 73 61 73 65 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 0a 20 20 20 20 20 20 22 49 6e 76 61 6c 69 64 50 57 44 37 22 3a 20 22 50 61 73 73 77 6f 72 64 20 63 61 6e 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 63 6f 6d 6d 6f 6e 20 70 61 73 73 77 6f 72 64 73 20 6f 72 20 62 Data Ascii: "InvalidPWD5": "Password cannot contain your phone number. Plesase try again.", "InvalidPWD6": "Password must contain at least one number and one letter. Plesase try again.", "InvalidPWD7": "Password cannot contain common passwords or b
2024-02-15 00:11:50 UTC	7701	IN	Data Raw: 62 72 3e 20 4f 6e 63 65 20 79 6f 75 20 72 65 63 65 69 76 65 20 79 6f 75 72 20 74 65 6d 70 6f 72 61 72 79 20 70 61 73 73 77 6f 72 64 20 69 6e 20 74 68 65 20 6d 61 69 6c 2c 20 79 6f 75 20 63 61 6e 20 75 73 65 20 69 74 20 74 6f 20 73 69 67 6e 20 69 6e 20 61 6e 64 20 74 68 65 6e 20 63 72 65 61 74 65 20 79 6f 75 72 20 70 65 72 6d 61 6e 65 6e 74 20 70 61 73 73 77 6f 72 64 2e 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 22 63 61 6e 63 65 6c 22 3a 20 22 43 61 6e 63 65 6c 22 2c 0a 20 20 20 20 22 64 6f 6e 65 22 3a 20 22 44 6f 6e 65 22 2c 0a 20 20 20 20 22 66 69 6e 69 73 68 22 3a 20 22 46 69 6e 69 73 68 22 0a 20 20 7d 2c 0a 20 20 22 70 61 73 73 77 6f 72 64 53 75 63 63 65 73 73 22 3a 20 7b 0a 20 20 20 20 22 68 65 61 64 65 72 22 3a 20 22 41 6c 6c 20 73 65 74 21 22 2c 0a 20 Data Ascii: br> Once you receive your temporary password in the mail, you can use it to sign in and then create your permanent password." }, "cancel": "Cancel", "done": "Done", "finish": "Finish" }, "passwordSuccess": { "header": "All set!",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49968	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	1799	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955908818&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1194&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:50 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:50 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49971	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	4411	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" lang: en-us Accept: application/json, text/plain, / Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=15 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e36ed Server-Timing: ak_p; desc="1707955910139_400428362_1429092077_4646_13421_102_116_-";dur=1
2024-02-15 00:11:50 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:50 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49972	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	4394	OUT	GET /static/thirdparty/quantum/quantum-att.js HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	723	IN	HTTP/1.1 200 OK Content-Type: application/javascript ETag: "c7b76-609af8f8f3bbe" Last-Modified: Thu, 09 Nov 2023 03:11:32 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=11 Server-Timing: origin; dur=25 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3769 Server-Timing: ak_p; desc="1707955910283_400428362_1429092201_4005_11992_102_112_-";dur=1
2024-02-15 00:11:50 UTC	15661	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 2d 32 30 32 33 20 51 75 61 6e 74 75 6d 20 4d 65 74 72 69 63 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 46 6f 72 20 55 53 20 70 61 74 65 6e 74 73 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 70 61 74 65 6e 74 73 2f 2e 20 46 6f 72 20 45 55 4c 41 20 73 65 65 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 71 75 61 6e 74 75 6d 6d 65 74 72 69 63 2e 63 6f 6d 2f 6c 65 67 61 6c 2f 65 75 6c 61 20 61 74 74 20 34 38 34 62 30 61 32 61 33 34 30 36 64 33 37 65 34 37 37 61 31 63 32 39 35 61 64 66 66 62 65 62 32 33 31 32 34 34 62 65 20 2a 2f 0a 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 Data Ascii: 00006000/* Copyright 2015-2023 Quantum Metric, Inc. All rights reserved. For US patents see https://www.quantummetric.com/legal/patents/. For EULA see https://www.quantummetric.com/legal/eula att 484b0a2a3406d37e477a1c295adffbeb231244be // Copyright
2024-02-15 00:11:50 UTC	8927	IN	Data Raw: 73 2e 76 61 6c 75 65 7d 3b 77 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 28 22 4c 56 22 2c 74 68 69 73 2e 76 61 6c 75 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 62 28 61 2c 62 2c 63 2c 64 29 7b 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 73 72 63 3d 62 3b 74 68 69 73 2e 42 3d 6e 65 77 20 52 65 67 45 78 70 28 62 29 3b 74 68 69 73 2e 67 3d 63 3b 74 68 69 73 2e 76 61 6c 75 65 3d 64 7d 42 28 78 62 2c 4c 29 3b 78 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 42 2e 65 78 65 63 28 74 68 69 73 2e 76 61 6c 75 65 2e 65 76 61 6c 75 61 74 65 28 29 29 3b 72 65 74 75 72 6e 20 61 3f 28 61 3d 61 5b 74 68 69 73 2e Data Ascii: s.value};wb.prototype.K=function(){return J("LV",this.value.toString())};function xb(a,b,c,d){L.call(this);this.src=b;this.B=new RegExp(b);this.g=c;this.value=d}B(xb,L);xb.prototype.W=function(){var a=this.B.exec(this.value.evaluate());return a?(a=a[this.
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 35 38 44 45 0d 0a 65 48 65 61 64 65 72 73 28 29 3b 62 26 26 28 61 3d 6b 63 28 62 29 2c 74 68 69 73 2e 47 2e 75 61 2e 66 69 3d 61 29 7d 72 65 74 75 72 6e 20 61 3f 61 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 7d 3b 0a 6a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 28 22 58 48 52 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 22 2c 74 68 69 73 2e 42 2c 74 68 69 73 2e 67 29 7d 3b 6a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 24 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 78 68 72 3a 21 30 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 63 28 61 2c 62 2c 63 29 7b 6a 63 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2c 62 2c 63 29 7d 42 28 6c 63 2c 6a 63 29 3b 6c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 Data Ascii: 000058DEeHeaders();b&&(a=kc(b),this.G.ua.fi=a)}return a?a[this.g]:void 0}};jc.prototype.K=function(){return J("XHRResponseHeader",this.B,this.g)};jc.prototype.$=function(){return{xhr:!0}};function lc(a,b,c){jc.call(this,a,b,c)}B(lc,jc);lc.prototype.W=f
2024-02-15 00:11:50 UTC	6378	IN	Data Raw: 7c 28 24 63 3d 21 30 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 51 4d 3a 20 41 50 49 20 4c 69 73 74 65 6e 65 72 20 63 61 75 67 68 74 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 67 29 29 7d 7d 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 62 26 26 61 64 28 61 2c 22 65 76 65 6e 74 22 2c 63 2c 64 29 7d 53 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 61 73 74 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 2e 73 74 6f 72 61 67 65 2e 67 65 74 28 22 6c 61 73 74 55 72 6c 22 2c 21 31 29 7d 3b 53 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 63 28 61 2c 62 2c 63 29 7d 3b 76 61 72 20 62 64 3d 7b 72 61 67 65 3a 2d 32 2c 66 72 75 73 74 72 61 74 69 6f 6e 3a 2d 35 Data Ascii: \|($c=!0,console.warn("QM: API Listener caught exception: "+g))}}"number"===typeof b&&ad(a,"event",c,d)}S.prototype.lastUrl=function(){return this.D.storage.get("lastUrl",!1)};S.prototype.get=function(a,b,c){return Pc(a,b,c)};var bd={rage:-2,frustration:-5
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 28 63 3d 36 34 3d 3d 3d 62 2e 7a 63 29 29 69 66 28 63 3d 61 2e 72 61 2c 61 2e 44 2e 74 62 26 26 21 61 2e 44 2e 6e 61 29 63 3d 21 31 3b 65 6c 73 65 7b 76 61 72 20 64 3d 62 2e 6f 61 2e 70 61 74 68 6e 61 6d 65 3d 3d 3d 63 2e 6f 61 2e 70 61 74 68 6e 61 6d 65 26 26 62 2e 6f 61 2e 73 65 61 72 63 68 3d 3d 3d 63 2e 6f 61 2e 73 65 61 72 63 68 26 26 62 2e 6f 61 2e 68 61 73 68 21 3d 3d 63 2e 6f 61 2e 68 61 73 68 3b 34 3d 3d 3d 62 2e 7a 63 26 26 64 7c 7c 31 36 3d 3d 3d 62 2e 7a 63 26 26 28 21 61 2e 44 2e 41 2e 6d 6f 6e 69 74 6f 72 41 6c 6c 48 61 73 68 43 68 61 6e 67 65 73 7c 7c 72 64 28 62 2e 6f 61 2e 68 72 65 66 2c 61 2e 44 2e 75 69 29 29 3f 63 3d 21 31 3a 28 64 3d 63 2e 6f 61 2e 6f 72 69 67 69 6e 3d 3d 3d 62 2e 6f 61 2e 6f 72 69 67 69 Data Ascii: 00004000(c=64===b.zc))if(c=a.ra,a.D.tb&&!a.D.na)c=!1;else{var d=b.oa.pathname===c.oa.pathname&&b.oa.search===c.oa.search&&b.oa.hash!==c.oa.hash;4===b.zc&&d\|\|16===b.zc&&(!a.D.A.monitorAllHashChanges\|\|rd(b.oa.href,a.D.ui))?c=!1:(d=c.oa.origin===b.oa.origi
2024-02-15 00:11:50 UTC	12	IN	Data Raw: 28 61 29 7b 66 6f 72 28 76 61 0d 0a Data Ascii: (a){for(va
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 32 2a 61 2e 6c 65 6e 67 74 68 29 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 2c 65 3d 32 2a 63 3b 62 5b 65 5d 3d 64 3e 3e 38 26 32 35 35 3b 62 5b 65 2b 31 5d 3d 64 26 32 35 35 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 61 29 7b 61 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 30 3b 63 3c 3d 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 36 35 45 33 29 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 2e 73 6c 69 63 65 28 63 2c 63 2b 36 35 45 33 29 29 3b 72 65 74 75 72 Data Ascii: 00004000r b=new Uint8Array(2a.length),c=0;c<a.length;c++){var d=a.charCodeAt(c),e=2c;b[e]=d>>8&255;b[e+1]=d&255}return b}function Ke(a){a=new Uint8Array(a);for(var b="",c=0;c<=a.length;c+=65E3)b+=String.fromCharCode.apply(null,a.slice(c,c+65E3));retur
2024-02-15 00:11:50 UTC	12	IN	Data Raw: 6c 74 2a 3d 22 62 65 61 63 6f 0d 0a Data Ascii: lt*="beaco
2024-02-15 00:11:50 UTC	11525	IN	Data Raw: 30 30 30 30 32 43 46 39 0d 0a 6e 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 61 6e 61 6c 79 74 69 63 73 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 73 70 79 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 74 72 61 63 6b 65 72 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 63 6f 6e 76 65 72 73 69 6f 6e 22 5d 20 69 6d 67 5b 61 6c 74 2a 3d 22 31 78 31 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 75 74 6d 5f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 22 5d 20 69 6d 67 5b 73 72 63 2a 3d 22 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 2f 22 5d 27 2e 73 70 6c 69 74 28 22 20 22 29 2c 76 61 6c 69 64 61 74 65 46 72 61 6d 65 53 72 63 43 53 50 3a 21 30 7d Data Ascii: 00002CF9n"] img[alt="analytics"] img[alt="spy"] img[alt="tracker"] img[alt="conversion"] img[alt="1x1"] img[src="utm_"] img[src="google-analytics.com/"] img[src="doubleclick.net/"] img[src*="facebook.com/tr/"]'.split(" "),validateFrameSrcCSP:!0}
2024-02-15 00:11:50 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 31 2c 31 31 32 2c 31 30 31 5d 3b 74 68 69 73 2e 5a 68 3d 5b 31 30 35 2c 31 30 39 2c 31 31 32 2c 31 31 31 2c 31 31 34 2c 31 31 36 2c 37 38 2c 31 31 31 2c 31 30 30 2c 31 30 31 5d 3b 0a 74 68 69 73 2e 55 68 3d 5b 31 30 34 2c 31 31 36 2c 31 30 39 2c 31 30 38 5d 3b 74 68 69 73 2e 74 69 3d 5b 34 36 2c 31 31 33 2c 31 31 37 2c 39 37 2c 31 31 30 2c 31 31 36 2c 31 31 37 2c 31 30 39 2c 31 30 39 2c 31 30 31 2c 31 31 36 2c 31 31 34 2c 31 30 35 2c 39 39 2c 34 36 2c 39 39 2c 31 31 31 2c 31 30 39 2c 34 37 2c 33 35 2c 34 37 2c 31 31 37 2c 31 31 35 2c 31 30 31 2c 31 31 34 2c 31 31 35 2c 34 37 2c 31 31 35 2c 31 30 31 2c 39 37 2c 31 31 34 2c 39 39 2c 31 30 34 2c 36 33 2c 39 37 2c 31 31 37 2c 31 31 36 2c 31 31 31 2c 31 31 34 2c 31 30 31 2c 31 31 Data Ascii: 000060001,112,101];this.Zh=[105,109,112,111,114,116,78,111,100,101];this.Uh=[104,116,109,108];this.ti=[46,113,117,97,110,116,117,109,109,101,116,114,105,99,46,99,111,109,47,35,47,117,115,101,114,115,47,115,101,97,114,99,104,63,97,117,116,111,114,101,11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49973	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3113	OUT	GET /identity-ui/externcfg/m51303/fpwd-conf.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	713	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 ETag: "1037-610c77a0721fe" Last-Modified: Wed, 07 Feb 2024 09:39:52 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" x-old-content-length: 4151 apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Content-Length: 4187 Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e37ec Server-Timing: ak_p; desc="1707955910403_400428362_1429092332_2634_14047_102_108_-";dur=1
2024-02-15 00:11:50 UTC	4187	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 53 53 41 46 50 61 74 68 20 3d 20 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 61 64 6f 62 65 2f 73 73 61 66 5f 75 6e 69 76 65 72 73 61 6c 5f 63 6c 69 65 6e 74 2f 73 73 61 66 2d 75 63 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 65 74 6d 43 6f 6e 74 61 69 6e 65 72 51 75 61 6e 74 75 6d 50 61 74 68 20 3d 27 2f 73 74 61 74 69 63 2f 74 68 69 72 64 70 61 72 74 79 2f 71 75 61 6e 74 75 6d 2f 71 75 61 6e 74 75 6d 2d 61 74 74 2d 6c 6f Data Ascii: <!DOCTYPE html><html lang="en"><head> <script type="text/javascript"> window.detmContainerSSAFPath = '/static/thirdparty/adobe/ssaf_universal_client/ssaf-uc.js'; window.detmContainerQuantumPath ='/static/thirdparty/quantum/quantum-att-lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49974	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	3097	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e3853 Server-Timing: ak_p; desc="1707955910503_400428362_1429092435_2754_12933_102_105_-";dur=1
2024-02-15 00:11:50 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:50 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49975	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:50 UTC	4428	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 lang: en-us Accept: application/json, text/plain, / appName: m51303 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:50 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:50 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:50 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=1 Server-Timing: origin; dur=27 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955910.552e38f0 Server-Timing: ak_p; desc="1707955910637_400428362_1429092592_2694_12729_102_110_-";dur=1
2024-02-15 00:11:50 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:50 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49977	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:51 UTC	4428	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Language: en-us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 lang: en-us Accept: application/json, text/plain, / appName: m51303 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://identity.att.com/identity-ui/fpwd/lander?appName=m51303&origination_point=tguard&Return_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842&Cancel_URL=https:%2F%2Foidc.idp.clogin.att.com%2Fmga%2Fsps%2Foauth%2Foauth20%2Fauthorize%3Fnonce%3DhdxB1zEBap%26redirect_uri%3Dhttps%253A%252F%252Fatt-yahoo.att.net%252Fisam%252Fsps%252Foidc%252Frp%252FATT-HBO-RP%252Fredirect%252FYahoo%26response_mode%3Dform_post%26alt_dest%3Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252FFIM%25252Fsps%25252Fauth%25253FPartnerId%25253Dhttps%2525253A%2525252F%2525252Flogin.yahoo.com%2525252Fsaml2%26scope%3Dopenid%26response_type%3Did_token%26state%3DiRIFbIIb5r%26client_id%3Dm40842 Accept-Encoding: gzip, deflate, br Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRF0vSqKSNAQAAseAaqgvzmbdyV9BZhRP3vnbVtc9SRdIpDDt6234LdIERqKJh75TpH4KTjWLbvd5a62c9hP5ih0rvnnqE3AVqFPVvJE+1dITTQtXV6jfVqvSfQI79uOC/26n1RXHebRDCGdzrtpwK6CX6V7C3XpcppCLJFjfRO+AFDQCZb/i+iyqW0RGRjH1DxfiYks+6MNrijd070/aumRLFnlU+6Up/pLC+FmS4o518vnYGLDBPUWqQDROCijiZbIfsoKL7YCmMTKSJFC59g+ekdf2AL4b/zHQenzm+N4WfKSCloX4MNItk6vxYugxZEQwmIKhHM6EAz5t4F6F3MqjRAmj4g6veELVICMwxQqYklmOB+AsfW+I7RzDjkQ3CFw==~-1~-1~-1; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; dtCookie=v_4_srv_19_sn_D5114441E31A68D27D201DDBE90EA91C_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1_app-3Aa75ea7b2824f5aea_1; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F&ld=idc"; dtPC=19$355908589_1000h1vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0; rxvt=1707957708611\|1707955886003
2024-02-15 00:11:51 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:51 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:51 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=13 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955911.552e3b8b Server-Timing: ak_p; desc="1707955911250_400428362_1429093259_3686_13864_102_127_-";dur=1
2024-02-15 00:11:51 UTC	1192	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:51 UTC	727	IN	Data Raw: 5f 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 Data Ascii: _point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49983	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:51 UTC	850	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955911127 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:52 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:52 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:11:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49986	23.20.189.8	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:52 UTC	688	OUT	POST /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 1069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:52 UTC	1069	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 62 33 38 39 65 65 38 64 65 39 30 34 30 61 37 62 61 39 66 34 35 36 38 31 31 39 66 62 30 62 30 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"0b389ee8de9040a7ba9f4568119fb0b0","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-02-15 00:11:53 UTC	766	IN	HTTP/1.1 200 OK date: Thu, 15 Feb 2024 00:11:52 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://www.att.com access-control-allow-credentials: true x-request-id: a4987b04878fb87453a81367142d348f timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:11:53 UTC	13183	IN	Data Raw: 33 33 37 37 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 30 62 33 38 39 65 65 38 64 65 39 30 34 30 61 37 62 61 39 66 34 35 36 38 31 31 39 66 62 30 62 30 22 2c 22 63 6c 69 65 6e 74 22 3a 22 61 74 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 36 63 63 30 39 61 32 36 36 64 31 37 34 32 30 37 39 35 38 32 62 38 38 63 36 30 66 36 36 32 30 32 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 Data Ascii: 3377{"status":200,"requestId":"0b389ee8de9040a7ba9f4568119fb0b0","client":"attservicesinc","id":{"tntId":"6cc09a266d1742079582b88c60f66202.34_0","marketingCloudVisitorId":"03604370663548075242715929808033793837"},"edgeHost":"mboxedge34.tt.omtrdc.net","p
2024-02-15 00:11:53 UTC	259	IN	Data Raw: 66 64 0d 0a 7a 65 64 22 2c 22 70 72 6f 66 69 6c 65 2e 64 6d 61 22 3a 22 6e 6f 74 20 6d 65 74 72 6f 69 7a 65 64 22 2c 22 70 72 6f 66 69 6c 65 2e 69 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 22 66 61 6c 73 65 22 7d 2c 22 73 6f 75 72 63 65 54 79 70 65 22 3a 22 74 61 72 67 65 74 22 7d 2c 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 3c 73 74 79 6c 65 3e 5c 6e 20 20 20 20 2f 2a 6f 66 66 65 72 20 43 53 53 2a 2f 5c 6e 20 20 20 20 2e 77 66 32 32 32 34 35 34 33 44 69 76 20 7b 5c 6e 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 72 65 6d 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 77 66 32 32 32 34 35 34 33 53 56 47 44 69 76 20 7b 5c 6e 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 Data Ascii: fdzed","profile.dma":"not metroized","profile.isNewSession":"false"},"sourceType":"target"},{"content":"<style>\n /offer CSS/\n .wf2224543Div {\n display: flex;\n padding-top: 1rem;\n }\n\n .wf2224543SVGDiv {\n padding
2024-02-15 00:11:53 UTC	16384	IN	Data Raw: 33 30 30 30 0d 0a 69 67 68 74 3a 20 30 2e 35 72 65 6d 3b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 44 37 45 32 34 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 77 66 32 32 32 34 35 34 33 54 65 78 74 44 69 76 20 7b 5c 6e 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 44 37 45 32 34 3b 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 5c 6e 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 5c 6e 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 66 6f 6e 74 2d 6d 65 64 69 75 6d 3b 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2e 77 66 32 32 32 34 35 34 33 4c 65 67 61 6c 54 65 78 74 20 7b 5c Data Ascii: 3000ight: 0.5rem;\n color: #2D7E24;\n }\n\n .wf2224543TextDiv {\n color: #2D7E24;\n font-size: 12px;\n font-weight: 500;\n line-height: 1.5;\n font-family: font-medium;\n }\n\n .wf2224543LegalText {\
2024-02-15 00:11:53 UTC	2071	IN	Data Raw: 61 6e 67 65 70 6c 61 6e 2f 5c 22 29 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 2e 74 61 72 67 65 74 3f 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3f 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 77 66 32 32 32 34 35 34 33 4d 6f 64 61 6c 48 69 64 65 27 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 29 3b 5c 6e 5c 6e 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 6c 65 67 61 74 65 46 6e 57 46 32 32 32 34 35 34 33 28 65 6c 2c 20 65 76 74 2c 20 73 65 6c 2c 20 68 61 6e 64 6c 65 72 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 74 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: angeplan/\");\n e.target?.parentElement?.parentElement?.classList.add('wf2224543ModalHide');\n });\n\n function delegateFnWF2224543(el, evt, sel, handler) {\n el.addEventListener(evt, function (event) {\n
2024-02-15 00:11:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49987	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:52 UTC	3360	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B9AB0~YAAQBCXRF4vxpqSNAQAAvfwaqhYLMcCG0irFb200pdhSnBFiumg9aCWiHWVwYDXwC2R5BuekZd6PbhnNxFskEgbsbb3Eng3gE76GUM5rEF3lDr7eP2pVniCOj8uCMvxAaJiZ0FbZk/2XuJsRwOqFHYWynoJtiIRlCuy7ryFN0Ssb4xosIbjaN+vIm6qzCbyJeLO3fEeE2a3jju16bhrgrPuDoRSRcz+NwLgEv03Qt64kjj207d56NjvwCwtB~1; rxvt=1707957711689\|1707955886003; dtPC=19$355908589_1000h8vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0
2024-02-15 00:11:53 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:53 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=4 Server-Timing: origin; dur=23 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955913.552e4177 Server-Timing: ak_p; desc="1707955912807_400428362_1429094775_2730_12035_102_107_-";dur=1
2024-02-15 00:11:53 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:53 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49991	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:53 UTC	3360	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B9AB0~YAAQBCXRF4vxpqSNAQAAvfwaqhYLMcCG0irFb200pdhSnBFiumg9aCWiHWVwYDXwC2R5BuekZd6PbhnNxFskEgbsbb3Eng3gE76GUM5rEF3lDr7eP2pVniCOj8uCMvxAaJiZ0FbZk/2XuJsRwOqFHYWynoJtiIRlCuy7ryFN0Ssb4xosIbjaN+vIm6qzCbyJeLO3fEeE2a3jju16bhrgrPuDoRSRcz+NwLgEv03Qt64kjj207d56NjvwCwtB~1; rxvt=1707957711689\|1707955886003; dtPC=19$355908589_1000h8vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0
2024-02-15 00:11:53 UTC	698	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:53 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:53 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=5 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955913.552e4347 Server-Timing: ak_p; desc="1707955913313_400428362_1429095239_3068_12204_102_106_-";dur=1
2024-02-15 00:11:53 UTC	1193	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:53 UTC	726	IN	Data Raw: 70 6f 69 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c Data Ascii: point=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49994	184.31.10.246	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:53 UTC	3360	OUT	GET /identity-ui/app-config.json HTTP/1.1 Host: identity.att.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bm_sz=20ABCCBD39ACA77B917A59AA194736B6~YAAQXCXRF6Sdg6ONAQAAvZcaqhZ6Lg2PttG+Uy1owZcqTrYhiiyQJH97mpU70pQroRtOplmylLfdXjpK3mjfqQsl2tYbGI7Fqz1bSMJ/zqmLIZUh59vUAO1GKWGBiCfMkwxw9tx5QcXrBz6JJgU3fNRP2n9sZIGuXIkR0ib4JciwdFw1SxTYbwytt4BQLo6W1QLpJE0z8qlTNeGfmTMPuKJEnanEvm78XLUGWDkYU8iKRIcTfwN1uPi6m4+TliStUKjiM51/sfwO9fWy+22NicGP+HSRCra90B6upW/4jR0/qcyNpFbFukjeW7gZtdkPURa9EVQVKJ3Mcg==~3491125~3159604; rxVisitor=17079558859983OLB5JPRI42CNVEJ0LV09VRP1UPO0SCE; Kd4zPCrb=A1idGqqNAQAArYC1LOp-O2uiBwH_xoc7uZ7ONqK4G6-Ln84DTb5PlyJ9d4yIAVG1OUqucgHcwH8AAEB3AAAAAA\|1\|0\|c5776852bbbd54362c22ad04a9ec3559bb5a6b06; AMCVS_55633F7A534535110A490D44%40AdobeOrg=1; at_check=true; s_ecid=MCMID%7C03604370663548075242715929808033793837; AMCV_55633F7A534535110A490D44%40AdobeOrg=1994364360%7CMCMID%7C03604370663548075242715929808033793837%7CMCAAMLH-1708560689%7C7%7CMCAAMB-1708560689%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1707963089s%7CNONE%7CMCAID%7CNONE%7CvVersion%7C3.4.0; mboxEdgeCluster=34; ixp=8fda72a1-5988-40c8-98cd-b5aaf2a39dcf; idse_stack=ffdc; PD_STATEFUL_fe1012aa-f664-11eb-aec6-005056b14119=%2Fidentity-ui; IAM_ON=S103; azure_ssaf_stack=ssafwestus2; QuantumMetricSessionID=2f0772e2e946694acf73c98d1ebdd4af; QuantumMetricUserID=caaa9cb65fadc84c749177e858981c04; AKA_A2=A; PIM-SESSION-ID=Ig4DH001NeM2Zp9k; ak_bmsc=F25110F98B5BE4E0C5FFCDA745B1C026~000000000000000000000000000000~YAAQ9STRF4AXq6SNAQAACdkaqhatDNHKmS/DE1SKbF+bdqdDirnrbjZEqxAp11aoww9PYHfdXkmQIWIjvjWPSd8zMhyBYzhWwoEm8iOlEBSaDKCe+XM1EFqU5yRvlguvKVPZATmJwvKjy+xyDMyahR6+Aiw4MWULR5ZOo3Lvf8/XHlgd18rRcF+8num8MvU+Cxyv4ZlU6xDIbW0haCUjOOv7LzZ5YOM5KhLDr9BhZFR5qN4Mk2MV+2U8nBdfSFCv4XYBDXicasP1zWOyXV+e4eO2f65XKk5DL/pQsqaMpHDhSkNskeAFpuec984YvdT8aNaGFPZl01T9MvswRyILkbpHumPQih83wjoLrdsws7k6bEuKM5R+; mbox=session#6cc09a266d1742079582b88c60f66202#1707957751\|PC#6cc09a266d1742079582b88c60f66202.34_0#1771200704; CIP=81.181.57.74; _gcl_au=1.1.772933313.1707955906; RT="z=1&dm=att.com&si=77347219-a524-4295-8f80-f3f6728d815c&ss=lsmgu30c&sl=4&tt=gil&bcn=%2F%2F173bf10b.akstat.io%2F"; _abck=23C215BBBB1D59CDCAF217F4CC0CF67B~-1~YAAQBiXRFx3TqKSNAQAAt/saqgsbDhdQydvugGdOZbNNVmgqzzQXLAuK1EgwMzNqYxOr2owKBOWDdWO2FkAv9YzSytQBoucBotJJ9T9Qic2cBaRZ+rJHoaun8z2Osh2IPH1x614yVY/rHwEs4Dty9cm+82FnrahQ+ieEbmQ4G2Gc+Tqva3m1tn6ijEGACb+1Rv9qFAkDov1dF7iYTx+DsJQNLU8B8Ap1V9q3nhh2m4eEUeW2pxQBFfxjq3P/58lDdrHOD2vmzOA5h5FamKnkLCVyJA9nWpmKGRUwC7VH20IscMXWgwiHs54aaCwyPk6VWfuzl24Ao0gbsdgW5AjdQOtMbZfjCGA3N++HV4YomMX3KkpwE/dTjwx2COf8o1etxo8PqhhQpA==~-1~-1~-1; dtCookie=v_4_srv_19_sn_A789811BC4DE561A3BEBA8959FF392F8_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1; bm_sv=0DEBDA1BC28FAD184D8475F9FF6B9AB0~YAAQBCXRF4vxpqSNAQAAvfwaqhYLMcCG0irFb200pdhSnBFiumg9aCWiHWVwYDXwC2R5BuekZd6PbhnNxFskEgbsbb3Eng3gE76GUM5rEF3lDr7eP2pVniCOj8uCMvxAaJiZ0FbZk/2XuJsRwOqFHYWynoJtiIRlCuy7ryFN0Ssb4xosIbjaN+vIm6qzCbyJeLO3fEeE2a3jju16bhrgrPuDoRSRcz+NwLgEv03Qt64kjj207d56NjvwCwtB~1; rxvt=1707957711689\|1707955886003; dtPC=19$355908589_1000h8vLCCWPUKMDCDMMRUURBRDFFTCPQFOLCHV-0e0
2024-02-15 00:11:54 UTC	699	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Length: 1919 Content-Type: application/json ETag: "77f-60f95a050d504" Last-Modified: Tue, 23 Jan 2024 04:46:14 GMT p3p: CP="NON CUR OTPi OUR NOR UNI" apser: p760 Edge-Cache-Tag: identity.att.com Expires: Thu, 15 Feb 2024 00:11:54 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 15 Feb 2024 00:11:54 GMT Connection: close Server-Timing: cdn-cache; desc=MISS Server-Timing: edge; dur=13 Server-Timing: origin; dur=22 iam_on: S103 Strict-Transport-Security: max-age=86400 Akamai-GRN: 0.4a0dde17.1707955914.552e451b Server-Timing: ak_p; desc="1707955913799_400428362_1429095707_3537_12762_102_106_-";dur=1
2024-02-15 00:11:54 UTC	1196	IN	Data Raw: 7b 0a 20 20 20 20 22 61 70 69 43 6f 6e 66 69 67 22 3a 7b 0a 20 20 20 20 20 20 20 20 22 70 61 73 73 77 6f 72 64 2d 6d 61 6e 61 67 65 6d 65 6e 74 2d 73 65 72 76 69 63 65 73 22 3a 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 64 2d 69 6e 71 75 69 72 79 22 3a 22 2f 75 6e 61 75 74 68 2f 69 64 2d 69 6e 71 75 69 72 79 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 70 72 65 70 61 69 64 22 3a 22 2f 75 6e 61 75 74 68 2f 70 72 65 70 61 69 64 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 73 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 2f 6d 65 74 68 6f 64 73 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 64 65 6c 69 76 65 72 79 2d 6d 65 74 68 6f 64 22 3a 22 2f 75 6e 61 75 74 68 2f 64 65 6c 69 76 65 72 79 Data Ascii: { "apiConfig":{ "password-management-services":{ "id-inquiry":"/unauth/id-inquiry", "prepaid":"/unauth/prepaid", "delivery-methods":"/unauth/delivery/methods", "delivery-method":"/unauth/delivery
2024-02-15 00:11:54 UTC	723	IN	Data Raw: 6e 74 3d 66 70 77 64 74 6f 71 61 72 26 72 65 74 75 72 6e 5f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 61 63 63 74 6d 67 6d 74 2f 6f 76 65 72 76 69 65 77 22 2c 0a 20 20 20 20 20 20 20 20 22 69 73 44 74 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 77 69 72 65 6c 65 73 73 50 72 65 70 61 69 64 43 75 73 74 6f 6d 65 72 22 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 22 64 69 67 69 74 61 6c 52 65 64 69 72 65 63 74 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 22 76 61 6c 69 64 55 72 6c 73 22 20 3a 20 22 2e 61 74 74 2e 6e 65 74 7c 2e 61 74 74 2e 63 6f 6d 7c 2e 75 76 65 72 73 65 2e 63 6f 6d 7c 2e 79 61 68 6f 6f 2e 63 6f 6d 7c 2e 73 62 63 2e 63 6f 6d 7c 2e 63 69 6e 67 75 6c 61 72 2e 6e 65 74 7c 2e 62 6c 73 2e 63 Data Ascii: nt=fpwdtoqar&return_url=https://www.att.com/acctmgmt/overview", "isDtv": true, "wirelessPrepaidCustomer": false, "digitalRedirect": true, "validUrls" : ".att.net\|.att.com\|.uverse.com\|.yahoo.com\|.sbc.com\|.cingular.net\|.bls.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49999	35.169.173.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:53 UTC	443	OUT	GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:54 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 15 Feb 2024 00:11:54 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:11:54 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-02-15 00:11:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	50006	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:54 UTC	765	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914038&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 899 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:54 UTC	899	OUT	Data Raw: 78 01 8d 54 db 6e e2 48 10 fd 95 51 3f ac b4 8a 09 be b4 af 52 b4 4a 0c 28 1e 1c 92 01 42 08 a3 d1 aa 6d b7 ed 06 5f c0 17 6c 33 ca bf 6f 35 c4 b3 1b ed 8c 76 5f e0 d0 5d 75 4e 51 75 aa bf 7e 47 15 b2 50 89 04 94 23 4b 12 50 03 9f b2 21 0a 28 46 96 29 ea 02 6a fb 83 0e 80 28 63 01 fd 0e 09 01 d1 0d 5f 09 b0 1f 10 82 35 d9 d4 89 aa ca be 4e 43 83 06 a1 2e 6b c0 57 42 bc 26 6b a6 26 a0 3d d7 b8 5d fe b6 84 e3 ba 48 e0 47 5c 55 fb d2 1a 0e 9b a6 b9 26 55 75 ed e7 e9 90 f8 7e 95 46 69 35 2c 68 c4 ca aa 20 15 cb b3 3f f2 82 45 2c 3b e3 3f f7 39 cb aa 9b c7 27 a0 f1 29 41 d6 57 04 b9 8d 3f 88 92 dc 23 49 46 8e 83 98 92 80 16 70 0f 17 83 c6 8f b2 f7 93 81 97 e7 15 e7 dc 5f ee 3e 24 85 70 d7 27 7d b8 80 aa d2 3c 1b bc df 7f e3 aa 50 3b 8e b8 7e 80 2c 03 be 0a 64 Data Ascii: xTnHQ?RJ(Bm_l3o5v_]uNQu~GP#KP!(F)j(c_5NC.kWB&k&=]HG\U&Uu~Fi5,h ?E,;?9')AW?#IFp_>$p'}<P;~,d
2024-02-15 00:11:55 UTC	262	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:55 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:11:55 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 63 62 35 36 63 64 36 35 31 66 39 35 65 39 64 30 35 61 62 37 30 35 38 31 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/cb56cd651f95e9d05ab70581

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	50007	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:55 UTC	762	OUT	POST /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914042&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=da78c3d4cdaa46297a552c7ef8edf726 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 95894 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:55 UTC	16384	OUT	Data Raw: 78 01 ec fd 87 ae 2b 59 96 25 08 fe 4a 74 36 66 30 00 d3 83 26 68 14 59 55 0d 90 a6 68 9a a6 c5 f4 20 61 8a 34 ad 75 a3 fd 5b e6 5b e6 cb 66 93 cf dd e3 79 84 67 54 56 e6 8d 9a 1e e0 39 dc fd dd 77 ef a5 89 73 ce d6 6b af fd 5f ff 17 4a 21 0d f7 41 ff 29 19 ca e2 7f fb af bf fc 3f f6 a3 ff ed bf ee 93 cf 1f 41 1d ad ff db 7f fd 5f 7e fa 49 95 78 5d 91 ef 86 24 fe cb ff f1 4f e8 3f c1 ff aa 7f fa 97 7f 7a ff fd 9f fe f9 9f fc 7f fa 97 ff e7 ff f1 4f d8 af df 2d fc ea 05 df 9d e0 17 e2 ea 9f fe cf ff f3 9f bf fb 59 58 f8 7d ff cb 0f d3 fe 41 fe 29 ed c9 a4 ab cb 18 be 10 fd 2a ea 43 bf 89 ff 94 ac 51 e7 0f 71 04 1f fe 7f fd f3 3f 91 9f cb ff e5 a6 f4 95 fa db 9b 7e 7f 61 7f f8 29 2e e2 32 ae 86 9f 4a bf cb e3 ee 0f af 23 d1 c6 f5 0f ae 93 f8 5d 1f 0f bf 3c Data Ascii: x+Y%Jt6f0&hYUh a4u[[fygTV9wsk_J!A)?A_~Ix]$O?zO-YX}A)*CQq?~a).2J#]<
2024-02-15 00:11:55 UTC	16384	OUT	Data Raw: 39 13 94 4a fd 4f 3e 0a 0a 90 94 d3 2d f3 03 b5 3e 75 3c 3e d9 1d 3a 8e 36 22 d2 a9 4a 4c c3 75 e3 25 37 c5 7e 2d 7c a5 47 12 f0 66 14 05 90 35 35 aa 7a 82 16 68 ec 99 b9 3d c8 3b 1d ad a4 38 64 cd 37 3f 85 57 00 83 38 1e df 38 5d b2 d7 17 18 ef 5d 55 d7 98 f7 71 0d dd de c7 8d ec 3d 09 4e c2 f5 2e cc ed a8 d7 50 6f 6b 89 ab 5c 91 d8 71 f2 dd 53 bd 11 a9 26 86 eb c9 7b 10 29 fb 44 0b 6d 3d 00 14 d3 46 9c 71 1b 4a ac 83 33 57 be f1 ab a3 fb 8e 45 13 75 03 20 52 cb 7e 70 8f 50 53 96 b1 c0 40 e5 80 3b f8 e8 c9 c6 63 f2 56 9b 7e 01 22 db 9d c1 c8 b3 72 e4 32 bb fd a8 7c 1c 01 55 72 c3 5c 10 36 fd ba 1a 32 fd 92 ae 1b 75 d2 42 f3 99 70 e6 f1 8d 71 4b 6f 6e 9d 0b 77 4e f1 59 55 86 0a 5d ee 87 a7 81 6a b2 8f ff db e9 80 33 b0 af 03 22 6a c4 4b ac ae e1 49 78 b7 Data Ascii: 9JO>->u<>:6"JLu%7~-\|Gf55zh=;8d7?W88]]Uq=N.Pok\qS&{)Dm=FqJ3WEu R~pPS@;cV~"r2\|Ur\62uBpqKonwNYU]j3"jKIx
2024-02-15 00:11:55 UTC	16384	OUT	Data Raw: 77 9c 51 4d 4b 8d d6 c6 77 33 8d db fb ee bf e7 c7 a0 9f c1 53 f4 a2 b4 41 bb 8b 36 f4 10 90 90 07 f7 9b 33 b8 db 1f 9a be c1 fd f8 8a f0 96 5e 21 8f 97 4b 70 a9 dd ef cc cf 85 5e 50 7e ee 07 03 e0 2e 7b 2b 3e 2c e2 e2 70 c7 b5 9d c0 1b 63 2f f7 3f 47 d4 67 6e 21 8d c2 65 24 3e ea 67 e5 1e 34 18 e3 f4 55 b1 7f 64 3b 25 7e 06 37 fd d6 14 e3 2d f6 81 18 5e 95 78 3b ae 8d c5 92 38 7b 63 01 e3 9e 98 8b 5f 59 83 36 ef 96 01 8c 32 10 e7 74 c5 df e1 b7 25 20 3e b3 bd ef 69 43 20 f3 37 00 8a 81 48 9f cc 8c ce 77 07 43 01 27 63 7f e6 4e 42 00 24 d2 41 f6 22 87 2d 33 f6 a2 2a ee ab 7d 69 e4 a6 48 23 e2 d9 e3 8b 3c 87 8d 00 40 19 42 7f 92 f2 38 cf fd 09 be e8 73 79 42 38 89 14 b8 dd fa 45 a4 b7 e8 2b 23 e4 71 60 25 b3 08 6a ad f8 ab d5 9f 1f d0 b3 78 84 24 29 9f bc Data Ascii: wQMKw3SA63^!Kp^P~.{+>,pc/?Ggn!e$>g4Ud;%~7-^x;8{c_Y62t% >iC 7HwC'cNB$A"-3*}iH#<@B8syB8E+#q`%jx$)
2024-02-15 00:11:55 UTC	16384	OUT	Data Raw: 9a c1 d8 1b 35 bb 2c 0e 87 9d 9c 16 0e a5 d3 9f 5e c4 0e 14 15 bd 3d 23 b8 84 b3 01 87 20 32 44 06 fd 25 e9 bd c4 56 55 75 dd f1 6e c3 77 ad 5f 2f 67 01 af 66 44 c4 4d 6f 2b 03 5b 1e 24 49 41 01 fe 1b 30 bd 89 25 1a bd 39 ef 3e e2 84 6e 53 cc d7 9f f3 48 0f e2 e4 25 d1 0e 0d 99 ea 36 64 55 fa 31 17 48 07 ef bf 2b aa d4 28 1d b5 f4 c7 5e 0c d5 71 f7 58 ff 3c 60 4e 92 46 e8 d0 5a 3d 34 b4 25 59 c5 3f 53 f5 e9 cb 37 d8 e2 0f 0c d5 18 b2 60 bf 99 54 a0 bf cb c6 c4 95 45 22 1e e4 df f3 68 e3 f4 51 ab 2c 1a 1d ad d2 39 79 29 02 b4 64 99 78 44 6a 61 87 af b5 82 fc 30 1e 55 cf 67 7e 5b b7 9b f8 d0 e3 4c 78 de aa b1 bb 86 07 60 44 80 38 6e 0c 7c f8 93 ae 39 5f 63 9c e9 72 fd 73 c9 27 ac 08 21 e1 db ce 57 f2 97 0d 37 0c 0b 49 57 ef 1c 6e a6 e9 19 4b 9f a5 18 2e 1f Data Ascii: 5,^=# 2D%VUunw_/gfDMo+[$IA0%9>nSH%6dU1H+(^qX<`NFZ=4%Y?S7`TE"hQ,9y)dxDja0Ug~[Lx`D8n\|9_crs'!W7IWnK.
2024-02-15 00:11:55 UTC	16384	OUT	Data Raw: 1a e4 64 72 18 fd 72 0a 8f fa 70 c2 6a 68 27 5d 03 65 85 42 ec aa 53 a0 d3 81 ba 3f 42 97 a9 28 b0 61 8a c7 98 a3 bd e6 d9 66 d7 40 7c d1 c8 ad 78 10 8b 60 57 57 e8 e7 4a e5 1e 5a b7 67 78 5b c6 df b1 8a d8 84 5d 2c 48 29 56 a3 55 a9 86 66 15 4a c1 fc b0 dc 35 0b 78 d9 6d b1 78 63 00 99 58 c3 cd 66 1d 64 5c d4 e4 db 35 0a 2e 74 b8 8f ba 28 bb 1b ea ce 4f fa 07 60 12 c7 8d ad 6a 9a 57 99 2f 98 86 dd f9 3d c8 80 96 78 eb e5 1e 8d 72 9e d3 90 cc ac 88 32 7d 3c ae 90 43 b1 5f f8 e7 eb 0b c1 a4 d3 9e 1e ac 5d d2 c3 56 5f a8 4b 37 03 74 4b 5e 1c ac cb 0b 95 b2 c5 7e 2a d6 ef cf 75 e3 96 8e b7 c8 ef 3b bf 70 6d 7f f3 5c 1e 13 7a a2 87 f7 6b 53 2f d6 73 7c a6 61 f1 f3 73 41 f5 ee 0a 6d 49 33 71 50 5e f1 4b d8 2e 3a 64 9a e5 e7 e4 92 61 3c a5 63 68 a4 bc fd 19 d6 Data Ascii: drrpjh']eBS?B(af@\|x`WWJZgx[],H)VUfJ5xmxcXfd\5.t(O`jW/=xr2}<C_]V_K7tK^~*u;pm\zkS/s\|asAmI3qP^K.:da<ch
2024-02-15 00:11:55 UTC	13974	OUT	Data Raw: 9e e1 b4 2c 99 da d9 1c 65 f6 0d 04 05 b4 80 18 46 04 59 0e 5e f0 7d 22 bd 50 53 d9 08 0c fc ef 75 ac 90 6d 78 44 ac ea 74 39 9c df 4f d2 72 28 6c 43 7c 19 91 7e 1b 05 30 7a 58 7a 6b 57 40 8b be 38 6a f4 65 57 19 a3 7e bd 1c 2f 4c f9 ba 34 2c 79 47 b8 9e 4f 85 da 31 3d 3d 78 a2 20 22 c4 9e 7c 60 5f e6 3d 42 4a 8d b3 de 4f 94 c0 1d db 2a 26 c4 8d 50 8e c3 6b 73 7c 31 20 47 dc cf f7 bd 3f 3d 59 c5 c1 ca 0a da 00 5e 94 ef fd d9 d2 29 55 d8 94 c1 6d da 35 f4 ca b5 90 f7 73 73 33 cc e7 96 7f dd 40 aa 30 34 39 d6 20 d4 0e e0 7e f4 55 07 95 4c 5f e9 ed fd 90 47 f5 0d a8 dc 8c 52 0a d9 05 b1 bb da 24 88 b9 0c bf 9a 1c 69 a1 25 fb 0d 6e 8d 40 a8 10 7a b4 20 f4 66 ce b0 93 88 d4 f3 32 a5 93 c0 2a be 6b 7c 6a cd 6f b6 f5 3a dd 3f 30 7c 9d 73 3b ab 34 74 88 2c 62 f1 Data Ascii: ,eFY^}"PSumxDt9Or(lC\|~0zXzkW@8jeW~/L4,yGO1==x "\|`_=BJO&Pks\|1 G?=Y^)Um5ss3@049 ~UL_GR$i%n@z f2k\|jo:?0\|s;4t,b
2024-02-15 00:11:55 UTC	959	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:55 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49921	35.226.68.60	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:55 UTC	549	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:55 UTC	1102	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:55 GMT Content-Type: application/json Content-Length: 595 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://www.att.com Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET,POST Access-Control-Max-Age: 31536000 Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:11:55 UTC	595	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 7b 22 69 22 3a 22 32 30 37 22 2c 22 76 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 37 37 22 2c 22 76 22 3a 22 66 66 64 63 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 38 37 22 2c 22 76 22 3a 22 76 5f 34 5f 73 72 76 5f 31 39 5f 73 6e 5f 30 33 33 32 39 35 38 37 38 46 45 35 46 33 41 37 36 31 34 45 33 34 42 31 35 35 39 42 41 39 45 46 5f 70 65 72 63 5f 31 30 30 30 30 30 5f 6f 6c 5f 30 5f 6d 75 6c 5f 31 5f 61 70 70 2d 33 41 37 65 39 31 32 32 39 32 33 32 63 64 33 33 32 39 5f 31 22 2c 22 Data Ascii: {"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	50018	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:55 UTC	552	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914038&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:55 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:55 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	50021	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:55 UTC	792	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914841&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 579 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:55 UTC	579	OUT	Data Raw: 78 01 95 92 5d 73 a2 30 14 86 ff 0a 93 5b bf 12 48 d0 30 d3 8b 36 c2 94 82 1f 8b 5f c8 ce 5e a0 06 8c a0 d6 28 02 ba fd ef cb d8 76 b6 db ed 5e ec 55 6e ce 73 ce f3 9e 93 2b e0 09 2f 81 71 7d 7b c1 59 35 98 5d 30 76 ea c5 23 d7 5f af a2 59 d9 13 3e 72 2f b1 69 5d d6 5b ca 88 66 3e 5a db 76 ea 39 0f f3 d2 2a 2e 62 61 85 9d a0 b5 d6 f5 0e 97 1e 59 46 59 b0 9e ee b7 65 d2 15 e6 ce 82 1b 5d 24 ee f3 7d bf 27 f5 0c bb 7c 55 f8 68 4c 3d ef 12 c5 5b 73 90 f1 da 03 17 4f 34 a1 68 d5 ed 9f c9 28 3e 07 41 48 37 05 99 bb f7 6e da 65 4b 24 06 87 b1 26 5a eb 25 3a 60 77 df c9 19 8b 36 c5 c6 3e b7 07 fa 18 ce fb d6 3e 0b ba 0e 19 26 17 b7 48 17 78 56 d3 83 c3 25 09 99 c8 fc c7 43 12 af 27 da 04 9b 48 ea c3 b9 bd f4 b5 b2 3f 73 64 3e ad 39 c5 26 4e f3 d4 ce 83 9e 28 f7 Data Ascii: x]s0[H06_^(v^Uns+/q}{Y5]0v#_Y>r/i][f>Zv9*.baYFYe]$}'\|UhL=[sO4h(>AH7neK$&Z%:`w6>>&HxV%C'H?sd>9&N(
2024-02-15 00:11:55 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:55 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	50020	34.135.80.45	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:55 UTC	384	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:55 UTC	894	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:55 GMT Content-Type: application/json Content-Length: 595 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:11:55 UTC	595	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 7b 22 69 22 3a 22 32 30 37 22 2c 22 76 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 37 37 22 2c 22 76 22 3a 22 66 66 64 63 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 38 37 22 2c 22 76 22 3a 22 76 5f 34 5f 73 72 76 5f 31 39 5f 73 6e 5f 30 33 33 32 39 35 38 37 38 46 45 35 46 33 41 37 36 31 34 45 33 34 42 31 35 35 39 42 41 39 45 46 5f 70 65 72 63 5f 31 30 30 30 30 30 5f 6f 6c 5f 30 5f 6d 75 6c 5f 31 5f 61 70 70 2d 33 41 37 65 39 31 32 32 39 32 33 32 63 64 33 33 32 39 5f 31 22 2c 22 Data Ascii: {"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	50032	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	547	OUT	GET /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914042&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=da78c3d4cdaa46297a552c7ef8edf726 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:56 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	50036	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	1784	OUT	GET /pagead/viewthroughconversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:56 UTC	1724	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&cid=CAQSKQAvHhf_PSLNqepZ-qn2rSdVk0tKFlFVbo78N0Q-LyZ8xw-_NwIs0pKG&random=410339091 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	50037	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	762	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915578&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=10&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 3713 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	3713	OUT	Data Raw: 78 01 ed 5b fd 72 db 36 12 7f 15 8c 3a 8d db b9 10 e2 f7 87 e7 7c 1d 47 71 2e be da 75 ae 76 d3 36 9d 8e 06 a2 28 89 09 45 6a 48 4a b2 9d e9 03 dd 9f f7 0a 77 2f 76 bf 05 48 9a 92 ec d8 89 ad 38 33 bd c4 02 49 10 d8 5d 2c b0 9f 00 7f 7b df 29 3b bb 9d a5 e8 3c ed 2c 70 f3 37 5c 0f 71 fd eb b3 93 e7 bf 32 83 e9 f2 a7 b7 ae 3a 5a 08 b4 38 ca c6 d9 51 26 86 51 de ef cf 12 71 f1 4b bf 6f 0d fd 7f 06 78 1d 77 76 8d a7 9d a1 2c 4f 7f c0 45 ff e3 e9 1a 1e c2 a7 9a cd 00 2b 9c e7 79 94 96 67 f1 34 42 7d da d9 75 f5 80 5b 9e 1d 54 ff 8c 0a 5c 0d 86 7a 53 bf 2b 2a 4d 50 d8 fa af a0 eb 4f 3b 6f 3b bb bf bd ef 18 9d dd f7 04 b6 f3 fc f0 35 5e 81 7c 54 9a 75 65 3c 44 1d 0d fe d2 d1 46 59 56 46 b9 96 c4 e9 bb a2 f3 07 e1 6b 9a 85 89 28 8a aa 65 31 13 a9 61 a2 c1 ef 4f Data Ascii: x[r6:\|Gq.uv6(EjHJw/vH83I],{);<,p7\q2:Z8Q&QqKoxwv,OE+yg4B}u[T\zS+*MPO;o;5^\|Tue<DFYVFk(e1aO
2024-02-15 00:11:56 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:56 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	50038	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	579	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955914841&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:56 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	50041	18.244.202.99	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	541	OUT	GET /js/invoca-latest.min.js HTTP/1.1 Host: solutions.invocacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	659	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 127350 Connection: close x-amz-replication-status: COMPLETED Last-Modified: Tue, 23 Jan 2024 21:42:17 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 0mf7UkdEnTwnenLsk8Aijms63OV0NG8d Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 14 Feb 2024 23:12:06 GMT Cache-Control: max-age=3600 ETag: "15864e7af66712b13d8b14367255acec" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b99d7b371b559bd0cda6b883c9cb49e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: 5VhTpi3oYhbC3EPkf53rbW3npOZue9XK0DLO_rZh8ZsQcbVOtznRDA== Age: 3591
2024-02-15 00:11:56 UTC	15725	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 49 6e 76 6f 63 61 4a 53 20 56 65 72 73 69 6f 6e 3a 20 34 2e 33 30 2e 36 0a 20 2a 20 55 70 64 61 74 65 64 3a 20 30 31 2f 32 33 2f 32 30 32 34 0a 20 2a 0a 20 2a 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 73 6f 66 74 77 61 72 65 20 63 6f 64 65 20 62 65 6c 6f 77 2c 0a 20 2a 20 6c 6f 63 61 74 65 64 20 61 74 20 68 74 74 70 3a 2f 2f 73 6f 6c 75 74 69 6f 6e 73 2e 69 6e 76 6f 63 61 63 64 6e 2e 63 6f 6d 2f 6a 73 2f 69 6e 76 6f 63 61 2d 34 2e 33 30 2e 36 2e 6d 69 6e 2e 6a 73 2c 0a 20 2a 20 61 72 65 20 63 6f 6e 66 69 64 65 6e 74 69 61 6c 20 61 6e 64 20 61 72 65 20 74 68 65 20 73 6f 6c 65 20 70 72 6f 70 65 72 74 79 20 6f 66 20 49 6e 76 6f 63 61 2e 0a 20 2a 20 59 6f 75 72 20 61 70 70 6c 69 63 61 74 69 6f 6e 20 6f 72 20 75 73 65 Data Ascii: /** * InvocaJS Version: 4.30.6 * Updated: 01/23/2024 * * The information and software code below, * located at http://solutions.invocacdn.com/js/invoca-4.30.6.min.js, * are confidential and are the sole property of Invoca. * Your application or use
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 65 6e 63 6f 64 65 55 72 6c 50 61 72 61 6d 73 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 3d 3d 3d 65 2e 73 65 61 72 63 68 28 2f 5c 3f 2f 29 3f 22 3f 22 3a 22 26 22 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 6e 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 5b 72 5d 29 2b 22 26 22 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 3f 65 2b 6e 3a 65 7d 49 6e 76 6f 63 61 2e 4a 53 4f 4e 3d 7b 70 61 72 73 65 3a 4a 53 4f 4e 2e 70 61 72 73 65 2c 73 74 72 69 6e 67 69 66 79 3a 73 74 72 69 6e 67 69 66 79 4a 53 4f 4e 7d 2c 49 6e 76 6f 63 61 2e 4a Data Ascii: ction encodeUrlParams(e,t){var n=-1===e.search(/\?/)?"?":"&";for(var r in t)t.hasOwnProperty(r)&&(n+=encodeURIComponent(r)+"="+encodeURIComponent(t[r])+"&");return Object.keys(t).length?e+n:e}Invoca.JSON={parse:JSON.parse,stringify:stringifyJSON},Invoca.J
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 74 2b 22 29 24 22 29 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 65 72 67 65 41 72 72 61 79 73 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 6c 69 63 65 28 29 2c 72 3d 74 2c 61 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 2c 6f 3d 30 3b 66 6f 72 28 72 3d 61 3f 72 3a 72 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 3b 29 7b 76 61 72 20 69 3b 69 66 28 61 29 7b 69 66 28 6f 3e 3d 72 2e 6c 65 6e 67 74 68 29 62 72 65 61 6b 3b 69 3d 72 5b 6f 2b 2b 5d 7d 65 6c 73 65 7b 69 66 28 28 6f 3d 72 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 69 3d 6f 2e 76 61 6c 75 65 7d 76 61 72 20 63 3d 69 3b 65 2e 69 6e 64 65 78 4f 66 28 63 29 3c 30 26 26 6e 2e Data Ascii: ;return new RegExp("^(?:"+t+")$").test(e)}function mergeArrays(e,t){var n=e.slice(),r=t,a=Array.isArray(r),o=0;for(r=a?r:r[Symbol.iterator]();;){var i;if(a){if(o>=r.length)break;i=r[o++]}else{if((o=r.next()).done)break;i=o.value}var c=i;e.indexOf(c)<0&&n.
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 72 29 3a 66 6f 72 6d 61 74 5f 6e 61 74 69 6f 6e 61 6c 5f 6e 75 6d 62 65 72 28 65 2c 22 4e 41 54 49 4f 4e 41 4c 22 2c 72 29 7d 76 61 72 20 5f 65 78 74 65 6e 64 73 24 31 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 63 72 65 61 74 65 43 6c 61 73 73 24 32 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: r):format_national_number(e,"NATIONAL",r)}var _extends$1=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},_createClass$2=function(){function e
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 43 4f 55 4e 54 52 59 22 21 3d 65 2e 67 65 74 43 6f 75 6e 74 72 79 43 6f 64 65 53 6f 75 72 63 65 28 29 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 6e 3d 75 74 69 6c 2e 67 65 74 52 65 67 69 6f 6e 43 6f 64 65 46 6f 72 43 6f 75 6e 74 72 79 43 6f 64 65 28 65 2e 67 65 74 43 6f 75 6e 74 72 79 43 6f 64 65 28 29 29 2c 72 3d 75 74 69 6c 2e 67 65 74 4d 65 74 61 64 61 74 61 46 6f 72 52 65 67 69 6f 6e 28 6e 29 3b 69 66 28 6e 75 6c 6c 3d 3d 72 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 61 3d 75 74 69 6c 2e 67 65 74 4e 61 74 69 6f 6e 61 6c 53 69 67 6e 69 66 69 63 61 6e 74 4e 75 6d 62 65 72 28 65 29 2c 6f 3d 75 74 69 6c 2e 63 68 6f 6f 73 65 46 6f 72 6d 61 74 74 69 6e 67 50 61 74 74 65 72 6e 46 6f 72 4e 75 6d 62 65 72 28 72 2e 6e 75 6d 62 65 72 46 6f 72 6d 61 74 73 28 29 2c Data Ascii: COUNTRY"!=e.getCountryCodeSource())return!0;var n=util.getRegionCodeForCountryCode(e.getCountryCode()),r=util.getMetadataForRegion(n);if(null==r)return!0;var a=util.getNationalSignificantNumber(e),o=util.chooseFormattingPatternForNumber(r.numberFormats(),
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 72 69 62 75 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 69 6e 76 6f 63 61 49 64 7c 7c 67 65 74 49 6e 76 6f 63 61 49 64 28 29 2e 69 6e 76 6f 63 61 5f 69 64 2c 6e 3d 65 2e 74 61 67 49 64 7c 7c 49 6e 76 6f 63 61 2e 43 6c 69 65 6e 74 2e 67 65 74 54 61 67 49 64 28 29 2c 72 3d 65 2e 6e 65 74 77 6f 72 6b 49 64 7c 7c 49 6e 76 6f 63 61 2e 50 4e 41 50 49 2e 63 75 72 72 65 6e 74 50 61 67 65 53 65 74 74 69 6e 67 73 2e 6e 65 74 77 6f 72 6b 49 64 3b 76 61 6c 69 64 61 74 65 41 72 67 73 28 74 2c 6e 2c 72 29 3b 76 61 72 20 61 3d 72 65 71 75 65 73 74 55 72 6c 28 21 30 Data Ascii: ribution=function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.invocaId\|\|getInvocaId().invoca_id,n=e.tagId\|\|Invoca.Client.getTagId(),r=e.networkId\|\|Invoca.PNAPI.currentPageSettings.networkId;validateArgs(t,n,r);var a=requestUrl(!0
2024-02-15 00:11:56 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 20 72 65 71 75 69 72 65 64 50 61 72 61 6d 73 41 72 65 4d 65 74 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 21 73 68 6f 75 6c 64 43 68 65 63 6b 52 65 71 75 69 72 65 64 50 61 72 61 6d 73 28 65 2c 74 2c 6e 29 7c 7c 63 68 65 63 6b 50 61 72 61 6d 73 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 73 68 6f 75 6c 64 43 68 65 63 6b 52 65 71 75 69 72 65 64 50 61 72 61 6d 73 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 6e 26 26 67 65 74 4b 65 79 73 28 6e 29 2e 6c 65 6e 67 74 68 3e 30 3b 72 65 74 75 72 6e 21 65 26 26 74 26 26 72 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 50 61 72 61 6d 73 28 65 29 7b 76 61 72 20 74 3d 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 73 48 61 73 68 28 29 3b 72 65 74 75 72 6e 20 67 65 74 4b 65 79 73 28 65 29 2e 73 6f 6d 65 28 28 66 75 6e Data Ascii: ction requiredParamsAreMet(e,t,n){return!shouldCheckRequiredParams(e,t,n)\|\|checkParams(n)}function shouldCheckRequiredParams(e,t,n){var r=n&&getKeys(n).length>0;return!e&&t&&r}function checkParams(e){var t=getQueryStringsHash();return getKeys(e).some((fun
2024-02-15 00:11:56 UTC	13321	IN	Data Raw: 73 7d 7d 5d 29 2c 65 7d 28 29 2c 6c 69 66 65 63 79 63 6c 65 5f 65 73 35 3d 63 72 65 61 74 65 43 6f 6d 6d 6f 6e 6a 73 4d 6f 64 75 6c 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 0a 2f 2a 21 20 6c 69 66 65 63 79 63 6c 65 2e 65 73 35 2e 6a 73 20 76 30 2e 31 2e 31 20 2a 2f 0a 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 6e 65 77 20 45 76 65 6e 74 54 61 72 67 65 74 2c 65 3d 21 31 7d 63 61 74 63 68 28 74 29 7b 65 3d 21 31 7d 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 5f 74 79 70 65 6f 66 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 5f 74 Data Ascii: s}}]),e}(),lifecycle_es5=createCommonjsModule((function(e,t){/! lifecycle.es5.js v0.1.1 /e.exports=function(){var e=void 0;try{new EventTarget,e=!1}catch(t){e=!1}var t="function"==typeof Symbol&&"symbol"==_typeof(Symbol.iterator)?function(e){return _t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50048	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	1394	OUT	GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:56 UTC	1288	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6100125.fls.doubleclick.net/activityi;dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50046	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	759	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915939&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=906&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 253 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	253	OUT	Data Raw: 78 01 75 90 5f 4b c3 30 14 c5 bf cb 7d 6d aa b7 49 ee 4d 52 e8 8b 30 b5 30 14 66 75 a2 88 ac ed 2a b3 fe d9 68 29 1b 63 df dd 90 8d e2 83 be 9c f3 83 70 0e f7 64 0f 13 48 9f f7 b0 82 34 91 24 a0 81 14 05 0c 90 02 53 55 13 97 3a 4e a4 c1 78 a1 25 c7 24 49 05 b1 0b 8b e8 74 03 02 7a 1f 34 68 1c 91 4b 94 74 7c 10 a1 cc b0 fc 5d 76 33 99 bf 3e e4 77 79 71 3b fb 3f 23 d1 99 10 92 c4 c7 1b 1e af a3 b2 d3 16 a7 4f 53 36 fd f6 b2 a4 a2 58 6b 9a 6f cc fd 79 be 8c 8a f7 a8 dc 15 33 47 f2 ea 3b fb a3 57 c0 66 f9 55 f9 2d 79 d7 ee e4 ba f9 30 43 d5 d7 ba 1c 5a c7 17 ab b7 2c 83 c3 8b 80 6d 07 29 fb d1 5d 8d 7e 0b 06 4a 46 92 23 a9 91 f4 48 34 12 87 8f eb 6a 73 72 7b 72 17 dc 1f e1 7b 3f bd 9e 21 b2 52 6c 13 43 1a d9 b2 56 7e b3 bf c0 3f b7 5e 0f 3f 93 6b 62 68 Data Ascii: xu_K0}mIMR00fu*h)cpdH4$SU:Nx%$Itz4hKt\|]v3>wyq;?#OS6Xkoy3G;WfU-y0CZ,m)]~JF#H4jsr{r{?!RlCV~?^?kbh
2024-02-15 00:11:57 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:56 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50049	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	1405	OUT	GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:56 UTC	606	IN	Data Raw: 31 32 66 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 12f6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-02-15 00:11:56 UTC	1252	IN	Data Raw: 3d 31 6a 37 35 36 36 37 31 31 37 35 36 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 67 30 46 30 57 41 21 32 73 61 4a 56 41 7a 41 21 33 73 41 41 70 74 44 56 37 44 37 48 4f 6b 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 37 39 35 35 39 31 36 39 32 34 33 32 39 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 Data Ascii: =1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVAzA!3sAAptDV7D7HOk"],"userBiddingSignals":[null,null,1707955916924329],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/d
2024-02-15 00:11:56 UTC	1252	IN	Data Raw: 6a 51 66 71 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 39 30 32 35 35 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 31 31 38 33 35 38 33 36 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 39 30 32 35 35 39 38 31 39 22 2c 22 36 38 35 31 31 38 33 35 38 33 36 37 22 2c 22 31 22 2c 22 32 30 38 36 33 30 33 36 32 35 39 22 2c 22 31 30 31 35 34 36 38 30 35 34 22 2c 22 34 35 38 38 39 30 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 Data Ascii: jQfqk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685118358367\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685118358367","1","20863036259","1015468054","4588906"],"adRenderI
2024-02-15 00:11:56 UTC	1252	IN	Data Raw: 38 35 35 33 33 31 32 31 36 37 37 22 2c 6e 75 6c 6c 2c 22 32 30 38 37 32 37 39 37 33 34 39 22 2c 22 31 30 31 35 31 37 33 31 36 37 22 2c 22 33 37 38 38 34 35 37 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 55 52 63 6d 6d 6e 72 32 78 30 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 34 33 35 35 34 37 33 38 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 35 37 34 37 31 32 36 39 34 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 34 33 Data Ascii: 85533121677",null,"20872797349","1015173167","3788457"],"adRenderId":"WURcmmnr2x0"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156435547389\u0026cr_id=685574712694\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["15643
2024-02-15 00:11:56 UTC	500	IN	Data Raw: 61 62 6c 65 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 7d 7d 5d 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 66 6f 72 28 6c 65 74 20 69 20 6f 66 20 69 67 5f 6c 69 73 74 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 29 7b 74 72 79 7b 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 30 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e Data Ascii: ableBiddingSignalsPrioritization":true}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.
2024-02-15 00:11:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50051	142.250.105.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	1381	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:57 UTC	2210	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"10695538989818861621","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:11:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50050	31.13.88.13	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	583	OUT	GET /signals/config/128900881029137?v=2.9.138&r=stable&domain=www.att.com HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	2013	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: clipboard-read=(), clipboard-write=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=();report-to="permissions_policy" permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-02-15 00:11:57 UTC	641	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 58 2d 43 6f Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200Expires: Sat, 01 Jan 2000 00:00:00 GMTX-Co
2024-02-15 00:11:57 UTC	859	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 Data Ascii: FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/(function(a,b,c,d){var e={exports:{}};e.exports;(
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 72 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 Data Ascii: n function(b,c){if(Array.isArray(b))return b;else if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}();function j(a,b){if(!a)throw new R
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 5e 60 5c 7b 5c 7c 5c 7d 7e 5c 2d 5d 2b 29 2a 40 28 3f 3a 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 29 2b 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 62 28 61 29 29 64 3d 61 3b 65 6c 73 65 7b 61 3d 63 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 64 3d 65 28 61 29 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 64 7d 6b 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c Data Ascii: ^`\{\\|\}~\-]+)@(?:[a-z0-9](?:[a-z0-9\-][a-z0-9])?\.)+[a-z0-9](?:[a-z0-9\-]*[a-z0-9])?$/i;function e(a){return d.test(a)}function g(a){var d=null;if(a!=null)if(b(a))d=a;else{a=c(a.toLowerCase());d=e(a)?a:null}return d}k.exports=g})();return k.exports}(a,
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 2b 7c 5b 61 2d 7a 5d 2f 67 69 3b 62 3d 2f 5e 31 5c 28 3f 5c 64 7b 33 7d 5c 29 3f 5c 64 7b 37 7d 24 2f 3b 61 3d 2f 5e 34 37 5c 64 7b 38 7d 24 2f 3b 62 3d 2f 5e 5c 64 7b 31 2c 34 7d 5c 28 3f 5c 64 7b 32 2c 33 7d 5c 29 3f 5c 64 7b 34 2c 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 63 28 61 29 29 62 3d 61 3b 65 6c 73 65 7b 61 3d 53 74 72 69 6e 67 28 61 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 64 2c 22 22 29 7d 72 65 74 75 72 6e 20 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 Data Ascii: +\|[a-z]/gi;b=/^1$?\d{3}$?\d{7}$/;a=/^47\d{8}$/;b=/^\d{1,4}$?\d{2,3}$?\d{4,}$/;function g(a){var b=null;if(a!=null)if(c(a))b=a;else{a=String(a);b=a.replace(e,"").replace(d,"")}return b}k.exports=g})();return k.exports}(a,b,c,d)});f.ensureModuleRegiste
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 2c 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 7b 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 65 2c 6e 6f 72 6d 61 6c 69 7a 65 4e 61 6d 65 3a 67 2c 6e 6f 72 6d 61 6c 69 7a 65 43 69 74 79 3a 69 2c 6e 6f 72 6d 61 6c 69 7a 65 53 74 61 74 65 3a 68 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 Data Ascii: ,strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}function i(a){return e(a,{strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}k.exports={normalize:e,normalizeName:g,normalizeCity:i,normalizeState:h}})();return k.exports}(a,b,c,d)});f.ensureModuleR
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 50 49 49 55 74 69 6c 73 22 29 2c 62 3d 61 2e 65 78 74 72 61 63 74 50 49 49 46 69 65 6c 64 73 3b 66 75 6e 63 74 69 Data Ascii: ports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractFormFieldFeatures",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsPixelPIIUtils"),b=a.extractPIIFields;functi
2024-02-15 00:11:57 UTC	1027	IN	Data Raw: 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 6f 3d 63 28 6e 2c 66 26 26 6c 21 3d 6e 75 6c 6c 29 3b 6e 3d 69 28 6f 2c 32 29 3b 6f 3d 6e 5b 30 5d 3b 6e 3d 6e 5b 31 5d 3b 6f 21 3d 6e 75 6c 6c 26 26 6b 2e 70 75 73 68 28 6f 29 3b 6c 3d 62 28 6c 2c 6e 29 7d 7d 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 61 67 65 46 65 61 74 75 72 65 Data Ascii: ncrementAndGet(o);if(o>d\|\|n===g)continue;o=c(n,f&&l!=null);n=i(o,2);o=n[0];n=n[1];o!=null&&k.push(o);l=b(l,n)}}return{formFieldFeatures:k,userData:l}}l.exports=g})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractPageFeature
2024-02-15 00:11:57 UTC	1500	IN	Data Raw: 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 Data Ascii: {return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50047	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	763	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915940&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=43&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 32564 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:56 UTC	16384	OUT	Data Raw: 78 01 ec fd 59 af eb 58 96 a5 0b fe 15 87 bd 32 3c c5 be 09 dc 44 81 22 29 91 14 fb 4e 24 2f 0a 09 f6 a2 d8 f7 a4 b2 f2 bf d7 3c 1e 11 79 23 bb 9b 28 d4 43 bd 14 cc dd ec d8 39 db b4 b5 45 72 ad 35 c7 1c e3 9b ff e7 7f fe 6b fd eb 9f ff ea d6 bf fe e9 af fd af 7f fe cf 7f 1d 7f fd 33 c5 11 f4 7f c0 ff e9 af f3 af 7f ee b7 b6 fd a7 bf ae bf fe 19 fd 0f 28 cd fc 97 7f fa 2b ff eb 9f 71 ec 9f fe 72 8d bf fe 99 24 fe cb 3f fd cb 7f 9d c0 7f 3c c2 ab fc 1f b2 c4 8b f0 eb fa cf 17 c1 0b 7c ff fa e7 ff f3 3f ff 85 fd 79 d9 1e fe 58 97 3c 1e fe 34 f9 c7 ef e2 ff f6 bb 9f 75 1d ff 5e 4c 5b bd c3 9f c1 5b f8 6b 98 eb aa ee ff be ce 75 d2 fe f5 5f fe 7c 8f ff fa b5 d9 d0 af 45 ff af ef f5 2f 9e 1c 94 d1 a1 4b 2a f1 c3 87 a3 a7 1a bd d2 53 a2 37 64 3b cb ef 33 0b 08 Data Ascii: xYX2<D")N$/<y#(C9Er5k3(+qr$?<\|?yX<4u^L[[ku_\|E/K*S7d;3
2024-02-15 00:11:56 UTC	16180	OUT	Data Raw: 27 fd d7 2a a0 7a 40 bd 0d 1c 5f 83 37 5f 93 46 f3 d0 78 a0 c6 bc c9 5f 47 e5 6f 3e ab 79 8c 83 86 d8 ef 45 e0 72 8f a4 12 ec ed 91 ec 2d 60 77 79 bd 5d 15 9c 7d 6d f3 bb 8f 60 92 08 1e ef 0f 8e 02 83 e3 f5 b2 15 2a 89 29 1a 07 a8 d4 43 20 bf 89 e4 88 52 9d cc 10 63 a6 34 7e 41 af 0d 1a 03 c3 a2 83 ff 59 25 7f a6 3f b0 82 80 5e b9 8f 3c 6f 1b e4 a8 81 93 0a 59 56 fc 09 10 95 05 6c 1c fd ab 5a b1 b8 d4 92 a5 a1 d4 ec b3 18 4f c1 65 c4 4f a4 7b ef ae f7 4d 71 03 1c 5a 93 51 44 2f d6 5d 19 df e9 47 ea 7c cb 1b 97 25 2f 7a 8d 2f 16 50 12 f9 18 0f 3a ca 2c 1b 9b 00 d1 00 13 17 eb c9 c8 94 03 a6 e3 e7 d1 6a d6 87 74 86 0e 1b 9e 2b 5d de 24 4e 25 75 79 c6 5a 02 e2 d5 af 5f e1 04 e3 96 b2 8f 42 67 8e 8f a5 a6 43 a1 ed d7 cb fd 32 fa ac b4 41 47 9b 77 29 ea 98 1e Data Ascii: 'z@_7_Fx_Go>yEr-`wy]}m`)C Rc4~AY%?^<oYVlZOeO{MqZQD/]G\|%/z/P:,jt+]$N%uyZ_BgC2AGw)
2024-02-15 00:11:57 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50052	142.250.9.106	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:56 UTC	1962	OUT	GET /pagead/1p-conversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&cid=CAQSKQAvHhf_PSLNqepZ-qn2rSdVk0tKFlFVbo78N0Q-LyZ8xw-_NwIs0pKG&random=410339091 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50054	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	548	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915578&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=10&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50055	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	757	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916209&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 825 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	825	OUT	Data Raw: 78 01 8d 54 6b 6f 9b 4a 10 fd 2b d1 7e a8 74 15 1c de e0 45 8a aa 04 db 0a 35 b1 53 db 71 1c 57 55 b5 bc d7 3c 96 f0 30 e0 ea fe f7 3b c4 c9 8d d3 36 52 bf c0 b2 33 73 ce 30 73 66 be fd 44 15 32 50 89 38 c4 90 21 72 a8 81 a7 34 14 38 14 21 03 0b 3a 87 da d7 8b 0e 0e 82 a4 70 e8 1f 08 d0 74 4d f3 5c 49 10 35 22 2a 3a d6 55 4f 92 b1 2c e8 ba a6 3a 3a 0e 34 c0 2b 91 a1 0b 9a 06 50 79 4f 71 b5 fa b4 82 db ba 48 e0 23 aa aa bc 34 78 be 69 9a 0b 52 55 17 2e 4b 79 e2 ba 55 1a a6 15 5f f8 21 2d ab 82 54 94 65 3c cb 0b de 8d 18 2b 7d 6b 04 e1 ae 4f 90 f1 0d 41 4c e3 0e c2 84 39 24 c9 c8 7e 10 f9 c4 f3 0b b0 83 61 d0 b8 61 f6 72 33 70 18 ab 7a ac fc 68 7b 17 14 80 ed 35 e8 9d 01 b2 49 59 36 38 b5 bf 03 75 59 e1 9f 72 d5 19 dd fb 45 49 92 01 e4 72 6a 48 f3 01 60 fd Data Ascii: xTkoJ+~tE5SqWU<0;6R3s0sfD2P8!r48!:ptM\I5"*:UO,::4+PyOqH#4xiRU.KyU_!-Te<+}kOAL9$~aar3pzh{5IY68uYrEIrjH`
2024-02-15 00:11:57 UTC	262	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:11:57 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 63 64 35 36 63 64 36 35 66 32 64 30 62 35 35 63 33 65 39 64 30 31 34 32 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/cd56cd65f2d0b55c3e9d0142

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50053	3.212.181.219	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	567	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	746	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:57 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 172 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://www.att.com Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:11:57 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:11:57 UTC	172	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 35 47 75 41 48 5a 70 4c 75 37 32 59 52 39 50 7a 56 79 63 61 52 43 72 7a 6c 2d 54 50 63 55 33 61 4b 6f 2d 76 54 36 69 47 33 64 4a 67 74 5a 56 73 34 6e 4e 33 48 32 4b 46 43 43 2d 62 7a 6f 55 58 66 66 4b 50 43 55 7a 55 64 64 57 76 33 62 4d 4d 69 4c 64 79 75 44 75 37 7a 45 6b 45 34 38 66 31 77 41 67 6f 52 58 4c 39 45 75 5f 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50056	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	754	OUT	POST /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916212&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=6766dc2016a147975d239307765b79f6 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 17297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	16384	OUT	Data Raw: 78 01 ed 7d 69 76 e3 48 92 e6 55 d0 51 2f 23 ab 47 09 0a fb 12 51 aa 1a 89 5a 43 d4 be ab a7 9f 1e 08 82 8b 44 12 0c 02 a4 96 7a 15 6f ae 31 47 98 9f 73 85 99 9b cc 49 e6 fb 1c 20 04 82 d4 1a 88 e8 ec a9 cc 54 80 d8 dc dd cc dc 36 37 b8 9b ff e5 5f 56 f7 aa c7 17 fb 6b 52 3b ee 75 ff fa 97 f4 18 78 8d bf fe 65 b1 2d 7e ea 61 e3 fe af 7f f9 17 59 3e d8 f9 72 b4 b7 bb 79 bc 53 fb f4 f7 0f ea 07 1c fa 1f 3e 7d e0 f5 87 df 3e 78 1f 3e fd db df 3f 68 93 bb 5d af df c2 dd 31 5e 08 fa 1f fe f1 8f df 72 cf fc ae 17 45 e9 c3 4e b4 5f 95 3a 51 b5 3d 0c 7b 01 4e 6a 5e bf 11 f9 de 20 90 da f7 8d a1 17 07 0d 14 fe f7 df 3e 54 45 f5 8f 8d ae 2d af ce 36 9a af d8 8b e5 a0 1b f4 82 7e 2c f7 bc e1 4d 30 9c 5b cf ce da f1 f2 9c 7a da de 30 0a e2 14 c4 51 dc 94 1d 96 16 58 Data Ascii: x}ivHUQ/#GQZCDzo1GsI T67_VkR;uxe-~aY>ryS>}>x>?h]1^rEN_:Q={Nj^ >TE-6~,M0[z0QX
2024-02-15 00:11:57 UTC	913	OUT	Data Raw: 5c b7 5d dd d1 ed cf 23 9b ef db e6 d2 e7 41 04 30 07 88 0c 2e 99 d8 d0 de d5 0d 1b 97 91 df e8 2e f5 43 6f d0 f9 dc 8a 7b 4b 86 d9 0c 0c b5 a7 8c 5d 55 07 e0 9a a9 2b 9f 5b 3e f0 d3 bb c9 ff ea e7 46 cf 23 18 9e b7 74 e7 00 11 af be 64 19 f8 69 8e bb 4b 1b 61 d8 ea 06 bf 68 a6 a6 54 db 43 4c b0 f9 45 5f 51 f1 31 0e b3 36 00 4c 45 d5 b5 5f ec ea 6e 08 1c 4d 7d 65 99 c7 d5 95 21 46 3d 78 0d 0b 2c f9 3f 9e 8b 92 d8 f0 79 a6 2c 1a e9 d5 45 d3 3d 60 e4 0d 96 ce c4 c2 f7 88 e7 e3 25 ac 8f c4 ff 38 bf c5 2b c1 00 91 c0 25 ed f3 37 84 41 9b 4b 62 84 fa 8b 8e 06 d7 f1 f7 2a b2 e3 bd 70 30 c4 31 19 70 6d ad fe 8d 9c 3f 2d e7 4f 31 38 8c 17 b2 d8 25 81 e0 6b a4 f1 92 11 3a 41 32 af 00 36 90 db 2b 23 11 68 81 37 85 f8 63 c9 25 22 be ad c7 3d cc 57 ab 72 ca 78 8b 09 Data Ascii: \]#A0..Co{K]U+[>F#tdiKahTCLE_Q16LE_nM}e!F=x,?y,E=`%8+%7AKb*p01pm?-O18%k:A26+#h7c%"=Wrx
2024-02-15 00:11:57 UTC	959	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:57 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50065	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	1428	OUT	GET /activityi;dc_pre=CNiJ4c2HrIQDFdSFpgQdyVEDOw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:57 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:57 GMT Expires: Thu, 15 Feb 2024 00:11:57 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:11:57 UTC	589	IN	Data Raw: 38 35 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 77 77 77 2e 61 74 74 2e 63 6f 6d 25 32 46 61 63 63 74 6d 67 6d 74 25 32 46 72 65 67 69 73 74 72 61 74 69 6f 6e 22 3b 0a 76 61 72 20 44 4e 54 20 3d 20 Data Ascii: 855<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>var url = "www.att.com%2Facctmgmt%2Fregistration";var DNT =
2024-02-15 00:11:57 UTC	1252	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 3f 69 64 3d 31 39 32 38 36 33 33 34 36 37 36 35 32 35 34 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 27 3b 0a 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 77 77 77 2e 61 74 74 2e 63 6f 6d 25 32 46 61 63 63 74 6d 67 6d 74 25 32 46 72 65 67 69 73 74 72 61 74 69 6f 6e 22 3b 0a 76 61 72 20 70 72 6f 64 75 63 74 54 79 70 65 20 3d 20 22 22 3b 0a 0a 69 66 20 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 22 25 32 46 63 6f 6e 6e 65 63 74 6d 65 25 32 46 72 65 73 69 64 65 6e 74 73 25 32 46 22 29 20 3e 20 2d 31 0a 09 7c 7c 20 75 72 6c 2e 69 6e 64 65 78 4f 66 28 22 25 32 46 69 6e 74 65 72 6e 65 74 25 32 46 22 29 20 3e Data Ascii: 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';}</script><script>var url = "www.att.com%2Facctmgmt%2Fregistration";var productType = "";if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1\|\| url.indexOf("%2Finternet%2F") >
2024-02-15 00:11:57 UTC	299	IN	Data Raw: 35 66 65 34 31 6d 30 76 39 31 33 37 37 32 32 35 33 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 74 74 2e 63 6f 6d 25 32 46 61 63 63 74 6d 67 6d 74 25 32 46 72 65 67 69 Data Ascii: 5fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregi
2024-02-15 00:11:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	50066	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	1959	OUT	GET /pagead/viewthroughconversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w
2024-02-15 00:11:57 UTC	1900	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&cid=CAQSKQAvHhf_QWeWmzipUsyJbcGApLkL44X99wfi1YSp02tHwvbTb_iVk-FM&random=3232090270 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	50064	18.244.202.99	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	557	OUT	GET /js/networks/1593/2673476745/tag-live.js HTTP/1.1 Host: solutions.invocacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	632	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 22262 Connection: close Date: Thu, 15 Feb 2024 00:11:58 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 16:40:20 GMT ETag: "d4cf7a5c27a2c3c5038a1a7b22ad74dc" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 x-amz-version-id: lo.IzPqwCktyNIaMJmCo12gUsrhJ1de. Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 96c5fe5a0ce9fb454568c749d1bf1d2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: OdcGE9HGdEhtbDOvkuyLGfqC5JBjXOsdR449pvH17AYyOAyh6ws-3A==
2024-02-15 00:11:57 UTC	8370	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6e 65 74 77 6f 72 6b 49 64 29 20 7b 0a 76 61 72 20 63 61 63 68 65 4c 69 66 65 74 69 6d 65 44 61 79 73 20 3d 20 33 30 3b 0a 0a 76 61 72 20 63 75 73 74 6f 6d 44 61 74 61 57 61 69 74 46 6f 72 43 6f 6e 66 69 67 20 3d 20 5b 0a 20 20 7b 20 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 49 6e 76 6f 63 61 2e 43 6c 69 65 6e 74 2e 70 61 72 73 65 43 75 73 74 6f 6d 44 61 74 61 46 69 65 6c 64 28 22 61 67 65 6e 74 22 2c 20 22 4c 61 73 74 22 2c 20 22 55 52 4c 50 61 72 61 6d 22 2c 20 22 22 29 3b 20 7d 2c 20 70 61 72 61 6d 4e 61 6d 65 3a 20 22 61 67 65 6e 74 22 2c 20 66 61 6c 6c 62 61 63 6b 56 61 6c 75 65 3a 20 6e 75 6c 6c 20 7d 2c 0a 20 20 7b 20 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 Data Ascii: (function(networkId) {var cacheLifetimeDays = 30;var customDataWaitForConfig = [ { on: function() { return Invoca.Client.parseCustomDataField("agent", "Last", "URLParam", ""); }, paramName: "agent", fallbackValue: null }, { on: function() { return
2024-02-15 00:11:57 UTC	13892	IN	Data Raw: 69 63 41 50 49 2e 67 65 74 55 73 65 72 49 44 28 29 22 29 3b 20 7d 2c 20 70 61 72 61 6d 4e 61 6d 65 3a 20 22 71 6d 5f 75 73 65 72 5f 69 64 22 2c 20 66 61 6c 6c 62 61 63 6b 56 61 6c 75 65 3a 20 6e 75 6c 6c 20 7d 2c 0a 20 20 7b 20 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 49 6e 76 6f 63 61 2e 43 6c 69 65 6e 74 2e 70 61 72 73 65 43 75 73 74 6f 6d 44 61 74 61 46 69 65 6c 64 28 22 72 70 65 74 5f 77 72 6b 5f 66 75 6e 63 5f 63 64 22 2c 20 22 4c 61 73 74 22 2c 20 22 55 52 4c 50 61 72 61 6d 22 2c 20 22 22 29 3b 20 7d 2c 20 70 61 72 61 6d 4e 61 6d 65 3a 20 22 72 70 65 74 5f 77 72 6b 5f 66 75 6e 63 5f 63 64 22 2c 20 66 61 6c 6c 62 61 63 6b 56 61 6c 75 65 3a 20 6e 75 6c 6c 20 7d 2c 0a 20 20 7b 20 6f 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: icAPI.getUserID()"); }, paramName: "qm_user_id", fallbackValue: null }, { on: function() { return Invoca.Client.parseCustomDataField("rpet_wrk_func_cd", "Last", "URLParam", ""); }, paramName: "rpet_wrk_func_cd", fallbackValue: null }, { on: function()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	50068	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	546	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915939&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=906&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	50070	142.251.15.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	1084	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=2091243578223;auiddc=772933313.1707955906;u19=www.att.com%2Facctmgmt%2Fregistration;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=512393471;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:11:57 UTC	2210	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"10695538989818861621","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:11:57 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	50071	74.125.138.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	1731	OUT	GET /pagead/1p-conversion/1049001539/?random=354057855&cv=11&fst=1707955914833&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CMjw8rDV3-S-hwESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmFfTDVrM0U3amVBUGo5Z1dCVE5vTDllZ0ZlMktUUWxXdWJQZzE1dHlPcld4d2VzU1Z2d2QxUjEiEwj2-p_Nh6yEAxV1gcsBHeXHCK8yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=y1bNZbbpM_WCrr4P5Y-j-Ao&cid=CAQSKQAvHhf_PSLNqepZ-qn2rSdVk0tKFlFVbo78N0Q-LyZ8xw-_NwIs0pKG&random=410339091 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	50072	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	548	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%3Forigination_point%3DOP&t=1707955913296&v=1707955915940&H=cb56cd651f95e9d05ab70581&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1535&N=43&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	50074	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	544	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916209&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:57 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:57 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	50073	52.7.164.58	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	427	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy
2024-02-15 00:11:57 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:11:57 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 151 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:11:57 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:11:57 UTC	151	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 36 4d 43 46 50 63 44 48 67 6a 4d 6a 4b 69 76 31 62 6e 63 6c 63 55 5f 77 65 31 41 4e 69 65 4d 57 76 74 6c 7a 6f 74 71 4a 73 71 49 52 4d 76 74 33 70 71 59 50 74 30 4d 42 35 68 43 2d 58 43 77 74 49 44 6e 34 6c 35 2d 64 35 71 73 34 64 74 79 4c 6d 5a 67 7a 51 38 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs6MCFPcDHgjMjKiv1bnclcU_we1ANieMWvtlzotqJsqIRMvt3pqYPt0MB5hC-XCwtIDn4l5-d5qs4dtyLmZgzQ8", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	50075	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:57 UTC	539	OUT	GET /?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955916212&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=6766dc2016a147975d239307765b79f6 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:11:57 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	50080	142.250.9.106	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	2138	OUT	GET /pagead/1p-conversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&cid=CAQSKQAvHhf_QWeWmzipUsyJbcGApLkL44X99wfi1YSp02tHwvbTb_iVk-FM&random=3232090270 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	50085	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	1787	OUT	GET /pagead/viewthroughconversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&ocp_id=zVbNZYykE83drr4P4MK86A8&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:11:58 UTC	1716	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&ocp_id=zVbNZYykE83drr4P4MK86A8&cid=CAQSKQAvHhf_MJo2B1CEkVyDuHhwoX4cjk618gF1ujYMUjBPnqxXsG6cAP9N&random=3002872816 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	50081	104.22.52.252	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	742	OUT	GET /helpers/blank HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
2024-02-15 00:11:58 UTC	334	IN	HTTP/1.1 304 Not Modified Date: Thu, 15 Feb 2024 00:11:58 GMT Connection: close Last-Modified: Thu, 15 Feb 2024 00:08:10 GMT vary: Accept-Encoding strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 228 Server: cloudflare CF-RAY: 8559562a7dbd2448-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	50082	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	784	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 729 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	729	OUT	Data Raw: 78 01 8d 52 5d 73 a2 48 14 fd 2b 53 fd 1a 0d 34 34 0d 4d d5 3c 4c 50 37 8c 44 5d 30 c6 b8 b5 0f 6d d3 40 2b 88 e1 43 c0 54 fe fb b6 4e b2 6b 3e aa 66 5f a0 1b ee 3d e7 dc 7b ce 33 18 02 fb af 67 20 80 8d 88 d9 03 11 b0 d5 1e 38 00 1b 4c 67 3e e8 81 0a d8 d0 54 4d 62 18 04 22 a2 e1 97 de b9 56 d7 11 ba 2c 56 28 63 55 16 67 95 52 f0 58 94 55 41 2b 91 ef 94 7c 5f 28 2c c9 f3 92 8b f0 33 98 f9 06 86 b0 76 09 96 54 d5 be b4 15 a5 69 9a 6b 5a 55 d7 2c cf 7e 8b ef 0e 3e e0 1b ea 85 58 ed 1d 7e 14 85 ec 53 b5 4e de d4 60 15 5f aa 61 a6 69 e8 dc 64 7d cb c2 56 1f 61 2b ec 5b 6b 4d ed 87 06 8f 30 c4 16 b7 f0 c7 d9 0c 15 a1 57 34 44 f4 4b b0 cb ed 7c 93 db f9 f6 6b 3b 9f d4 63 a8 59 af 08 7d 42 88 75 c6 30 a0 1c e3 64 0d bc d6 d1 35 fc 30 02 d6 d4 b7 11 4e 2d bf bc Data Ascii: xR]sH+S44M<LP7D]0m@+CTNk>f_={3g 8Lg>TMb"V,V(cUgRXUA+\|_(,3vTikZU,~>X~SN`_aid}Va+[kM0W4DK\|k;cY}Bu0d50N-
2024-02-15 00:11:58 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:58 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	50083	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1439&N=10&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 156 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	156	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 4a 54 d2 51 2a 00 d2 36 1e ae 8e 2e 40 76 a6 92 95 91 91 85 8e 52 96 92 55 74 b5 92 a1 92 55 b5 52 1e 50 3a d8 39 c8 33 20 04 28 9f 08 14 8f ad ad 8d d5 51 4a 51 b2 32 d4 51 0a f6 03 52 06 b5 3a 68 a6 39 f9 bb 44 42 4c 33 34 27 d6 30 98 21 4e 40 8d 9e 20 27 81 0c 51 30 54 30 00 63 03 20 0d 83 40 31 a0 1a 90 03 cc e0 56 47 10 d4 65 04 d2 0f 54 55 a1 64 65 66 62 a0 a3 54 a9 64 65 62 6c 0a 31 07 66 77 79 12 c4 60 73 b3 da 58 00 1b 0a 42 a5 Data Ascii: xVQRJTQ6.@vRUtURP:93 (QJQ2QR:h9DBL34'0!N@ 'Q0T0c @1VGeTUdefbTdebl1fwy`sXB
2024-02-15 00:11:58 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:58 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	50088	172.217.215.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 30 36 39 35 35 33 38 39 38 39 38 31 38 38 36 31 36 32 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://att.com","trigger_debug_key":"10695538989818861621"},"type":"trigger-no-matching-source"}]
2024-02-15 00:11:58 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:11:58 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	50087	3.163.101.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	699	OUT	GET /pixel/8597/?che=0.5190743972107625&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy
2024-02-15 00:11:58 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:11:57 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATTgAAAAAAAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 5cfa3bf838414b2c366e22f44b738bfa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 X-Amz-Cf-Id: 1Unr0rSY79ak3S2dIc6Dtp_VfZS1KMeU-lzkE0F491HSkGWF46yBBQ==
2024-02-15 00:11:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	50089	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	840	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:11:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	50090	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	950	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger;navigation-source Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:58 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:11:58 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:11:58 UTC	1256	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d
2024-02-15 00:11:58 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	50098	74.125.138.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	1907	OUT	GET /pagead/1p-conversion/1049001539/?random=1301209351&cv=11&fst=1707955915917&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUonZXZlbnQtc291cmNlPW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyYgQKAgID&pscrd=CMXBuZPulrfFvAESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtMUtodFhMUGJ3dVVlVEpINXZDV3A2Q0tkbjNiV1I0RFFaVnBOZVpkTlFhay1rcHowZXBnVFMiEwiMmeDNh6yEAxU_hcsBHVhUCbMyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=zFbNZYyDN7-Krr4P2KilmAs&cid=CAQSKQAvHhf_QWeWmzipUsyJbcGApLkL44X99wfi1YSp02tHwvbTb_iVk-FM&random=3232090270 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:58 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	50099	142.250.9.106	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	1954	OUT	GET /pagead/1p-conversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&ocp_id=zVbNZYykE83drr4P4MK86A8&cid=CAQSKQAvHhf_MJo2B1CEkVyDuHhwoX4cjk618gF1ujYMUjBPnqxXsG6cAP9N&random=3002872816 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:58 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	50101	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	571	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:59 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:59 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	50102	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	540	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955917483&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1439&N=10&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:59 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:11:59 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	50104	99.84.208.48	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	505	OUT	GET /pixel/8597/?che=0.5190743972107625&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTgAAAAAAAS1dAAAAAA
2024-02-15 00:11:59 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:11:58 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 de6760156d781e28f72545a2e9243b26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: 4CQYNP9pjoT5JopkGMMFI4orbnjBYsLgs3A1JEq9ZqG3uN0uz5m6yQ==
2024-02-15 00:11:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	50105	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	609	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:59 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:11:59 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50106	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:58 UTC	646	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&rl=&if=false&ts=1707955917563&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955915927&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:11:59 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:11:59 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:11:59 UTC	1289	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50110	74.125.138.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:59 UTC	1723	OUT	GET /pagead/1p-conversion/1049001539/?random=740347992&cv=11&fst=1707955916010&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&label=uugACOLugdQDEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosZXZlbnQtc291cmNlLCB0cmlnZ2VyLCBub3QtbmF2aWdhdGlvbi1zb3VyY2ViBAoCAgM&pscrd=CKqi2NWh_6i9KhJMQ2hBSWdPYXhyZ1lRekxuYjhiR01pUDlrRWlVQXdSRXVuYnpyZy1yNE0tXzRfQ250Y0xOUHVzMTJxa1Q1ejNFYmtXTWlxUG94RTRQURpYQ2hFSWdPYXhyZ1lRcHRHYl84M096N2JBQVJJdEFNUF9SYThhMU5IVlhWbzlwYXQ4RHBPWU44bnZ4S29iLXRTdVhlLVJ4MW1mazhVQThzR053XzZsTXhGMCITCMy--c2HrIQDFc2uywEdYCEP_TICCAMyAggEMgIIBzICCAgyAggJMgIICjICCAI&is_vtc=1&ocp_id=zVbNZYykE83drr4P4MK86A8&cid=CAQSKQAvHhf_MJo2B1CEkVyDuHhwoX4cjk618gF1ujYMUjBPnqxXsG6cAP9N&random=3002872816 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:11:59 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:11:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:59 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	50111	108.177.122.156	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:59 UTC	728	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:11:59 UTC	786	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 15 Feb 2024 00:11:59 GMT Expires: Thu, 15 Feb 2024 00:11:59 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 241 / 19768 / m202402080201 / config-hash: 11347649756239321117 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 98701 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:11:59 UTC	466	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 Data Ascii: ,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 64 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 62 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a Data Ascii: ="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=da[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ba(d.prototype,a,{configurable:
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 66 29 6c 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6d 61 3b 61 3a 7b 76 61 72 20 6e 61 3d 7b 61 3a 21 30 7d 2c 6f 61 3d 7b 7d 3b 74 72 79 7b 6f 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 61 3b 6d 61 3d 6f 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6d 61 3d 21 31 7d 6c 61 3d 6d 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 70 61 3d 6c 61 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 Data Ascii: f)la=Object.setPrototypeOf;else{var ma;a:{var na={a:!0},oa={};try{oa.__proto__=na;ma=oa.a;break a}catch(a){}ma=!1}la=ma?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var pa=la,A=function(a,b){a.p
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 77 28 67 29 3b 66 6f 72 28 76 61 72 20 68 3b 21 28 68 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 68 3d 68 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 68 5b 30 5d 2c 68 5b 31 5d 29 7d 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 21 63 28 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 69 66 28 21 7a 28 67 2c 64 29 29 7b 76 61 72 20 6b 3d 6e 65 77 20 62 3b 62 61 28 67 2c 64 2c 7b 76 61 6c 75 65 3a 6b 7d 29 7d 69 66 28 21 7a 28 67 2c 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 67 29 3b 67 5b 64 5d 5b 74 68 69 73 2e 67 5d 3d 68 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: w(g);for(var h;!(h=g.next()).done;)h=h.value,this.set(h[0],h[1])}};f.prototype.set=function(g,h){if(!c(g))throw Error("Invalid WeakMap key");if(!z(g,d)){var k=new b;ba(g,d,{value:k})}if(!z(g,d))throw Error("WeakMap key fail: "+g);g[d][this.g]=h;return thi
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 75 29 2c 74 68 69 73 5b 31 5d 2e 44 2e 6e 65 78 74 3d 6c 2e 75 2c 74 68 69 73 5b 31 5d 2e 44 3d 6c 2e 75 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 3d 64 28 74 68 69 73 2c 68 29 3b 72 65 74 75 72 6e 20 68 2e 75 26 26 68 2e 6c 69 73 74 3f 28 68 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 68 2e 69 6e 64 65 78 2c 31 29 2c 68 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 68 2e 69 64 5d 2c 68 2e 75 2e 44 2e 6e 65 78 74 3d 68 2e 75 2e 6e 65 78 74 2c 68 2e 75 2e 6e 65 78 74 2e Data Ascii: ad:this[1],key:h,value:k},l.list.push(l.u),this[1].D.next=l.u,this[1].D=l.u,this.size++);return this};c.prototype.delete=function(h){h=d(this,h);return h.u&&h.list?(h.list.splice(h.index,1),h.list.length\|\|delete this[0][h.id],h.u.D.next=h.u.next,h.u.next.
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 21 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 44 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 44 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 76 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 76 28 Data Ascii: !=h[1];)l=l.D;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},f=function(){var h={};return h.D=h.next=h.head=h},g=0;return c},"es6");v("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");v(
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 7c 7c 75 28 4f 62 6a 65 63 74 2c 22 69 73 22 29 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 2c 66 2c 62 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 22 65 73 37 22 29 3b 76 61 72 20 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 Data Ascii: \|\|u(Object,"is").call(Object,f,b))return!0}return!1}},"es7");var sa=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to S
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 22 65 73 36 22 29 3b 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 Data Ascii: xt()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}},"es6");v("Set",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var
2024-02-15 00:11:59 UTC	1252	IN	Data Raw: 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 76 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 7a 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 Data Ascii: Each=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");v("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)z(b,d)&&c.push([d,b[d]]);return c}},"es8");v("String.prototype.startsWith",func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50107	44.197.54.80	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:59 UTC	2167	OUT	GET /1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22device%22%3A%22desktop%22%2C%22existingService%22%3A%220%22%2C%22flowCode%22%3A%22OPR%22%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912718-1707999118%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr1& HTTP/1.1 Host: pnapi.invoca.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:00 UTC	173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Date: Thu, 15 Feb 2024 00:11:59 GMT processing_time: 12.04399ms Server: Goliath Content-Length: 98 Connection: Close
2024-02-15 00:12:00 UTC	98	IN	Data Raw: 6a 73 6f 6e 5f 72 72 31 28 7b 22 69 6e 76 6f 63 61 49 64 22 3a 22 69 2d 39 36 32 38 65 33 35 39 2d 65 34 64 37 2d 34 31 63 39 2d 65 39 30 65 2d 64 37 37 38 61 30 63 34 33 66 37 33 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 68 61 72 65 64 20 70 61 72 61 6d 73 20 75 70 64 61 74 65 64 22 7d 29 3b Data Ascii: json_rr1({"invocaId":"i-9628e359-e4d7-41c9-e90e-d778a0c43f73","message":"shared params updated"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50112	44.197.54.80	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:11:59 UTC	2273	OUT	POST /1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22device%22%3A%22desktop%22%2C%22existingService%22%3A%220%22%2C%22flowCode%22%3A%22OPR%22%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912718-1707999118%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr1&beaconRequest=true&beaconStateChangeEvent=visibilitychange HTTP/1.1 Host: pnapi.invoca.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:00 UTC	173	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Date: Thu, 15 Feb 2024 00:12:00 GMT processing_time: 26.56532ms Server: Goliath Content-Length: 98 Connection: Close
2024-02-15 00:12:00 UTC	98	IN	Data Raw: 6a 73 6f 6e 5f 72 72 31 28 7b 22 69 6e 76 6f 63 61 49 64 22 3a 22 69 2d 39 36 32 38 65 33 35 39 2d 65 34 64 37 2d 34 31 63 39 2d 65 39 30 65 2d 64 37 37 38 61 30 63 34 33 66 37 33 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 68 61 72 65 64 20 70 61 72 61 6d 73 20 75 70 64 61 74 65 64 22 7d 29 3b Data Ascii: json_rr1({"invocaId":"i-9628e359-e4d7-41c9-e90e-d778a0c43f73","message":"shared params updated"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50118	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:00 UTC	754	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955919310&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1729&N=15&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 6058 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:00 UTC	6058	OUT	Data Raw: 78 01 8d 79 d7 ce f4 ca b1 dd ab 1c 7c b7 dc 02 73 da f0 b9 20 87 69 98 73 12 04 83 79 86 39 27 41 ef 6e fe 5b de 82 01 0b 96 31 e0 90 20 bb aa bb 8b ac b0 6a fd f5 ef 3f eb cf ef 3f c9 cf 6f 3f e3 73 fe 1f 12 cf 70 cf f5 f7 e7 77 04 a1 7f fb a9 7f 7e ff eb df 7f e0 9f df ff fe d3 3f 8f 9d 97 fd 36 dd e7 79 f2 dc ff db 3f fe f1 b7 df 7e f2 9f df 61 fc b7 1f 47 ff 75 fe c7 6f ff 54 27 3c 43 de bf d4 b1 06 17 fd 17 fc 5f d0 1f 07 f4 9c ff fc 3d f7 9e 31 bf 84 21 88 fe 53 cc f8 8f 62 c8 2f 05 cf a8 f3 e7 77 02 83 7e fb b9 7e 7e c7 d0 67 fa 5f 8a fe d4 d2 fd fb e7 c8 9f cf d9 ff 38 cb bf 16 07 fd 29 13 fe 47 99 ff c7 ca fe d0 f2 58 14 46 9e 95 96 3f bf 3f eb de 1f e3 10 78 96 e3 44 8a fd 05 46 48 e8 2f 09 86 10 7f c1 11 1c fd e3 8f 4a a8 c7 2e 58 f9 4c fb eb Data Ascii: xy\|s isy9'An[1 j??o?spw~?6y?~aGuoT'<C_=1!Sb/w~~~g_8)GXF??xDFH/J.XL
2024-02-15 00:12:00 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:00 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50123	23.20.189.8	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:00 UTC	692	OUT	POST /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 1110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:00 UTC	1110	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 34 36 32 36 38 38 37 62 33 39 35 36 34 63 39 36 39 35 61 63 63 33 36 64 64 38 30 37 31 63 30 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"4626887b39564c9695acc36dd8071c09","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-02-15 00:12:00 UTC	768	IN	HTTP/1.1 200 OK date: Thu, 15 Feb 2024 00:12:00 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://about.att.com access-control-allow-credentials: true x-request-id: b95d89dfc9fbd6958dd7c98d8bb6fb30 timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:12:00 UTC	364	IN	Data Raw: 31 36 35 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 34 36 32 36 38 38 37 62 33 39 35 36 34 63 39 36 39 35 61 63 63 33 36 64 64 38 30 37 31 63 30 39 22 2c 22 63 6c 69 65 6e 74 22 3a 22 61 74 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 36 63 63 30 39 61 32 36 36 64 31 37 34 32 30 37 39 35 38 32 62 38 38 63 36 30 66 36 36 32 30 32 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 Data Ascii: 165{"status":200,"requestId":"4626887b39564c9695acc36dd8071c09","client":"attservicesinc","id":{"tntId":"6cc09a266d1742079582b88c60f66202.34_0","marketingCloudVisitorId":"03604370663548075242715929808033793837"},"edgeHost":"mboxedge34.tt.omtrdc.net","pr
2024-02-15 00:12:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50129	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:00 UTC	864	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955920177 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:01 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:01 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50131	108.177.122.156	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:00 UTC	765	OUT	GET /pagead/managed/js/gpt/m202402080201/pubads_impl.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:01 UTC	729	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 15 Feb 2024 00:12:01 GMT Expires: Fri, 14 Feb 2025 00:12:01 GMT Cache-Control: public, immutable, max-age=31536000 Content-Type: text/javascript; charset=UTF-8 ETag: 2029179791382905741 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 440236 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:01 UTC	523	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 63 61 2c 65 61 2c 68 61 2c 6b 61 2c 6e 61 2c 70 61 2c 73 61 2c 72 61 2c 75 61 2c 76 61 2c 78 61 2c 79 61 2c 41 61 2c 44 61 2c 45 61 2c 4a 61 2c 4b 61 2c 4d 61 2c 4e 61 2c 50 61 2c 58 61 2c 64 62 2c 67 62 2c 6d 62 2c 6f 62 2c 70 62 2c 71 62 2c 72 62 2c 74 62 2c 78 62 2c 7a 62 2c 45 62 2c 46 62 2c 4b 62 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 */ var ca,ea,ha,ka,na,pa,sa,ra,ua,va,xa,ya,Aa,Da,Ea,Ja,Ka,Ma,Na,Pa,Xa,db,gb,mb,ob,pb,qb,rb,tb,xb,zb,Eb,Fb,Kb
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 47 65 2c 48 65 2c 49 65 2c 4a 65 2c 4b 65 2c 4c 65 2c 50 65 2c 51 65 2c 52 65 2c 4e 65 2c 59 65 2c 4f 65 2c 5a 65 2c 63 66 2c 65 66 2c 67 66 2c 6c 66 2c 6d 66 2c 6e 66 2c 72 66 2c 73 66 2c 74 66 2c 76 66 2c 77 66 2c 78 66 2c 79 66 2c 7a 66 2c 43 66 2c 47 66 2c 49 66 2c 48 66 2c 4d 66 2c 4f 66 2c 50 66 2c 53 66 2c 54 66 2c 55 66 2c 59 66 2c 24 66 2c 65 67 2c 67 67 2c 68 67 2c 6b 67 2c 6c 67 2c 6d 67 2c 6e 67 2c 6f 67 2c 71 67 2c 72 67 2c 74 67 2c 75 67 2c 77 67 2c 78 67 2c 79 67 2c 7a 67 2c 41 67 2c 42 67 2c 45 67 2c 47 67 2c 4b 67 2c 49 67 2c 4f 67 2c 50 67 2c 51 67 2c 4d 67 2c 4e 67 2c 52 67 2c 53 67 2c 62 68 2c 24 67 2c 71 68 2c 79 68 2c 54 67 2c 48 68 2c 51 68 2c 52 68 2c 56 68 2c 57 68 2c 68 69 2c 6a 69 2c 6b 69 2c 6e 69 2c 72 69 2c 77 69 2c 45 69 2c Data Ascii: Ge,He,Ie,Je,Ke,Le,Pe,Qe,Re,Ne,Ye,Oe,Ze,cf,ef,gf,lf,mf,nf,rf,sf,tf,vf,wf,xf,yf,zf,Cf,Gf,If,Hf,Mf,Of,Pf,Sf,Tf,Uf,Yf,$f,eg,gg,hg,kg,lg,mg,ng,og,qg,rg,tg,ug,wg,xg,yg,zg,Ag,Bg,Eg,Gg,Kg,Ig,Og,Pg,Qg,Mg,Ng,Rg,Sg,bh,$g,qh,yh,Tg,Hh,Qh,Rh,Vh,Wh,hi,ji,ki,ni,ri,wi,Ei,
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 Data Ascii: all(a,b,1);return c};_.fa=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};ha=function(a,b,c){return 2>=arguments.length?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};ka=function(a){for(va
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 20 63 7d 3b 44 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 64 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 66 6f 72 28 63 20 69 6e 20 64 29 61 5b 63 5d 3d 64 5b 63 5d Data Ascii: in a)b.call(void 0,a[c],c,a)};ya=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};Aa=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return c};Da=function(a,b){for(var c,d,e=1;e<arguments.length;e++){d=arguments[e];for(c in d)a[c]=d[c]
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 22 61 22 29 3b 74 72 79 7b 62 2e 68 72 65 66 3d 61 7d 63 61 74 63 68 28 63 29 7b 62 3d 76 6f 69 64 20 30 3b 62 72 65 61 6b 20 62 7d 62 3d 62 2e 70 72 6f 74 6f 63 6f 6c 3b 62 3d 22 3a 22 3d 3d 3d 62 7c 7c 22 22 3d 3d 3d 62 3f 22 68 74 74 70 73 3a 22 3a 62 7d 69 66 28 22 6a 61 76 61 73 63 72 69 70 74 3a 22 21 3d 3d 62 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 62 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 53 61 3f 5f 2e 61 62 28 61 29 3a 5f 2e 24 61 28 61 29 7d 3b 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 5f 2e 63 62 3b 62 2e 51 69 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: "a");try{b.href=a}catch(c){b=void 0;break b}b=b.protocol;b=":"===b\|\|""===b?"https:":b}if("javascript:"!==b)return a};_.bb=function(a){return a instanceof _.Sa?_.ab(a):_.$a(a)};db=function(a){var b=new _.cb;b.Qi=a;return b};_.eb=function(a){if(a instanceof
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 22 2c 62 29 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 5f 2e 65 62 28 62 29 3b 70 62 28 61 29 7d 3b 72 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 72 63 3d 5f 2e 6a 62 28 62 29 3b 70 62 28 61 29 7d 3b 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2c 63 3d 21 30 3b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 21 31 3a 63 3b 6e 65 77 20 5f 2e 75 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 67 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 3b 67 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 3b 76 61 72 20 68 3b 6e 75 6c 6c 3d 3d 28 68 3d 67 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7c 7c 68 2e 72 65 6d 6f 76 65 43 Data Ascii: ",b)};qb=function(a,b){a.textContent=_.eb(b);pb(a)};rb=function(a,b){a.src=_.jb(b);pb(a)};tb=function(a){var b=window,c=!0;c=void 0===c?!1:c;new _.u.Promise(function(d,e){function f(){g.onload=null;g.onerror=null;var h;null==(h=g.parentElement)\|\|h.removeC
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 2c 65 3d 22 73 6f 64 61 72 32 22 3b 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 73 6f 64 61 72 32 22 3a 65 3b 76 61 72 20 66 3d 77 69 6e 64 6f 77 2c 67 3d 66 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3b 67 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 67 2e 70 75 73 68 7c 7c 28 67 3d 66 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 5b 5d 29 3b 76 61 72 20 68 3d 7b 7d 3b 67 2e 70 75 73 68 28 28 68 2e 5f 63 74 78 5f 3d 64 2e 63 6f 6e 74 65 78 74 2c 68 2e 5f 62 67 76 5f 3d 64 2e 5a 6a 2c 68 2e 5f 62 67 70 5f 3d 64 2e 59 6a 2c 68 2e 5f 6c 69 5f 3d 64 2e 72 6c 2c 68 2e 5f 6a 6b 5f 3d 64 2e 52 64 2c 68 2e 5f 73 74 5f 3d 64 2e 6e 64 2c 68 2e 5f 72 63 5f 3d 64 2e 52 65 2c 68 2e 5f 64 6c 5f 3d 64 2e 73 66 2c 68 2e 5f 67 32 5f 3d 64 2e 51 65 Data Ascii: ,e="sodar2";e=void 0===e?"sodar2":e;var f=window,g=f.GoogleGcLKhOms;g&&"function"===typeof g.push\|\|(g=f.GoogleGcLKhOms=[]);var h={};g.push((h._ctx_=d.context,h._bgv_=d.Zj,h._bgp_=d.Yj,h._li_=d.rl,h._jk_=d.Rd,h._st_=d.nd,h._rc_=d.Re,h._dl_=d.sf,h._g2_=d.Qe
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 6c 79 28 6e 75 6c 6c 2c 61 2e 73 75 62 61 72 72 61 79 28 63 2c 63 2b 3d 31 30 32 34 30 29 29 3b 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 7d 3b 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4c 62 5b 61 5d 7c 7c 22 22 7d 3b 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4e 62 26 26 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7d 3b 51 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 21 3d 3d 50 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 6c 6c 65 67 61 6c 20 65 78 74 65 72 6e 61 6c 20 63 61 6c 6c 65 72 Data Ascii: ly(null,a.subarray(c,c+=10240));b+=String.fromCharCode.apply(null,c?a.subarray(c):a);return btoa(b)};Mb=function(a){return Lb[a]\|\|""};Ob=function(a){return Nb&&null!=a&&a instanceof Uint8Array};Qb=function(a){if(a!==Pb)throw Error("illegal external caller
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 64 3d 4e 75 6d 62 65 72 28 61 2e 73 6c 69 63 65 28 64 2c 65 29 29 2c 57 62 2a 3d 31 45 36 2c 56 62 3d 31 45 36 2a 56 62 2b 64 2c 34 32 39 34 39 36 37 32 39 36 3c 3d 56 62 26 26 28 57 62 2b 3d 5f 2e 41 28 4d 61 74 68 2c 22 74 72 75 6e 63 22 29 2e 63 61 6c 6c 28 4d 61 74 68 2c 56 62 2f 34 32 39 34 39 36 37 32 39 36 29 2c 57 62 3e 3e 3e 3d 30 2c 56 62 3e 3e 3e 3d 30 29 3b 62 26 26 28 62 3d 5f 2e 79 28 55 62 28 56 62 2c 57 62 29 29 2c 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 2c 56 62 3d 61 2c 57 62 3d 62 29 7d 7d 3b 55 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 7e 62 3b 61 3f 61 3d 7e 61 2b 31 3a 62 2b 3d 31 3b 72 65 74 75 72 6e 5b 61 2c 62 5d 7d 3b 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: d=Number(a.slice(d,e)),Wb=1E6,Vb=1E6Vb+d,4294967296<=Vb&&(Wb+=_.A(Math,"trunc").call(Math,Vb/4294967296),Wb>>>=0,Vb>>>=0);b&&(b=_.y(Ub(Vb,Wb)),a=b.next().value,b=b.next().value,Vb=a,Wb=b)}};Ub=function(a,b){b=~b;a?a=~a+1:b+=1;return[a,b]};ic=function(a)
2024-02-15 00:12:01 UTC	1252	IN	Data Raw: 47 63 3d 61 7d 3b 49 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 47 63 29 74 72 79 7b 47 63 28 61 29 7d 63 61 74 63 68 28 62 29 7b 74 68 72 6f 77 20 62 2e 63 61 75 73 65 3d 61 2c 62 3b 7d 7d 3b 4b 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4a 63 28 29 3b 47 63 3f 5f 2e 74 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 49 63 28 61 29 7d 2c 30 29 3a 46 62 28 61 29 7d 3b 4d 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 4c 63 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 49 63 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 4a 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 4c 63 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4e 63 Data Ascii: Gc=a};Ic=function(a){if(Gc)try{Gc(a)}catch(b){throw b.cause=a,b;}};Kc=function(){var a=Jc();Gc?_.t.setTimeout(function(){Ic(a)},0):Fb(a)};Mc=function(a){a=Error(a);Lc(a,"warning");Ic(a);return a};Jc=function(){var a=Error();Lc(a,"incident");return a};_.Nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50132	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:01 UTC	752	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955920192&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1302&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:01 UTC	187	OUT	Data Raw: 78 01 75 8f cb 0a c2 30 10 45 ff 65 b6 4d 71 92 66 26 4d a0 1b c1 17 b8 92 8a a2 b8 68 aa 95 aa f8 a0 a5 28 d2 7f 57 ea c6 85 6e ee ea dc 73 b9 4f 18 80 5b 3f a1 04 27 15 09 28 c0 a1 80 06 1c 30 e5 5b 62 af 43 a9 0c 86 99 56 1c 92 a2 a8 8b 38 8b 11 ad 2e 40 40 fd 2e 1a 34 96 c8 4a b2 9a 5b d1 c9 22 96 f2 db 86 88 ff 61 85 d6 74 b0 22 fe 8c 2f c7 81 af 74 8c d3 d5 94 4d 7d 1f 7a 4a d3 ab a6 c5 cd cc 7b 93 5d 90 1e 02 ff 48 67 96 d4 e8 92 fc f0 0a b8 ed ce f9 fb c4 a4 3a 3e d4 b5 38 99 26 af b7 da 37 47 cb fd 72 9f 24 d0 6e 04 dc 2b 70 8c ed 0b 3e 85 41 89 Data Ascii: xu0EeMqf&Mh(WnsO[?'(0[bCV8.@@.4J["at"/tM}zJ{]Hg:>8&7Gr$n+p>A
2024-02-15 00:12:01 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:01 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50134	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:01 UTC	540	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955919310&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=1729&N=15&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:01 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:01 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50141	35.169.173.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:01 UTC	443	OUT	GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:01 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 15 Feb 2024 00:12:01 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:12:01 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-02-15 00:12:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50147	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	795	OUT	GET /embed/tFUHPoLMUwk?rel=0 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:02 UTC	2098	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 15 Feb 2024 00:12:02 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=vqJURvZSHyA; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=2Xbf0EM2-oo; Domain=.youtube.com; Expires=Tue, 13-Aug-2024 00:12:02 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgOQ%3D%3D; Domain=.youtube.com; Expires=Tue, 13-Aug-2024 00:12:02 GMT; Path=/; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 35 76 4c 63 33 4e 59 4b 2d 64 53 67 46 73 58 50 4d 6d 6f 4a 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="S5vLc3NYK-dSgFsXPMmoJw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c Data Ascii: AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 74 22 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 62 38 35 34 65 65 35 32 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 20 6e 6f 6e 63 65 3d 22 49 4f 77 70 7a 6d 2d 6f 43 42 4e 78 52 30 6f 79 4b 76 6b 71 35 67 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 4f 77 70 7a 6d 2d 6f 43 42 4e 78 52 30 6f 79 4b 76 6b 71 35 67 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 Data Ascii: t" href="/s/player/b854ee52/www-player.css" name="www-player" nonce="IOwpzm-oCBNxR0oyKvkq5g"><style nonce="IOwpzm-oCBNxR0oyKvkq5g">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 49 45 22 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 Data Ascii: IE")<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVisibilityState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isP
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 65 2c 22 65 6d 62 65 64 73 5f 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 73 61 5f 6f 6e 65 5f 63 6c 69 63 6b 5f 61 74 61 5f 74 72 61 6e 73 6c 61 74 6f 72 73 5f 69 6e 66 65 65 64 5f 65 6c 65 6d 65 6e 74 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6f 6d 5f 77 65 62 76 69 65 Data Ascii: e,"embeds_transport_use_scheduler":true,"embeds_web_nwl_disable_nocookie":true,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_docked_chat_messages":true,"enable_dsa_one_click_ata_translators_infeed_elements":true,"enable_eom_webvie
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 74 5f 66 6f 72 5f 77 65 62 63 61 6d 5f 73 74 72 65 61 6d 69 6e 67 22 3a 74 72 75 65 2c 22 6a 73 6f 6e 5f 63 6f 6e 64 65 6e 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 65 6c 5f 65 72 72 6f 72 5f 72 6f 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 67 75 69 64 65 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 63 6f 6e 74 72 6f 6c 6c 65 72 5f 65 78 74 72 61 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 61 74 5f 65 6e 61 62 6c 65 5f 72 74 61 5f 6d 61 6e 61 67 65 72 22 3a 74 72 75 65 2c 22 6c 69 76 65 5f 63 68 Data Ascii: t_for_webcam_streaming":true,"json_condensed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix":true,"kevlar_gel_error_routing":true,"kevlar_guide_refresh":true,"live_chat_enable_controller_extraction":true,"live_chat_enable_rta_manager":true,"live_ch
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 6e 61 62 6c 65 5f 61 62 64 5f 72 65 66 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 65 72 72 6f 72 5f 32 30 34 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 76 6f 7a 5f 61 75 64 69 6f 5f 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 77 65 62 5f 67 65 6c 5f 74 69 6d 65 6f 75 74 5f 63 61 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 5f 68 61 72 64 5f 6c 69 6d 69 74 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 70 72 65 66 65 74 63 68 5f 70 72 65 6c 6f 61 64 5f 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 77 65 62 5f 79 74 5f 63 6f 6e 66 69 67 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 Data Ascii: nable_abd_ref":true,"web_enable_error_204":true,"web_enable_voz_audio_feedback":true,"web_gel_timeout_cap":true,"web_logging_max_batch_hard_limit":true,"web_one_platform_error_handling":true,"web_prefetch_preload_video":true,"web_yt_config_context":true,"
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 6b 65 76 6c 61 72 5f 63 6f 6d 6d 61 6e 64 5f 68 61 6e 64 6c 65 72 5f 63 6f 6d 6d 61 6e 64 5f 62 61 6e 6c 69 73 74 22 3a 5b 5d 2c 22 77 65 62 5f 6f 70 5f 73 69 67 6e 61 6c 5f 74 79 70 65 5f 62 61 6e 6c 69 73 74 22 3a 5b 5d 7d 2c 22 47 41 50 49 5f 48 49 4e 54 5f 50 41 52 41 4d 53 22 3a 22 6d 3b 2f 5f 2f 73 63 73 2f 61 62 63 2d 73 74 61 74 69 63 2f 5f 2f 6a 73 2f 6b 5c 75 30 30 33 64 67 61 70 69 2e 67 61 70 69 2e 65 6e 2e 47 73 62 41 36 38 68 58 73 38 30 2e 4f 2f 64 5c 75 30 30 33 64 31 2f 72 73 5c 75 30 30 33 64 41 48 70 4f 6f 6f 38 39 39 74 2d 48 38 4c 78 62 33 4f 71 7a 4d 44 75 50 6e 36 54 56 5f 69 33 36 61 67 2f 6d 5c 75 30 30 33 64 5f 5f 66 65 61 74 75 72 65 73 5f 5f 22 2c 22 47 41 50 Data Ascii: _version_override":"","kevlar_command_handler_command_banlist":[],"web_op_signal_type_banlist":[]},"GAPI_HINT_PARAMS":"m;/_/scs/abc-static/_/js/k\u003dgapi.gapi.en.GsbA68hXs80.O/d\u003d1/rs\u003dAHpOoo899t-H8Lxb3OqzMDuPn6TV_i36ag/m\u003d__features__","GAP
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 4b 49 4e 47 5f 50 41 52 41 4d 53 22 3a 7b 22 63 6c 69 65 6e 74 2e 6e 61 6d 65 22 3a 22 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 7d 2c 22 53 45 52 56 45 52 5f 4e 41 4d 45 22 3a 22 57 65 62 46 45 22 2c 22 56 49 53 49 54 4f 52 5f 44 41 54 41 22 3a 22 43 67 73 79 57 47 4a 6d 4d 45 56 4e 4d 69 31 76 62 79 6a 53 72 62 57 75 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 4f 51 25 33 44 25 33 44 22 2c 22 57 45 42 5f 50 4c 41 59 45 52 5f 43 4f 4e 54 45 58 54 5f 43 4f 4e 46 49 47 53 22 3a 7b 22 57 45 42 5f 50 4c 41 59 45 52 5f 43 4f 4e 54 45 58 54 5f 43 4f 4e 46 49 47 5f 49 44 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 22 3a 7b 22 72 6f 6f 74 45 6c 65 6d 65 6e 74 49 64 22 3a 22 6d 6f 76 69 65 5f 70 6c 61 79 65 72 22 2c 22 6a 73 55 72 6c 22 Data Ascii: KING_PARAMS":{"client.name":"WEB_EMBEDDED_PLAYER"},"SERVER_NAME":"WebFE","VISITOR_DATA":"CgsyWGJmMEVNMi1vbyjSrbWuBjIKCgJVUxIEGgAgOQ%3D%3D","WEB_PLAYER_CONTEXT_CONFIGS":{"WEB_PLAYER_CONTEXT_CONFIG_ID_EMBEDDED_PLAYER":{"rootElementId":"movie_player","jsUrl"
2024-02-15 00:12:02 UTC	2098	IN	Data Raw: 5c 75 30 30 33 64 37 32 30 30 30 30 30 5c 75 30 30 32 36 62 6c 6f 63 6b 65 64 5f 70 61 63 6b 61 67 65 73 5f 66 6f 72 5f 73 70 73 5c 75 30 30 33 64 5b 5d 5c 75 30 30 32 36 62 6f 74 67 75 61 72 64 5f 61 73 79 6e 63 5f 73 6e 61 70 73 68 6f 74 5f 74 69 6d 65 6f 75 74 5f 6d 73 5c 75 30 30 33 64 33 30 30 30 5c 75 30 30 32 36 63 61 70 74 69 6f 6e 73 5f 75 72 6c 5f 61 64 64 5f 65 69 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 68 65 63 6b 5f 61 64 5f 75 69 5f 73 74 61 74 75 73 5f 66 6f 72 5f 6d 77 65 62 5f 73 61 66 61 72 69 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 63 68 65 63 6b 5f 6e 61 76 69 67 61 74 6f 72 5f 61 63 63 75 72 61 63 79 5f 74 69 6d 65 6f 75 74 5f 6d 73 5c 75 30 30 33 64 30 5c 75 30 30 32 36 63 6c 65 61 72 5f 75 73 65 72 5f 70 61 72 74 Data Ascii: \u003d7200000\u0026blocked_packages_for_sps\u003d[]\u0026botguard_async_snapshot_timeout_ms\u003d3000\u0026captions_url_add_ei\u003dtrue\u0026check_ad_ui_status_for_mweb_safari\u003dtrue\u0026check_navigator_accuracy_timeout_ms\u003d0\u0026clear_user_part

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50156	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	738	OUT	GET /s/player/b854ee52/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:02 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 374376 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 14 Feb 2024 17:26:54 GMT Expires: Thu, 13 Feb 2025 17:26:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Feb 2024 05:20:10 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 24308 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:02 UTC	571	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 62 69 67 2d 6d 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 7b 63 75 72 73 6f 72 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 77 65 Data Ascii: big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,.2,1);transition:color .1s cubic-bezier(0,0,.2,1);outline:0}.html5-video-player a:hover{color:#fff;-we
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 Data Ascii: over-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen-button{display:none}.html5-main-video:not([controls])::-webkit-media-controls,.html5-main-video:not([controls])
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d Data Ascii: layer-content:not(.ytp-upnext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 68 65 72 69 74 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 2c 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e Data Ascii: herit}.ytp-button:focus,.ytp-button{outline:0}.ytp-button::-moz-focus-inner{padding:0;border:0}.html5-video-player .ytp-button[aria-disabled=true],.html5-video-player .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):n
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 2c 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 2c 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 Data Ascii: ytp-chrome-bottom,.ytp-embed.ytp-embed-mobile.ytp-small-mode .ytp-chrome-bottom,.ytp-embed.ytp-embed-mobile .ytp-chrome-bottom .ytp-chrome-controls,.ytp-embed.ytp-embed-mobile.ytp-small-mode .ytp-chrome-bottom .ytp-chrome-controls{height:48px}.ytp-big-mod
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d Data Ascii: on,.ytp-embed .ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-embed .ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0}.ytp-embed.ytp-embed-mobile .ytp-chrome-controls .ytp-button,.ytp-embed.ytp-embed-mobile.ytp-small-mode .ytp-chrom
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 Data Ascii: s .ytp-button:not([aria-disabled=true]):not([disabled]):hover,.ytp-chrome-controls .ytp-button[aria-expanded=true],.ytp-chrome-controls .ytp-button[aria-pressed=true],.ytp-replay-button:hover{opacity:1;-webkit-transition:opacity .1s cubic-bezier(0,0,.2,1)
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 77 69 64 74 68 3a 32 34 70 78 3b 6c 65 66 74 3a 31 32 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 77 69 64 74 68 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 Data Ascii: ytp-button[aria-pressed]:after{background-color:#fff}.ytp-chrome-controls .ytp-button[aria-pressed=true]:after{width:24px;left:12px;-webkit-transition:left .25s cubic-bezier(0,0,.2,1),width .25s cubic-bezier(0,0,.2,1);transition:left .25s cubic-bezier(0,0
2024-02-15 00:12:02 UTC	1252	IN	Data Raw: 70 2d 73 68 61 72 65 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 29 2c 2e 79 74 70 2d 63 6f 70 79 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 63 6f 70 79 6c 69 6e 6b 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 29 2c 2e 79 74 70 2d 6f 76 65 72 66 6c 6f 77 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 6f 76 65 72 66 6c 6f 77 2d 62 75 74 74 6f 6e 2d 76 69 73 69 62 6c 65 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e Data Ascii: p-share-button-visible),.ytp-copylink-button:not(.ytp-copylink-button-visible),.ytp-overflow-button:not(.ytp-overflow-button-visible){display:none}.ytp-exp-bottom-control-flexbox .ytp-chrome-controls{display:-webkit-box;display:-webkit-flex;display:flex}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50157	108.177.122.156	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	1902	OUT	GET /gampad/ads?pvsid=2698003961308787&correlator=4019115447072384&eid=44809527%2C31080778&output=ldjh&gdfp_req=1&vrg=202402080201&ptt=17&impl=fifs&iu_parts=22674080263%2Catt_web%2Cservices%2Caccount_overview%2CAcctMgmt_Global&enc_prev_ius=%2F0%2F1%2F%2F2%2F%2F3%2F%2F4&prev_iu_szs=728x90%7C970x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&sc=1&cookie_enabled=1&abxe=1&dt=1707955921802&lmt=1707341168&adxs=268&adys=1063&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&vis=2&psz=1263x0&msz=1263x0&fws=4&ohw=1263&ga_vid=447345428.1707955922&ga_sid=1707955922&ga_hid=160808378&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjY3NDA4MDI2My9hdHRfd2ViLy9zZXJ2aWNlcy8vYWNjb3VudF9vdmVydmlldy8vQWNjdE1nbXRfR2xvYmFsIixbXV1dXSxudWxsLDNd&dlt=1707955908179&idt=13474&adks=391953684&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.att.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:03 UTC	872	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.att.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 15 Feb 2024 00:12:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:03 UTC	380	IN	Data Raw: 33 38 32 0d 0a 7b 22 2f 32 32 36 37 34 30 38 30 32 36 33 2f 61 74 74 5f 77 65 62 2f 2f 73 65 72 76 69 63 65 73 2f 2f 61 63 63 6f 75 6e 74 5f 6f 76 65 72 76 69 65 77 2f 2f 41 63 63 74 4d 67 6d 74 5f 47 6c 6f 62 61 6c 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 39 30 2c 37 32 38 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 39 35 64 63 62 36 32 31 64 62 34 34 31 30 35 36 3a 54 3d 31 37 30 37 39 35 35 39 32 32 3a 52 54 3d 31 37 30 37 39 35 35 39 32 32 3a 53 3d 41 4c 4e 49 5f 4d 5a 33 77 5a 5a 34 2d 67 51 69 68 49 71 52 7a 42 6b 34 70 6a 54 74 75 36 79 46 49 41 22 2c 31 37 34 31 36 35 31 39 32 32 2c 22 2f 22 2c 22 61 74 74 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 Data Ascii: 382{"/22674080263/att_web//services//account_overview//AcctMgmt_Global":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=95dcb621db441056:T=1707955922:RT=1707955922:S=ALNI_MZ3wZZ4-gQihIqRzBk4pjTtu6yFIA",1741651922,"/","att.com",1],["UID=00000d
2024-02-15 00:12:03 UTC	525	IN	Data Raw: 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 49 6e 6e 79 74 43 48 72 49 51 44 46 58 41 42 54 77 67 64 52 4d 4d 45 77 41 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CInnytCHrIQDFXABTwgdRMMEwA",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null
2024-02-15 00:12:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50165	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	742	OUT	GET /s/player/b854ee52/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:03 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 54627 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 14 Feb 2024 21:12:03 GMT Expires: Thu, 13 Feb 2025 21:12:03 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Feb 2024 05:20:10 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 10800 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:03 UTC	565	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* SPDX-License-Identifier: Apache-2.0 // Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license//
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2d 73 76 67 2d 66 69 6c 6c 22 2c 59 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 Data Ascii: -svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2d 32 2e 39 30 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 Data Ascii: -2.90,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2d 31 34 2e 39 39 20 63 20 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c Data Ascii: -14.99 c 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 7b 69 66 28 6e 75 6c 6c 3d 3d 63 29 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3b 0a 65 6c 73 65 7b 76 61 72 20 64 3d 30 3d 3d 3d 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 78 6d 6c 3a 22 2c 30 29 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 3a 30 3d 3d 3d 62 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 78 6c 69 6e 6b 3a 22 2c 30 29 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3a 6e 75 6c 6c 3b 64 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 64 2c 62 2c 63 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 63 29 7d 7d 2c 7a 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 74 79 6c 65 Data Ascii: {if(null==c)a.removeAttribute(b);else{var d=0===b.lastIndexOf("xml:",0)?"http://www.w3.org/XML/1998/namespace":0===b.lastIndexOf("xlink:",0)?"http://www.w3.org/1999/xlink":null;d?a.setAttributeNS(d,b,c):a.setAttribute(b,c)}},zpb=function(a,b,c){a=a.style
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 65 78 74 53 69 62 6c 69 6e 67 3b 0a 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 3b 79 35 2e 6a 2e 70 75 73 68 28 63 29 3b 63 3d 64 7d 7d 2c 78 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 35 3f 41 35 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3a 77 35 2e 66 69 72 73 74 43 68 69 6c 64 7d 2c 48 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 41 35 3d 78 35 28 29 3b 0a 76 61 72 20 63 3b 61 3a 7b 69 66 28 63 3d 41 35 29 7b 64 6f 7b 76 61 72 20 64 3d 63 2c 65 3d 61 2c 66 3d 62 2c 68 3d 76 35 28 64 2c 66 29 3b 69 66 28 42 35 28 64 2c 65 2c 68 2e 42 2c 66 2c 68 2e 6b 65 79 29 29 62 72 65 61 6b 20 61 7d 77 68 69 6c 65 28 62 26 26 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 29 7d 63 3d 6e 75 6c 6c 7d 63 7c 7c 28 22 23 74 65 78 74 22 3d 3d Data Ascii: extSibling;b.removeChild(c);y5.j.push(c);c=d}},x5=function(){return A5?A5.nextSibling:w5.firstChild},Hpb=function(a,b){A5=x5();var c;a:{if(c=A5){do{var d=c,e=a,f=b,h=v5(d,f);if(B5(d,e,h.B,f,h.key))break a}while(b&&(c=c.nextSibling))}c=null}c\|\|("#text"==
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 3d 71 2c 44 35 3d 6d 7d 7d 7d 2c 4c 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 47 35 2e 70 75 73 68 28 43 70 62 29 3b 0a 47 35 2e 70 75 73 68 28 61 29 3b 47 35 2e 70 75 73 68 28 62 29 3b 47 35 2e 70 75 73 68 28 63 29 3b 47 35 2e 70 75 73 68 28 64 29 7d 2c 4d 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 48 70 62 28 22 23 74 65 78 74 22 2c 6e 75 6c 6c 29 3b 0a 76 61 72 20 62 3d 41 35 3b 76 61 72 20 63 3d 76 35 28 62 29 3b 69 66 28 63 2e 74 65 78 74 21 3d 3d 61 29 7b 63 3d 63 2e 74 65 78 74 3d 61 3b 66 6f 72 28 76 61 72 20 64 3d 31 3b 64 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 64 2b 3d 31 29 63 3d 28 30 2c 61 72 67 75 6d 65 6e 74 73 5b 64 5d 29 28 63 29 3b 62 2e 64 61 74 61 21 3d 3d 63 26 26 28 62 2e 64 61 74 61 3d 63 29 7d Data Ascii: =q,D5=m}}},Lpb=function(a,b,c,d){G5.push(Cpb);G5.push(a);G5.push(b);G5.push(c);G5.push(d)},Mpb=function(a){Hpb("#text",null);var b=A5;var c=v5(b);if(c.text!==a){c=c.text=a;for(var d=1;d<arguments.length;d+=1)c=(0,arguments[d])(c);b.data!==c&&(b.data=c)}
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 28 31 3d 3d 3d 61 2e 6c 6b 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 42 6b 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 55 70 62 28 61 2e 42 6b 5b 63 5d 2c 61 2e 77 72 5b 63 5d 29 3b 63 3d 61 2e 6c 6b 2e 6c 65 6e 67 74 68 2d 31 3b 61 2e 6c 6b 5b 62 5d 3d 61 2e 6c 6b 5b 63 5d 3b 61 2e 6f 77 5b 62 5d 3d 61 2e 6f 77 5b 63 5d 3b 61 2e 6c 6b 2e 6c 65 6e 67 74 68 2d 2d 3b 61 2e 6f 77 2e 6c 65 6e 67 74 68 2d 2d 3b 62 3c 61 2e 6c 6b 2e 6c 65 6e 67 74 68 26 26 28 63 3d 61 2e 6f 77 5b 62 5d 2c 61 3d 61 2e 6c 6b 5b 62 5d 2c 4d 35 28 61 29 2c 61 2e 77 72 5b 63 5d 3d 62 29 7d 2c 54 70 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 0a 72 65 74 75 72 6e 20 61 2e 4b 56 7c 7c 30 3c 28 6e 75 6c 6c 21 3d 28 63 3d 6e 75 6c 6c 3d 3d 61 Data Ascii: (1===a.lk.length)for(var c=0;c<a.Bk.length;c++)Upb(a.Bk[c],a.wr[c]);c=a.lk.length-1;a.lk[b]=a.lk[c];a.ow[b]=a.ow[c];a.lk.length--;a.ow.length--;b<a.lk.length&&(c=a.ow[b],a=a.lk[b],M5(a),a.wr[c]=b)},Tpb=function(a){var b,c;return a.KV\|\|0<(null!=(c=null==a
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 7d 29 3b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 63 71 62 28 63 29 7d 7d 2c 62 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 0a 28 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 61 29 26 26 64 71 62 28 62 29 3b 72 65 74 75 72 6e 20 62 7d 2c 64 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 49 35 3b 0a 62 26 26 21 62 2e 69 73 44 69 73 70 6f 73 65 64 26 26 28 62 2e 51 45 7c 7c 28 62 2e 51 45 3d 5b 5d 29 2c 62 2e 51 45 2e 70 75 73 68 28 61 29 29 7d 2c 66 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 0a 6e 75 6c 6c 3d 3d 28 62 3d 61 2e 51 45 29 7c 7c 62 2e 66 6f 72 45 61 63 68 28 63 71 62 29 3b 61 2e 51 45 26 26 28 61 2e 51 45 3d 5b 5d 29 3b 61 2e 4d 43 26 26 Data Ascii: });return function(){return void cqb(c)}},bqb=function(a){var b={};(void 0===a\|\|a)&&dqb(b);return b},dqb=function(a){var b=I5;b&&!b.isDisposed&&(b.QE\|\|(b.QE=[]),b.QE.push(a))},fqb=function(a){var b;null==(b=a.QE)\|\|b.forEach(cqb);a.QE&&(a.QE=[]);a.MC&&
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 5d 2e 63 6f 6e 63 61 74 28 67 2e 6f 61 28 6c 71 62 29 29 3b 0a 6c 71 62 3d 5b 5d 3b 62 3d 67 2e 75 28 62 29 3b 66 6f 72 28 76 61 72 20 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 7b 63 3d 63 2e 76 61 6c 75 65 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 6b 71 62 28 63 5b 64 5d 29 7d 63 61 74 63 68 28 65 29 7b 64 3d 63 3d 76 6f 69 64 20 30 2c 6e 75 6c 6c 3d 3d 28 64 3d 28 63 3d 48 35 29 2e 4b 44 29 7c 7c 64 2e 63 61 6c 6c 28 63 2c 22 75 6e 6b 6e 6f 77 6e 22 2c 65 29 7d 7d 7d 29 7d 29 7d Data Ascii: uestAnimationFrame(function(){setTimeout(function(){var b=[].concat(g.oa(lqb));lqb=[];b=g.u(b);for(var c=b.next();!c.done;c=b.next()){c=c.value;try{for(var d=0;d<c.length;d++)kqb(c[d])}catch(e){d=c=void 0,null==(d=(c=H5).KD)\|\|d.call(c,"unknown",e)}}})})}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50166	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	753	OUT	GET /s/player/b854ee52/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:03 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 325599 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 13 Feb 2024 14:54:31 GMT Expires: Wed, 12 Feb 2025 14:54:31 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Feb 2024 05:20:10 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 119852 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:03 UTC	563	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 68 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 Data Ascii: his);function u(a,b){if(b)a:{var c=ha;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: a.length)return{next:ba(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a,b){return Object.prototype.hasOwnPropert
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 78 61 3d 74 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 72 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 78 61 29 78 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 Data Ascii: TypeError(a+" is not extensible");return a}:null}var xa=ta;function w(a,b){a.prototype=ra(b.prototype);a.prototype.constructor=a;if(xa)xa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 41 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 76 3d 6e 75 6c 6c 2c 41 61 28 61 2e 68 2c 67 29 2c 49 61 28 61 29 7d 61 2e 68 2e 76 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 49 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 41 3d 21 Data Ascii: t))throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.A=!1,e;var f=e.value}catch(g){return a.h.v=null,Aa(a.h,g),Ia(a)}a.h.v=null;d.call(a.h,f);return Ia(a)}function Ia(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.A=!
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 41 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f Data Ascii: ),!0}catch(d){return!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.A=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(functio
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 44 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 65 61 28 29 3b 74 68 69 73 2e 50 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 Data Ascii: function(g){this.D(1,g)};b.prototype.D=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.ea();this.P()};b.prototype.ea=function(){var g=this;e(function(){if(
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 69 64 20 30 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 57 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 41 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 Data Ascii: id 0,g)};b.prototype.Wb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.A=!0};b.resolve=d;b.reject=function(g){return new
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 70 61 28 6b 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 Data Ascii: &&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!pa(k,g))throw Error("WeakMap key fa
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 6e 2e 64 6f 6e 65 7c 7c 6e 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 Data Ascii: of a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next();if(n.done\|\|n.value[0]!=h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50164	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:02 UTC	741	OUT	GET /s/player/b854ee52/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:03 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2505337 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 13 Feb 2024 09:37:23 GMT Expires: Wed, 12 Feb 2025 09:37:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Feb 2024 05:20:10 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 138880 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:03 UTC	562	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 Data Ascii: Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTW
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 20 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 Data Ascii: Permission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresente
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 6e 63 6c 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 Data Ascii: ncluding without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2c 75 62 61 2c 77 62 61 2c 6b 65 2c 44 62 61 2c 42 62 61 2c 43 62 61 2c 46 62 61 2c 47 62 61 2c 74 65 2c 49 62 61 2c 4a 62 61 2c 4d 62 61 2c 4e 62 61 2c 77 65 2c 7a 65 2c 48 65 2c 4b 65 2c 4c 65 2c 4f 62 61 2c 50 62 61 2c 51 62 61 2c 52 62 61 2c 54 65 2c 55 65 2c 61 66 2c 55 62 61 2c 0a 57 62 61 2c 56 62 61 2c 6a 66 2c 71 66 2c 58 62 61 2c 6b 66 2c 76 66 2c 4f 65 2c 44 66 2c 5a 62 61 2c 46 66 2c 45 66 2c 4e 65 2c 4f 66 2c 24 62 61 2c 50 66 2c 51 66 2c 52 66 2c 61 63 61 2c 63 63 61 2c 65 63 61 2c 65 67 2c 66 67 2c 67 67 2c 69 63 61 2c 6b 63 61 2c 69 67 2c 6c 63 61 2c 68 67 2c 70 63 61 2c 63 67 2c 67 63 61 2c 72 63 61 2c 6f 63 61 2c 6d 63 61 2c 6e 63 61 2c 73 63 61 2c 71 63 61 2c 6a 67 2c 6a 63 61 2c 72 67 2c 75 63 61 2c 76 63 61 2c 77 63 61 2c 78 63 61 2c Data Ascii: ,uba,wba,ke,Dba,Bba,Cba,Fba,Gba,te,Iba,Jba,Mba,Nba,we,ze,He,Ke,Le,Oba,Pba,Qba,Rba,Te,Ue,af,Uba,Wba,Vba,jf,qf,Xba,kf,vf,Oe,Df,Zba,Ff,Ef,Ne,Of,$ba,Pf,Qf,Rf,aca,cca,eca,eg,fg,gg,ica,kca,ig,lca,hg,pca,cg,gca,rca,oca,mca,nca,sca,qca,jg,jca,rg,uca,vca,wca,xca,
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 61 2c 50 6d 2c 51 6d 2c 43 66 61 2c 45 66 61 2c 46 66 61 2c 48 66 61 2c 47 66 61 2c 49 66 61 2c 53 6d 2c 4a 66 61 2c 56 6d 2c 5a 6d 2c 24 6d 2c 61 6e 2c 62 6e 2c 4d 66 61 2c 46 6e 2c 47 6e 2c 48 6e 2c 4e 66 61 2c 4f 66 61 2c 50 66 61 2c 49 6e 2c 52 66 61 2c 4a 6e 2c 53 66 61 2c 54 66 61 2c 57 66 61 2c 56 66 61 2c 55 66 61 2c 5a 66 61 2c 58 66 61 2c 4c 6e 2c 4e 6e 2c 24 66 61 2c 61 67 61 2c 4f 6e 2c 4d 6e 2c 63 67 61 2c 64 67 61 2c 50 6e 2c 52 6e 2c 65 67 61 2c 53 6e 2c 54 6e 2c 55 6e 2c 67 67 61 2c 57 6e 2c 69 67 61 2c 6a 67 61 2c 6b 67 61 2c 6c 67 61 2c 5a 6e 2c 61 6f 2c 6d 67 61 2c 6e 67 61 2c 6f 67 61 2c 63 6f 2c 70 67 61 2c 72 67 61 2c 71 67 61 2c 73 67 61 2c 74 67 61 2c 75 67 61 2c 77 67 61 2c 65 6f 2c 66 6f 2c 67 6f 2c 68 6f 2c 69 6f 2c 6a 6f 2c 6b Data Ascii: a,Pm,Qm,Cfa,Efa,Ffa,Hfa,Gfa,Ifa,Sm,Jfa,Vm,Zm,$m,an,bn,Mfa,Fn,Gn,Hn,Nfa,Ofa,Pfa,In,Rfa,Jn,Sfa,Tfa,Wfa,Vfa,Ufa,Zfa,Xfa,Ln,Nn,$fa,aga,On,Mn,cga,dga,Pn,Rn,ega,Sn,Tn,Un,gga,Wn,iga,jga,kga,lga,Zn,ao,mga,nga,oga,co,pga,rga,qga,sga,tga,uga,wga,eo,fo,go,ho,io,jo,k
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2c 7a 6a 61 2c 79 6a 61 2c 43 6a 61 2c 46 6a 61 2c 45 6a 61 2c 4b 74 2c 47 6a 61 2c 48 6a 61 2c 49 6a 61 2c 4b 6a 61 2c 4a 6a 61 2c 4c 6a 61 2c 4c 74 2c 4d 6a 61 2c 4e 6a 61 2c 4e 74 2c 4f 6a 61 2c 50 6a 61 2c 51 6a 61 2c 52 6a 61 2c 4f 74 2c 53 6a 61 2c 50 74 2c 54 6a 61 2c 51 74 2c 52 74 2c 56 6a 61 2c 53 74 2c 57 6a 61 2c 0a 54 74 2c 55 74 2c 58 6a 61 2c 59 6a 61 2c 56 74 2c 58 74 2c 24 6a 61 2c 59 74 2c 5a 6a 61 2c 61 6b 61 2c 62 6b 61 2c 63 6b 61 2c 65 6b 61 2c 5a 74 2c 66 6b 61 2c 62 75 2c 63 75 2c 68 6b 61 2c 69 6b 61 2c 6c 6b 61 2c 6d 6b 61 2c 64 75 2c 65 75 2c 66 75 2c 67 75 2c 68 75 2c 69 75 2c 6a 75 2c 6b 75 2c 6c 75 2c 6d 75 2c 6e 75 2c 6f 75 2c 70 75 2c 71 6b 61 2c 70 6b 61 2c 72 6b 61 2c 74 6b 61 2c 73 6b 61 2c 76 6b 61 2c 6f 6b 61 2c 75 6b Data Ascii: ,zja,yja,Cja,Fja,Eja,Kt,Gja,Hja,Ija,Kja,Jja,Lja,Lt,Mja,Nja,Nt,Oja,Pja,Qja,Rja,Ot,Sja,Pt,Tja,Qt,Rt,Vja,St,Wja,Tt,Ut,Xja,Yja,Vt,Xt,$ja,Yt,Zja,aka,bka,cka,eka,Zt,fka,bu,cu,hka,ika,lka,mka,du,eu,fu,gu,hu,iu,ju,ku,lu,mu,nu,ou,pu,qka,pka,rka,tka,ska,vka,oka,uk
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 61 2c 7a 6d 61 2c 52 7a 2c 53 7a 2c 41 6d 61 2c 54 7a 2c 42 6d 61 2c 55 7a 2c 56 7a 2c 57 7a 2c 58 7a 2c 24 7a 2c 61 41 2c 62 41 2c 43 6d 61 2c 63 41 2c 64 41 2c 65 41 2c 44 6d 61 2c 66 41 2c 67 41 2c 68 41 2c 69 41 2c 45 6d 61 2c 6a 41 2c 6b 41 2c 6c 41 2c 6d 41 2c 6e 41 2c 46 6d 61 2c 6f 41 2c 47 6d 61 2c 70 41 2c 48 6d 61 2c 49 6d 61 2c 71 41 2c 72 41 2c 4a 6d 61 2c 73 41 2c 74 41 2c 75 41 2c 4b 6d 61 2c 4c 6d 61 2c 4d 6d 61 2c 4e 6d 61 2c 76 41 2c 77 41 2c 4f 6d 61 2c 78 41 2c 50 6d 61 2c 51 6d 61 2c 52 6d 61 2c 53 6d 61 2c 54 6d 61 2c 79 41 2c 7a 41 2c 55 6d 61 2c 56 6d 61 2c 41 41 2c 42 41 2c 57 6d 61 2c 43 41 2c 58 6d 61 2c 59 6d 61 2c 44 41 2c 5a 6d 61 2c 24 6d 61 2c 61 6e 61 2c 62 6e 61 2c 45 41 2c 46 41 2c 47 41 2c 48 41 2c 63 6e 61 2c 64 6e 61 Data Ascii: a,zma,Rz,Sz,Ama,Tz,Bma,Uz,Vz,Wz,Xz,$z,aA,bA,Cma,cA,dA,eA,Dma,fA,gA,hA,iA,Ema,jA,kA,lA,mA,nA,Fma,oA,Gma,pA,Hma,Ima,qA,rA,Jma,sA,tA,uA,Kma,Lma,Mma,Nma,vA,wA,Oma,xA,Pma,Qma,Rma,Sma,Tma,yA,zA,Uma,Vma,AA,BA,Wma,CA,Xma,Yma,DA,Zma,$ma,ana,bna,EA,FA,GA,HA,cna,dna
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 50 44 2c 62 72 61 2c 64 72 61 2c 52 44 2c 65 72 61 2c 66 72 61 2c 68 72 61 2c 6a 72 61 2c 55 44 2c 6b 72 61 2c 6c 72 61 2c 6d 72 61 2c 6e 72 61 2c 6f 72 61 2c 70 72 61 2c 71 72 61 2c 72 72 61 2c 57 44 2c 73 72 61 2c 59 44 2c 75 72 61 2c 76 72 61 2c 77 72 61 2c 78 72 61 2c 79 72 61 2c 7a 72 61 2c 63 45 2c 43 72 61 2c 46 72 61 2c 64 45 2c 47 72 61 2c 49 72 61 2c 0a 42 72 61 2c 4a 72 61 2c 4b 72 61 2c 4c 72 61 2c 44 72 61 2c 45 72 61 2c 5a 44 2c 41 72 61 2c 62 45 2c 48 72 61 2c 61 45 2c 24 44 2c 4d 72 61 2c 4e 72 61 2c 4f 72 61 2c 50 72 61 2c 51 72 61 2c 52 72 61 2c 58 72 61 2c 53 72 61 2c 67 45 2c 68 45 2c 69 45 2c 24 72 61 2c 62 73 61 2c 61 73 61 2c 59 72 61 2c 63 73 61 2c 65 73 61 2c 6c 45 2c 67 73 61 2c 6a 73 61 2c 6f 45 2c 69 73 61 2c 74 73 61 2c 6b 73 Data Ascii: PD,bra,dra,RD,era,fra,hra,jra,UD,kra,lra,mra,nra,ora,pra,qra,rra,WD,sra,YD,ura,vra,wra,xra,yra,zra,cE,Cra,Fra,dE,Gra,Ira,Bra,Jra,Kra,Lra,Dra,Era,ZD,Ara,bE,Hra,aE,$D,Mra,Nra,Ora,Pra,Qra,Rra,Xra,Sra,gE,hE,iE,$ra,bsa,asa,Yra,csa,esa,lE,gsa,jsa,oE,isa,tsa,ks
2024-02-15 00:12:03 UTC	1252	IN	Data Raw: 2c 65 48 2c 68 48 2c 6d 78 61 2c 69 48 2c 6a 48 2c 6b 48 2c 6c 48 2c 6e 78 61 2c 6f 78 61 2c 6f 48 2c 70 78 61 2c 70 48 2c 74 78 61 2c 76 78 61 2c 78 78 61 2c 7a 78 61 2c 42 78 61 2c 72 48 2c 43 78 61 2c 73 48 2c 44 78 61 2c 47 78 61 2c 48 78 61 2c 75 48 2c 4a 78 61 2c 4b 78 61 2c 77 48 2c 78 48 2c 79 48 2c 4d 78 61 2c 7a 48 2c 41 48 2c 42 48 2c 4e 78 61 2c 43 48 2c 4c 78 61 2c 4f 78 61 2c 44 48 2c 51 78 61 2c 50 78 61 2c 45 48 2c 53 78 61 2c 46 48 2c 47 48 2c 49 48 2c 54 78 61 2c 55 78 61 2c 4b 48 2c 4c 48 2c 4e 48 2c 5a 48 2c 59 48 2c 57 78 61 2c 4d 48 2c 5a 78 61 2c 24 78 61 2c 63 79 61 2c 64 79 61 2c 65 79 61 2c 67 79 61 2c 62 79 61 2c 68 79 61 2c 69 79 61 2c 6a 79 61 2c 24 48 2c 59 78 61 2c 61 79 61 2c 61 49 2c 6e 79 61 2c 70 79 61 2c 64 49 2c 71 79 Data Ascii: ,eH,hH,mxa,iH,jH,kH,lH,nxa,oxa,oH,pxa,pH,txa,vxa,xxa,zxa,Bxa,rH,Cxa,sH,Dxa,Gxa,Hxa,uH,Jxa,Kxa,wH,xH,yH,Mxa,zH,AH,BH,Nxa,CH,Lxa,Oxa,DH,Qxa,Pxa,EH,Sxa,FH,GH,IH,Txa,Uxa,KH,LH,NH,ZH,YH,Wxa,MH,Zxa,$xa,cya,dya,eya,gya,bya,hya,iya,jya,$H,Yxa,aya,aI,nya,pya,dI,qy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50170	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:03 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955921607&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=9962&N=30&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 372 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:03 UTC	372	OUT	Data Raw: 78 01 95 54 db 4e 83 40 10 fd 15 32 4f 9a a0 e1 d6 56 57 5f 7a d1 d8 17 6b ac 31 1a d2 10 ca d2 ba b5 2c a4 ac b5 95 f0 ef 0e ed b2 56 5a 53 09 10 60 e6 cc 39 67 66 37 eb 66 20 80 80 0f 3a 24 f8 be be bb 69 f7 f0 9b 01 b1 6c 53 87 19 10 37 03 13 48 06 1c d3 c3 ee 63 ff e1 09 f3 3e c6 47 79 3e d2 81 02 31 cd 4b 1d 86 f7 40 6c 23 d7 2b 7c 9d 41 ef 55 33 35 43 b3 f0 91 d7 96 df d8 63 ef f5 9f 25 75 06 56 29 c9 28 c6 96 85 45 21 a2 98 87 82 7d f9 82 c5 dc 9b 88 85 f7 c1 99 f0 0c d8 18 e9 fe b6 7a 90 2c 98 fb 69 2a f9 de 18 0d db 94 62 31 7a 56 72 a9 58 cf 43 89 48 7c 4a 19 9f 9e 89 38 21 9a 91 ac ae 2a d8 98 07 73 16 bc 4b f4 2c f5 a6 63 cf a7 c1 79 b8 0c b9 18 f0 6e 91 3c 39 fd bf bb 9f 56 83 40 44 d3 48 a8 1e 0b 0e 75 6f 66 de 28 27 7d 8b f2 fd 62 e5 d4 a4 Data Ascii: xTN@2OVW_zk1,VZS`9gf7f :$ilS7Hc>Gy>1K@l#+\|AU35Cc%uV)(E!}z,ib1zVrXCH\|J8!sK,cyn<9V@DHuof('}b
2024-02-15 00:12:03 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:03 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50176	3.212.181.219	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:03 UTC	664	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
2024-02-15 00:12:04 UTC	748	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:04 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 151 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://about.att.com Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:12:04 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:12:04 UTC	151	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 36 4d 43 46 50 63 44 48 67 6a 4d 6a 4b 69 76 31 62 6e 63 6c 63 55 5f 77 65 31 41 4e 69 65 4d 57 76 74 6c 7a 6f 74 71 4a 73 71 49 52 4d 76 74 33 70 71 59 50 74 30 4d 42 35 68 43 2d 58 43 77 74 49 44 6e 34 6c 35 2d 64 35 71 73 34 64 74 79 4c 6d 5a 67 7a 51 38 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs6MCFPcDHgjMjKiv1bnclcU_we1ANieMWvtlzotqJsqIRMvt3pqYPt0MB5hC-XCwtIDn4l5-d5qs4dtyLmZgzQ8", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50182	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	1446	OUT	GET /activityi;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:04 UTC	1326	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6100125.fls.doubleclick.net/activityi;dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50183	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	1457	OUT	GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:04 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:04 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-02-15 00:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50188	142.250.105.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	1410	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:04 UTC	2208	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7612614599699481410"}],"aggregatable_trigger_data":[{"filters":{"14":["8783283"]},"key_piece":"0x959ea19b3455e843","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x990f94304f244cee","not_filters":{"14":["8783283"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["8783283"]},"key_piece":"0x11a013ca02fd6d11","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xc6378d29631a29","not_filters":{"14":["8783283"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"10935695423656618490","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:04 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50189	108.139.15.115	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	551	OUT	GET /sites/att/production/gateway.min.js HTTP/1.1 Host: gateway.foresee.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:04 UTC	740	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 498824 Connection: close Date: Wed, 14 Feb 2024 23:01:15 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: X-Requested-With Cache-Control: public, max-age=14400 Status: 200 Last-Modified: Wed, 07 Feb 2024 21:45:45 GMT Expires: Thu, 15 Feb 2024 03:01:15 GMT Strict-Transport-Security: max-age=15724800; includeSubDomains ETag: "9b927322de17e302f448d9f39215a6a0" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 842903c2217128ae7cb417c6c6651412.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: 8upgMsWVbj1aM10-PviUy1ty3zZ6-5ZTVnNwu6oDSQarb0RBPqQZ8g== Age: 4249
2024-02-15 00:12:04 UTC	15644	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 6c 6f 62 61 6c 43 6f 6e 66 69 67 3d 7b 7d 2c 70 72 6f 64 75 63 74 43 6f 6e 66 69 67 3d 7b 7d 3b 0a 0a 67 6c 6f 62 61 6c 43 6f 6e 66 69 67 20 3d 20 7b 22 63 75 73 74 6f 6d 65 72 49 64 22 3a 22 4a 78 54 67 39 50 73 55 59 4b 6f 72 34 50 35 69 39 6e 65 30 55 67 3d 3d 22 2c 22 73 69 74 65 4b 65 79 22 3a 22 61 74 74 22 2c 22 70 72 6f 64 75 63 74 73 22 3a 7b 22 74 72 69 67 67 65 72 22 3a 74 72 75 65 2c 22 66 65 65 64 62 61 63 6b 22 3a 74 72 75 65 2c 22 6d 70 61 74 68 79 22 3a 66 61 6c 73 65 2c 22 6f 70 69 6e 69 6f 6e 6c 61 62 22 3a 66 61 6c 73 65 7d 2c 22 65 6e 61 62 6c 65 53 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 73 74 6f 72 61 67 65 22 3a 22 4d 49 43 52 4f 43 4f 4f 4b 49 45 22 2c 22 63 6f 6f 6b 69 65 53 65 Data Ascii: !function(){var globalConfig={},productConfig={};globalConfig = {"customerId":"JxTg9PsUYKor4P5i9ne0Ug==","siteKey":"att","products":{"trigger":true,"feedback":true,"mpathy":false,"opinionlab":false},"enableStorage":true,"storage":"MICROCOOKIE","cookieSe
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 6e 2f 70 72 6f 6a 65 63 74 73 2f 31 30 34 33 32 36 2f 61 6e 61 6c 79 74 69 63 73 2f 73 75 6d 6d 61 72 79 22 2c 22 66 62 63 6f 6c 6f 72 74 65 78 74 22 3a 22 23 30 35 36 38 61 65 22 2c 22 77 68 69 74 65 6c 69 73 74 44 61 74 61 22 3a 5b 22 2a 77 65 62 6c 69 6e 6b 22 5d 2c 22 62 6c 61 63 6b 6c 69 73 74 41 63 74 69 76 65 22 3a 66 61 6c 73 65 2c 22 62 6c 61 63 6b 6c 69 73 74 44 61 74 61 22 3a 5b 5d 2c 22 77 68 69 74 65 6c 69 73 74 41 63 74 69 76 65 22 3a 74 72 75 65 2c 22 6d 69 64 22 3a 22 39 69 32 63 70 4c 6c 43 46 72 73 35 4d 53 31 68 77 6a 32 72 33 44 37 76 54 67 56 72 6a 41 35 65 22 2c 22 76 65 72 73 69 6f 6e 22 3a 32 7d 2c 7b 22 64 65 76 69 63 65 73 22 3a 7b 22 6f 76 65 72 72 69 64 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 22 Data Ascii: n/projects/104326/analytics/summary","fbcolortext":"#0568ae","whitelistData":["*weblink"],"blacklistActive":false,"blacklistData":[],"whitelistActive":true,"mid":"9i2cpLlCFrs5MS1hwj2r3D7vTgVrjA5e","version":2},{"devices":{"overridesEnabled":true,"desktop"
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 74 2e 63 6f 6d 2f 64 65 76 69 63 65 68 6f 77 74 6f 2f 69 6e 64 65 78 2e 68 74 6d 6c 23 21 2f 2a 22 2c 22 2a 77 77 77 2e 61 74 74 2e 63 6f 6d 2f 6f 6c 61 6d 2f 74 65 6c 63 6f 44 61 73 68 62 6f 61 72 64 41 63 74 69 6f 6e 2e 6f 6c 61 6d 65 78 65 63 75 74 65 2a 22 2c 22 2a 2f 65 73 75 70 70 6f 72 74 2f 73 6d 62 2d 62 69 6c 6c 61 6e 64 61 63 63 6f 75 6e 74 2e 6a 73 70 2a 22 2c 22 2a 2f 65 73 75 70 70 6f 72 74 2f 65 72 72 6f 72 34 30 34 2e 68 74 6d 6c 2a 22 2c 22 2a 2f 65 73 75 70 70 6f 72 74 2f 61 72 74 69 63 6c 65 6e 6f 74 66 6f 75 6e 64 2e 6a 73 70 2a 22 2c 22 2a 2f 65 73 75 70 70 6f 72 74 2f 73 6d 62 69 6e 64 65 78 2e 6a 73 70 3f 70 72 6f 64 75 63 74 3d 62 75 73 69 6e 65 73 73 70 68 6f 6e 65 2a 22 2c 22 2a 2f 65 73 75 70 70 6f 72 74 2f 62 69 7a 64 69 72 65 Data Ascii: t.com/devicehowto/index.html#!/","www.att.com/olam/telcoDashboardAction.olamexecute","/esupport/smb-billandaccount.jsp","/esupport/error404.html","/esupport/articlenotfound.jsp","/esupport/smbindex.jsp?product=businessphone","/esupport/bizdire
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 22 22 7d 7d 5d 2c 22 6d 6f 62 69 6c 65 22 3a 5b 7b 22 64 69 73 70 6c 61 79 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 6e 76 69 74 65 4c 6f 67 6f 22 3a 22 22 2c 22 69 6e 76 69 74 65 54 68 61 6e 6b 79 6f 75 4c 6f 67 6f 22 3a 22 22 2c 22 74 72 61 63 6b 65 72 4c 6f 67 6f 22 3a 22 22 2c 22 73 69 74 65 4c 6f 67 6f 54 69 74 6c 65 54 65 78 74 22 3a 22 22 2c 22 73 69 74 65 4c 6f 67 6f 41 6c 74 54 65 78 74 22 3a 22 22 2c 22 76 65 6e 64 6f 72 4c 6f 67 6f 22 3a 22 76 65 72 69 6e 74 5f 66 6f 72 65 73 65 65 5f 6c 6f 67 6f 2e 73 76 67 22 2c 22 76 65 6e 64 6f 72 4c 6f 67 6f 50 4e 47 22 3a 22 76 65 72 69 6e 74 5f 66 6f 72 65 73 65 65 5f 6c 6f 67 6f 2e 70 6e 67 22 2c 22 76 65 6e 64 6f 72 54 69 74 6c 65 Data Ascii: ""}}],"mobile":[{"displayname":"default","template":"mobile","inviteLogo":"","inviteThankyouLogo":"","trackerLogo":"","siteLogoTitleText":"","siteLogoAltText":"","vendorLogo":"verint_foresee_logo.svg","vendorLogoPNG":"verint_foresee_logo.png","vendorTitle
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 5b 5d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 62 72 61 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 30 30 30 30 22 2c 22 74 65 78 74 43 6f 6c 6f 72 22 3a 22 22 2c 22 69 6e 76 69 74 65 22 3a 7b 22 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 22 3a 22 22 2c 22 68 65 69 67 68 74 22 3a 22 22 2c 22 77 69 64 74 68 22 3a 22 22 2c 22 62 6f 72 64 65 72 52 61 64 69 75 73 22 3a 22 22 2c 22 62 61 6e 6e 65 72 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 30 30 30 30 22 2c 22 62 61 6e 6e 65 72 48 65 69 67 68 74 22 3a 22 22 2c 22 6c 6f 67 6f 4d 61 72 67 69 6e 22 3a 22 22 2c 22 6c 6f 67 6f 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 6c 6f 67 6f 48 69 64 65 22 3a 66 61 6c 73 65 2c 22 68 65 61 Data Ascii: [],"backgroundColor":"#FFFFFF","brandColor":"#000000","textColor":"","invite":{"backgroundImage":"","height":"","width":"","borderRadius":"","bannerBackgroundColor":"#000000","bannerHeight":"","logoMargin":"","logoBackgroundColor":"","logoHide":false,"hea
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 69 76 65 6c 79 22 3a 74 72 75 65 2c 22 69 64 6c 65 54 69 6d 65 42 65 66 6f 72 65 41 62 61 6e 64 6f 6e 22 3a 6e 75 6c 6c 2c 22 6d 69 64 4f 76 65 72 72 69 64 65 22 3a 6e 75 6c 6c 2c 22 6f 6e 65 78 69 74 53 69 64 22 3a 6e 75 6c 6c 2c 22 70 61 67 69 6e 61 74 69 6f 6e 54 79 70 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 61 62 54 65 73 74 50 65 72 63 65 6e 74 22 3a 31 30 30 2c 22 73 74 79 6c 65 22 3a 7b 22 7a 49 6e 64 65 78 22 3a 39 39 39 39 39 39 39 39 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 72 69 67 68 74 22 7d 7d 2c 22 64 69 61 6c 6f 67 22 3a 7b 22 68 65 61 64 6c 69 6e 65 22 3a 22 57 65 27 64 20 77 65 6c 63 6f 6d 65 20 79 6f 75 72 20 66 65 65 64 62 61 63 6b 21 22 2c 22 62 6c 75 72 62 22 3a 22 54 68 61 6e 6b 20 79 6f 75 20 66 6f 72 20 76 69 73 Data Ascii: ively":true,"idleTimeBeforeAbandon":null,"midOverride":null,"onexitSid":null,"paginationType":"default","abTestPercent":100,"style":{"zIndex":99999999,"position":"bottomright"}},"dialog":{"headline":"We'd welcome your feedback!","blurb":"Thank you for vis
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 74 6f 6e 22 3a 22 53 75 62 6d 69 74 22 2c 22 73 6d 73 44 69 73 63 6c 61 69 6d 65 72 22 3a 22 50 72 6f 76 69 64 69 6e 67 20 79 6f 75 72 20 6e 75 6d 62 65 72 20 6d 65 61 6e 73 20 79 6f 75 20 61 72 65 20 70 61 72 74 69 63 69 70 61 74 69 6e 67 20 69 6e 20 61 20 56 65 72 69 6e 74 20 46 6f 72 65 53 65 65 20 73 75 72 76 65 79 2e 20 4d 65 73 73 61 67 65 20 26 61 6d 70 3b 20 64 61 74 61 20 72 61 74 65 73 20 6d 61 79 20 61 70 70 6c 79 2e 20 31 20 6d 65 73 73 61 67 65 20 70 65 72 20 73 75 72 76 65 79 2e 22 2c 22 65 6d 61 69 6c 44 69 73 63 6c 61 69 6d 65 72 22 3a 22 22 2c 22 73 6d 73 50 6f 6c 69 63 79 54 65 78 74 22 3a 22 53 4d 53 20 44 69 73 63 6c 6f 73 75 72 65 22 2c 22 73 6d 73 50 6f 6c 69 63 79 4c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 6f 72 65 Data Ascii: ton":"Submit","smsDisclaimer":"Providing your number means you are participating in a Verint ForeSee survey. Message & data rates may apply. 1 message per survey.","emailDisclaimer":"","smsPolicyText":"SMS Disclosure","smsPolicyLink":"https://www.fore
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 67 6f 20 49 6d 61 67 65 22 2c 22 69 6e 76 69 74 65 54 79 70 65 22 3a 22 54 52 41 43 4b 45 52 22 2c 22 63 6c 6f 73 65 43 6c 69 63 6b 4f 6e 42 61 63 6b 64 72 6f 70 22 3a 74 72 75 65 2c 22 72 65 6d 6f 76 65 53 75 72 76 65 79 41 6c 65 72 74 73 22 3a 66 61 6c 73 65 2c 22 70 6f 70 75 70 57 69 6e 64 6f 77 57 69 64 74 68 22 3a 37 30 30 2c 22 70 6f 70 75 70 57 69 6e 64 6f 77 48 65 69 67 68 74 22 3a 34 30 30 2c 22 70 6f 70 75 70 57 69 6e 64 6f 77 48 65 69 67 68 74 45 78 70 61 6e 64 22 3a 32 30 30 2c 22 6d 6f 64 61 6c 50 6f 73 69 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 73 68 6f 72 74 53 75 72 76 65 79 22 3a 7b 22 69 64 6c 65 56 69 65 77 73 42 65 66 6f 72 65 53 74 6f 70 22 3a 6e 75 6c 6c 2c 22 69 64 6c 65 56 69 65 77 73 53 68 6f 77 43 6f 6e 73 65 63 75 74 69 76 65 6c 79 Data Ascii: go Image","inviteType":"TRACKER","closeClickOnBackdrop":true,"removeSurveyAlerts":false,"popupWindowWidth":700,"popupWindowHeight":400,"popupWindowHeightExpand":200,"modalPosition":null,"shortSurvey":{"idleViewsBeforeStop":null,"idleViewsShowConsecutively
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 2d 66 61 33 30 2d 34 32 64 37 2d 62 36 38 66 2d 37 33 61 61 36 61 66 37 64 36 63 62 22 2c 22 73 65 63 74 69 6f 6e 22 3a 22 62 2d 65 6e 74 65 72 70 72 69 73 65 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 22 7d 2c 22 6d 6f 75 73 65 6f 66 66 22 3a 7b 22 6d 6f 64 65 22 3a 22 6f 66 66 22 2c 22 6d 69 6e 53 69 74 65 54 69 6d 65 22 3a 36 30 30 30 2c 22 6d 69 6e 50 61 67 65 54 69 6d 65 22 3a 33 30 30 30 2c 22 73 70 22 3a 7b 22 72 65 67 22 3a 31 30 30 7d 2c 22 6c 66 22 3a 31 7d 2c 22 63 72 69 74 65 72 69 61 22 3a 7b 22 73 70 22 3a 7b 22 72 65 67 22 3a 31 30 30 7d 2c 22 6c 66 22 3a 32 2c 22 73 75 70 70 6f 72 74 73 53 6d 61 72 74 50 68 6f 6e 65 73 22 3a 74 72 75 65 2c 22 73 75 70 70 6f 72 74 73 54 61 62 6c 65 74 73 22 3a 66 61 6c 73 Data Ascii: -fa30-42d7-b68f-73aa6af7d6cb","section":"b-enterprise","language":{"locale":"en"},"mouseoff":{"mode":"off","minSiteTime":6000,"minPageTime":3000,"sp":{"reg":100},"lf":1},"criteria":{"sp":{"reg":100},"lf":2,"supportsSmartPhones":true,"supportsTablets":fals
2024-02-15 00:12:04 UTC	16384	IN	Data Raw: 4c 69 6e 65 48 65 69 67 68 74 22 3a 22 22 2c 22 62 75 74 74 6f 6e 46 6f 6e 74 46 61 6d 69 6c 79 22 3a 22 22 2c 22 73 74 61 72 74 42 6f 72 64 65 72 22 3a 22 22 2c 22 73 74 61 72 74 42 6f 72 64 65 72 52 61 64 69 75 73 22 3a 22 22 2c 22 73 74 61 72 74 54 65 78 74 43 6f 6c 6f 72 22 3a 22 22 2c 22 73 74 61 72 74 46 6f 6e 74 53 69 7a 65 22 3a 22 22 7d 2c 22 70 72 65 73 65 74 53 74 79 6c 65 73 22 3a 22 22 2c 22 63 75 73 74 6f 6d 53 74 79 6c 65 42 6c 6f 63 6b 22 3a 22 22 7d 7d 5d 2c 22 6d 6f 62 69 6c 65 22 3a 5b 7b 22 64 69 73 70 6c 61 79 6e 61 6d 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 6d 6f 62 69 6c 65 22 2c 22 69 6e 76 69 74 65 4c 6f 67 6f 22 3a 22 73 69 74 65 6c 6f 67 6f 5f 6d 5f 35 30 78 35 30 2e 70 6e 67 22 2c 22 69 6e 76 Data Ascii: LineHeight":"","buttonFontFamily":"","startBorder":"","startBorderRadius":"","startTextColor":"","startFontSize":""},"presetStyles":"","customStyleBlock":""}}],"mobile":[{"displayname":"default","template":"mobile","inviteLogo":"sitelogo_m_50x50.png","inv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50171	142.251.15.119	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	699	OUT	GET /vi/tFUHPoLMUwk/maxresdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:04 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 111753 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 15 Feb 2024 00:12:04 GMT Expires: Thu, 15 Feb 2024 02:12:04 GMT Cache-Control: public, max-age=7200 ETag: "1660918161" Content-Type: image/jpeg Vary: Origin Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:04 UTC	596	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0a 0d 0d 0d 08 0d 08 0d 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0d 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 10 15 12 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 08 09 ff c4 00 51 10 00 01 03 02 03 04 06 05 09 04 07 07 03 04 03 01 01 00 02 11 03 21 04 12 31 05 41 51 61 06 13 22 32 71 81 42 91 a1 b1 d1 07 14 23 52 62 92 Data Ascii: JFIF"Q!1AQa"2qB#Rb
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 57 2e 40 82 a5 05 20 5c 90 05 09 52 2e 08 43 45 4a 91 70 29 40 55 cb 97 24 10 54 a0 a6 a5 48 03 82 54 c0 53 82 04 15 2c a4 5c 81 05 5c b9 72 04 39 2c a4 5c 81 07 2e 5c b9 20 82 ca e4 89 41 42 01 42 e9 48 b9 02 0e 95 c9 02 54 08 72 59 48 b9 00 2a 54 d4 a0 a0 4b 0a b9 72 e4 01 cb 81 5c b9 00 2a e4 89 42 04 39 72 e5 c8 10 50 94 26 a5 05 20 0a b9 24 a5 48 07 2e 5c b9 28 82 ae 48 94 20 05 09 42 6a 59 48 20 ab 97 2e 4a 20 a1 2a 6a 50 53 6c 02 84 a9 12 84 82 31 cb 92 4a 54 0d 39 2b 52 2e 08 01 52 ca 44 a9 04 1e 94 26 82 96 53 46 b1 53 93 52 82 86 34 70 4a 13 42 70 4d 1a 38 25 09 02 54 83 47 a5 09 b2 94 26 0d 63 c2 70 4c 09 cd 4d 63 18 f0 9c 13 13 81 51 b1 a3 82 70 4d 09 c1 31 8c 68 70 4e 09 b2 94 26 31 8c 78 4a 13 42 72 63 18 c7 04 e0 98 13 82 63 1a c7 04 a9 a1 Data Ascii: W.@ \R.CEJp)@U$THTS,\\r9,\.\ ABBHTrYHTKr\B9rP& $H.\(H BjYH .J *jPSl1JT9+R.RD&SFSR4pJBpM8%TG&cpLMcQpM1hpN&1xJBrcc
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 1f 78 a9 e5 50 7c 10 b8 79 b3 5f f9 3b 2b de 1e 05 6d 0f 53 b4 fd c7 9d 04 ab d3 9d d0 ac 2f 0a 9f de ff 00 ff 00 28 6a bd 0e c3 8f af fd e7 e4 9d 2e 1d 6c d8 ef cf d9 5e f1 17 02 76 87 a9 da 7e e3 ce 97 2d fb ba 25 47 ed fd f1 f0 40 e3 3a 39 49 ba 66 f3 7f e4 96 9f 0e 36 74 f7 67 ec af 78 d9 70 2b 68 2f b9 da 7e e3 1c 94 2d 13 36 3d 39 f4 be f7 e4 8d a5 d1 da 44 7a 5f 7f f2 56 57 0b b0 2f ef f6 7e 63 7c 0c c7 fa 9d af 91 91 5c b4 58 ed 8f 4d b1 19 b9 cb a7 f0 5d b3 f6 33 1c e8 21 d1 0e 26 1d 11 6b 6e e2 aa 62 b8 75 b3 70 f0 94 e7 9e d1 57 7e 4f cc b5 47 80 3b 4a ab 4a 3c 5e be b3 f7 19 d0 95 6c bf a3 74 be d7 df 1f 05 df d1 ba 5f 6b ef 0f 82 c2 f1 b9 b0 fd b7 61 7c 45 df 15 fb 63 9e 97 6d fc 26 35 28 5b 11 d1 ca 5f 6b ef 8f 82 ef e8 e5 2f b5 f7 c7 c1 1e Data Ascii: xP\|y_;+mS/(j.l^v~-%G@:9If6tgxp+h/~-6=9Dz_VW/~c\|\XM]3!&knbupW~OG;JJ<^lt_ka\|Ecm&5([_k/
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: c5 48 dd bd 57 ec fd d3 f1 56 23 b5 28 be 7e a2 37 c0 bc 7a fb 9d af 91 aa 5c b2 df b7 aa 7d 9f b8 7e 2b bf 6f d5 fb 3f 70 fc 52 fd 63 4b d2 37 c0 dc 7f a9 da f9 1a a0 95 65 0e df ab f6 7e e1 f8 a4 fe 90 55 fb 3f 74 fc 52 fd 63 4b d2 1e 06 e3 fd 4e d7 c8 d6 2e 59 3f e9 05 5f b3 f7 4f c5 77 f4 82 af d9 fb a7 e2 8f ac 29 7a 44 f0 37 1f ea 76 be 46 b4 25 59 2f e9 05 5f b3 f7 0f c5 2f f4 86 af d8 fb 87 e2 93 eb 0a 5e 91 3c 0d c7 fa 9d af 91 ad 09 42 c8 8e 90 d5 fb 3f 70 fc 52 7f 48 aa fd 8f b8 7e 28 fa 7d 2f 48 9e 06 63 fd 4e d7 c8 d8 2e 59 0f e9 15 5f b1 f7 0f c5 27 f4 8e af d8 fb 87 e2 8f a7 d2 f4 89 e0 66 3f d4 ed 7c 8d 8a e5 8f fe 92 55 fb 1f 70 fc 57 7f 49 2a fd 8f b8 7e 28 fa 75 3f 48 9e 06 63 fd 4e d7 c8 d9 04 e5 8c fe 92 55 fb 1f 70 fc 57 0e 92 d6 fb Data Ascii: HWV#(~7z\}~+o?pRcK7e~U?tRcKN.Y?_Ow)zD7vF%Y/_/^<B?pRH~(}/HcN.Y_'f?\|UpWI*~(u?HcNUpW
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 89 e5 46 c2 a5 14 95 05 2b ef 25 64 75 1e aa 76 95 5e 4a e2 a5 15 4d b5 69 2b b8 58 b5 22 39 15 d4 75 56 94 7b aa a6 82 b9 c3 b7 b2 ba 38 af 24 80 a8 da 5b b9 29 fa 3f 4e 4b 8f 00 00 f3 24 91 e3 60 a0 da 6d ba b4 e8 ed 2e c1 3f 59 c6 44 69 94 45 b9 5d 71 fc 2b ad c5 e1 65 eb 34 bf 5b ff 00 07 45 b2 63 79 a7 cd 70 ac ab b2 a9 f2 ae c8 bc c3 31 d2 e6 20 ca bb 2a 20 31 2e 44 99 c2 e0 d9 57 65 44 65 5c 1a 8c c1 70 7c ab b2 a2 72 24 0c 46 70 b8 38 62 5c a8 9e ad 26 44 66 0c c0 f0 bb 2a 23 22 e2 d4 66 62 5c 1f 22 4c 88 90 d5 d9 51 98 33 03 96 a4 ca 8a c8 93 2a 2e c2 e0 d9 57 65 44 e4 5c 58 97 33 0c c0 d9 52 16 a2 b2 a4 2c 46 60 cc 0d 95 76 54 4e 45 d9 51 98 2e 0c 18 97 22 9f 22 ec 88 cc 17 20 ca bb 2a 9f 22 50 d4 66 17 30 36 45 d9 51 59 13 4d 34 66 0c c4 19 57 Data Ascii: F+%duv^JMi+X"9uV{8$[)?NK$`m.?YDiE]q+e4[Ecyp1 * 1.DWeDe\p\|r$Fp8b\&Df#"fb\"LQ3.WeD\X3R,F`vTNEQ."" *"Pf06EQYM4fW
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 03 2b b5 1a 1e 2a c9 f8 d1 a7 b9 62 aa d6 8b df cf f5 65 36 17 12 5c 35 f3 3a 2b 95 71 72 8a ca 88 d4 11 a5 ad 50 38 ea 84 c5 32 74 f2 49 84 c3 93 bd 5b 33 08 21 66 3c 07 19 e5 32 6e 36 c6 68 e1 7d 7b f9 a0 f1 6f 80 b5 38 8c 27 01 a6 aa 8f 1f 82 9f cd 4b 47 0b 28 0d 94 93 32 b8 cc 5d fd ca 26 e3 49 b4 a9 f6 8e ce 3e a4 0d 2c 29 1a 0f 6a b3 19 c4 63 24 a8 79 a8 5a d4 50 a5 09 b8 86 d9 5a 8d de e2 26 81 9c 10 d5 58 a7 7b d3 0b 92 4a a3 e5 0b 10 3a 9a 61 2a 7a a5 0c 2e 9f 49 dd 88 4e c3 28 96 04 25 16 a2 e9 15 a7 1d c2 0a e6 2b 9d 99 53 fd 39 2a fa 4d 94 55 16 42 ad 8b 86 78 d8 75 2d 19 7c 31 22 10 38 da c0 6f 40 54 71 31 f1 b2 69 62 c0 8c 5c 65 62 e3 dc 38 3e 4a 91 be f5 18 64 29 68 ea 0f 02 3f 35 6a 14 75 22 cd a1 7b 84 d8 f2 25 ee 37 d0 32 24 79 aa dd b5 Data Ascii: +be6\5:+qrP82tI[3!f<2n6h}{o8'KG(2]&I>,)jc$yZPZ&X{J:az.IN(%+S9*MUBxu-\|1"8o@Tq1ib\eb8>Jd)h?5ju"{%72$y
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 6d 6a 64 fd 51 51 a4 fa 97 ce 1b 41 ce a8 73 38 68 22 44 0b 0e 2a db 66 ec 37 d2 63 71 06 99 cc d7 30 d3 a7 63 d6 d3 77 64 b9 f1 dd b9 10 a9 78 17 75 27 18 df 2a b9 62 5b 5a 31 b6 66 95 dd 8f a0 9d 43 92 4e a3 92 c1 7c 99 f4 9a a0 7f cd f1 2f ed 3d ce 14 83 a3 33 08 05 c1 a4 8d 5a 46 93 c1 7a 61 62 e7 27 b3 23 16 d3 5b 8d 28 d6 ba bd ca f3 44 70 5d d4 72 47 e4 49 91 33 ea f8 73 0b c6 30 1e a1 2f 52 8d ca 93 2a 1e cf 87 30 71 80 7d 4a ee a0 23 32 ae 20 04 8f 01 0e 60 e3 00 c5 04 dc 58 63 1b 99 ef 6d 36 ee 7d 47 06 83 c8 4e a8 4d bf d2 2a 74 29 bd fd e3 4d a7 2b 74 cc e3 dd 04 ee 12 bc 83 a2 b8 ca d8 bc 68 ad 5d c6 a1 a7 2f 63 5d 06 93 1c 27 23 45 3d 32 0b 6e 56 b0 3b 3a 8d 76 d7 26 eb 8c ad 56 50 47 ae fe d7 c3 6f c4 53 11 f5 c9 64 f8 66 d5 3e 9e 3e 81 d3 Data Ascii: mjdQQAs8h"Df7cq0cwdxu'b[Z1fCN\|/=3ZFzab'#[(Dp]rGI3s0/R0q}J#2 `Xcm6}GNMt)M+th]/c]'#E=2nV;:v&VPGoSdf>>
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 3d c4 5b 79 f7 2d a6 d3 a2 b1 db 5d aa ee 12 0e f6 63 64 ca c7 3b 9a 40 f4 95 4a 1e a5 48 4c c4 d0 79 b4 15 5a c4 a5 e9 69 20 ba f4 ea 35 f9 a5 a5 49 88 d1 73 4a 92 93 aa e0 86 a3 5d 1f 49 cb 46 94 5d 86 b1 69 d9 19 45 e8 4a 88 8c 13 65 45 88 d1 0b 00 9e ad 3d b8 74 65 2c 27 34 4d 4a 30 b1 5c 3c ab b2 da d5 15 4f a2 9c da 68 de a5 76 55 66 15 10 c9 45 93 e1 31 6f 68 80 7c 88 96 fb 50 fb 47 1a f7 08 26 dc 00 81 e7 08 96 0b 78 a8 9f 42 77 2b ce 6d c6 d7 1a a9 15 74 aa 42 b8 d9 8f 41 3f 09 c9 15 b2 59 06 eb 26 ae 1a 79 ae 89 72 9a 1c 30 95 3d 7c 3a 8b 0d 52 14 b5 b1 7f ae 6a e6 1e f0 56 64 33 89 47 8f c3 c2 5c 05 3b 7a 94 b8 9a d3 af fa ae a3 53 86 ed c9 6a 52 8c dd c2 37 13 16 db 2c 8e d9 17 36 5a 8d a5 88 80 b1 3b 5f 15 24 f0 54 d5 05 1a aa c8 73 7a 10 d1 Data Ascii: =[y-]cd;@JHLyZi 5IsJ]IF]iEJeE=te,'4MJ0\<OhvUfE1oh\|PG&xBw+mtBA?Y&yr0=\|:RjVd3G\;zSjR7,6Z;_$Tsz
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 8b fd 3e c0 2c 56 26 a6 26 a6 e8 a4 97 e7 b8 ca e1 1e 2f e8 f4 63 05 be 5f c1 8b 6e ca c4 39 99 7a ca 85 bf 53 39 0d f0 3c 42 cc e3 76 c3 b0 e5 cc aa fa 6c 71 0d ec d4 2d cc f6 68 de ad b1 0c 62 f6 1f 95 1f 94 dc 06 cc a0 72 31 b5 ab 1b 52 a6 49 0d cd 20 66 7c 0e e8 9d 37 c2 f9 1f a4 7d 26 a7 8b ac fc 46 22 bb 8d 5a d1 9b 25 1c ac 6b 40 86 b1 8d 16 0d 01 7a 4e d3 c5 46 95 94 53 72 e6 de 73 5b 3a 9c ea 6a ec a3 e9 3d 43 05 89 c1 55 73 59 57 1d 4e 9b 5d 25 ef ed 10 0c 4c 40 dd 36 56 18 1d b7 46 a9 34 29 e3 48 ce e6 b6 90 70 6c 75 6c 12 5a 08 19 8b 9c e1 61 b8 2f 19 d9 94 30 f5 5c 18 ca 8f 2e 33 00 d3 8d 2f a9 5a cd 93 d1 da b8 57 0c 5d 32 33 61 0e 66 07 b4 3d b7 ec 92 5b 37 58 eb 6f 53 a5 25 0a 91 cb 9b 7e fb b3 46 7b 22 75 63 9e 2f 35 b7 1e 85 8e d9 15 18 Data Ascii: >,V&&/c_n9zS9<Bvlq-hbr1RI f\|7}&F"Z%k@zNFSrs[:j=CUsYWN]%L@6VF4)HplulZa/0\.3/ZW]23af=[7XoS%~F{"uc/5
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: d2 a8 63 71 4a 82 8b 96 8a 4e d9 b9 23 e9 7f 99 a5 b3 36 6c b1 92 92 8d 9c a2 b3 28 ee 73 d5 5d 2f c8 d8 f4 5f e4 cf 07 40 02 e6 75 f5 22 f5 6b 8c cc 9f b1 4a 72 34 7a cf 35 b0 a1 81 a6 d1 0d a4 c6 8e 0d 63 40 f6 05 f3 fe 13 0b b6 b0 9d 86 37 10 d6 8b 35 8c ea f1 34 e3 ec f7 c0 1e a5 6d 87 e9 06 dd 36 14 aa 13 c5 d8 3a 4d f6 b8 00 b9 5c 46 ce ad 51 e6 75 a1 2e 99 5b f4 dc 7a 1e 07 6d e1 70 d0 e2 d6 12 a5 36 b9 14 2f fa ef 7f 99 eb 1b 5b a2 d8 5a c2 2a 61 a9 ba 7d 20 cc 8f 1e 0f 64 11 e4 57 8a 7c a4 74 52 96 16 b3 29 d0 aa 6a 1a f9 bf dd bb f5 a9 11 19 7b 4d ef 07 49 80 44 f6 77 ad 06 17 63 6d cc 45 aa d7 34 1a ed 73 3e 8b 0c 1e 0d c2 89 dd a1 21 6b fa 0f f2 79 47 08 ee b5 ce 35 ab df e9 ea 02 03 4b a4 38 d3 64 98 24 5a 49 27 9a 28 56 fa 0d dc aa a9 fa b1 Data Ascii: cqJN#6l(s]/_@u"kJr4z5c@754m6:M\FQu.[zmp6/[Z*a} dW\|tR)j{MIDwcmE4s>!kyG5K8d$ZI'(V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50191	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	743	OUT	GET /s/player/b854ee52/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:04 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120225 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 14 Feb 2024 22:38:22 GMT Expires: Thu, 13 Feb 2025 22:38:22 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 13 Feb 2024 05:20:10 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 5622 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:04 UTC	565	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 48 6f 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6f 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var a8=function(a){g.Ho(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.ob()).toString(36));return a},b8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 29 3b 0a 65 6c 73 65 20 66 6f 72 28 61 3d 54 79 62 28 61 29 3b 3b 29 7b 76 61 72 20 64 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 64 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 62 2e 63 61 6c 6c 28 63 2c 64 2e 76 61 6c 75 65 2c 76 6f 69 64 20 30 2c 61 29 7d 7d 2c 56 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 0a 55 79 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 46 76 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 Data Ascii: );else for(a=Tyb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},Vyb=function(a,b){var c=[];Uyb(b,function(d){try{var e=g.Fv.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 72 65 74 75 72 6e 20 61 7a 62 28 61 29 7d 2c 62 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 6c 6d 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 6d 29 72 65 74 75 72 6e 20 61 2e 6c 6d 28 29 3b 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 76 61 6c 75 65 73 28 29 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 61 2e 73 70 6c 69 74 28 22 22 29 3b 69 66 28 67 2e 62 62 28 61 29 29 7b 66 6f Data Ascii: return azb(a)},bzb=function(a){if(a.lm&&"function"==typeof a.lm)return a.lm();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(g.bb(a)){fo
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 4a 68 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 7b 4e 63 3a 33 2c 4d 63 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 69 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 54 69 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 63 6c 6f 73 65 64 22 2c 62 29 7d 2c 6a 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 64 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 4a 68 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 Data Ascii: Jh("/client_streamz/youtube/living_room/mdx/channel/closed",{Nc:3,Mc:"channel_type"})},izb=function(a,b){a.j.Ti("/client_streamz/youtube/living_room/mdx/channel/closed",b)},jzb=function(){this.j=d8();this.j.Jh("/client_streamz/youtube/living_room/mdx/cha
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 74 68 69 73 2e 61 70 70 3d 61 2e 61 70 70 2c 74 68 69 73 2e 74 79 70 65 3d 0a 61 2e 74 79 70 65 7c 7c 22 52 45 4d 4f 54 45 5f 43 4f 4e 54 52 4f 4c 22 2c 74 68 69 73 2e 75 73 65 72 6e 61 6d 65 3d 61 2e 75 73 65 72 7c 7c 22 22 2c 74 68 69 73 2e 61 76 61 74 61 72 3d 61 2e 75 73 65 72 41 76 61 74 61 72 55 72 69 7c 7c 22 22 2c 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 61 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 7c 7c 22 Data Ascii: id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.app,this.type=a.type\|\|"REMOTE_CONTROL",this.username=a.user\|\|"",this.avatar=a.userAvatarUri\|\|"",this.obfuscatedGaiaId=a.obfuscatedGaiaId\|\|"
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 65 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 63 72 65 65 6e 49 64 54 79 70 65 7c 7c 22 6e 6f 72 6d 61 6c 22 7d 2c 66 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 62 26 26 28 61 2e 69 64 3d 3d 62 7c 7c 61 2e 75 75 69 64 3d 3d Data Ascii: (c){a.experiments.add(c)})},e8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.screenIdType\|\|"normal"},f8=function(a,b){return!!b&&(a.id==b\|\|a.uuid==
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 28 30 3d 3d 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 5b 5d 3b 0a 76 61 72 20 62 3d 61 5b 30 5d 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 63 3d 2d 31 3d 3d 62 3f 61 5b 30 5d 3a 61 5b 30 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 62 29 3b 72 65 74 75 72 6e 20 67 2e 7a 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 30 3d 3d 65 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 45 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 56 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 6a 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 46 7a 62 29 72 65 74 75 72 6e 20 46 7a 62 3b 0a 76 61 72 20 61 3d 67 2e 57 43 28 22 79 74 Data Ascii: (0==a.length)return[];var b=a[0].indexOf("#"),c=-1==b?a[0]:a[0].substring(0,b);return g.zr(a,function(d,e){return 0==e?d:d.substring(c.length)})},Ezb=function(a){g.VC("yt-remote-connected-devices",a,86400)},j8=function(){if(Fzb)return Fzb;var a=g.WC("yt
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 49 45 5b 61 5d 3d 21 30 3b 0a 76 61 72 20 63 3d 67 2e 47 45 28 29 3b 63 26 26 63 2e 70 75 62 6c 69 73 68 2e 61 70 70 6c 79 28 63 2c 61 72 67 75 6d 65 6e 74 73 29 3b 67 2e 49 45 5b 61 5d 3d 21 31 7d 2c 4e 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 64 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6e 38 29 7b 6e 38 3d 6e 65 77 20 67 2e 73 67 28 6e 65 77 20 4e 7a 62 29 3b 0a 76 61 72 20 61 3d 67 2e 49 42 28 22 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 5f 77 65 62 5f 66 6c 75 73 68 5f 63 6f 75 6e 74 22 2c 2d 31 29 3b 2d 31 21 3d 3d 61 26 26 28 6e 38 2e 44 3d 61 29 7d 72 65 74 75 72 6e 20 6e 38 7d 2c 4f 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 Data Ascii: tion(a,b){g.IE[a]=!0;var c=g.GE();c&&c.publish.apply(c,arguments);g.IE[a]=!1},Nzb=function(){},d8=function(){if(!n8){n8=new g.sg(new Nzb);var a=g.IB("client_streamz_web_flush_count",-1);-1!==a&&(n8.D=a)}return n8},Ozb=function(){var a=window.navigator.u
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 65 6e 64 65 72 2f 31 2e 30 2f 63 61 73 74 5f 66 72 61 6d 65 77 6f 72 6b 2e 6a 73 22 2c 53 7a 62 2c 63 29 7d 7d 2c 58 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 7a 62 28 29 3b 0a 76 61 72 20 61 3d 55 7a 62 28 29 3b 61 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 3b 6f 38 28 61 29 7d 2c 5a 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 57 7a 62 28 29 3b 0a 76 61 72 20 61 3d 55 7a 62 28 29 3b 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 67 2e 6f 61 28 59 7a 62 2e 6d 61 70 28 54 7a 62 29 29 29 3b 61 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e Data Ascii: ender/1.0/cast_framework.js",Szb,c)}},Xzb=function(){Wzb();var a=Uzb();a.push("//www.gstatic.com/eureka/clank/cast_sender.js");o8(a)},Zzb=function(){Wzb();var a=Uzb();a.push.apply(a,g.oa(Yzb.map(Tzb)));a.push("//www.gstatic.com/eureka/clank/cast_sender.
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 7d 2c 77 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 74 68 69 73 2e 47 3d 61 3b 0a 74 68 69 73 2e 44 3d 62 3b 74 68 69 73 2e 4a 63 3d 63 3b 74 68 69 73 2e 64 63 3d 64 7c 7c 31 3b 74 68 69 73 2e 5a 61 3d 6e 65 77 20 67 2e 75 70 28 74 68 69 73 29 3b 74 68 69 73 2e 75 62 3d 34 35 45 33 3b 61 3d 67 2e 78 53 3f 31 32 35 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 6a 62 3d 6e 65 77 20 67 2e 6b 67 28 61 29 3b 74 68 69 73 2e 4e 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 43 3d 21 31 3b 74 68 69 73 2e 58 3d 74 68 69 73 2e 66 62 3d 74 68 69 73 2e 5a 3d 74 68 69 73 2e 52 61 3d 74 68 69 73 2e 42 61 3d 74 68 69 73 2e 50 62 3d 74 68 69 73 2e 6d 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 71 61 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 6e 75 6c 6c 3b 74 68 69 73 2e 4b 3d 30 3b 74 68 Data Ascii: },w8=function(a,b,c,d){this.G=a;this.D=b;this.Jc=c;this.dc=d\|\|1;this.Za=new g.up(this);this.ub=45E3;a=g.xS?125:void 0;this.jb=new g.kg(a);this.Na=null;this.C=!1;this.X=this.fb=this.Z=this.Ra=this.Ba=this.Pb=this.ma=null;this.qa=[];this.j=null;this.K=0;th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50192	64.233.177.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	754	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:04 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Thu, 15 Feb 2024 00:12:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:04 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 64 48 74 33 33 33 30 30 77 2d 63 78 79 64 50 33 6b 6d 68 57 71 6a 63 47 69 33 67 6d 38 66 54 78 6a 65 6d 66 73 35 57 58 4f 4d 42 47 71 74 6f 35 50 59 58 38 6b 70 55 48 6b 2d 57 2d 4c 30 79 51 39 41 75 67 56 70 49 71 43 77 4c 54 41 75 33 4f 4f 68 77 2d 6f 62 58 53 44 69 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKrdHt33300w-cxydP3kmhWqjcGi3gm8fTxjemfs5WXOMBGqto5PYX8kpUHk-W-L0yQ9AugVpIqCwLTAu3OOhw-obXSDiw"}
2024-02-15 00:12:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50193	142.250.105.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	732	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:04 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 15 Feb 2024 00:06:37 GMT Expires: Thu, 15 Feb 2024 00:21:37 GMT Cache-Control: public, max-age=900 Age: 327 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:04 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50195	64.233.177.147	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	851	OUT	GET /js/th/O0gGkLOwZlsvEtn_3NBcCB5b9cpchHh7fZmHe94Vfgw.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:04 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 51932 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 14 Feb 2024 23:24:09 GMT Expires: Thu, 13 Feb 2025 23:24:09 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 05 Feb 2024 17:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 2875 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:04 UTC	442	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 2c 76 3d 38 35 3b 65 6c 73 65 20 69 66 28 76 3d 3d 53 29 76 3d 47 2e 63 6f 6e 73 6f 6c 65 3f 39 36 3a 38 35 3b 65 6c 73 65 20 69 66 28 76 3d 3d 55 29 59 3d 37 39 2c 76 3d 53 3b 65 6c 73 65 20 69 66 28 39 31 3d 3d 76 29 52 3d 51 2c 49 3d 47 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 76 3d 31 32 3b 65 6c 73 65 7b 69 66 28 76 3d 3d 61 29 72 65 74 75 72 6e 20 52 3b 69 66 28 39 36 3d 3d 76 29 47 2e 63 6f 6e 73 6f 6c 65 5b 4c 5d 28 79 2e 6d 65 73 73 61 67 65 29 2c 76 3d 38 35 3b 65 6c 73 65 7b 69 66 28 38 35 3d 3d 76 29 72 65 74 75 72 6e 20 59 3d 37 39 2c 52 3b 31 32 3d 3d 76 26 26 28 76 3d 49 26 26 49 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 3f 6e 3a 61 29 7d 7d 7d 63 61 74 63 68 28 57 29 7b 69 66 28 37 39 3d 3d 59 29 74 68 72 6f 77 20 57 3b 36 38 3d 3d 59 26 26 Data Ascii: ,v=85;else if(v==S)v=G.console?96:85;else if(v==U)Y=79,v=S;else if(91==v)R=Q,I=G.trustedTypes,v=12;else{if(v==a)return R;if(96==v)G.console[L](y.message),v=85;else{if(85==v)return Y=79,R;12==v&&(v=I&&I.createPolicy?n:a)}}}catch(W){if(79==Y)throw W;68==Y&&
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 73 73 4e 61 6d 65 3f 53 2e 63 6c 61 73 73 4e 61 6d 65 3a 53 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 53 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 55 29 7c 7c 76 2c 58 3d 39 38 29 3a 31 32 3d 3d 58 3f 58 3d 28 6e 26 38 37 29 3d 3d 6e 3f 33 35 3a 37 35 3a 31 38 3d 3d 58 3f 28 76 2e 54 3d 55 2c 76 2e 49 28 29 2c 58 3d 36 38 29 3a 39 38 3d 3d 58 3f 58 3d 28 6e 26 34 33 29 3d 3d 6e 3f 32 34 3a 36 38 3a 32 34 3d 3d 58 26 26 28 58 3d 76 2e 54 3f 36 38 3a 31 38 29 7d 7d 2c 52 71 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 6e 2c 76 2c 53 2c 52 2c 49 2c 58 29 7b 66 6f 72 28 49 3d 38 34 3b 35 34 21 3d 49 3b 29 69 66 28 37 35 3d 3d 49 29 6e 2e 65 45 26 26 6e 2e 65 45 2e 66 6f 72 45 61 63 68 28 53 2c 76 6f 69 64 20 30 29 2c 49 3d 55 3b 65 6c 73 65 7b 69 66 28 49 3d 3d 55 Data Ascii: ssName?S.className:S.getAttribute&&S.getAttribute(U)\|\|v,X=98):12==X?X=(n&87)==n?35:75:18==X?(v.T=U,v.I(),X=68):98==X?X=(n&43)==n?24:68:24==X&&(X=v.T?68:18)}},Rq=function(U,n,v,S,R,I,X){for(I=84;54!=I;)if(75==I)n.eE&&n.eE.forEach(S,void 0),I=U;else{if(I==U
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 6e 61 3d 6e 2c 5a 3d 33 37 3b 65 6c 73 65 20 69 66 28 31 32 3d 3d 5a 29 5a 3d 33 3d 3d 28 55 3e 3e 32 26 31 35 29 3f 38 38 3a 39 36 3b 65 6c 73 65 20 69 66 28 32 39 3d 3d 5a 29 5a 3d 52 3f 36 36 3a 32 34 3b 65 6c 73 65 20 69 66 28 39 32 3d 3d 5a 29 5a 3d 28 57 3d 6a 4d 5b 49 5d 29 3f 38 3a 35 33 3b 65 6c 73 65 20 69 66 28 37 35 3d 3d 5a 29 5a 3d 28 59 3d 76 29 3f 31 36 3a 39 3b 65 6c 73 65 20 69 66 28 39 39 3d 3d 5a 29 5a 3d 35 35 3b 65 6c 73 65 20 69 66 28 35 37 3d 3d 5a 29 5a 3d 32 39 3b 65 6c 73 65 20 69 66 28 31 33 3d 3d 5a 29 5a 3d 32 3d 3d 28 55 3c 3c 31 26 37 29 3f 32 38 3a 38 37 3b 65 6c 73 65 20 69 66 28 32 32 3d 3d 5a 29 52 3d 59 4a 28 76 2c 36 2c 31 2c 6e 2c 53 29 2c 28 49 3d 52 3e 3d 6e 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: na=n,Z=37;else if(12==Z)Z=3==(U>>2&15)?88:96;else if(29==Z)Z=R?66:24;else if(92==Z)Z=(W=jM[I])?8:53;else if(75==Z)Z=(Y=v)?16:9;else if(99==Z)Z=55;else if(57==Z)Z=29;else if(13==Z)Z=2==(U<<1&7)?28:87;else if(22==Z)R=YJ(v,6,1,n,S),(I=R>=n)&&Array.prototype.
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 7b 69 66 28 34 38 3d 3d 47 29 72 65 74 75 72 6e 20 5a 3b 38 37 3d 3d 47 3f 47 3d 34 39 3a 38 3d 3d 47 26 26 28 53 2e 63 6c 61 73 73 4c 69 73 74 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 52 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 32 28 32 2c 31 32 2c 22 22 2c 30 2c 22 63 6c 61 73 73 22 2c 22 20 22 2c 61 2c 53 29 7d 29 3a 4c 32 28 39 39 2c 36 31 2c 22 63 6c 61 73 73 22 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 46 39 28 33 2c 53 2c 32 32 2c 22 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 52 71 28 33 32 2c 61 2c 31 34 2c 30 2c 52 29 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 2c 53 29 2c 47 3d 34 38 29 7d 7d 2c 75 33 3d 66 75 6e 63 74 69 6f 6e 28 55 2c Data Ascii: {if(48==G)return Z;87==G?G=49:8==G&&(S.classList?Array.prototype.forEach.call(R,function(a){n2(2,12,"",0,"class"," ",a,S)}):L2(99,61,"class",Array.prototype.filter.call(F9(3,S,22,""),function(a){return!Rq(32,a,14,0,R)}).join(" "),S),G=48)}},u3=function(U,
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 55 29 59 3d 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 52 7c 7c 52 2e 6c 65 6e 67 74 68 21 3d 76 3f 2d 31 3a 55 2e 69 6e 64 65 78 4f 66 28 52 2c 53 29 3b 65 6c 73 65 7b 66 6f 72 28 49 3d 53 3b 49 3c 55 2e 6c 65 6e 67 74 68 3b 49 2b 2b 29 69 66 28 49 20 69 6e 20 55 26 26 55 5b 49 5d 3d 3d 3d 52 29 7b 59 3d 49 3b 62 72 65 61 6b 20 61 7d 59 3d 2d 31 7d 58 3d 37 7d 65 6c 73 65 20 39 32 3d 3d 58 3f 58 3d 37 38 3a 33 30 3d 3d 58 26 26 28 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 57 2e 70 72 6f 74 6f 74 79 70 65 3d 55 2e 70 72 6f 74 6f 74 79 70 65 2c 53 2e 68 3d 55 2e 70 72 6f 74 6f 74 79 70 65 2c 53 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 57 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 Data Ascii: tring"===typeof U)Y="string"!==typeof R\|\|R.length!=v?-1:U.indexOf(R,S);else{for(I=S;I<U.length;I++)if(I in U&&U[I]===R){Y=I;break a}Y=-1}X=7}else 92==X?X=78:30==X&&(W=function(){},W.prototype=U.prototype,S.h=U.prototype,S.prototype=new W,S.prototype.const
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 29 53 2e 47 24 3d 79 2c 53 2e 71 31 3d 30 3b 21 5a 7c 7c 79 2d 53 2e 4d 31 3c 53 2e 6f 75 2d 28 49 3f 32 35 35 3a 76 3f 35 3a 32 29 3f 51 3d 66 61 6c 73 65 3a 28 53 2e 70 71 3d 52 2c 58 3d 70 28 76 3f 31 34 37 3a 34 30 31 2c 53 29 2c 4b 28 53 2c 34 30 31 2c 53 2e 4b 29 2c 53 2e 52 2e 70 75 73 68 28 5b 70 32 2c 58 2c 76 3f 52 2b 31 3a 52 2c 53 2e 58 2c 53 2e 41 5d 29 2c 53 2e 50 3d 47 67 2c 51 3d 6e 29 2c 46 3d 39 35 7d 65 6c 73 65 20 69 66 28 38 39 3d 3d 46 29 53 3d 6e 65 77 20 78 4a 28 76 2c 74 68 69 73 29 2c 52 3d 6e 2e 6e 61 7c 7c 6e 2e 73 72 63 2c 58 3d 6e 2e 6c 69 73 74 65 6e 65 72 2c 6e 2e 68 32 26 26 63 56 28 36 33 2c 32 36 2c 22 6f 6e 22 2c 30 2c 6e 29 2c 49 3d 58 2e 63 61 6c 6c 28 52 2c 53 29 2c 46 3d 36 35 3b 65 6c 73 65 20 69 66 28 36 36 3d 3d Data Ascii: )S.G$=y,S.q1=0;!Z\|\|y-S.M1<S.ou-(I?255:v?5:2)?Q=false:(S.pq=R,X=p(v?147:401,S),K(S,401,S.K),S.R.push([p2,X,v?R+1:R,S.X,S.A]),S.P=Gg,Q=n),F=95}else if(89==F)S=new xJ(v,this),R=n.na\|\|n.src,X=n.listener,n.h2&&cV(63,26,"on",0,n),I=X.call(R,S),F=65;else if(66==
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 2c 55 29 2c 79 3d 39 31 3b 65 6c 73 65 20 69 66 28 33 36 3d 3d 79 29 79 3d 42 56 3f 39 32 3a 35 37 3b 65 6c 73 65 20 69 66 28 34 35 3d 3d 79 29 76 2e 52 2e 73 70 6c 69 63 65 28 53 2c 53 2c 55 29 2c 79 3d 33 3b 65 6c 73 65 20 69 66 28 34 38 3d 3d 79 29 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 55 29 26 26 28 55 3d 55 2e 6a 6f 69 6e 28 76 29 29 2c 59 3d 22 61 72 69 61 2d 22 2b 52 2c 79 3d 35 36 3b 65 6c 73 65 20 69 66 28 39 31 3d 3d 79 29 72 65 74 75 72 6e 20 5a 7d 2c 6f 71 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 6e 2c 76 2c 53 2c 52 2c 49 2c 58 2c 57 2c 59 2c 79 2c 5a 29 7b 66 6f 72 28 5a 3d 38 38 3b 37 33 21 3d 5a 3b 29 69 66 28 38 38 3d 3d 5a 29 5a 3d 36 36 3b 65 6c 73 65 20 69 66 28 36 36 3d 3d 5a 29 5a 3d 28 6e 2b 35 5e 31 39 29 3c 6e 26 26 28 6e 2b 38 5e Data Ascii: ,U),y=91;else if(36==y)y=BV?92:57;else if(45==y)v.R.splice(S,S,U),y=3;else if(48==y)Array.isArray(U)&&(U=U.join(v)),Y="aria-"+R,y=56;else if(91==y)return Z},oq=function(U,n,v,S,R,I,X,W,Y,y,Z){for(Z=88;73!=Z;)if(88==Z)Z=66;else if(66==Z)Z=(n+5^19)<n&&(n+8^
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 28 47 29 7b 58 5b 47 5d 3d 74 72 75 65 7d 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 29 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 53 2c 66 75 6e 63 74 69 6f 6e 28 47 29 7b 58 5b 47 5d 3d 74 72 75 65 7d 29 2c 22 22 29 2c 58 29 52 2b 3d 30 3c 52 2e 6c 65 6e 67 74 68 3f 22 20 22 2b 49 3a 49 3b 5a 3d 28 4c 32 28 39 39 2c 35 36 2c 22 63 6c 61 73 73 22 2c 52 2c 76 29 2c 31 38 29 7d 65 6c 73 65 20 35 33 3d 3d 5a 26 26 28 49 3d 52 2e 74 79 70 65 2c 5a 3d 37 31 29 7d 7d 2c 6d 79 3d 66 75 6e 63 74 69 6f 6e 28 55 2c 6e 2c 76 2c 53 2c 52 29 7b 66 6f 72 28 53 3d 36 31 3b 31 21 3d 53 3b 29 69 66 28 36 39 3d 3d 53 29 53 3d 28 76 7c 36 29 26 31 3f 39 38 3a 39 35 3b 65 6c 73 65 20 69 66 28 39 35 3d 3d 53 29 74 68 69 73 2e 59 3d 6e 2c 53 3d 39 38 3b 65 6c 73 65 20 Data Ascii: (G){X[G]=true}),Array.prototype).forEach.call(S,function(G){X[G]=true}),""),X)R+=0<R.length?" "+I:I;Z=(L2(99,56,"class",R,v),18)}else 53==Z&&(I=R.type,Z=71)}},my=function(U,n,v,S,R){for(S=61;1!=S;)if(69==S)S=(v\|6)&1?98:95;else if(95==S)this.Y=n,S=98;else
2024-02-15 00:12:04 UTC	1252	IN	Data Raw: 69 65 6e 74 59 3d 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 30 2c 74 68 69 73 2e 6b 65 79 3d 22 22 2c 74 68 69 73 2e 63 68 61 72 43 6f 64 65 3d 74 68 69 73 2e 6b 65 79 43 6f 64 65 3d 30 2c 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 74 68 69 73 2e 61 6c 74 4b 65 79 3d 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 66 61 6c 73 65 2c 74 68 69 73 2e 73 74 61 74 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 30 2c 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 22 2c 74 68 69 73 2e 74 69 6d 65 53 74 61 6d 70 3d 30 2c 74 68 69 73 2e 6c 3d 6e 75 6c 6c 2c 57 3d 37 29 3a 34 37 3d 3d 57 3f 57 3d 28 6e 7c 32 34 29 3d 3d 6e 3f 37 31 3a 33 Data Ascii: ientY=this.clientX=this.offsetY=this.offsetX=0,this.key="",this.charCode=this.keyCode=0,this.metaKey=this.shiftKey=this.altKey=this.ctrlKey=false,this.state=null,this.pointerId=0,this.pointerType="",this.timeStamp=0,this.l=null,W=7):47==W?W=(n\|24)==n?71:3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50196	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	1480	OUT	GET /activityi;dc_pre=CMjlq9GHrIQDFceopgQdP0AEiw;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:05 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:04 GMT Expires: Thu, 15 Feb 2024 00:12:04 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:05 UTC	589	IN	Data Raw: 33 33 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4d 6a 6c 71 39 47 48 72 49 51 44 46 63 Data Ascii: 333<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CMjlq9GHrIQDFc
2024-02-15 00:12:05 UTC	237	IN	Data Raw: 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 6d 61 74 63 68 5f 69 64 3d 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 73 69 74 65 73 25 32 46 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 32%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility"/></body></html>
2024-02-15 00:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50198	64.233.177.132	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:04 UTC	767	OUT	GET /Z0IIzRaYIgRNxjlGR7HeS_B6WlFxEbSK4MGEzDxrH8Mszp0QD8DqIcDnhkMzRBr1YDqwtT86=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 2279 X-XSS-Protection: 0 Date: Wed, 14 Feb 2024 22:49:36 GMT Expires: Thu, 15 Feb 2024 22:49:36 GMT Cache-Control: public, max-age=86400, no-transform Age: 4948 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:05 UTC	710	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 09 08 08 08 03 08 10 09 07 08 0a 0b 08 09 08 08 08 0a 09 0b 08 08 0e 08 06 0b 08 08 10 0d 0d 08 08 08 0b 08 0d 08 0d 0b 0d 0a 08 08 0a 0b 0a 09 0d 08 08 17 0e 0a 0b 0c 0d 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0b 0d 0e 0e 12 0f 0f 10 0f 0d 11 13 10 10 12 0f 0e 0e 10 0f 0f 10 11 11 13 11 11 0f 10 0e 0e 0d 0e 0f 0e 0f 14 0f 10 10 10 11 0e 0f 0d 0d 0d 10 0d 0e 11 0d ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 03 05 08 04 09 02 ff c4 00 32 10 00 02 01 03 02 04 04 03 07 05 00 00 00 00 00 00 01 02 03 00 04 11 05 12 06 07 13 21 22 31 41 51 08 23 61 32 33 43 52 71 81 82 14 16 91 a1 b2 Data Ascii: JFIFDD2!"1AQ#a23CRq
2024-02-15 00:12:05 UTC	1252	IN	Data Raw: 57 74 60 76 21 4b 95 a7 57 41 06 35 23 45 1c 64 6b ed 4b 96 c2 d6 3a 70 2e 37 b7 51 e1 75 a5 61 75 55 5b 33 03 ce 25 30 3a 0c 90 66 cc eb dc 6b 7d 43 45 af c6 c7 c6 d7 e6 5e 28 e1 a9 6d 2e 25 b6 d4 97 6c d0 b6 d6 00 e4 1e c0 86 07 d5 4a 90 54 fa 82 3b 56 75 53 4e fa 69 5d 0c 82 ce 69 b1 fc f9 85 b2 51 56 45 59 03 2a 21 37 63 85 c7 e7 98 dc 7a ad 5d 79 97 b5 28 89 44 5f b8 63 c9 03 20 64 81 96 38 03 bf 99 3e 83 dc d7 e8 17 36 5c 5c 6c 09 5d 25 ab 6a 57 dc 3b 3c a9 69 6e 2e 34 59 c8 65 0c 0e c2 4c 48 8d e3 01 b6 4a c4 0d c2 45 65 90 0e cb ea ba 0c 92 54 e0 52 39 ad 60 7d 3b b5 d7 71 d2 db f8 1f 1b 83 c9 64 50 c5 45 b5 50 b2 47 c8 63 ab 8e e0 db 47 0d 49 ee f1 68 e1 6b 10 77 95 82 db 8e 78 4a e4 ee d5 b4 e6 b6 7f 5d ab 22 a6 4f 98 1d 09 97 38 f7 68 d7 e9 eb Data Ascii: Wt`v!KWA5#EdkK:p.7QuauU[3%0:fk}CE^(m.%lJT;VuSNi]iQVEY*!7cz]y(D_c d8>6\\l]%jW;<in.4YeLHJEeTR9`};qdPEPGcGIhkwxJ]"O8h
2024-02-15 00:12:05 UTC	317	IN	Data Raw: 87 d2 e5 7b 43 1c ed 4b 5b 72 1b c8 5e e7 33 b8 b9 fc 49 b0 f6 5a d0 2b ba 83 56 94 a2 25 11 28 8b 2d a5 db 23 07 87 ed 29 c8 c8 0c 0f b8 20 82 ac a4 76 65 60 55 81 20 82 09 15 c9 ae 2d 37 0b 8b 9a 1c 0b 4f e7 df c0 f5 1a 8e 0a ed e0 ff 00 88 b5 8d 76 6a 49 34 07 00 75 2c 2e 72 a3 18 c0 16 f7 02 7b 54 04 79 f4 76 2f b2 0e db 6d f4 98 f0 8c 65 78 7b 7a c6 fd 3f 71 d7 68 f7 5b a0 59 e6 23 b2 86 67 66 8f b3 7f 49 63 d7 f8 91 96 bc fd ec c7 99 3c 65 4d f1 3d 6a bd e3 b9 bd 94 8f c3 91 34 d8 d5 bc fb 16 4b 6e a0 1f 55 ee 3f d5 4a 9d a4 88 6e 92 67 74 3d 88 f3 0d ba af 8d 8a 99 c6 c6 1a 66 f5 1f 48 71 1e 00 bc 0f 8a aa 79 85 cf 0b 9b d0 d1 c4 3a 36 ed 9c a7 55 e6 91 81 0b 95 32 39 2d b3 23 ee a1 11 44 73 dd 09 00 d5 5a bf 17 96 af d9 dc df 12 e3 ef 71 f4 19 47 Data Ascii: {CK[r^3IZ+V%(-#) ve`U -7OvjI4u,.r{Tyv/mex{z?qh[Y#gfIc<eM=j4KnU?Jngt=fHqy:6U29-#DsZqG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50203	142.250.9.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 30 39 33 35 36 39 35 34 32 33 36 35 36 36 31 38 34 39 30 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://att.com","trigger_debug_key":"10935695423656618490"},"type":"trigger-no-matching-source"}]
2024-02-15 00:12:05 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:12:05 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50206	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	539	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955920192&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1302&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50208	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	765	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	359	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50216	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1392	OUT	GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:05 UTC	1272	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6100125.fls.doubleclick.net/activityi;dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50217	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1403	OUT	GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:05 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:05 UTC	606	IN	Data Raw: 31 32 66 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 12f6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-02-15 00:12:05 UTC	1252	IN	Data Raw: 3d 31 6a 37 35 36 36 37 31 31 37 35 36 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 67 30 46 30 57 41 21 32 73 61 4a 56 41 31 51 21 33 73 41 41 70 74 44 56 34 6d 7a 6c 43 70 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 37 39 35 35 39 32 35 34 36 37 35 36 31 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 Data Ascii: =1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVA1Q!3sAAptDV4mzlCp"],"userBiddingSignals":[null,null,1707955925467561],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/d
2024-02-15 00:12:05 UTC	1252	IN	Data Raw: 6a 51 66 71 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 39 30 32 35 35 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 31 31 38 33 35 38 33 36 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 39 30 32 35 35 39 38 31 39 22 2c 22 36 38 35 31 31 38 33 35 38 33 36 37 22 2c 22 31 22 2c 22 32 30 38 36 33 30 33 36 32 35 39 22 2c 22 31 30 31 35 34 36 38 30 35 34 22 2c 22 34 35 38 38 39 30 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 Data Ascii: jQfqk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685118358367\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685118358367","1","20863036259","1015468054","4588906"],"adRenderI
2024-02-15 00:12:05 UTC	1252	IN	Data Raw: 38 35 35 33 33 31 32 31 36 37 37 22 2c 6e 75 6c 6c 2c 22 32 30 38 37 32 37 39 37 33 34 39 22 2c 22 31 30 31 35 31 37 33 31 36 37 22 2c 22 33 37 38 38 34 35 37 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 55 52 63 6d 6d 6e 72 32 78 30 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 34 33 35 35 34 37 33 38 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 35 37 34 37 31 32 36 39 34 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 34 33 Data Ascii: 85533121677",null,"20872797349","1015173167","3788457"],"adRenderId":"WURcmmnr2x0"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156435547389\u0026cr_id=685574712694\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["15643
2024-02-15 00:12:05 UTC	500	IN	Data Raw: 61 62 6c 65 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 7d 7d 5d 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 66 6f 72 28 6c 65 74 20 69 20 6f 66 20 69 67 5f 6c 69 73 74 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 29 7b 74 72 79 7b 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 30 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e Data Ascii: ableBiddingSignalsPrioritization":true}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.
2024-02-15 00:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50218	108.177.122.156	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1706	OUT	GET /gampad/ads?pvsid=2698003961308787&correlator=4019115447072384&eid=44809527%2C31080778&output=ldjh&gdfp_req=1&vrg=202402080201&ptt=17&impl=fifs&iu_parts=22674080263%2Catt_web%2Cservices%2Caccount_overview%2CAcctMgmt_Global&enc_prev_ius=%2F0%2F1%2F%2F2%2F%2F3%2F%2F4&prev_iu_szs=728x90%7C970x90%7C970x250&ifi=1&sfv=1-0-40&fsfs=1&sc=1&cookie_enabled=1&abxe=1&dt=1707955921802&lmt=1707341168&adxs=268&adys=1063&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=1&ucis=1&oid=2&u_his=3&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=60&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&url=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&vis=2&psz=1263x0&msz=1263x0&fws=4&ohw=1263&ga_vid=447345428.1707955922&ga_sid=1707955922&ga_hid=160808378&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFsyLFtbIi8yMjY3NDA4MDI2My9hdHRfd2ViLy9zZXJ2aWNlcy8vYWNjb3VudF9vdmVydmlldy8vQWNjdE1nbXRfR2xvYmFsIixbXV1dXSxudWxsLDNd&dlt=1707955908179&idt=13474&adks=391953684&frm=20 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:06 UTC	800	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: 5976945797 Google-Creative-Id: 138392143702 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 15 Feb 2024 00:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:06 UTC	452	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 36 37 34 30 38 30 32 36 33 2f 61 74 74 5f 77 65 62 2f 2f 73 65 72 76 69 63 65 73 2f 2f 61 63 63 6f 75 6e 74 5f 6f 76 65 72 76 69 65 77 2f 2f 41 63 63 74 4d 67 6d 74 5f 47 6c 6f 62 61 6c 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 32 35 30 2c 39 37 30 2c 30 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 2c 5b 5b 22 49 44 3d 64 30 63 36 39 31 61 64 34 32 38 31 33 64 65 37 3a 54 3d 31 37 30 37 39 35 35 39 32 35 3a 52 54 3d 31 37 30 37 39 35 35 39 32 35 3a 53 3d 41 4c 4e 49 5f 4d 5a 30 38 67 54 4f 70 4f 66 72 57 4c 38 6f 37 6a 5a 57 41 64 6e 62 74 57 38 4c 39 41 22 2c 31 37 34 31 36 35 31 39 32 35 2c 22 2f 22 2c 22 61 74 74 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 64 63 39 66 66 Data Ascii: 8000{"/22674080263/att_web//services//account_overview//AcctMgmt_Global":["html",0,null,null,0,250,970,0,0,null,null,1,1,[["ID=d0c691ad42813de7:T=1707955925:RT=1707955925:S=ALNI_MZ08gTOpOfrWL8o7jZWAdnbtW8L9A",1741651925,"/","att.com",1],["UID=00000dc9ff
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 4f 72 59 47 73 6e 6a 42 37 4b 38 6f 43 52 42 2d 51 47 32 52 46 45 31 73 59 5a 47 6f 75 36 55 58 38 48 6a 62 6e 35 4c 32 32 74 54 39 4b 72 5f 37 74 4b 53 42 34 52 5f 55 50 34 56 67 6e 58 71 51 54 66 35 6b 41 79 70 46 6c 6d 6a 50 35 59 4a 75 73 6c 43 77 71 6b 4e 39 41 22 2c 22 43 4c 4c 41 36 39 47 48 72 49 51 44 46 53 75 4b 64 77 45 64 35 37 73 4b 49 77 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: null,null,null,null,null,"AOrYGsnjB7K8oCRB-QG2RFE1sYZGou6UX8Hjbn5L22tT9Kr_7tKSB4R_UP4VgnXqQTf5kAypFlmjP5YJuslCwqkN9A","CLLA69GHrIQDFSuKdwEd57sKIw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 6d 28 26 61 6d 70 3b 32 30 30 36 37 3b 26 67 74 3b 38 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 37 33 32 32 36 31 21 3d 7c 76 71 63 29 21 37 32 30 31 30 36 31 3f 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 37 32 33 3b 26 67 74 3b 3a 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 7e 26 71 75 6f 74 3b 5d 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 Data Ascii: m(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;var w,x;a:{for(var
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 61 5b 4c 5d 3d 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 63 6c 61 73 73 20 6b 61 7b 7d 63 6c 61 73 73 20 6c 61 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6b 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 22 6f 62 6a 65 Data Ascii: d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;a[L]=d\|1;return!0}class ka{}class la{}Object.freeze(new ka);Object.freeze(new la);function oa(a){if("boolean"!==typeof a){var b=typeof a;throw Error(`Expected boolean but got ${"obje
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 3e 3e 31 34 26 31 30 32 33 3b 65 3d 30 3d 3d 3d 65 3f 35 33 36 38 37 30 39 31 32 3a 65 3b 69 66 28 63 3e 3d 65 29 7b 6c 65 74 20 66 2c 67 3d 62 3b 69 66 28 62 26 32 35 36 29 66 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 64 29 72 65 74 75 72 6e 3b 66 3d 61 5b 65 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 7b 7d 3b 67 7c 3d 32 35 36 7d 66 5b 63 5d 3d 64 3b 63 3c 65 26 26 28 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 4c 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 Data Ascii: rn a}function wa(a,b,c,d){var e=b>>14&1023;e=0===e?536870912:e;if(c>=e){let f,g=b;if(b&256)f=a[a.length-1];else{if(null==d)return;f=a[e+(+!!(b&512)-1)]={};g\|=256}f[c]=d;c<e&&(a[c+(+!!(b&512)-1)]=void 0);g!==b&&(a[L]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 2e 73 69 7a 65 29 29 62 72 65 61 6b 3b 67 3d 21 30 7d 69 66 28 21 66 26 26 21 67 29 72 65 74 75 72 6e 20 62 3b 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 62 2c 30 2c 61 29 3b 70 26 26 62 2e 70 75 73 68 28 70 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 50 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 3d 21 31 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 79 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 7a 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 41 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 Data Ascii: .size))break;g=!0}if(!f&&!g)return b;b=Array.prototype.slice.call(b,0,a);p&&b.push(p);return b};var P=class{constructor(a,b=!1){this.key=a;this.defaultValue=b;this.valueType="boolean"}};var ya=new P("45368259"),za=new P("45357156",!0),Aa=new P("45350890")
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 6c 21 3d 62 3f 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 62 29 29 3a 22 22 29 29 3f 28 63 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2c 30 3e 63 26 26 28 63 3d 61 2e 6c 65 6e 67 74 68 29 2c 64 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 30 3e 64 7c 7c 64 3e 63 3f 28 64 3d 63 2c 65 3d 22 22 29 3a 65 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2b 31 2c 63 29 2c 61 3d 5b 61 2e 73 6c 69 63 65 28 30 2c 64 29 2c 65 2c 61 2e 73 6c 69 63 65 28 63 29 5d 2c 63 3d 61 5b 31 5d 2c 61 5b 31 5d 3d 62 3f 63 3f 63 2b 22 26 22 2b 62 3a 62 3a 63 2c 62 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 Data Ascii: l!=b?"="+encodeURIComponent(String(b)):""))?(c=a.indexOf("#"),0>c&&(c=a.length),d=a.indexOf("?"),0>d\|\|d>c?(d=c,e=""):e=a.substring(d+1,c),a=[a.slice(0,d),e,a.slice(c)],c=a[1],a[1]=b?c?c+"&"+b:b:c,b=a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ka()
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 56 61 6c 75 65 7d 76 61 72 20 58 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 67 3d 7b 7d 7d 7d 3b 76 61 72 20 57 61 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 58 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 3b 76 61 72 20 61 3d 55 61 28 54 61 2c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 Data Ascii: Value}var Xa=class{constructor(){this.g={}}};var Wa=class extends Xa{constructor(){super();var a=Ua(Ta,document.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.c
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 75 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 75 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 61 26 26 28 53 3d 28 62 3d 61 2e 6d 61 74 63 68 28 2f 5c 5c 62 64 65 69 64 3d 28 5b 5c 5c 64 2c 5d 2b 29 2f 29 29 3f 62 5b 31 5d 3a 22 22 29 7d 63 61 74 63 68 28 63 29 7b 7d 7d 62 3d 53 3b 61 3d 21 21 62 2e 69 6e 64 65 78 4f 66 26 26 30 3c 3d 62 2e 69 6e 64 65 78 4f 66 28 22 31 33 33 37 22 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 61 29 7b 61 26 26 54 26 26 56 28 29 26 26 28 54 2e 63 6c 65 61 72 4d 61 72 6b 73 28 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 29 2c 54 Data Ascii: "";try{a="";try{a=u.top.location.hash}catch(c){a=u.location.hash}a&&(S=(b=a.match(/\\bdeid=([\\d,]+)/))?b[1]:"")}catch(c){}}b=S;a=!!b.indexOf&&0<=b.indexOf("1337")}return a});function fb(a){a&&T&&V()&&(T.clearMarks(`goog_${a.label}_${a.uniqueId}_start`),T
2024-02-15 00:12:06 UTC	1252	IN	Data Raw: 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 68 62 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 6c 65 74 20 62 3d 31 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 2e 68 29 62 3d 63 2e 6c 65 6e 67 74 68 3e 62 3f 63 2e 6c 65 6e 67 74 68 3a 62 3b 72 65 74 75 72 6e 20 33 39 39 37 2d 62 2d 61 2e 69 2e 6c 65 6e 67 74 68 2d 31 7d 20 66 75 6e 63 74 69 6f 6e 20 6b 62 28 61 2c 62 29 7b 6c 65 74 20 63 3d 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 22 2b 62 Data Ascii: return e=e\|\|0,2>e?encodeURIComponent(hb(a,b,c,d,e+1)):"...";return encodeURIComponent(String(a))}function jb(a){let b=1;for(const c in a.h)b=c.length>b?c.length:b;return 3997-b-a.i.length-1} function kb(a,b){let c="https://pagead2.googlesyndication.com"+b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50222	142.250.105.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1379	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:05 UTC	2210	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15703507277396764807","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:05 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50221	31.13.88.13	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	587	OUT	GET /signals/config/128900881029137?v=2.9.138&r=stable&domain=about.att.com HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	2013	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: *.cdninstagram.com 'self';block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy-report-only: clipboard-read=(), clipboard-write=(), encrypted-media=(), fullscreen=(), picture-in-picture=(), xr-spatial-tracking=();report-to="permissions_policy" permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(), display-capture=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), usb=(), window-management=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin
2024-02-15 00:12:05 UTC	641	IN	Data Raw: 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 65 6d 62 65 64 64 65 72 2d 70 6f 6c 69 63 79 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 65 70 5f 72 65 70 6f 72 74 22 0d 0a 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 6f 70 65 6e 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 72 65 70 6f 72 74 2d 74 6f 3d 22 63 6f 6f 70 5f 72 65 70 6f 72 74 22 0d 0a 50 72 61 67 6d 61 3a 20 70 75 62 6c 69 63 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 75 62 6c 69 63 2c 20 6d 61 78 2d 61 67 65 3d 31 32 30 30 0d 0a 45 78 70 69 72 65 73 3a 20 53 61 74 2c 20 30 31 20 4a 61 6e 20 32 30 30 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 58 2d 43 6f Data Ascii: cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"Pragma: publicCache-Control: public, max-age=1200Expires: Sat, 01 Jan 2000 00:00:00 GMTX-Co
2024-02-15 00:12:05 UTC	859	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 Data Ascii: /* Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wi
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 20 46 4f 52 20 41 4e 59 20 43 4c 41 49 4d 2c 20 44 41 4d 41 47 45 53 20 4f 52 20 4f 54 48 45 52 20 4c 49 41 42 49 4c 49 54 59 2c 20 57 48 45 54 48 45 52 0a 2a 20 49 4e 20 41 4e 20 41 43 54 49 4f 4e 20 4f 46 20 43 4f 4e 54 52 41 43 54 2c 20 54 4f 52 54 20 4f 52 20 4f 54 48 45 52 57 49 53 45 2c 20 41 52 49 53 49 4e 47 20 46 52 4f 4d 2c 20 4f 55 54 20 4f 46 20 4f 52 20 49 4e 0a 2a 20 43 4f 4e 4e 45 43 54 49 4f 4e 20 57 49 54 48 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 4f 52 20 54 48 45 20 55 53 45 20 4f 52 20 4f 54 48 45 52 20 44 45 41 4c 49 4e 47 53 20 49 4e 20 54 48 45 20 53 4f 46 54 57 41 52 45 2e 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 Data Ascii: FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.*/(function(a,b,c,d){var e={exports:{}};e.exports;(
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 72 65 74 75 72 6e 20 62 3b 65 6c 73 65 20 69 66 28 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 69 6e 20 4f 62 6a 65 63 74 28 62 29 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 69 66 28 21 61 29 74 68 72 6f 77 20 6e 65 77 20 52 Data Ascii: n function(b,c){if(Array.isArray(b))return b;else if((typeof Symbol==="function"?Symbol.iterator:"@@iterator")in Object(b))return a(b,c);else throw new TypeError("Invalid attempt to destructure non-iterable instance")}}();function j(a,b){if(!a)throw new R
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 5e 60 5c 7b 5c 7c 5c 7d 7e 5c 2d 5d 2b 29 2a 40 28 3f 3a 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 29 2b 5b 61 2d 7a 30 2d 39 5d 28 3f 3a 5b 61 2d 7a 30 2d 39 5c 2d 5d 2a 5b 61 2d 7a 30 2d 39 5d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 65 28 61 29 7b 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 64 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 62 28 61 29 29 64 3d 61 3b 65 6c 73 65 7b 61 3d 63 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 64 3d 65 28 61 29 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 64 7d 6b 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c Data Ascii: ^`\{\\|\}~\-]+)@(?:[a-z0-9](?:[a-z0-9\-][a-z0-9])?\.)+[a-z0-9](?:[a-z0-9\-]*[a-z0-9])?$/i;function e(a){return d.test(a)}function g(a){var d=null;if(a!=null)if(b(a))d=a;else{a=c(a.toLowerCase());d=e(a)?a:null}return d}k.exports=g})();return k.exports}(a,
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 2b 7c 5b 61 2d 7a 5d 2f 67 69 3b 62 3d 2f 5e 31 5c 28 3f 5c 64 7b 33 7d 5c 29 3f 5c 64 7b 37 7d 24 2f 3b 61 3d 2f 5e 34 37 5c 64 7b 38 7d 24 2f 3b 62 3d 2f 5e 5c 64 7b 31 2c 34 7d 5c 28 3f 5c 64 7b 32 2c 33 7d 5c 29 3f 5c 64 7b 34 2c 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 69 66 28 63 28 61 29 29 62 3d 61 3b 65 6c 73 65 7b 61 3d 53 74 72 69 6e 67 28 61 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 65 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 64 2c 22 22 29 7d 72 65 74 75 72 6e 20 62 7d 6b 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 Data Ascii: +\|[a-z]/gi;b=/^1$?\d{3}$?\d{7}$/;a=/^47\d{8}$/;b=/^\d{1,4}$?\d{2,3}$?\d{4,}$/;function g(a){var b=null;if(a!=null)if(c(a))b=a;else{a=String(a);b=a.replace(e,"").replace(d,"")}return b}k.exports=g})();return k.exports}(a,b,c,d)});f.ensureModuleRegiste
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 2c 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 72 65 74 75 72 6e 20 65 28 61 2c 7b 73 74 72 69 70 3a 22 61 6c 6c 5f 6e 6f 6e 5f 6c 61 74 69 6e 5f 61 6c 70 68 61 5f 6e 75 6d 65 72 69 63 22 2c 74 65 73 74 3a 22 5e 5b 61 2d 7a 5d 2b 22 7d 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 7b 6e 6f 72 6d 61 6c 69 7a 65 3a 65 2c 6e 6f 72 6d 61 6c 69 7a 65 4e 61 6d 65 3a 67 2c 6e 6f 72 6d 61 6c 69 7a 65 43 69 74 79 3a 69 2c 6e 6f 72 6d 61 6c 69 7a 65 53 74 61 74 65 3a 68 7d 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 Data Ascii: ,strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}function i(a){return e(a,{strip:"all_non_latin_alpha_numeric",test:"^[a-z]+"})}k.exports={normalize:e,normalizeName:g,normalizeCity:i,normalizeState:h}})();return k.exports}(a,b,c,d)});f.ensureModuleR
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 69 78 65 6c 50 49 49 55 74 69 6c 73 22 29 2c 62 3d 61 2e 65 78 74 72 61 63 74 50 49 49 46 69 65 6c 64 73 3b 66 75 6e 63 74 69 Data Ascii: ports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractFormFieldFeatures",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsPixelPIIUtils"),b=a.extractPIIFields;functi
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 6e 63 72 65 6d 65 6e 74 41 6e 64 47 65 74 28 6f 29 3b 69 66 28 6f 3e 64 7c 7c 6e 3d 3d 3d 67 29 63 6f 6e 74 69 6e 75 65 3b 6f 3d 63 28 6e 2c 66 26 26 6c 21 3d 6e 75 6c 6c 29 3b 6e 3d 69 28 6f 2c 32 29 3b 6f 3d 6e 5b 30 5d 3b 6e 3d 6e 5b 31 5d 3b 6f 21 3d 6e 75 6c 6c 26 26 6b 2e 70 75 73 68 28 6f 29 3b 6c 3d 62 28 6c 2c 6e 29 7d 7d 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 7d 6c 2e 65 78 70 6f 72 74 73 3d 67 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 50 61 67 65 46 65 61 74 75 72 65 Data Ascii: ncrementAndGet(o);if(o>d\|\|n===g)continue;o=c(n,f&&l!=null);n=i(o,2);o=n[0];n=n[1];o!=null&&k.push(o);l=b(l,n)}}return{formFieldFeatures:k,userData:l}}l.exports=g})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsExtractPageFeature
2024-02-15 00:12:05 UTC	1500	IN	Data Raw: 3a 61 28 7b 7d 2c 66 2c 7b 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 64 6f 6d 61 69 6e 22 7d 29 3b 69 66 28 63 3d 3d 3d 22 2e 22 29 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 6c 61 73 74 44 6f 74 49 6e 64 65 78 3a 62 7d 29 3b 72 65 74 75 72 6e 20 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 64 6f 6d 61 69 6e 22 26 26 65 2e 74 65 73 74 28 63 29 3d 3d 3d 21 31 7c 7c 66 2e 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3d 3d 3d 22 75 73 65 72 22 26 26 64 2e 74 65 73 74 28 63 29 3d 3d 3d 21 31 3f 66 2e 6c 61 73 74 44 6f 74 49 6e 64 65 78 3d 3d 3d 62 2d 31 3f 6e 75 6c 6c 3a 61 28 7b 7d 2c 66 2c 7b 65 6e Data Ascii: :a({},f,{userOrDomain:"domain"});if(c===".")return f.userOrDomain==="domain"&&f.lastDotIndex===b-1?null:a({},f,{lastDotIndex:b});return f.userOrDomain==="domain"&&e.test(c)===!1\|\|f.userOrDomain==="user"&&d.test(c)===!1?f.lastDotIndex===b-1?null:a({},f,{en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50211	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	540	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955921607&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=9962&N=30&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50227	52.7.164.58	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	464	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
2024-02-15 00:12:05 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:05 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 151 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:12:05 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:12:05 UTC	151	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 36 4d 43 46 50 63 44 48 67 6a 4d 6a 4b 69 76 31 62 6e 63 6c 63 55 5f 77 65 31 41 4e 69 65 4d 57 76 74 6c 7a 6f 74 71 4a 73 71 49 52 4d 76 74 33 70 71 59 50 74 30 4d 42 35 68 43 2d 58 43 77 74 49 44 6e 34 6c 35 2d 64 35 71 73 34 64 74 79 4c 6d 5a 67 7a 51 38 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs6MCFPcDHgjMjKiv1bnclcU_we1ANieMWvtlzotqJsqIRMvt3pqYPt0MB5hC-XCwtIDn4l5-d5qs4dtyLmZgzQ8", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50226	108.139.15.115	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	543	OUT	GET /code/19.22.0-fs/fs.utils.js HTTP/1.1 Host: gateway.foresee.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	744	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 61142 Connection: close Date: Thu, 18 Jan 2024 16:28:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: X-Requested-With Cache-Control: public, max-age=2419200 Status: 200 ETag: "490bde56ca70c2878e031ebd8aeede7c" Last-Modified: Fri, 05 May 2023 13:53:59 GMT Expires: Thu, 15 Feb 2024 16:28:25 GMT Strict-Transport-Security: max-age=15724800; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 6407b86e5baafe7d37861f17c38bd09c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: d-H3J82TBdPKHZdE7n78eUZnROmEaMv-q-d-s3VQDdbOkM7NSmmk_g== Age: 2360620
2024-02-15 00:12:05 UTC	15640	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 20 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 56 65 72 69 6e 74 20 53 79 73 74 65 6d 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 46 6f 72 65 53 65 65 20 57 65 62 20 53 44 4b 3a 20 55 74 69 6c 73 20 4c 69 62 72 61 72 79 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 31 39 2e 32 32 2e 30 0a 20 2a 20 42 75 69 6c 74 3a 20 4d 61 79 20 30 35 2c 20 32 30 32 33 20 61 74 20 30 39 3a 35 33 3a 33 37 20 45 44 54 0a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 5f 66 Data Ascii: /*************************************** * @preserve * Copyright (c) 2023 Verint Systems, Inc. All rights reserved. * ForeSee Web SDK: Utils Library * Version: 19.22.0 * Built: May 05, 2023 at 09:53:37 EDT ***************************************/_f
2024-02-15 00:12:05 UTC	16384	IN	Data Raw: 26 28 64 5b 74 5d 2e 74 74 6c 3d 6c 29 2c 6f 2e 5f 66 69 72 65 43 68 61 6e 67 65 45 76 65 6e 74 73 28 64 29 2c 6f 2e 5f 64 61 74 61 2e 6b 65 79 73 5b 74 5d 3d 64 5b 74 5d 7d 6f 2e 69 73 53 74 61 6c 65 3d 21 30 2c 73 26 26 6f 2e 6f 6e 43 6f 6d 6d 69 74 2e 73 75 62 73 63 72 69 62 65 28 73 2c 21 30 2c 21 31 29 2c 6f 2e 5f 6d 61 69 6e 74 28 29 2c 6f 2e 73 61 76 65 28 21 21 72 29 7d 29 2c 21 30 2c 21 30 29 7d 2c 69 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 74 5b 65 5b 69 5d 5d 3d 74 68 69 73 2e 67 65 74 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 74 7d 74 68 69 73 2e 5f 6d 61 69 6e 74 28 29 2c 74 Data Ascii: &(d[t].ttl=l),o._fireChangeEvents(d),o._data.keys[t]=d[t]}o.isStale=!0,s&&o.onCommit.subscribe(s,!0,!1),o._maint(),o.save(!!r)}),!0,!0)},i.get=function(e){if(Array.isArray(e)){for(var t={},i=0;i<e.length;i++)t[e[i]]=this.get(e[i]);return t}this._maint(),t
2024-02-15 00:12:05 UTC	16384	IN	Data Raw: 69 2b 3d 22 3b 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 3b 73 65 63 75 72 65 22 29 2c 61 29 69 66 28 61 5b 63 5d 29 73 77 69 74 63 68 28 73 3d 61 5b 63 5d 2c 69 2b 3d 22 3b 22 2b 28 22 64 75 72 61 74 69 6f 6e 22 3d 3d 63 3f 22 65 78 70 69 72 65 73 22 3a 63 29 2c 63 29 7b 63 61 73 65 22 65 78 70 69 72 65 73 22 3a 69 2b 3d 22 3d 22 2b 28 65 2e 69 73 44 61 74 65 28 73 29 3f 73 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3a 73 29 2b 22 3b 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 75 72 61 74 69 6f 6e 22 3a 69 2b 3d 22 3d 22 2b 6e 65 77 20 44 61 74 65 28 6a 28 29 2b 38 36 34 65 35 2a 73 29 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3b 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 69 2b 3d 22 3d 22 2b 73 7d 72 2e 63 6f 6f 6b 69 65 3d 74 2b 22 3d 22 2b Data Ascii: i+=";SameSite=Strict;secure"),a)if(a[c])switch(s=a[c],i+=";"+("duration"==c?"expires":c),c){case"expires":i+="="+(e.isDate(s)?s.toUTCString():s)+";";break;case"duration":i+="="+new Date(j()+864e5*s).toUTCString()+";";break;default:i+="="+s}r.cookie=t+"="+
2024-02-15 00:12:05 UTC	12734	IN	Data Raw: 72 61 67 65 42 79 74 65 73 3d 77 69 6e 64 6f 77 2e 6e 61 6d 65 2e 6c 65 6e 67 74 68 7d 2c 74 7d 28 29 3b 6b 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 70 70 6c 79 28 6b 65 29 7d 2c 6b 65 2e 69 73 53 75 70 70 6f 72 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3b 76 61 72 20 43 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 2c 69 2c 6e 29 7b 74 68 69 73 2e 73 74 67 3d 65 2c 74 68 69 73 2e 63 66 67 3d 74 2c 74 68 69 73 2e 63 70 70 73 3d 69 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 3d 6e 7d 76 61 72 20 69 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 69 2e 62 72 6f 77 73 65 72 43 68 65 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 Data Ascii: rageBytes=window.name.length},t}();ke.initialize=function(e){e.apply(ke)},ke.isSupported=function(){return!0};var Ce=function(){function t(e,t,i,n){this.stg=e,this.cfg=t,this.cpps=i,this.browser=n}var i=t.prototype;return i.browserCheck=function(e,t){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50228	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	752	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955924651&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1561&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 117 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	117	OUT	Data Raw: 78 01 1d 8b c1 0a c2 30 10 44 ff 65 ce a1 9b 04 db da fd 09 85 f6 26 1e 42 54 3c b4 46 92 d5 14 4a ff dd c5 cb cc 9b 07 b3 61 05 5f 36 2c 60 9c 4f e3 04 83 8f e2 53 e4 5d 98 a8 d6 da 04 91 26 a6 85 4a 09 8f 7f 44 fa 3a 8a e9 25 39 cd f3 3d df 82 04 bd 45 b0 b7 d6 a0 68 77 87 a3 c1 08 d6 99 c1 9d 75 06 a2 de f5 b6 1f da 76 f0 7e bf ee 3f 02 8b 23 99 Data Ascii: x0De&BT<FJa_6,`OS]&JD:%9=Ehwuv~?#
2024-02-15 00:12:05 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:05 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50225	108.139.15.115	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	546	OUT	GET /code/19.22.0-fs/fs.compress.js HTTP/1.1 Host: gateway.foresee.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	744	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 30827 Connection: close Date: Thu, 18 Jan 2024 08:05:49 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: X-Requested-With Cache-Control: public, max-age=2419200 Status: 200 ETag: "7df12a67c161fcac83f1e8daeac6de71" Last-Modified: Fri, 05 May 2023 13:53:59 GMT Expires: Thu, 15 Feb 2024 08:05:49 GMT Strict-Transport-Security: max-age=15724800; includeSubDomains Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4dd647f2c0221dd5d8526e120eae7942.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P2 X-Amz-Cf-Id: m9r2gEVxNWv6FTjOQbtwwueOVctXoxJRX_jxt5Z0z6tXb6FjBcU4FQ== Age: 2390776
2024-02-15 00:12:05 UTC	15640	IN	Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 20 2a 20 40 70 72 65 73 65 72 76 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 33 20 56 65 72 69 6e 74 20 53 79 73 74 65 6d 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 2a 20 46 6f 72 65 53 65 65 20 57 65 62 20 53 44 4b 3a 20 43 6f 6d 70 72 65 73 73 69 6f 6e 20 4c 69 62 72 61 72 79 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 31 39 2e 32 32 2e 30 0a 20 2a 20 42 75 69 6c 74 3a 20 4d 61 79 20 30 35 2c 20 32 30 32 33 20 61 74 20 30 39 3a 35 33 3a 33 37 20 45 44 54 0a 20 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a Data Ascii: /*************************************** * @preserve * Copyright (c) 2023 Verint Systems, Inc. All rights reserved. * ForeSee Web SDK: Compression Library * Version: 19.22.0 * Built: May 05, 2023 at 09:53:37 EDT *************************************
2024-02-15 00:12:05 UTC	15187	IN	Data Raw: 2c 78 3e 28 67 3d 73 2d 72 29 29 7b 69 66 28 28 67 3d 78 2d 67 29 3e 64 26 26 69 2e 73 61 6e 65 29 7b 74 2e 6d 73 67 3d 22 69 6e 76 61 6c 69 64 20 64 69 73 74 61 6e 63 65 20 74 6f 6f 20 66 61 72 20 62 61 63 6b 22 2c 69 2e 6d 6f 64 65 3d 33 30 3b 62 72 65 61 6b 20 74 7d 69 66 28 79 3d 30 2c 7a 3d 75 2c 30 3d 3d 3d 5f 29 7b 69 66 28 79 2b 3d 6c 2d 67 2c 67 3c 6b 29 7b 6b 2d 3d 67 3b 64 6f 7b 41 5b 73 2b 2b 5d 3d 75 5b 79 2b 2b 5d 7d 77 68 69 6c 65 28 2d 2d 67 29 3b 79 3d 73 2d 78 2c 7a 3d 41 7d 7d 65 6c 73 65 20 69 66 28 5f 3c 67 29 7b 69 66 28 79 2b 3d 6c 2b 5f 2d 67 2c 28 67 2d 3d 5f 29 3c 6b 29 7b 6b 2d 3d 67 3b 64 6f 7b 41 5b 73 2b 2b 5d 3d 75 5b 79 2b 2b 5d 7d 77 68 69 6c 65 28 2d 2d 67 29 3b 69 66 28 79 3d 30 2c 5f 3c 6b 29 7b 6b 2d 3d 67 3d 5f 3b 64 Data Ascii: ,x>(g=s-r)){if((g=x-g)>d&&i.sane){t.msg="invalid distance too far back",i.mode=30;break t}if(y=0,z=u,0===_){if(y+=l-g,g<k){k-=g;do{A[s++]=u[y++]}while(--g);y=s-x,z=A}}else if(_<g){if(y+=l+_-g,(g-=_)<k){k-=g;do{A[s++]=u[y++]}while(--g);if(y=0,_<k){k-=g=_;d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50229	64.233.177.147	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	979	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:05 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 15 Feb 2024 00:12:05 GMT Date: Thu, 15 Feb 2024 00:12:05 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-bDZEAw4eso9k4IZbyxYWwQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:05 UTC	405	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 62 44 5a 45 41 77 34 65 73 6f 39 6b 34 49 5a 62 79 78 59 57 77 51 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="bDZEAw4eso9k4IZbyxYWwQ">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-02-15 00:12:05 UTC	431	IN	Data Raw: 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 61 22 29 3f 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 Data Ascii: .data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorag
2024-02-15 00:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50233	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1426	OUT	GET /activityi;dc_pre=CLC46tGHrIQDFSiGpgQdbDEEkQ;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:05 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:05 GMT Expires: Thu, 15 Feb 2024 00:12:05 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:05 UTC	589	IN	Data Raw: 38 34 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 73 69 74 65 73 25 32 46 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3b 0a 76 61 72 20 44 4e 54 20 3d 20 Data Ascii: 845<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>var url = "about.att.com%2Fsites%2Faccessibility";var DNT =
2024-02-15 00:12:05 UTC	1252	IN	Data Raw: 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 3f 69 64 3d 31 39 32 38 36 33 33 34 36 37 36 35 32 35 34 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 27 3b 0a 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 73 69 74 65 73 25 32 46 61 63 63 65 73 73 69 62 69 6c 69 74 79 22 3b 0a 76 61 72 20 70 72 6f 64 75 63 74 54 79 70 65 20 3d 20 22 22 3b 0a 0a 69 66 20 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 22 25 32 46 63 6f 6e 6e 65 63 74 6d 65 25 32 46 72 65 73 69 64 65 6e 74 73 25 32 46 22 29 20 3e 20 2d 31 0a 09 7c 7c 20 75 72 6c 2e 69 6e 64 65 78 4f 66 28 22 25 32 46 69 6e 74 65 72 6e 65 74 25 32 46 22 29 20 3e Data Ascii: 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';}</script><script>var url = "about.att.com%2Fsites%2Faccessibility";var productType = "";if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1\|\| url.indexOf("%2Finternet%2F") >
2024-02-15 00:12:05 UTC	283	IN	Data Raw: 34 35 66 65 34 31 6d 30 76 39 31 33 37 37 32 32 35 33 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 73 69 74 65 73 25 32 46 61 63 63 65 Data Ascii: 45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Facce
2024-02-15 00:12:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50234	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	744	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955924992&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 14579 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	14579	OUT	Data Raw: 78 01 8d fc d7 0e f4 ba 92 2e 08 be ca c2 ba 18 60 a0 aa 23 ef 36 d0 17 52 ca 9b 94 94 72 a9 1c 0c 06 f2 de 7b 35 fa dd 9b ff de 55 35 d5 e7 a0 81 be c9 a4 2c a9 20 19 8c f8 e2 0b fe 7f fe f7 bf b7 bf ff f1 f7 fa f7 bf fd 3d fe fd 0f f4 df fe 3e c1 2f c6 20 ff f6 77 f5 f7 3f 58 84 fe b7 bf af ff 3c 71 83 02 82 11 ff f6 f7 ff 1b 3c 40 61 48 ca d2 05 9e 16 49 42 c4 39 96 31 14 89 16 18 4a b3 19 15 e3 71 0a de b7 82 17 30 24 0e de 39 fd a9 82 f3 fe 5f de 5f 5c 9a e6 eb 5a 27 75 57 6f 37 b8 67 5f 3a 70 a9 da b6 69 fd 07 0c c7 c9 b8 6f ff 23 de b6 ff 91 8e 3d bc d6 5b be c2 f1 ff f4 44 9a 83 07 88 12 3c 9b 66 a0 02 f0 b7 fc fd 0f 8c 04 0d 9e fe fe c7 ff fe 77 fc f7 3f 28 82 f9 b7 bf 13 70 0d 03 55 a7 7f ff 63 d8 bb ee df fe 06 37 53 14 86 fd db df e0 79 50 00 Data Ascii: x.`#6Rr{5U5, =>/ w?X<q<@aHIB91Jq0$9__\Z'uWo7g_:pio#=[D<fw?(pUc7SyP
2024-02-15 00:12:06 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:06 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:12:06 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 64 36 35 36 63 64 36 35 64 34 66 30 65 63 63 33 61 33 36 31 32 65 36 32 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/d656cd65d4f0ecc3a3612e62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50235	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	771	OUT	GET /generate_204?qJUrDw HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:06 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:05 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50237	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	1979	OUT	GET /pagead/viewthroughconversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:06 UTC	1906	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&cid=CAQSKQAvHhf_qT_X31XrWHa_wrmHez3vWIa3D6jmq6zUk-TI7DZ_HXNSR30E&random=3644765651 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50238	74.125.138.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:05 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 135 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:05 UTC	135	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 35 37 30 33 35 30 37 32 37 37 33 39 36 37 36 34 38 30 37 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://att.com","trigger_debug_key":"15703507277396764807"},"type":"trigger-no-matching-source"}]
2024-02-15 00:12:06 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:12:06 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50236	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	739	OUT	POST /?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955925111&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=620c97f3cfbb4ae2d8651f2179d6a3ac HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 15015 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:06 UTC	15015	OUT	Data Raw: 78 01 ed 7d 59 77 db 48 b2 e6 5f 41 ab a7 7a 2b 83 9b 76 b9 54 7d 64 59 b6 e4 d2 56 22 6d b7 6f 57 1f 1d 90 04 49 58 20 40 03 a0 96 ea d3 f7 dc d7 79 9e 79 99 b7 7e 98 f9 23 fd 53 ee 2f 99 2f 32 91 89 04 90 20 08 ca 52 49 d5 74 75 8b 24 90 6b 64 44 64 64 6c f9 dd 6f 5e 9f ed 77 3e 9d 1f 18 a3 68 ec 7e ff 5d fc d7 b6 fa df 7f 57 1f b1 8f ae df bf fb fe bb df 98 e6 8f 27 ef da 67 a7 87 9d 93 e3 9d bf af 34 57 f0 c7 5b d9 59 a1 df 2b 2f 56 ac 95 9d bf fe 7d a5 25 9e ba 96 37 c4 d3 6b 14 b0 3d f3 7d 7b e5 1f ff 78 a1 bc ee b9 56 18 c6 ef 3f 87 46 e8 fc 6c 87 46 cf f7 af 1c 7c da d7 b6 17 b9 4e 18 d9 9e 1d 18 9e 6f 3a f6 56 cf 1f 4f ac c8 f8 1c fa 9e f1 65 6a 07 77 a1 ed da bd c8 0f 8c f0 7a 68 84 d3 c9 c4 0f a2 d0 98 38 bd 68 1a d8 c6 90 aa 5a 78 8d 47 81 3f Data Ascii: x}YwH_Az+vT}dYV"moWIX @yy~#S//2 RItu$kdDddlo^w>h~]W'g4W[Y+/V}%7k=}{xV?FlF\|No:VOejwzh8hZxG?
2024-02-15 00:12:06 UTC	961	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:06 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://about.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50240	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	825	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:06 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:12:06 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50241	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	935	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source;navigation-source Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:06 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:12:06 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:12:06 UTC	1256	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d
2024-02-15 00:12:06 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50243	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	587	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:06 UTC	458	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:06 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 20 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:06 UTC	20	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 7d 7d Data Ascii: {"when":0,"keys":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50244	3.163.101.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	738	OUT	GET /pixel/8597/?che=0.6060981865747019&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATTwAAAAABAS1dAAAAAA
2024-02-15 00:12:06 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:12:05 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATVgAAAAACAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 2d3d2d50d26ac994841cde79fc5be2c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 X-Amz-Cf-Id: 66QmjEN6dgO-TGMBvvEVDxbi2K68fsIV1saCgf8Ct99f-KMZHch0DQ==
2024-02-15 00:12:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50245	142.250.9.106	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	2146	OUT	GET /pagead/1p-conversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&cid=CAQSKQAvHhf_qT_X31XrWHa_wrmHez3vWIa3D6jmq6zUk-TI7DZ_HXNSR30E&random=3644765651 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:06 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50250	142.251.15.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	1122	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=6946697285925;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=1562204696;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:06 UTC	2208	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7612614599699481410"}],"aggregatable_trigger_data":[{"filters":{"14":["8783283"]},"key_piece":"0x959ea19b3455e843","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x990f94304f244cee","not_filters":{"14":["8783283"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["8783283"]},"key_piece":"0x11a013ca02fd6d11","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xc6378d29631a29","not_filters":{"14":["8783283"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"10935695423656618490","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50246	35.226.68.60	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	551	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:06 UTC	1105	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:06 GMT Content-Type: application/json Content-Length: 1654 Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://about.att.com Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET,POST Access-Control-Max-Age: 31536000 Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:12:06 UTC	1654	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 7b 22 69 22 3a 22 32 30 37 22 2c 22 76 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 37 37 22 2c 22 76 22 3a 22 66 66 64 63 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 38 37 22 2c 22 76 22 3a 22 76 5f 34 5f 73 72 76 5f 31 39 5f 73 6e 5f 30 33 33 32 39 35 38 37 38 46 45 35 46 33 41 37 36 31 34 45 33 34 42 31 35 35 39 42 41 39 45 46 5f 70 65 72 63 5f 31 30 30 30 30 30 5f 6f 6c 5f 30 5f 6d 75 6c 5f 31 5f 61 70 70 2d 33 41 37 65 39 31 32 32 39 32 33 32 63 64 33 33 32 39 5f 31 22 2c 22 Data Ascii: {"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50258	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	1427	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 11594 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1707955923649&flash=0&frm=2&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1110%2C624&vis=1&wgl=true&ca_type=image&bid=ANyPxKrdHt33300w-cxydP3kmhWqjcGi3gm8fTxjemfs5WXOMBGqto5PYX8kpUHk-W-L0yQ9AugVpIqCwLTAu3OOhw-obXSDiw sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1707955925980 Content-Type: application/json X-YouTube-Utc-Offset: 60 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240212.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgsyWGJmMEVNMi1vbyjSrbWuBjIKCgJVUxIEGgAgOQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:06 UTC	11594	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 32 31 32 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 4b 74 74 61 34 47 45 4b 79 33 72 77 55 51 30 49 32 77 42 52 43 33 37 36 38 46 45 4c 32 32 72 67 55 51 76 5a 6d 77 42 52 43 77 73 72 41 46 45 4a 43 79 73 41 55 51 71 4a 71 77 42 52 44 38 68 62 41 46 45 4d 7a 66 72 67 55 51 33 62 43 77 42 52 44 71 77 36 38 46 45 4c 65 72 73 41 55 51 2d 71 65 77 42 52 44 4d 72 76 34 53 45 4f 48 79 72 77 55 51 74 2d 72 2d 45 68 44 50 71 4c 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240212.01.00","configInfo":{"appInstallData":"CNKtta4GEKy3rwUQ0I2wBRC3768FEL22rgUQvZmwBRCwsrAFEJCysAUQqJqwBRD8hbAFEMzfrgUQ3bCwBRDqw68FELersAUQ-qewBRDMrv4SEOHyrwUQt-r-EhDPqLAFEL
2024-02-15 00:12:06 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 15 Feb 2024 00:12:06 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:06 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-02-15 00:12:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50259	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	544	OUT	OPTIONS /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://about.att.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	371	IN	HTTP/1.1 204 No Content Date: Thu, 15 Feb 2024 00:12:06 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: content-type Access-Control-Max-Age: 600 Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50260	142.250.9.119	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	464	OUT	GET /vi/tFUHPoLMUwk/maxresdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/jpeg Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 111753 Date: Thu, 15 Feb 2024 00:12:06 GMT Expires: Thu, 15 Feb 2024 02:12:06 GMT Cache-Control: public, max-age=7200 ETag: "1660918161" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:07 UTC	604	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0a 0d 0d 0d 08 0d 08 0d 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0d 10 0d 08 08 0e 0a 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 10 15 12 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 04 01 02 03 05 06 00 07 08 09 ff c4 00 51 10 00 01 03 02 03 04 06 05 09 04 07 07 03 04 03 01 01 00 02 11 03 21 04 12 31 05 41 51 61 06 13 22 32 71 81 42 91 a1 b1 d1 07 14 23 52 62 92 Data Ascii: JFIF"Q!1AQa"2qB#Rb
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 90 05 09 52 2e 08 43 45 4a 91 70 29 40 55 cb 97 24 10 54 a0 a6 a5 48 03 82 54 c0 53 82 04 15 2c a4 5c 81 05 5c b9 72 04 39 2c a4 5c 81 07 2e 5c b9 20 82 ca e4 89 41 42 01 42 e9 48 b9 02 0e 95 c9 02 54 08 72 59 48 b9 00 2a 54 d4 a0 a0 4b 0a b9 72 e4 01 cb 81 5c b9 00 2a e4 89 42 04 39 72 e5 c8 10 50 94 26 a5 05 20 0a b9 24 a5 48 07 2e 5c b9 28 82 ae 48 94 20 05 09 42 6a 59 48 20 ab 97 2e 4a 20 a1 2a 6a 50 53 6c 02 84 a9 12 84 82 31 cb 92 4a 54 0d 39 2b 52 2e 08 01 52 ca 44 a9 04 1e 94 26 82 96 53 46 b1 53 93 52 82 86 34 70 4a 13 42 70 4d 1a 38 25 09 02 54 83 47 a5 09 b2 94 26 0d 63 c2 70 4c 09 cd 4d 63 18 f0 9c 13 13 81 51 b1 a3 82 70 4d 09 c1 31 8c 68 70 4e 09 b2 94 26 31 8c 78 4a 13 42 72 63 18 c7 04 e0 98 13 82 63 1a c7 04 a9 a1 38 26 31 b6 1c b8 14 89 Data Ascii: R.CEJp)@U$THTS,\\r9,\.\ ABBHTrYHTKr\B9rP& $H.\(H BjYH .J *jPSl1JT9+R.RD&SFSR4pJBpM8%TG&cpLMcQpM1hpN&1xJBrcc8&1
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 79 b3 5f f9 3b 2b de 1e 05 6d 0f 53 b4 fd c7 9d 04 ab d3 9d d0 ac 2f 0a 9f de ff 00 ff 00 28 6a bd 0e c3 8f af fd e7 e4 9d 2e 1d 6c d8 ef cf d9 5e f1 17 02 76 87 a9 da 7e e3 ce 97 2d fb ba 25 47 ed fd f1 f0 40 e3 3a 39 49 ba 66 f3 7f e4 96 9f 0e 36 74 f7 67 ec af 78 d9 70 2b 68 2f b9 da 7e e3 1c 94 2d 13 36 3d 39 f4 be f7 e4 8d a5 d1 da 44 7a 5f 7f f2 56 57 0b b0 2f ef f6 7e 63 7c 0c c7 fa 9d af 91 91 5c b4 58 ed 8f 4d b1 19 b9 cb a7 f0 5d b3 f6 33 1c e8 21 d1 0e 26 1d 11 6b 6e e2 aa 62 b8 75 b3 70 f0 94 e7 9e d1 57 7e 4f cc b5 47 80 3b 4a ab 4a 3c 5e be b3 f7 19 d0 95 6c bf a3 74 be d7 df 1f 05 df d1 ba 5f 6b ef 0f 82 c2 f1 b9 b0 fd b7 61 7c 45 df 15 fb 63 9e 97 6d fc 26 35 28 5b 11 d1 ca 5f 6b ef 8f 82 ef e8 e5 2f b5 f7 c7 c1 1e 37 36 1f b6 ec 2f 88 3c Data Ascii: y_;+mS/(j.l^v~-%G@:9If6tgxp+h/~-6=9Dz_VW/~c\|\XM]3!&knbupW~OG;JJ<^lt_ka\|Ecm&5([_k/76/<
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: f1 56 23 b5 28 be 7e a2 37 c0 bc 7a fb 9d af 91 aa 5c b2 df b7 aa 7d 9f b8 7e 2b bf 6f d5 fb 3f 70 fc 52 fd 63 4b d2 37 c0 dc 7f a9 da f9 1a a0 95 65 0e df ab f6 7e e1 f8 a4 fe 90 55 fb 3f 74 fc 52 fd 63 4b d2 1e 06 e3 fd 4e d7 c8 d6 2e 59 3f e9 05 5f b3 f7 4f c5 77 f4 82 af d9 fb a7 e2 8f ac 29 7a 44 f0 37 1f ea 76 be 46 b4 25 59 2f e9 05 5f b3 f7 0f c5 2f f4 86 af d8 fb 87 e2 93 eb 0a 5e 91 3c 0d c7 fa 9d af 91 ad 09 42 c8 8e 90 d5 fb 3f 70 fc 52 7f 48 aa fd 8f b8 7e 28 fa 7d 2f 48 9e 06 63 fd 4e d7 c8 d8 2e 59 0f e9 15 5f b1 f7 0f c5 27 f4 8e af d8 fb 87 e2 8f a7 d2 f4 89 e0 66 3f d4 ed 7c 8d 8a e5 8f fe 92 55 fb 1f 70 fc 57 7f 49 2a fd 8f b8 7e 28 fa 75 3f 48 9e 06 63 fd 4e d7 c8 d9 04 e5 8c fe 92 55 fb 1f 70 fc 57 0e 92 d6 fb 1f 70 fc 52 7d 36 9f a4 Data Ascii: V#(~7z\}~+o?pRcK7e~U?tRcKN.Y?_Ow)zD7vF%Y/_/^<B?pRH~(}/HcN.Y_'f?\|UpWI*~(u?HcNUpWpR}6
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 2b ef 25 64 75 1e aa 76 95 5e 4a e2 a5 15 4d b5 69 2b b8 58 b5 22 39 15 d4 75 56 94 7b aa a6 82 b9 c3 b7 b2 ba 38 af 24 80 a8 da 5b b9 29 fa 3f 4e 4b 8f 00 00 f3 24 91 e3 60 a0 da 6d ba b4 e8 ed 2e c1 3f 59 c6 44 69 94 45 b9 5d 71 fc 2b ad c5 e1 65 eb 34 bf 5b ff 00 07 45 b2 63 79 a7 cd 70 ac ab b2 a9 f2 ae c8 bc c3 31 d2 e6 20 ca bb 2a 20 31 2e 44 99 c2 e0 d9 57 65 44 65 5c 1a 8c c1 70 7c ab b2 a2 72 24 0c 46 70 b8 38 62 5c a8 9e ad 26 44 66 0c c0 f0 bb 2a 23 22 e2 d4 66 62 5c 1f 22 4c 88 90 d5 d9 51 98 33 03 96 a4 ca 8a c8 93 2a 2e c2 e0 d9 57 65 44 e4 5c 58 97 33 0c c0 d9 52 16 a2 b2 a4 2c 46 60 cc 0d 95 76 54 4e 45 d9 51 98 2e 0c 18 97 22 9f 22 ec 88 cc 17 20 ca bb 2a 9f 22 50 d4 66 17 30 36 45 d9 51 59 13 4d 34 66 0c c4 19 57 65 53 e4 5d 91 19 83 31 Data Ascii: +%duv^JMi+X"9uV{8$[)?NK$`m.?YDiE]q+e4[Ecyp1 * 1.DWeDe\p\|r$Fp8b\&Df#"fb\"LQ3.WeD\X3R,F`vTNEQ."" *"Pf06EQYM4fWeS]1
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: d1 a7 b9 62 aa d6 8b df cf f5 65 36 17 12 5c 35 f3 3a 2b 95 71 72 8a ca 88 d4 11 a5 ad 50 38 ea 84 c5 32 74 f2 49 84 c3 93 bd 5b 33 08 21 66 3c 07 19 e5 32 6e 36 c6 68 e1 7d 7b f9 a0 f1 6f 80 b5 38 8c 27 01 a6 aa 8f 1f 82 9f cd 4b 47 0b 28 0d 94 93 32 b8 cc 5d fd ca 26 e3 49 b4 a9 f6 8e ce 3e a4 0d 2c 29 1a 0f 6a b3 19 c4 63 24 a8 79 a8 5a d4 50 a5 09 b8 86 d9 5a 8d de e2 26 81 9c 10 d5 58 a7 7b d3 0b 92 4a a3 e5 0b 10 3a 9a 61 2a 7a a5 0c 2e 9f 49 dd 88 4e c3 28 96 04 25 16 a2 e9 15 a7 1d c2 0a e6 2b 9d 99 53 fd 39 2a fa 4d 94 55 16 42 ad 8b 86 78 d8 75 2d 19 7c 31 22 10 38 da c0 6f 40 54 71 31 f1 b2 69 62 c0 8c 5c 65 62 e3 dc 38 3e 4a 91 be f5 18 64 29 68 ea 0f 02 3f 35 6a 14 75 22 cd a1 7b 84 d8 f2 25 ee 37 d0 32 24 79 aa dd b5 b2 8b 41 73 5c 48 6f 79 Data Ascii: be6\5:+qrP82tI[3!f<2n6h}{o8'KG(2]&I>,)jc$yZPZ&X{J:az.IN(%+S9MUBxu-\|1"8o@Tq1ib\eb8>Jd)h?5ju"{%72$yAs\Hoy
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 97 ce 1b 41 ce a8 73 38 68 22 44 0b 0e 2a db 66 ec 37 d2 63 71 06 99 cc d7 30 d3 a7 63 d6 d3 77 64 b9 f1 dd b9 10 a9 78 17 75 27 18 df 2a b9 62 5b 5a 31 b6 66 95 dd 8f a0 9d 43 92 4e a3 92 c1 7c 99 f4 9a a0 7f cd f1 2f ed 3d ce 14 83 a3 33 08 05 c1 a4 8d 5a 46 93 c1 7a 61 62 e7 27 b3 23 16 d3 5b 8d 28 d6 ba bd ca f3 44 70 5d d4 72 47 e4 49 91 33 ea f8 73 0b c6 30 1e a1 2f 52 8d ca 93 2a 1e cf 87 30 71 80 7d 4a ee a0 23 32 ae 20 04 8f 01 0e 60 e3 00 c5 04 dc 58 63 1b 99 ef 6d 36 ee 7d 47 06 83 c8 4e a8 4d bf d2 2a 74 29 bd fd e3 4d a7 2b 74 cc e3 dd 04 ee 12 bc 83 a2 b8 ca d8 bc 68 ad 5d c6 a1 a7 2f 63 5d 06 93 1c 27 23 45 3d 32 0b 6e 56 b0 3b 3a 8d 76 d7 26 eb 8c ad 56 50 47 ae fe d7 c3 6f c4 53 11 f5 c9 64 f8 66 d5 3e 9e 3e 81 d3 11 4c 81 a9 6b c1 0d dd Data Ascii: As8h"Df7cq0cwdxu'b[Z1fCN\|/=3ZFzab'#[(Dp]rGI3s0/R0q}J#2 `Xcm6}GNMt)M+th]/c]'#E=2nV;:v&VPGoSdf>>Lk
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: a2 b1 db 5d aa ee 12 0e f6 63 64 ca c7 3b 9a 40 f4 95 4a 1e a5 48 4c c4 d0 79 b4 15 5a c4 a5 e9 69 20 ba f4 ea 35 f9 a5 a5 49 88 d1 73 4a 92 93 aa e0 86 a3 5d 1f 49 cb 46 94 5d 86 b1 69 d9 19 45 e8 4a 88 8c 13 65 45 88 d1 0b 00 9e ad 3d b8 74 65 2c 27 34 4d 4a 30 b1 5c 3c ab b2 da d5 15 4f a2 9c da 68 de a5 76 55 66 15 10 c9 45 93 e1 31 6f 68 80 7c 88 96 fb 50 fb 47 1a f7 08 26 dc 00 81 e7 08 96 0b 78 a8 9f 42 77 2b ce 6d c6 d7 1a a9 15 74 aa 42 b8 d9 8f 41 3f 09 c9 15 b2 59 06 eb 26 ae 1a 79 ae 89 72 9a 1c 30 95 3d 7c 3a 8b 0d 52 14 b5 b1 7f ae 6a e6 1e f0 56 64 33 89 47 8f c3 c2 5c 05 3b 7a 94 b8 9a d3 af fa ae a3 53 86 ed c9 6a 52 8c dd c2 37 13 16 db 2c 8e d9 17 36 5a 8d a5 88 80 b1 3b 5f 15 24 f0 54 d5 05 1a aa c8 73 7a 10 d1 46 b3 45 5d 86 2a cf 0b Data Ascii: ]cd;@JHLyZi 5IsJ]IF]iEJeE=te,'4MJ0\<OhvUfE1oh\|PG&xBw+mtBA?Y&yr0=\|:RjVd3G\;zSjR7,6Z;_$TszFE]*
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 26 a6 e8 a4 97 e7 b8 ca e1 1e 2f e8 f4 63 05 be 5f c1 8b 6e ca c4 39 99 7a ca 85 bf 53 39 0d f0 3c 42 cc e3 76 c3 b0 e5 cc aa fa 6c 71 0d ec d4 2d cc f6 68 de ad b1 0c 62 f6 1f 95 1f 94 dc 06 cc a0 72 31 b5 ab 1b 52 a6 49 0d cd 20 66 7c 0e e8 9d 37 c2 f9 1f a4 7d 26 a7 8b ac fc 46 22 bb 8d 5a d1 9b 25 1c ac 6b 40 86 b1 8d 16 0d 01 7a 4e d3 c5 46 95 94 53 72 e6 de 73 5b 3a 9c ea 6a ec a3 e9 3d 43 05 89 c1 55 73 59 57 1d 4e 9b 5d 25 ef ed 10 0c 4c 40 dd 36 56 18 1d b7 46 a9 34 29 e3 48 ce e6 b6 90 70 6c 75 6c 12 5a 08 19 8b 9c e1 61 b8 2f 19 d9 94 30 f5 5c 18 ca 8f 2e 33 00 d3 8d 2f a9 5a cd 93 d1 da b8 57 0c 5d 32 33 61 0e 66 07 b4 3d b7 ec 92 5b 37 58 eb 6f 53 a5 25 0a 91 cb 9b 7e fb b3 46 7b 22 75 63 9e 2f 35 b7 1e 85 8e d9 15 18 43 c4 87 34 87 07 9b bb Data Ascii: &/c_n9zS9<Bvlq-hbr1RI f\|7}&F"Z%k@zNFSrs[:j=CUsYWN]%L@6VF4)HplulZa/0\.3/ZW]23af=[7XoS%~F{"uc/5C4
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 8a 4e d9 b9 23 e9 7f 99 a5 b3 36 6c b1 92 92 8d 9c a2 b3 28 ee 73 d5 5d 2f c8 d8 f4 5f e4 cf 07 40 02 e6 75 f5 22 f5 6b 8c cc 9f b1 4a 72 34 7a cf 35 b0 a1 81 a6 d1 0d a4 c6 8e 0d 63 40 f6 05 f3 fe 13 0b b6 b0 9d 86 37 10 d6 8b 35 8c ea f1 34 e3 ec f7 c0 1e a5 6d 87 e9 06 dd 36 14 aa 13 c5 d8 3a 4d f6 b8 00 b9 5c 46 ce ad 51 e6 75 a1 2e 99 5b f4 dc 7a 1e 07 6d e1 70 d0 e2 d6 12 a5 36 b9 14 2f fa ef 7f 99 eb 1b 5b a2 d8 5a c2 2a 61 a9 ba 7d 20 cc 8f 1e 0f 64 11 e4 57 8a 7c a4 74 52 96 16 b3 29 d0 aa 6a 1a f9 bf dd bb f5 a9 11 19 7b 4d ef 07 49 80 44 f6 77 ad 06 17 63 6d cc 45 aa d7 34 1a ed 73 3e 8b 0c 1e 0d c2 89 dd a1 21 6b fa 0f f2 79 47 08 ee b5 ce 35 ab df e9 ea 02 03 4b a4 38 d3 64 98 24 5a 49 27 9a 28 56 fa 0d dc aa a9 fa b1 d5 7e 6f 93 f2 d4 8b 1f Data Ascii: N#6l(s]/_@u"kJr4z5c@754m6:M\FQu.[zmp6/[Z*a} dW\|tR)j{MIDwcmE4s>!kyG5K8d$ZI'(V~o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50263	142.251.15.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	1068	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=7591744147565;auiddc=772933313.1707955906;u19=about.att.com%2Fsites%2Faccessibility;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=1573789940;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:07 UTC	2210	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"15703507277396764807","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:07 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50262	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	572	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	339	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50265	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	539	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955924651&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1561&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50266	142.251.15.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:06 UTC	550	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:07 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Thu, 15 Feb 2024 00:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:07 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 78 71 6b 76 36 45 62 78 74 55 77 42 51 5a 34 46 6a 54 49 61 41 4f 6b 39 78 79 52 54 69 74 34 47 6c 69 6a 6c 59 58 4a 49 51 36 36 63 44 41 48 4b 62 34 73 62 66 77 32 4a 64 62 36 4f 4b 4c 43 37 31 62 66 51 76 6b 55 38 6d 35 52 4c 4d 72 2d 73 65 51 6e 4b 46 63 39 4d 32 66 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKoxqkv6EbxtUwBQZ4FjTIaAOk9xyRTit4GlijlYXJIQ66cDAHKb4sbfw2Jdb6OKLC71bfQvkU8m5RLMr-seQnKFc9M2fQ"}
2024-02-15 00:12:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50272	172.253.124.132	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	532	OUT	GET /Z0IIzRaYIgRNxjlGR7HeS_B6WlFxEbSK4MGEzDxrH8Mszp0QD8DqIcDnhkMzRBr1YDqwtT86=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 16 Feb 2024 00:12:07 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:12:07 GMT Server: fife Content-Length: 2279 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:07 UTC	721	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 08 09 08 08 08 03 08 10 09 07 08 0a 0b 08 09 08 08 08 0a 09 0b 08 08 0e 08 06 0b 08 08 10 0d 0d 08 08 08 0b 08 0d 08 0d 0b 0d 0a 08 08 0a 0b 0a 09 0d 08 08 17 0e 0a 0b 0c 0d 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0d 0b 0d 0e 0e 12 0f 0f 10 0f 0d 11 13 10 10 12 0f 0e 0e 10 0f 0f 10 11 11 13 11 11 0f 10 0e 0e 0d 0e 0f 0e 0f 14 0f 10 10 10 11 0e 0f 0d 0d 0d 10 0d 0e 11 0d ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 07 03 05 08 04 09 02 ff c4 00 32 10 00 02 01 03 02 04 04 03 07 05 00 00 00 00 00 00 01 02 03 00 04 11 05 12 06 07 13 21 22 31 41 51 08 23 61 32 33 43 52 71 81 82 14 16 91 a1 b2 Data Ascii: JFIFDD2!"1AQ#a23CRq
2024-02-15 00:12:07 UTC	1252	IN	Data Raw: 35 23 45 1c 64 6b ed 4b 96 c2 d6 3a 70 2e 37 b7 51 e1 75 a5 61 75 55 5b 33 03 ce 25 30 3a 0c 90 66 cc eb dc 6b 7d 43 45 af c6 c7 c6 d7 e6 5e 28 e1 a9 6d 2e 25 b6 d4 97 6c d0 b6 d6 00 e4 1e c0 86 07 d5 4a 90 54 fa 82 3b 56 75 53 4e fa 69 5d 0c 82 ce 69 b1 fc f9 85 b2 51 56 45 59 03 2a 21 37 63 85 c7 e7 98 dc 7a ad 5d 79 97 b5 28 89 44 5f b8 63 c9 03 20 64 81 96 38 03 bf 99 3e 83 dc d7 e8 17 36 5c 5c 6c 09 5d 25 ab 6a 57 dc 3b 3c a9 69 6e 2e 34 59 c8 65 0c 0e c2 4c 48 8d e3 01 b6 4a c4 0d c2 45 65 90 0e cb ea ba 0c 92 54 e0 52 39 ad 60 7d 3b b5 d7 71 d2 db f8 1f 1b 83 c9 64 50 c5 45 b5 50 b2 47 c8 63 ab 8e e0 db 47 0d 49 ee f1 68 e1 6b 10 77 95 82 db 8e 78 4a e4 ee d5 b4 e6 b6 7f 5d ab 22 a6 4f 98 1d 09 97 38 f7 68 d7 e9 eb 5c 5b 5b 81 ce 6f 2c 05 87 a5 ed Data Ascii: 5#EdkK:p.7QuauU[3%0:fk}CE^(m.%lJT;VuSNi]iQVEY*!7cz]y(D_c d8>6\\l]%jW;<in.4YeLHJEeTR9`};qdPEPGcGIhkwxJ]"O8h\[[o,
2024-02-15 00:12:07 UTC	306	IN	Data Raw: c8 5e e7 33 b8 b9 fc 49 b0 f6 5a d0 2b ba 83 56 94 a2 25 11 28 8b 2d a5 db 23 07 87 ed 29 c8 c8 0c 0f b8 20 82 ac a4 76 65 60 55 81 20 82 09 15 c9 ae 2d 37 0b 8b 9a 1c 0b 4f e7 df c0 f5 1a 8e 0a ed e0 ff 00 88 b5 8d 76 6a 49 34 07 00 75 2c 2e 72 a3 18 c0 16 f7 02 7b 54 04 79 f4 76 2f b2 0e db 6d f4 98 f0 8c 65 78 7b 7a c6 fd 3f 71 d7 68 f7 5b a0 59 e6 23 b2 86 67 66 8f b3 7f 49 63 d7 f8 91 96 bc fd ec c7 99 3c 65 4d f1 3d 6a bd e3 b9 bd 94 8f c3 91 34 d8 d5 bc fb 16 4b 6e a0 1f 55 ee 3f d5 4a 9d a4 88 6e 92 67 74 3d 88 f3 0d ba af 8d 8a 99 c6 c6 1a 66 f5 1f 48 71 1e 00 bc 0f 8a aa 79 85 cf 0b 9b d0 d1 c4 3a 36 ed 9c a7 55 e6 91 81 0b 95 32 39 2d b3 23 ee a1 11 44 73 dd 09 00 d5 5a bf 17 96 af d9 dc df 12 e3 ef 71 f4 19 47 45 7b c2 b6 7a 0a 0b 3b bc fe 79 Data Ascii: ^3IZ+V%(-#) ve`U -7OvjI4u,.r{Tyv/mex{z?qh[Y#gfIc<eM=j4KnU?Jngt=fHqy:6U29-#DsZqGE{z;y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50271	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	592	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:12:07 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50268	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	527	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955924992&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50273	99.84.208.48	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	505	OUT	GET /pixel/8597/?che=0.6060981865747019&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVgAAAAACAS1dAAAAAA
2024-02-15 00:12:07 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:12:07 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATVwAAAAADAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 c208eb85ab071bce3678151b6fd6ca36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: EYebZEbsCsTXLOG8aKm8V1QgOLWJrLoQ8spD2rj6byhlBFAzsXovAA==
2024-02-15 00:12:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50269	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	629	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&rl=&if=false&ts=1707955925436&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955924564&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:12:07 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:12:07 UTC	1289	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50275	74.125.138.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	1913	OUT	GET /pagead/1p-conversion/1049001539/?random=1489193786&cv=11&fst=1707955924541&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=AT%26T%20Accessibility&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUosbm90LW5hdmlnYXRpb24tc291cmNlLCB0cmlnZ2VyLCBldmVudC1zb3VyY2ViBAoCAgM&pscrd=CIjkjOPT-57TiQESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmEtWEZ3LWVRenM4OURjYWY2dEp0ZDVsZWxNamk0OHl6WHpXVTRHSzJXSGNXa2pvSzVSb192QkoiEwi73_HRh6yEAxU4p8sBHcglCpUyAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=1VbNZfugI7jOrr4PyMuoqAk&cid=CAQSKQAvHhf_qT_X31XrWHa_wrmHez3vWIa3D6jmq6zUk-TI7DZ_HXNSR30E&random=3644765651 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:07 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50277	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	458	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 20 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:07 UTC	20	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 7d 7d Data Ascii: {"when":0,"keys":{}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50278	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	769	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926311&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 554 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	554	OUT	Data Raw: 78 01 75 93 5b 73 a2 30 14 c7 bf 4b 5e cb 4a 12 c2 25 cc f4 a1 a8 d4 0b ad 55 a8 b7 9d 7d 00 04 2c 20 20 04 91 3a 7e f7 8d d6 87 dd 4e 7d c9 c9 e5 ff 3b ff 93 93 c9 09 04 49 d0 02 fd 74 8b e0 80 f5 48 c6 de d6 f2 c9 d2 4d 3e b7 39 0b 34 31 3a 54 9b 9a 58 83 a2 47 a8 3b 8e fc f1 24 ed ae fc 71 15 d4 93 97 c1 28 94 0e 8b c8 9e 39 c5 4c d9 44 fe 74 1f 7f d4 2f 35 a5 a5 5a f4 8e 81 67 e6 cd 08 77 6d 67 44 b6 83 35 9e 4e f0 bb c4 92 81 37 62 99 6b 9a 65 62 e2 ac 6c 6d bf 89 a7 9e fa 91 96 8b 7c 5e 85 4e b1 b4 3e bd 27 eb 55 cb 35 b6 9e 23 52 46 eb 32 ef cf 8c a5 1f d6 fb e8 b9 55 da 48 2d a0 52 77 f3 38 6e 23 a3 dd 2d 98 8b 4c 2f 91 8c e2 28 4d ec e5 73 ae 30 37 d8 b8 e9 dc ae d6 7e 4d 93 46 73 66 99 15 97 f2 ac 57 f7 0c 5e 5e 60 e6 6d 7f 98 ed 3f 9b d1 f0 35 Data Ascii: xu[s0K^J%U}, :~N};ItHM>941:TXG;$q(9LDt/5ZgwmgD5N7bkeblm\|^N>'U5#RF2UH-Rw8n#-L/(Ms07~MFsfW^^`m?5
2024-02-15 00:12:07 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50270	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	522	OUT	GET /?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955925111&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=620c97f3cfbb4ae2d8651f2179d6a3ac HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:07 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50281	34.135.80.45	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	384	OUT	GET /q3/2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: att-app.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	895	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:07 GMT Content-Type: application/json Content-Length: 1654 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;
2024-02-15 00:12:07 UTC	1654	IN	Data Raw: 7b 22 61 62 6e 22 3a 22 22 2c 22 63 76 22 3a 30 2c 22 45 22 3a 5b 7b 22 69 22 3a 22 32 30 37 22 2c 22 76 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 37 37 22 2c 22 76 22 3a 22 66 66 64 63 22 2c 22 74 22 3a 22 31 37 30 37 39 35 35 38 39 36 39 37 31 22 7d 2c 7b 22 69 22 3a 22 33 38 37 22 2c 22 76 22 3a 22 76 5f 34 5f 73 72 76 5f 31 39 5f 73 6e 5f 30 33 33 32 39 35 38 37 38 46 45 35 46 33 41 37 36 31 34 45 33 34 42 31 35 35 39 42 41 39 45 46 5f 70 65 72 63 5f 31 30 30 30 30 30 5f 6f 6c 5f 30 5f 6d 75 6c 5f 31 5f 61 70 70 2d 33 41 37 65 39 31 32 32 39 32 33 32 63 64 33 33 32 39 5f 31 22 2c 22 Data Ascii: {"abn":"","cv":0,"E":[{"i":"207","v":"03604370663548075242715929808033793837","t":"1707955896971"},{"i":"377","v":"ffdc","t":"1707955896971"},{"i":"387","v":"v_4_srv_19_sn_033295878FE5F3A7614E34B1559BA9EF_perc_100000_ol_0_mul_1_app-3A7e91229232cd3329_1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50283	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	641	OUT	POST /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	118	OUT	Data Raw: 7b 22 77 68 65 6e 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 38 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 7d 7d Data Ascii: {"when":1707955926018,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013}}}
2024-02-15 00:12:07 UTC	459	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 131 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:07 UTC	131	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 7d 2c 22 65 78 70 69 72 65 73 49 6e 4d 53 22 3a 37 37 37 35 39 39 39 30 30 30 7d Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013}},"expiresInMS":7775999000}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50284	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	642	OUT	POST /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive Content-Length: 1104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	1104	OUT	Data Raw: 7b 22 77 68 65 6e 22 3a 31 37 30 37 39 35 35 39 32 36 36 31 38 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 Data Ascii: {"when":1707955926618,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1
2024-02-15 00:12:07 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:07 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50287	64.233.177.190	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	567	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:07 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 15 Feb 2024 00:12:07 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:07 UTC	1012	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-02-15 00:12:07 UTC	597	IN	Data Raw: 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 Data Ascii: gle.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-backgrou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50288	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	740	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926982&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=19402&N=6&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 10591 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:07 UTC	10591	OUT	Data Raw: 78 01 ed 7c 87 8e e3 58 ba de ab 14 da d8 86 0d 4d 35 73 9a 76 61 c1 20 4a 14 83 12 83 a4 7b 2f 06 4c 62 ce 99 8b f5 fb f8 35 fc 64 3e aa 34 35 d5 dd 33 3d 7d 77 61 1b eb 2a 74 89 12 0f ff f3 a7 f3 87 ef 1c f5 bf fd ed 43 fb e1 e7 0f f6 87 9f 3e 94 e0 f5 bf 73 5b e1 7c 47 80 77 d1 87 9f e1 9f 3e c4 1f 7e fe b7 bf 7d c0 3e fc fc b7 0f 3d b8 fd ef f9 dd f3 cf 87 bf ff fd 3f 7e fa e0 7d f8 19 f9 e9 c3 51 fb f0 33 f9 f7 9f 7e 87 12 18 f4 44 09 b9 51 ca 01 25 41 32 c1 24 f6 23 79 f4 e5 43 37 b5 9b 06 7c 7c 9b ea 5a 14 ad 5f ff f2 cb 50 db e5 d3 64 fc b7 78 b9 bb fb 0d 5f 80 91 d7 69 0c e5 cb 59 ea 22 f5 9f 27 c9 fc bc 03 c4 c1 13 bf cb c3 f3 30 20 f0 77 f1 70 77 f7 44 f3 95 0b 45 fa 5d 2e ca da 6f fc bc b5 db a8 c8 ff 50 d4 2f 88 b3 5f d2 0e 6b ff fa 2c 61 d8 Data Ascii: x\|XM5sva J{/Lb5d>453=}wa*tC>s[\|Gw>~}>=?~}Q3~DQ%A2$#yC7\|\|Z_Pdx_iY"'0 wpwDE].oP/_k,a
2024-02-15 00:12:08 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50289	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	554	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926311&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:07 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50290	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:07 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:08 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:08 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50292	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	756	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927235&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=11063&N=50&P=4 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 15655 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	15655	OUT	Data Raw: 78 01 cd 7c 57 d3 ac 5a 72 e5 5f e9 b8 af a8 85 77 ad d1 03 14 be a0 a0 f0 a0 98 e8 c0 54 e1 bd 47 a1 ff 3e fb f4 ed 7b 46 d3 46 33 52 84 22 26 be 73 3e 03 55 05 e4 36 99 b9 d6 ca fc 97 7f fd 65 fd e5 0f bf 24 bf fc c3 2f 23 f8 f9 3f 14 91 13 c0 ef d5 2f 7f c0 70 f4 1f 7e a9 7f f9 c3 bf fc eb 2f e8 2f 7f f8 d7 5f 7a 70 da 10 5d 0e 9c 4d fe 74 14 fb ed 68 b9 ae e3 ef 3f d3 56 ed e0 dc 0e 5e 36 cc 55 51 f5 bf 5f e7 2a 69 7f f9 b7 7f fb 87 7f fd e5 e7 6b b3 a1 5f 3f fd fa e7 17 72 0b 52 f2 2f 8d 29 21 e8 fb 8a da 66 62 32 f7 fa 60 93 a0 5f 43 c7 bc f2 9c bf 2a ff 5a 43 59 16 90 c8 17 21 ec 21 6e ee 63 9c 42 43 38 f3 d2 34 54 fd 39 24 55 12 55 df 43 dc 1f 76 ab c1 ac 9c bd 19 8e e3 78 e6 73 69 7b d6 b5 7d 12 10 95 59 69 43 ae d8 47 76 0f bb 8e d9 7b 1e 68 4b Data Ascii: x\|WZr_wTG>{FF3R"&s>U6e$/#?/p~//_zp]Mth?V^6UQ_ik_?rR/)!fb2`_CZCY!!ncBC84T9$UUCvxsi{}YiCGv{hK
2024-02-15 00:12:08 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:08 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50295	104.22.52.252	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	744	OUT	GET /helpers/blank HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 15 Feb 2024 00:08:10 GMT
2024-02-15 00:12:08 UTC	392	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 237 Last-Modified: Thu, 15 Feb 2024 00:08:11 GMT Server: cloudflare CF-RAY: 85595668ec74676a-ATL alt-svc: h3=":443"; ma=86400
2024-02-15 00:12:08 UTC	215	IN	Data Raw: 64 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d1<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="viewport" content="width=device-width, initial-scale=1.0"></head><body></body></html>
2024-02-15 00:12:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50297	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	523	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955926982&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=19402&N=6&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:08 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50298	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:08 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:08 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50301	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	541	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927235&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=11063&N=50&P=4 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:08 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50302	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	751	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927846&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1683&N=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 15 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:08 UTC	15	OUT	Data Raw: 78 01 ab 56 4a 55 b2 b2 ac 05 00 08 4e 02 15 Data Ascii: xVJUN
2024-02-15 00:12:08 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:08 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50304	172.217.215.136	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:08 UTC	1426	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 1704 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1707955923649&flash=0&frm=2&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1110%2C624&vis=1&wgl=true&ca_type=image&bid=ANyPxKrdHt33300w-cxydP3kmhWqjcGi3gm8fTxjemfs5WXOMBGqto5PYX8kpUHk-W-L0yQ9AugVpIqCwLTAu3OOhw-obXSDiw sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1707955928196 Content-Type: application/json X-YouTube-Utc-Offset: 60 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20240212.01.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgsyWGJmMEVNMi1vbyjSrbWuBjIKCgJVUxIEGgAgOQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/tFUHPoLMUwk?rel=0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:08 UTC	1704	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 34 30 32 31 32 2e 30 31 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 4b 74 74 61 34 47 45 4b 79 33 72 77 55 51 30 49 32 77 42 52 43 33 37 36 38 46 45 4c 32 32 72 67 55 51 76 5a 6d 77 42 52 43 77 73 72 41 46 45 4a 43 79 73 41 55 51 71 4a 71 77 42 52 44 38 68 62 41 46 45 4d 7a 66 72 67 55 51 33 62 43 77 42 52 44 71 77 36 38 46 45 4c 65 72 73 41 55 51 2d 71 65 77 42 52 44 4d 72 76 34 53 45 4f 48 79 72 77 55 51 74 2d 72 2d 45 68 44 50 71 4c 41 46 45 4c Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20240212.01.00","configInfo":{"appInstallData":"CNKtta4GEKy3rwUQ0I2wBRC3768FEL22rgUQvZmwBRCwsrAFEJCysAUQqJqwBRD8hbAFEMzfrgUQ3bCwBRDqw68FELersAUQ-qewBRDMrv4SEOHyrwUQt-r-EhDPqLAFEL
2024-02-15 00:12:09 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Thu, 15 Feb 2024 00:12:09 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:09 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-02-15 00:12:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50310	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:09 UTC	539	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955927846&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1683&N=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:09 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:09 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50311	64.233.177.190	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:09 UTC	567	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=vqJURvZSHyA; VISITOR_INFO1_LIVE=2Xbf0EM2-oo
2024-02-15 00:12:09 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Thu, 15 Feb 2024 00:12:09 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:09 UTC	1012	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-02-15 00:12:09 UTC	597	IN	Data Raw: 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 Data Ascii: gle.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-backgrou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50322	151.101.194.137	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:10 UTC	566	OUT	GET /ui/1.13.2/jquery-ui.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://about.att.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:10 UTC	570	IN	HTTP/1.1 200 OK Connection: close Content-Length: 255084 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-3e46c" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 15 Feb 2024 00:12:10 GMT Age: 9051035 X-Served-By: cache-lga13623-LGA, cache-pdk-kfty2130089-PDK X-Cache: HIT, HIT X-Cache-Hits: 1764, 1 X-Timer: S1707955931.936758,VS0,VE2 Vary: Accept-Encoding
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 77 69 64 67 65 74 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 64 61 74 61 2e 6a 73 2c 20 64 69 73 61 62 6c 65 2d 73 65 6c 65 63 74 69 6f 6e 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 63 6c 69 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 64 72 6f 70 2e 6a 73 2c 20 65 66 66 65 63 74 73 2f 65 66 66 65 63 74 2d 65 78 70 6c Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-expl
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 65 61 6e 44 61 74 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 69 2c 73 3d 30 3b 6e 75 6c 6c 21 3d 28 69 3d 74 5b 73 5d 29 3b 73 2b 2b 29 28 65 3d 56 2e 5f 64 61 74 61 28 69 2c 22 65 76 65 6e 74 73 22 29 29 26 26 65 2e 72 65 6d 6f 76 65 26 26 56 28 69 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 3b 6e 28 74 29 7d 29 2c 56 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 29 7b 76 61 72 20 73 2c 6e 2c 6f 2c 61 3d 7b 7d 2c 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 6c 3d 72 2b 22 2d 22 2b 28 74 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 29 3b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 69 2c 69 3d 56 2e 57 69 64 67 65 74 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 Data Ascii: eanData,function(t){for(var e,i,s=0;null!=(i=t[s]);s++)(e=V._data(i,"events"))&&e.remove&&V(i).triggerHandler("remove");n(t)}),V.widget=function(t,i,e){var s,n,o,a={},r=t.split(".")[0],l=r+"-"+(t=t.split(".")[1]);return e\|\|(e=i,i=V.Widget),Array.isArray(e
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 5d 5b 65 5d 2c 61 2e 63 61 6c 6c 28 73 5b 6e 5d 2c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 28 56 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 69 29 3f 74 5b 65 5d 3d 56 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 74 5b 65 5d 29 3f 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 5b 65 5d 2c 69 29 3a 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 69 29 3a 74 5b 65 5d 3d 69 29 3b 72 65 74 75 72 6e 20 74 7d 2c 56 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 29 7b 76 61 72 20 61 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 46 75 6c 6c 4e 61 6d 65 7c 7c 6f 3b 56 2e 66 6e 5b 6f 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ][e],a.call(s[n],e)&&void 0!==i&&(V.isPlainObject(i)?t[e]=V.isPlainObject(t[e])?V.widget.extend({},t[e],i):V.widget.extend({},i):t[e]=i);return t},V.widget.bridge=function(o,e){var a=e.prototype.widgetFullName\|\|o;V.fn[o]=function(i){var t="string"==typeof
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 74 61 72 67 65 74 3d 3d 3d 65 26 26 74 68 69 73 2e 64 65 73 74 72 6f 79 28 29 7d 7d 29 2c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 3d 56 28 65 2e 73 74 79 6c 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3a 65 2e 64 6f 63 75 6d 65 6e 74 7c 7c 65 29 2c 74 68 69 73 2e 77 69 6e 64 6f 77 3d 56 28 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 74 29 2c 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 2c 74 68 69 73 2e 6f Data Ascii: target===e&&this.destroy()}}),this.document=V(e.style?e.ownerDocument:e.document\|\|e),this.window=V(this.document[0].defaultView\|\|this.document[0].parentWindow)),this.options=V.widget.extend({},this.options,this._getCreateOptions(),t),this._create(),this.o
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 22 63 6c 61 73 73 65 73 22 3d 3d 3d 74 26 26 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 43 6c 61 73 73 65 73 28 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 5b 74 5d 3d 65 2c 22 64 69 73 61 62 6c 65 64 22 3d 3d 3d 74 26 26 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 28 65 29 2c 74 68 69 73 7d 2c 5f 73 65 74 4f 70 74 69 6f 6e 43 6c 61 73 73 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3b 66 6f 72 28 65 20 69 6e 20 74 29 73 3d 74 68 69 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 65 5d 2c 74 5b 65 5d 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 63 6c 61 73 73 65 73 5b 65 5d 26 26 73 26 26 73 2e 6c 65 6e 67 74 68 26 26 28 69 3d Data Ascii: ction(t,e){return"classes"===t&&this._setOptionClasses(e),this.options[t]=e,"disabled"===t&&this._setOptionDisabled(e),this},_setOptionClasses:function(t){var e,i,s;for(e in t)s=this.classesElementLookup[e],t[e]!==this.options.classes[e]&&s&&s.length&&(i=
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 6e 28 69 29 7b 76 61 72 20 73 3d 74 68 69 73 3b 56 2e 65 61 63 68 28 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 2d 31 21 3d 3d 56 2e 69 6e 41 72 72 61 79 28 69 2e 74 61 72 67 65 74 2c 65 29 26 26 28 73 2e 63 6c 61 73 73 65 73 45 6c 65 6d 65 6e 74 4c 6f 6f 6b 75 70 5b 74 5d 3d 56 28 65 2e 6e 6f 74 28 69 2e 74 61 72 67 65 74 29 2e 67 65 74 28 29 29 29 7d 29 2c 74 68 69 73 2e 5f 6f 66 66 28 56 28 69 2e 74 61 72 67 65 74 29 29 7d 2c 5f 72 65 6d 6f 76 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 2c 65 2c 69 2c 21 31 29 7d 2c 5f 61 64 64 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: n(i){var s=this;V.each(s.classesElementLookup,function(t,e){-1!==V.inArray(i.target,e)&&(s.classesElementLookup[t]=V(e.not(i.target).get()))}),this._off(V(i.target))},_removeClass:function(t,e,i){return this._toggleClass(t,e,i,!1)},_addClass:function(t,e,
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 64 28 74 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 2c 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 61 64 64 43 6c 61 73 73 28 56 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 2c 6d 6f 75 73 65 6c 65 61 76 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 28 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 2c 6e 75 6c 6c 2c 22 75 69 2d 73 74 61 74 65 2d 68 6f 76 65 72 22 29 7d 7d 29 7d 2c 5f 66 6f 63 75 73 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 3d 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 2e 61 64 64 28 74 29 2c 74 68 69 73 2e 5f 6f 6e 28 74 Data Ascii: d(t),this._on(t,{mouseenter:function(t){this._addClass(V(t.currentTarget),null,"ui-state-hover")},mouseleave:function(t){this._removeClass(V(t.currentTarget),null,"ui-state-hover")}})},_focusable:function(t){this.focusable=this.focusable.add(t),this._on(t
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 74 28 56 2e 63 73 73 28 74 2c 65 29 2c 31 30 29 7c 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 26 26 74 3d 3d 3d 74 2e 77 69 6e 64 6f 77 7d 78 3d 4d 61 74 68 2e 6d 61 78 2c 6b 3d 4d 61 74 68 2e 61 62 73 2c 6f 3d 2f 6c 65 66 74 7c 63 65 6e 74 65 72 7c 72 69 67 68 74 2f 2c 6c 3d 2f 74 6f 70 7c 63 65 6e 74 65 72 7c 62 6f 74 74 6f 6d 2f 2c 68 3d 2f 5b 5c 2b 5c 2d 5d 5c 64 2b 28 5c 2e 5b 5c 64 5d 2b 29 3f 25 3f 2f 2c 63 3d 2f 5e 5c 77 2b 2f 2c 75 3d 2f 25 24 2f 2c 43 3d 56 2e 66 6e 2e 70 6f 73 69 74 69 6f 6e 2c 56 2e 70 6f 73 69 74 69 6f 6e 3d 7b 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 73 29 72 65 74 75 72 6e 20 73 3b 76 61 72 20 74 2c 65 Data Ascii: t(V.css(t,e),10)\|\|0}function T(t){return null!=t&&t===t.window}x=Math.max,k=Math.abs,o=/left\|center\|right/,l=/top\|center\|bottom/,h=/[\+\-]\d+(\.[\d]+)?%?/,c=/^\w+/,u=/%$/,C=V.fn.position,V.position={scrollbarWidth:function(){if(void 0!==s)return s;var t,e
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 6f 6c 6c 49 6e 66 6f 28 76 29 2c 79 3d 28 75 2e 63 6f 6c 6c 69 73 69 6f 6e 7c 7c 22 66 6c 69 70 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 77 3d 7b 7d 2c 65 3d 39 3d 3d 3d 28 74 3d 28 65 3d 5f 29 5b 30 5d 29 2e 6e 6f 64 65 54 79 70 65 3f 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 7d 3a 54 28 74 29 3f 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 28 29 2c 6f 66 66 73 65 74 3a 7b 74 6f 70 3a 65 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2c 6c 65 66 74 3a 65 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 7d 7d 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 3f 7b 77 69 64 74 68 3a 30 2c 68 65 69 67 Data Ascii: ollInfo(v),y=(u.collision\|\|"flip").split(" "),w={},e=9===(t=(e=_)[0]).nodeType?{width:e.width(),height:e.height(),offset:{top:0,left:0}}:T(t)?{width:e.width(),height:e.height(),offset:{top:e.scrollTop(),left:e.scrollLeft()}}:t.preventDefault?{width:0,heig
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 6d 61 72 67 69 6e 4c 65 66 74 3a 65 2c 6d 61 72 67 69 6e 54 6f 70 3a 73 7d 2c 56 2e 65 61 63 68 28 5b 22 6c 65 66 74 22 2c 22 74 6f 70 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 56 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 79 5b 74 5d 5d 26 26 56 2e 75 69 2e 70 6f 73 69 74 69 6f 6e 5b 79 5b 74 5d 5d 5b 65 5d 28 68 2c 7b 74 61 72 67 65 74 57 69 64 74 68 3a 70 2c 74 61 72 67 65 74 48 65 69 67 68 74 3a 66 2c 65 6c 65 6d 57 69 64 74 68 3a 72 2c 65 6c 65 6d 48 65 69 67 68 74 3a 6c 2c 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 3a 69 2c 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3a 6e 2c 63 6f 6c 6c 69 73 69 6f 6e 48 65 69 67 68 74 3a 6f 2c 6f 66 66 73 65 74 3a 5b 64 5b 30 5d 2b 63 5b 30 5d 2c 64 5b 31 5d 2b 63 5b 31 5d 5d 2c 6d 79 3a 75 2e 6d 79 2c Data Ascii: marginLeft:e,marginTop:s},V.each(["left","top"],function(t,e){V.ui.position[y[t]]&&V.ui.position[y[t]][e](h,{targetWidth:p,targetHeight:f,elemWidth:r,elemHeight:l,collisionPosition:i,collisionWidth:n,collisionHeight:o,offset:[d[0]+c[0],d[1]+c[1]],my:u.my,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50323	151.101.194.137	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:10 UTC	561	OUT	GET /ui/1.13.2/themes/base/jquery-ui.css HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:10 UTC	538	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36099 Server: nginx Content-Type: text/css Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-8d03" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 15 Feb 2024 00:12:10 GMT Age: 6019536 X-Served-By: cache-lga21933-LGA, cache-pdk-kfty2130069-PDK X-Cache: HIT, HIT X-Cache-Hits: 423, 1 X-Timer: S1707955931.937613,VS0,VE2 Vary: Accept-Encoding
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 33 2e 32 20 2d 20 32 30 32 32 2d 30 37 2d 31 34 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2e 63 73 73 2c 20 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 Data Ascii: /! jQuery UI - v1.13.2 - 2022-07-14 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, menu.css, button.css, controlgroup.css, checkboxradio.css, datepicker.css, dialog.css, draggable.css, resizable.css, progressbar.css, selecta
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 65 78 74 75 72 65 53 68 61 64 6f 77 3d 66 6c 61 74 26 62 67 49 6d 67 4f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 30 26 6f 70 61 63 69 74 79 53 68 61 64 6f 77 3d 33 30 26 74 68 69 63 6b 6e 65 73 73 53 68 61 64 6f 77 3d 35 70 78 26 6f 66 66 73 65 74 54 6f 70 53 68 61 64 6f 77 3d 30 70 78 26 6f 66 66 73 65 74 4c 65 66 74 53 68 61 64 6f 77 3d 30 70 78 26 63 6f 72 6e 65 72 52 61 64 69 75 73 53 68 61 64 6f 77 3d 38 70 78 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 2f 2a 20 4c 61 79 6f 75 74 20 68 65 6c 70 65 72 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d Data Ascii: extureShadow=flat&bgImgOpacityShadow=0&opacityShadow=30&thicknessShadow=5px&offsetTopShadow=0px&offsetLeftShadow=0px&cornerRadiusShadow=8px* Copyright jQuery Foundation and other contributors; Licensed MIT // Layout helpers--------------------------
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 20 4d 69 73 63 20 76 69 73 75 61 6c 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 0a 2f 2a 20 4f 76 65 72 6c 61 79 73 20 2a 2f 0a 2e 75 69 2d 77 69 64 67 65 74 2d 6f 76 65 72 6c 61 79 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 20 2e 75 69 2d 61 63 63 6f 72 64 69 6f 6e 2d 68 65 61 64 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 70 6f 73 Data Ascii: display: block;}/* Misc visuals----------------------------------// Overlays */.ui-widget-overlay {position: fixed;top: 0;left: 0;width: 100%;height: 100%;}.ui-accordion .ui-accordion-header {display: block;cursor: pointer;pos
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 20 7b 0a 09 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 09 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 62 75 74 74 6f 6e 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 34 65 6d 20 31 65 6d 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 31 65 6d 3b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 Data Ascii: ui-menu-icon {left: auto;right: 0;}.ui-button {padding: .4em 1em;display: inline-block;position: relative;line-height: normal;margin-right: .1em;cursor: pointer;vertical-align: middle;text-align: center;-webkit-user-select: none;
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 6b 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 3e 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 69 74 65 6d 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 3e 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 69 74 65 6d 3a 66 6f 63 75 73 2c 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 20 3e 20 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 69 74 65 6d 2e 75 69 2d 76 69 73 75 61 6c 2d 66 6f 63 75 73 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 7d 0a 2e 75 69 2d 63 6f 6e 74 72 6f 6c 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 3e 20 2e 75 69 Data Ascii: k;}.ui-controlgroup > .ui-controlgroup-item {float: left;margin-left: 0;margin-right: 0;}.ui-controlgroup > .ui-controlgroup-item:focus,.ui-controlgroup > .ui-controlgroup-item.ui-visual-focus {z-index: 9999;}.ui-controlgroup-vertical > .ui
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 69 2d 69 63 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 20 7b 0a 09 77 69 64 74 68 3a 20 31 36 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 65 6d 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 63 68 65 63 6b 65 64 20 2e 75 69 2d 69 63 6f 6e 2c 0a 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 72 61 64 69 6f 2d 6c 61 62 65 6c 2e 75 69 2d 63 68 65 63 6b 62 6f 78 72 61 64 69 6f 2d 63 68 65 63 6b 65 64 3a 68 6f 76 65 72 20 2e 75 69 2d 69 63 6f 6e 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: i-icon-background {width: 16px;height: 16px;border-radius: 1em;overflow: visible;border: none;}.ui-checkboxradio-radio-label.ui-checkboxradio-checked .ui-icon,.ui-checkboxradio-radio-label.ui-checkboxradio-checked:hover .ui-icon {background
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 6f 6e 74 68 2c 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 73 65 6c 65 63 74 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 79 65 61 72 20 7b 0a 09 77 69 64 74 68 3a 20 34 35 25 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 61 62 6c 65 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 39 65 6d 3b 0a 09 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 2e 34 65 6d 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 20 74 68 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 37 65 6d 20 2e 33 65 6d 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 Data Ascii: r select.ui-datepicker-month,.ui-datepicker select.ui-datepicker-year {width: 45%;}.ui-datepicker table {width: 100%;font-size: .9em;border-collapse: collapse;margin: 0 0 .4em;}.ui-datepicker th {padding: .7em .3em;text-align: center;
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 67 72 6f 75 70 2d 6d 69 64 64 6c 65 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 68 65 61 64 65 72 20 7b 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 30 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 6d 75 6c 74 69 20 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 62 75 74 74 6f 6e 70 61 6e 65 20 7b 0a 09 63 6c 65 61 72 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 72 6f 77 2d 62 72 65 61 6b 20 7b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 7d 0a 0a 2f 2a 20 52 54 4c 20 73 75 70 70 6f 72 74 20 2a 2f 0a 2e 75 69 2d 64 Data Ascii: datepicker-multi .ui-datepicker-group-middle .ui-datepicker-header {border-left-width: 0;}.ui-datepicker-multi .ui-datepicker-buttonpane {clear: left;}.ui-datepicker-row-break {clear: both;width: 100%;font-size: 0;}/* RTL support */.ui-d
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 6c 65 20 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 6d 61 72 67 69 6e 3a 20 2e 31 65 6d 20 30 3b 0a 09 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 09 77 69 64 74 68 3a 20 39 30 25 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 0a 7d 0a 2e 75 69 2d 64 69 61 6c 6f 67 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 2d 63 6c 6f 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 72 69 67 68 74 3a 20 2e 33 65 6d 3b 0a 09 74 6f 70 3a 20 35 30 25 3b 0a 09 77 69 64 74 68 3a 20 32 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 30 70 78 20 30 20 30 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0a 09 Data Ascii: le {float: left;margin: .1em 0;white-space: nowrap;width: 90%;overflow: hidden;text-overflow: ellipsis;}.ui-dialog .ui-dialog-titlebar-close {position: absolute;right: .3em;top: 50%;width: 20px;margin: -10px 0 0 0;padding: 1px;
2024-02-15 00:12:10 UTC	1378	IN	Data Raw: 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 68 61 6e 64 6c 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 31 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 64 69 73 61 62 6c 65 64 20 2e 75 69 2d 72 65 73 69 7a 61 62 6c 65 2d 68 61 6e 64 6c 65 2c 0a 2e 75 69 2d 72 65 73 Data Ascii: ction: none;touch-action: none;}.ui-resizable {position: relative;}.ui-resizable-handle {position: absolute;font-size: 0.1px;display: block;-ms-touch-action: none;touch-action: none;}.ui-resizable-disabled .ui-resizable-handle,.ui-res

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50326	44.197.54.80	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:10 UTC	3110	OUT	GET /1593/na.jsonp?network_id=1593&js_version=4.30.6&tag_id=1593%2F2673476745&request_data_shared_params=%7B%22invoca_id%22%3A%22i-9628e359-e4d7-41c9-e90e-d778a0c43f73%22%2C%22extendedSource%22%3Anull%2C%22gcm_uid%22%3Anull%2C%22agent%22%3Anull%2C%22att_tfn%22%3Anull%2C%22AT_T_UUID%22%3A%2265cd56b4-1270-a426-5253-52538a80094f%22%2C%22call_type%22%3Anull%2C%22campaign%22%3Anull%2C%22channel%22%3Anull%2C%22device%22%3A%22desktop%22%2C%22directv%22%3Anull%2C%22end_of_call_reason%22%3Anull%2C%22existingService%22%3A%220%22%2C%22experiment%22%3Anull%2C%22fiber_indicator%22%3Anull%2C%22final_routing_intent%22%3Anull%2C%22flowCode%22%3A%22OPR%22%2C%22fnl_actn_obj%22%3Anull%2C%22fnl_afpd_actn%22%3Anull%2C%22friendlyPageName%22%3A%22myATT%20Registration%20OPR%20Choose%20ID%20Pg%22%2C%22fullPageURL%22%3A%22www.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22gclid%22%3Anull%2C%22gclsrc%22%3Anull%2C%22gigaAvailResult%22%3Anull%2C%22language%22%3Anull%2C%22last_page%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22lob_call_center%22%3Anull%2C%22need_lvl_1_txt%22%3Anull%2C%22need_lvl_2_txt%22%3Anull%2C%22need_lvl_3_txt%22%3A%220%22%2C%22nsr_b%22%3Anull%2C%22nsr_b_inv%22%3Anull%2C%22nsr_e1%22%3A%22000%22%2C%22nsr_e1_inv%22%3Anull%2C%22nsr_fid%22%3A%22E1%3ANMn0P5N4y8bjlTimw55qs5GuAHZpLu72YR9PzVycaRCrzl-TPcU3aKo-vT6iG3dJgtZVs4nN3H2KFCC-bzoUXffKPCUzUddWv3bMMiLdyuDu7zEkE48f1wAgoRXL9Eu_%22%2C%22nsr_fid_inv%22%3Anull%2C%22optional1%22%3Anull%2C%22optional2%22%3Anull%2C%22orderid%22%3Anull%2C%22owner%22%3Anull%2C%22pageDomain%22%3A%22www.att.com%22%2C%22pageName%22%3Anull%2C%22pageTitle%22%3A%22AT%26T%22%2C%22pathname%22%3A%22%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22productTypeCart%22%3Anull%2C%22product_category%22%3Anull%2C%22product_purchased%22%3Anull%2C%22qm_session_replay_link%22%3A%22https%3A%2F%2Fatt.quantummetric.com%2F%23%2Fusers%2Fsearch%3Fautoreplay%3Dtrue%26qmsessioncookie%3D2f0772e2e946694acf73c98d1ebdd4af%26ts%3D1707912722-1707999122%22%2C%22qm_user_id%22%3A%22caaa9cb65fadc84c749177e858981c04%22%2C%22rpet_wrk_func_cd%22%3Anull%2C%22rslt_lvl_1_txt%22%3Anull%2C%22Site_location%22%3Anull%2C%22source_code%22%3Anull%2C%22speed%22%3A%22Service%22%2C%22mcid%22%3A%2203604370663548075242715929808033793837%22%7D&client_messages=%7B%7D&client_info=%7B%22url%22%3A%22https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID%22%2C%22referrer%22%3A%22%22%2C%22cores%22%3A4%2C%22platform%22%3A%22Win32%22%2C%22screenWidth%22%3A1280%2C%22screenHeight%22%3A1024%2C%22language%22%3A%22en-US%22%7D&jsoncallback=json_rr2& HTTP/1.1 Host: pnapi.invoca.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:11 UTC	172	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Date: Thu, 15 Feb 2024 00:12:11 GMT processing_time: 5.39407ms Server: Goliath Content-Length: 98 Connection: Close
2024-02-15 00:12:11 UTC	98	IN	Data Raw: 6a 73 6f 6e 5f 72 72 32 28 7b 22 69 6e 76 6f 63 61 49 64 22 3a 22 69 2d 39 36 32 38 65 33 35 39 2d 65 34 64 37 2d 34 31 63 39 2d 65 39 30 65 2d 64 37 37 38 61 30 63 34 33 66 37 33 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 73 68 61 72 65 64 20 70 61 72 61 6d 73 20 75 70 64 61 74 65 64 22 7d 29 3b Data Ascii: json_rr2({"invocaId":"i-9628e359-e4d7-41c9-e90e-d778a0c43f73","message":"shared params updated"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50325	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:11 UTC	741	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955930205&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=41816&N=47&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 14762 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:11 UTC	14762	OUT	Data Raw: 78 01 a5 bc d7 ae ec ca 96 1d f8 2b 8d f3 9a b7 44 ef 2e ba 1f e8 c9 a4 4d ba 24 d9 10 1a f4 36 e9 bd 50 fa f6 8e 53 47 b7 5a a5 6a a1 20 08 1b 58 3b f7 da 49 1f 31 63 cc 61 f8 7f ff 97 3f 9a 3f fe 8e a0 c4 df fe 28 ff f8 3b fc b7 3f 8e 3f fe fe 07 49 64 39 41 e6 f8 3f d1 08 85 ff 53 42 d0 e4 3f 15 28 91 fe 13 86 a4 78 86 a1 65 41 d1 c4 1f 7f fb 63 03 5f 1d 8b 3f 3f 80 4f 08 05 53 0c 41 30 28 46 d0 c8 df fe c8 ff f8 3b d8 a5 6b fe f1 77 9c fa e7 bf fd 75 10 84 01 fb ff ff 8e f2 1f ef 01 41 fe dc f4 cf c3 fc 57 f0 65 b0 4b 0c 66 fe f1 9b df 06 7e 05 4e f6 bf fc 91 81 83 c3 18 82 ff ed 8f f6 5f 3f 75 7f 7d 22 fe f9 af 33 f9 c7 46 67 fa d7 7e 50 92 fe c7 af 7e e0 37 d7 1f 7f 27 09 f2 6f 7f dc e0 6c 89 bf 4e fe af b3 fe f3 d0 21 f8 82 0a fe fe 3f 39 4b 88 fe Data Ascii: x+D.M$6PSGZj X;I1ca??(;??Id9A?SB?(xeAc_??OSA0(F;kwuAWeKf~N_?u}"3Fg~P~7'olN!?9K
2024-02-15 00:12:11 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:11 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50327	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:11 UTC	754	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955930212&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=33620&N=88&P=5 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 157 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:11 UTC	157	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 f2 57 d2 51 f2 04 d2 36 4e fe 2e 91 0a 86 0a 06 60 6c 00 a4 61 d0 08 a8 a2 42 c9 ca cc d4 4c 47 a9 52 c9 ca c4 d4 50 47 29 45 c9 ca d0 c0 dc 54 47 29 d8 4f c9 ca c2 a2 56 07 62 58 2e 0e a5 30 f9 08 b2 2d 83 99 40 be 73 0d 61 46 90 ed 08 33 33 98 11 45 40 7f 14 c0 02 0d c8 ce 54 b2 8a 36 b4 8c 05 87 8b b1 39 4c 15 11 6e 05 05 32 34 cc 4c 0c 20 c1 6b 0c 0c 55 60 f0 5a 98 1a c1 cc 81 85 2a 9a 0a 03 98 3c 11 1e c2 6d 8f 41 6d 2c 00 8e 18 6e 43 Data Ascii: xVQRWQ6N.`laBLGRPG)ETG)OVbX.0-@saF33E@T69Ln24L kU`Z<mAm,nC
2024-02-15 00:12:11 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:11 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50333	23.20.189.8	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:12 UTC	692	OUT	POST /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive Content-Length: 1124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:12 UTC	1124	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 61 39 63 65 39 31 39 37 37 66 62 34 35 31 34 62 62 64 39 31 35 37 30 30 37 36 63 35 64 32 37 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 74 69 6d 65 4f 66 66 73 65 74 49 6e 4d 69 6e 75 74 65 73 22 3a 36 30 2c 22 63 68 61 6e 6e 65 6c 22 3a 22 77 65 62 22 2c 22 73 63 72 65 65 6e 22 3a 7b 22 77 69 64 74 68 22 3a 31 32 38 30 2c 22 68 65 69 67 68 Data Ascii: {"requestId":"9a9ce91977fb4514bbd91570076c5d27","context":{"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","timeOffsetInMinutes":60,"channel":"web","screen":{"width":1280,"heigh
2024-02-15 00:12:12 UTC	768	IN	HTTP/1.1 200 OK date: Thu, 15 Feb 2024 00:12:12 GMT content-type: application/json;charset=UTF-8 vary: origin,access-control-request-method,access-control-request-headers,accept-encoding access-control-allow-origin: https://about.att.com access-control-allow-credentials: true x-request-id: da834fb75db085d05ec5513eab3fa8fe timing-allow-origin: * accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:12:12 UTC	364	IN	Data Raw: 31 36 35 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 61 39 63 65 39 31 39 37 37 66 62 34 35 31 34 62 62 64 39 31 35 37 30 30 37 36 63 35 64 32 37 22 2c 22 63 6c 69 65 6e 74 22 3a 22 61 74 74 73 65 72 76 69 63 65 73 69 6e 63 22 2c 22 69 64 22 3a 7b 22 74 6e 74 49 64 22 3a 22 36 63 63 30 39 61 32 36 36 64 31 37 34 32 30 37 39 35 38 32 62 38 38 63 36 30 66 36 36 32 30 32 2e 33 34 5f 30 22 2c 22 6d 61 72 6b 65 74 69 6e 67 43 6c 6f 75 64 56 69 73 69 74 6f 72 49 64 22 3a 22 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 22 7d 2c 22 65 64 67 65 48 6f 73 74 22 3a 22 6d 62 6f 78 65 64 67 65 33 34 2e 74 74 2e 6f 6d 74 72 64 63 2e 6e 65 74 22 2c 22 70 72 Data Ascii: 165{"status":200,"requestId":"9a9ce91977fb4514bbd91570076c5d27","client":"attservicesinc","id":{"tntId":"6cc09a266d1742079582b88c60f66202.34_0","marketingCloudVisitorId":"03604370663548075242715929808033793837"},"edgeHost":"mboxedge34.tt.omtrdc.net","pr
2024-02-15 00:12:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50335	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:13 UTC	736	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955932056&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=859&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 211 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:13 UTC	211	OUT	Data Raw: 78 01 75 50 bb 6e c3 30 0c fc 17 ce 72 f4 24 2d 69 ef dc 02 e9 56 64 90 65 1b 7d 24 75 61 2b 41 01 43 ff 5e c2 06 52 74 e8 42 1e 88 e3 dd 91 2b 3c 40 7c 59 e1 0d a2 36 28 60 84 a8 04 dc 20 02 61 ee 91 7a d7 78 dd ba 26 a1 a7 66 30 d8 35 56 77 2e 5b 33 0e ad 47 10 50 78 b1 55 6d 40 0c c6 a2 d7 55 ec 62 3a b0 ce af da ff cc 9d 46 88 96 36 e3 15 32 4b 2a ab 9d 80 f7 3b fa d8 11 d6 bf 8e 44 4e d7 93 80 ef ed 88 0b c7 7e 7a 3c 3e b3 d9 95 e1 6b 29 5f 4b 94 32 75 d3 b5 1c 52 29 87 3c 5d e4 b2 a4 71 2b 59 de b4 cc d3 67 99 a7 f3 79 98 fb 54 12 2f b2 b9 51 9c 69 e1 4e ca 0b 38 6e 1f 99 21 06 e2 44 85 e7 f7 7b 43 3d d5 1f 07 d0 51 80 Data Ascii: xuPn0r$-iVde}$ua+AC^RtB+<@\|Y6(` azx&f05Vw.[3GPxUm@Ub:F62K*;DN~z<>k)_K2uR)<]q+YgyT/QiN8n!D{C=Q
2024-02-15 00:12:13 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:13 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50336	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:13 UTC	524	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955930205&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=41816&N=47&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:13 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:13 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50342	173.194.219.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:13 UTC	864	OUT	GET /json?spot=6100125&src=&var=s_3_Integrate_DFA_get_0&host=integrate.112.2o7.net%2Fdfa_echo%3Fvar%3Ds_3_Integrate_DFA_get_0%26AQE%3D1%26A2S%3D1&ord=1707955931744 HTTP/1.1 Host: fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:13 UTC	732	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:13 UTC	46	IN	Data Raw: 32 38 0d 0a 76 61 72 20 73 5f 33 5f 49 6e 74 65 67 72 61 74 65 5f 44 46 41 5f 67 65 74 5f 30 3d 7b 22 65 63 22 3a 22 6e 68 22 7d 3b 0d 0a Data Ascii: 28var s_3_Integrate_DFA_get_0={"ec":"nh"};
2024-02-15 00:12:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50352	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:14 UTC	541	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955930212&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=33620&N=88&P=5 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:14 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:14 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50354	35.169.173.155	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:14 UTC	443	OUT	GET /rest/v1/delivery?client=attservicesinc&sessionId=6cc09a266d1742079582b88c60f66202&version=2.4.0 HTTP/1.1 Host: mboxedge34.tt.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:14 UTC	383	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 15 Feb 2024 00:12:14 GMT content-type: application/json;charset=UTF-8 vary: accept-encoding strict-transport-security: max-age=31536000; includeSubDomains referrer-policy: strict-origin-when-cross-origin x-xss-protection: 1; mode=block x-content-type-options: nosniff server: adobe connection: close transfer-encoding: chunked
2024-02-15 00:12:14 UTC	67	IN	Data Raw: 33 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 34 30 35 2c 22 6d 65 73 73 61 67 65 22 3a 22 52 65 71 75 65 73 74 20 6d 65 74 68 6f 64 20 27 47 45 54 27 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 0d 0a Data Ascii: 3d{"status":405,"message":"Request method 'GET' not supported"}
2024-02-15 00:12:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50357	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:14 UTC	521	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955932056&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=859&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:14 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:14 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50369	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:15 UTC	1473	OUT	GET /activityi;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:15 UTC	1353	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50370	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:15 UTC	1484	OUT	GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:15 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:15 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-02-15 00:12:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50378	142.250.105.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:15 UTC	1460	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:15 UTC	2207	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7612614599699481410"}],"aggregatable_trigger_data":[{"filters":{"14":["8783283"]},"key_piece":"0x959ea19b3455e843","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x990f94304f244cee","not_filters":{"14":["8783283"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["8783283"]},"key_piece":"0x11a013ca02fd6d11","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xc6378d29631a29","not_filters":{"14":["8783283"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4838417086819874411","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:15 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50380	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:15 UTC	587	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:16 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:16 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50382	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:15 UTC	1507	OUT	GET /activityi;dc_pre=CJ7Q09aHrIQDFfCCpgQdmkUN_w;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:16 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:16 GMT Expires: Thu, 15 Feb 2024 00:12:16 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:16 UTC	589	IN	Data Raw: 33 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4a 37 51 30 39 61 48 72 49 51 44 46 66 Data Ascii: 34e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CJ7Q09aHrIQDFf
2024-02-15 00:12:16 UTC	264	IN	Data Raw: 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 6d 61 74 63 68 5f 69 64 3d 30 33 36 30 34 33 37 30 36 36 33 35 34 38 30 37 35 32 34 32 37 31 35 39 32 39 38 30 38 30 33 33 37 39 33 38 33 37 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 46 63 68 6f 69 63 65 73 2d 61 6e 64 2d 63 6f 6e 74 72 6f 6c 73 2e 68 74 6d 6c 22 2f 3e 3c 2f 62 6f 64 79 3e Data Ascii: B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html"/></body>
2024-02-15 00:12:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50308	3.212.181.219	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	664	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVwAAAAADAS1dAAAAAA
2024-02-15 00:12:16 UTC	748	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:16 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 151 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://about.att.com Access-Control-Allow-Credentials: true Vary: Origin Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:12:16 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:12:16 UTC	151	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 36 4d 43 46 50 63 44 48 67 6a 4d 6a 4b 69 76 31 62 6e 63 6c 63 55 5f 77 65 31 41 4e 69 65 4d 57 76 74 6c 7a 6f 74 71 4a 73 71 49 52 4d 76 74 33 70 71 59 50 74 30 4d 42 35 68 43 2d 58 43 77 74 49 44 6e 34 6c 35 2d 64 35 71 73 34 64 74 79 4c 6d 5a 67 7a 51 38 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs6MCFPcDHgjMjKiv1bnclcU_we1ANieMWvtlzotqJsqIRMvt3pqYPt0MB5hC-XCwtIDn4l5-d5qs4dtyLmZgzQ8", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50384	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	1419	OUT	GET /activityi;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:16 UTC	1299	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://6100125.fls.doubleclick.net/activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50385	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	1430	OUT	GET /td/fls/rul/activityi;fledge=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:16 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:16 UTC	606	IN	Data Raw: 31 32 66 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 Data Ascii: 12f6<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhw
2024-02-15 00:12:16 UTC	1252	IN	Data Raw: 3d 31 6a 37 35 36 36 37 31 31 37 35 36 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 67 30 46 30 57 41 21 32 73 61 4a 56 41 34 41 21 33 73 41 41 70 74 44 56 36 77 75 57 70 72 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 30 37 39 35 35 39 33 36 33 32 32 32 37 35 5d 2c 22 61 64 73 22 3a 5b 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 Data Ascii: =1j7566711756","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sg0F0WA!2saJVA4A!3sAAptDV6wuWpr"],"userBiddingSignals":[null,null,1707955936322275],"ads":[{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/d
2024-02-15 00:12:16 UTC	1252	IN	Data Raw: 6a 51 66 71 6b 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 39 30 32 35 35 39 38 31 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 31 31 38 33 35 38 33 36 37 5c 75 30 30 32 36 63 76 5f 69 64 3d 31 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 39 30 32 35 35 39 38 31 39 22 2c 22 36 38 35 31 31 38 33 35 38 33 36 37 22 2c 22 31 22 2c 22 32 30 38 36 33 30 33 36 32 35 39 22 2c 22 31 30 31 35 34 36 38 30 35 34 22 2c 22 34 35 38 38 39 30 36 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 Data Ascii: jQfqk"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156902559819\u0026cr_id=685118358367\u0026cv_id=1\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["156902559819","685118358367","1","20863036259","1015468054","4588906"],"adRenderI
2024-02-15 00:12:16 UTC	1252	IN	Data Raw: 38 35 35 33 33 31 32 31 36 37 37 22 2c 6e 75 6c 6c 2c 22 32 30 38 37 32 37 39 37 33 34 39 22 2c 22 31 30 31 35 31 37 33 31 36 37 22 2c 22 33 37 38 38 34 35 37 22 5d 2c 22 61 64 52 65 6e 64 65 72 49 64 22 3a 22 57 55 52 63 6d 6d 6e 72 32 78 30 22 7d 2c 7b 22 72 65 6e 64 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 73 66 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 61 64 66 65 74 63 68 2f 64 76 33 3f 61 64 67 5f 69 64 3d 31 35 36 34 33 35 35 34 37 33 38 39 5c 75 30 30 32 36 63 72 5f 69 64 3d 36 38 35 35 37 34 37 31 32 36 39 34 5c 75 30 30 32 36 63 76 5f 69 64 3d 30 5c 75 30 30 32 36 66 6f 72 6d 61 74 3d 24 7b 41 44 5f 57 49 44 54 48 7d 78 24 7b 41 44 5f 48 45 49 47 48 54 7d 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 5b 22 31 35 36 34 33 Data Ascii: 85533121677",null,"20872797349","1015173167","3788457"],"adRenderId":"WURcmmnr2x0"},{"renderUrl":"https://tdsf.doubleclick.net/td/adfetch/dv3?adg_id=156435547389\u0026cr_id=685574712694\u0026cv_id=0\u0026format=${AD_WIDTH}x${AD_HEIGHT}","metadata":["15643
2024-02-15 00:12:16 UTC	500	IN	Data Raw: 61 62 6c 65 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 50 72 69 6f 72 69 74 69 7a 61 74 69 6f 6e 22 3a 74 72 75 65 7d 7d 5d 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 66 6f 72 28 6c 65 74 20 69 20 6f 66 20 69 67 5f 6c 69 73 74 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 73 29 7b 74 72 79 7b 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 30 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6a 6f 69 6e 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 2c 69 2e 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 49 6e 53 65 63 6f 6e 64 73 29 3b 7d 65 6c 73 65 20 69 66 28 69 2e 61 63 74 69 6f 6e 3d 3d 31 29 7b 6e 61 76 69 67 61 74 6f 72 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e Data Ascii: ableBiddingSignalsPrioritization":true}}]};</script><script>for(let i of ig_list.interestGroups){try{if(i.action==0){navigator.joinAdInterestGroup(i.interestGroupAttributes,i.expirationTimeInSeconds);}else if(i.action==1){navigator.leaveAdInterestGroup(i.
2024-02-15 00:12:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50387	142.250.105.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	1401	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source=navigation-source Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:16 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"1196844355000379929","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50389	142.250.105.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 134 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	134	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 34 38 33 38 34 31 37 30 38 36 38 31 39 38 37 34 34 31 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://att.com","trigger_debug_key":"4838417086819874411"},"type":"trigger-no-matching-source"}]
2024-02-15 00:12:16 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:12:16 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50392	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	839	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:12:16 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50391	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	931	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: trigger, event-source Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:12:16 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:12:16 UTC	1256	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d
2024-02-15 00:12:16 UTC	78	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: 43PNGIHDRIDATxc-IENDB`0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50393	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	738	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955935538&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=61545&N=65&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 44 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	44	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 2a 4f 53 d2 51 4a 51 b2 32 31 33 33 d3 51 0a f6 53 b2 32 33 ad d5 81 ca 25 41 e4 0c 6a 63 01 14 8a 0b cf Data Ascii: xVQROSQJQ2133QS23%Ajc
2024-02-15 00:12:17 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:16 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50394	64.233.176.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	1453	OUT	GET /activityi;dc_pre=CJ7zgdeHrIQDFaiCpgQdk14JAw;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: 6100125.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:17 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:17 GMT Expires: Thu, 15 Feb 2024 00:12:17 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:17 UTC	589	IN	Data Raw: 38 37 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 46 63 68 6f 69 63 65 73 2d 61 6e 64 2d 63 6f 6e 74 72 6f 6c 73 2e 68 74 6d Data Ascii: 87c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><script>var url = "about.att.com%2Fprivacy%2Fchoices-and-controls.htm
2024-02-15 00:12:17 UTC	1252	IN	Data Raw: 49 6d 61 67 65 28 29 2e 73 72 63 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 74 72 3f 69 64 3d 31 39 32 38 36 33 33 34 36 37 36 35 32 35 34 26 65 76 3d 50 61 67 65 56 69 65 77 26 6e 6f 73 63 72 69 70 74 3d 31 27 3b 0a 7d 0a 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 0a 76 61 72 20 75 72 6c 20 3d 20 22 61 62 6f 75 74 2e 61 74 74 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 46 63 68 6f 69 63 65 73 2d 61 6e 64 2d 63 6f 6e 74 72 6f 6c 73 2e 68 74 6d 6c 22 3b 0a 76 61 72 20 70 72 6f 64 75 63 74 54 79 70 65 20 3d 20 22 22 3b 0a 0a 69 66 20 28 75 72 6c 2e 69 6e 64 65 78 4f 66 28 22 25 32 46 63 6f 6e 6e 65 63 74 6d 65 25 32 46 72 65 73 69 64 65 6e 74 73 25 32 46 22 29 20 3e 20 2d 31 0a 09 7c 7c 20 75 72 6c Data Ascii: Image().src = 'https://www.facebook.com/tr?id=192863346765254&ev=PageView&noscript=1';}</script><script>var url = "about.att.com%2Fprivacy%2Fchoices-and-controls.html";var productType = "";if (url.indexOf("%2Fconnectme%2Fresidents%2F") > -1\|\| url
2024-02-15 00:12:17 UTC	338	IN	Data Raw: 75 37 35 3d 3b 70 73 3d 31 3b 70 63 6f 72 3d 33 32 36 36 34 37 38 37 38 3b 70 73 63 64 6c 3d 6e 6f 61 70 69 3b 67 74 6d 3d 34 35 66 65 34 31 6d 30 76 39 31 33 37 37 32 32 35 33 30 3b 67 63 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 75 61 61 3d 78 38 36 3b 75 61 62 3d 36 34 3b 75 61 66 76 6c 3d 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 25 37 43 4e 6f 74 25 32 35 33 42 41 25 32 35 33 44 42 72 61 6e 64 25 33 42 38 2e 30 2e 30 2e 30 25 37 43 43 68 72 6f 6d 69 75 6d 25 33 42 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 3b 75 61 6d 62 3d 30 3b 75 61 6d 3d 3b 75 61 70 3d 57 69 6e 64 6f 77 73 3b 75 61 70 76 3d 31 30 2e 30 2e 30 3b 75 61 77 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 Data Ascii: u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=h
2024-02-15 00:12:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50396	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	642	OUT	POST /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive Content-Length: 1104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:16 UTC	1104	OUT	Data Raw: 7b 22 77 68 65 6e 22 3a 31 37 30 37 39 35 35 39 33 36 31 30 36 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 Data Ascii: {"when":1707955936106,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1
2024-02-15 00:12:17 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:17 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:17 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50402	142.251.15.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	1149	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm01d;ord=1;num=9048719183700;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u31=null;u70=;ps=1;pcor=817084777;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;match_id=03604370663548075242715929808033793837;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:17 UTC	2207	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"7612614599699481410"}],"aggregatable_trigger_data":[{"filters":{"14":["8783283"]},"key_piece":"0x959ea19b3455e843","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x990f94304f244cee","not_filters":{"14":["8783283"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["8783283"]},"key_piece":"0x11a013ca02fd6d11","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xc6378d29631a29","not_filters":{"14":["8783283"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"4838417086819874411","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"7612614599699481410","filters":{"14":["8783283"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"7612614599699481410","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50407	172.253.124.157	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:16 UTC	2388	OUT	GET /pagead/viewthroughconversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:17 UTC	2315	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-conversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&cid=CAQSKQAvHhf_NYnvPxhrFy89bONMnW8oP1EEEe1zOTsZ_nbhCt2F5c29qK-P&random=2721844903 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50406	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	759	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fupperfunnel%2F1.0.58%2Fstyles%2Fmain.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:17 UTC	359	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:17 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50408	64.233.177.149	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 134 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:17 UTC	134	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 61 74 74 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 39 36 38 34 34 33 35 35 30 30 30 33 37 39 39 32 39 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://att.com","trigger_debug_key":"1196844355000379929"},"type":"trigger-no-matching-source"}]
2024-02-15 00:12:17 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 15 Feb 2024 00:12:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50412	3.163.101.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	739	OUT	GET /pixel/8597/?che=0.22429841700412045&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATVwAAAAADAS1dAAAAAA
2024-02-15 00:12:17 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:12:17 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATYQAAAAAEAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 39b7db67119799a8ef4f9b570251a450.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 X-Amz-Cf-Id: yxJ4V74UUp7_2esIH3knH06iWbZqpJ_gRWmcs9BEyV59M5LNda1tKg==
2024-02-15 00:12:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50410	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	757	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936413&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 1276 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:17 UTC	1276	OUT	Data Raw: 78 01 7d 56 5b 73 da 38 14 fe 2b 1e bf ed 04 02 be 80 0d 33 7d 68 c9 15 9a d0 5c db 64 67 1f 64 59 b6 05 c2 72 24 d9 40 3a fd ef fb c9 40 86 6d 67 f6 05 1f 9d fb f9 ce 39 12 7f ff 74 8d 3b 76 b5 db 71 a5 3b f6 3a ee 1a bf 7e dc ef b8 85 3b 1e f5 a3 8e bb 39 30 b6 20 fa 7e d8 71 ff 82 41 e8 27 be 47 99 97 0c a2 34 0c b3 a1 47 03 9f 24 ac 1f 0d 33 92 90 3e 81 3f 0d fd 61 10 c4 7e c7 ad 6c 8c 17 59 2b 67 52 48 4e 99 76 48 99 3a 13 59 1a 25 85 8d 5d 2b 01 8d c2 98 4a 8f 7b 3d 92 c8 da 9c 12 63 4e a9 5c f5 2a c5 1b 42 b7 3d ba 33 ed c2 b4 4b f7 a6 a7 85 59 09 d8 53 66 73 ca 2d 95 ba e3 18 1f e5 8e fd 01 ca a8 dc f1 4f 97 a0 16 9b 47 62 6b 09 ac d8 1d 97 b5 10 1d 17 da 43 7f 04 0e 1c 80 18 75 dc ac 25 50 78 be 37 b2 40 58 63 6e bf f0 b8 38 d8 2e 0f 04 72 0f 3a Data Ascii: x}V[s8+3}h\dgdYr$@:@mg9t;vq;:~;90 ~qA'G4G$3>?a~lY+gRHNvH:Y%]+J{=cN\*B=3KYSfs-OGbkCu%Px7@Xcn8.r:
2024-02-15 00:12:17 UTC	264	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:17 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:12:17 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 65 31 35 36 63 64 36 35 37 31 36 66 65 31 65 30 62 35 63 62 31 39 62 66 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/e156cd65716fe1e0b5cb19bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50414	142.250.9.106	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	2555	OUT	GET /pagead/1p-conversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&cid=CAQSKQAvHhf_NYnvPxhrFy89bONMnW8oP1EEEe1zOTsZ_nbhCt2F5c29qK-P&random=2721844903 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:17 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50411	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	753	OUT	POST /?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936421&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=42b21ce1b57d44f61c32abe076faba0a HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 20283 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:17 UTC	16384	OUT	Data Raw: 78 01 ed bd ef 72 dc 38 92 2f fa 2a 1c 75 cc c4 cc ae a8 d2 1f db f2 9f d6 cc ca 92 dc d6 8c 2d 6b 2c d9 9e be dd 13 0a 56 15 55 45 8b 45 56 93 2c 95 d4 7b f6 c4 7e ba 0f 70 cf 87 13 27 e2 de 88 fd 7a 3f de 57 98 f3 26 f3 24 f7 97 00 08 82 00 c8 62 95 4a 96 6c d1 b3 db 92 48 30 01 64 26 12 89 cc 44 e6 f7 bf d9 7f b7 77 fa e3 f1 81 33 cc 46 e1 1f bf 17 ff f5 bd fe 1f bf ef 0c d9 8f 6e dc bf fe e3 f7 bf 71 dd bf be fd f3 c9 bb a3 d7 a7 6f df 3c ff f7 95 8d 15 fc 27 5a 79 be 42 7f af ac ae 78 2b cf 7f fa f7 95 cd fc 69 2f f4 d2 14 8f 2f d1 e2 73 ea 38 69 f0 ab 9f 3a bd 38 be 08 f0 d3 bf f4 a3 2c 0c d2 cc 8f fc c4 89 62 37 f0 9f f6 e2 d1 d8 cb 9c cf 69 1c 39 bf 4c fc e4 3a f5 43 bf 97 c5 89 93 5e 0e 9c 74 32 1e c7 49 96 3a e3 a0 97 4d 12 df 19 d0 a7 1e 5e e3 Data Ascii: xr8/*u-k,VUEEV,{~p'z?W&$bJlH0d&Dw3Fnqo<'ZyBx+i//s8i:8,b7i9L:C^t2I:M^
2024-02-15 00:12:17 UTC	3899	OUT	Data Raw: 7e 7f 10 27 c8 7e c6 70 e4 5f 79 14 78 9c 52 64 9f 8a 8b 22 bd e3 aa d3 03 3a b0 c7 10 4a 19 d2 18 40 4c 30 a6 21 85 b8 a2 0d 92 f3 94 a4 8e 77 09 3f b8 47 25 ef c0 fd 62 11 8c bc 88 ca 52 e2 2f 5c d7 28 d0 5d eb 07 d4 36 1b d3 86 63 60 87 2f 7b da 7d 7d 27 f2 46 3e 88 0d 0b 3b 73 da b1 92 bc 34 7a 70 c9 88 cd 94 86 e2 f5 b1 51 c6 83 c4 43 dc a4 f3 0e 0f c0 a7 39 3f c2 bb d1 27 36 14 0d e0 bb c4 3c 69 4b 46 9b f7 e0 ea 4b 2a 0e bc db 87 4b 29 43 85 bf 68 90 b3 2c da 53 50 3a 2f 00 8c bd 16 ec cd d0 e6 f5 61 e3 a7 fd 9f 58 0e 35 58 39 00 8e 22 42 0a 06 e6 a7 19 c6 a1 8d c1 39 0e 27 ac 10 ab 3a 80 83 08 c9 2b 51 59 1b 5c 5d 3d 92 49 8a 51 8c 62 74 07 c2 ea a8 67 8b 86 bd 94 63 21 b1 36 89 82 5c 2d e0 43 e3 85 5d 69 39 63 b5 81 ed f0 ff 28 d1 8a 5f 49 b1 c0 Data Ascii: ~'~p_yxRd":J@L0!w?G%bR/\(]6c`/{}}'F>;s4zpQC9?'6<iKFK*K)Ch,SP:/aX5X9"B9':+QY\]=IQbtgc!6\-C]i9c(_I
2024-02-15 00:12:17 UTC	961	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:17 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://about.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50419	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	779	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	359	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50424	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	606	OUT	GET /tr/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	352	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt Alt-Svc: h3=":443"; ma=86400 Date: Thu, 15 Feb 2024 00:12:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50421	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:18 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:18 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50425	142.251.15.148	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	1095	OUT	GET /activity;register_conversion=1;src=6100125;type=ecomm0;cat=ecomm0;ord=1;num=1002721337274;auiddc=772933313.1707955906;u19=about.att.com%2Fprivacy%2Fchoices-and-controls.html;u91=;u92=;u95=0;u20=;u30=03604370663548075242715929808033793837;u70=;u75=;ps=1;pcor=326647878;pscdl=noapi;gtm=45fe41m0v9137722530;gcd=13l3l3l3l1;dma=0;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;epver=2;~oref=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUkawiDFRCQ2RD68sax4VTozDJtuw8T0rLpS0SQxgEX3YPIYw6ohNZ3zJLJJW8w; ar_debug=1
2024-02-15 00:12:18 UTC	2209	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"2439922095224479604"}],"aggregatable_trigger_data":[{"filters":{"14":["3973208"]},"key_piece":"0x4d9a933a7f76f152","source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"key_piece":"0x86007e364672b936","not_filters":{"14":["3973208"]},"source_keys":["1","3","4","5","6","7","8","9","10","11"]},{"filters":{"14":["3973208"]},"key_piece":"0xa0e33b36f2459182","source_keys":["12","13","14","15","16","17","18","19","20","21"]},{"key_piece":"0xb6bdd415b9dc6615","not_filters":{"14":["3973208"]},"source_keys":["12","13","14","15","16","17","18","19","20","21"]}],"aggregatable_values":{"1":327,"10":327,"11":5570,"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"3":327,"4":327,"5":5570,"6":327,"7":327,"8":5570,"9":327},"debug_key":"1196844355000379929","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["event"]},"priority":"10","trigger_data":"1"},{"deduplication_key":"2439922095224479604","filters":{"14":["3973208"],"source_type":["navigation"]},"priority":"10","trigger_data":"6"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["event"]},"priority":"0","trigger_data":"0"},{"deduplication_key":"2439922095224479604","filters":{"source_type":["navigation"]},"priority":"0","trigger_data":"7"}],"filters":{"8":["6100125"]}} Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 16-Mar-2024 00:12:18 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50423	31.13.65.36	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	643	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=128900881029137&ev=PageView&dl=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&rl=&if=false&ts=1707955935454&cd[order_id]=&sw=1280&sh=1024&v=2.9.138&r=stable&ec=0&o=29&ler=empty&it=1707955935344&coo=false&dpo=LDU&dpoco=0&dpost=0&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-02-15 00:12:18 UTC	1711	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 2a 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 2a 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net .google-analytics.com .google.com 127.0.0.1:* 'unsafe-inline' blob:
2024-02-15 00:12:18 UTC	1289	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 6d 62 69 65 6e 74 2d 6c 69 67 68 74 2d 73 65 6e 73 6f 72 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 6c 69 70 62 6f 61 72 64 2d 77 72 69 74 65 3d 28 73 65 6c 66 29 2c 20 64 69 73 70 6c 61 79 2d 63 61 70 74 75 72 65 3d 28 73 65 6c 66 29 2c 20 65 6e 63 72 79 70 74 65 64 2d 6d 65 64 69 61 3d 28 73 65 6c 66 29 2c 20 66 75 6c 6c 73 63 72 65 65 6e 3d 28 73 65 6c 66 29 2c 20 67 61 6d 65 70 61 64 3d 2a 2c 20 67 65 6f 6c 6f 63 61 74 69 6f 6e 3d 28 73 65 6c 66 29 2c 20 67 79 72 6f 73 63 6f 70 65 3d 28 29 2c 20 68 69 64 3d 28 29 2c 20 69 64 6c 65 2d 64 Data Ascii: permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), bluetooth=(), camera=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50422	52.7.164.58	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	464	OUT	GET /f?apiKey=2676946699&i4=81.181.57.74 HTTP/1.1 Host: fid.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATYQAAAAAEAS1dAAAAAA
2024-02-15 00:12:18 UTC	674	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:18 GMT Content-Type: application/javascript;charset=iso-8859-1 Content-Length: 151 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; Path=/; Domain=.agkn.com; Expires=Sat, 15-Feb-2025 00:12:18 GMT; Max-Age=31536000; Secure; SameSite=None
2024-02-15 00:12:18 UTC	151	IN	Data Raw: 7b 20 22 66 61 62 72 69 63 6b 49 64 22 20 3a 20 22 45 31 3a 4e 4d 6e 30 50 35 4e 34 79 38 62 6a 6c 54 69 6d 77 35 35 71 73 36 4d 43 46 50 63 44 48 67 6a 4d 6a 4b 69 76 31 62 6e 63 6c 63 55 5f 77 65 31 41 4e 69 65 4d 57 76 74 6c 7a 6f 74 71 4a 73 71 49 52 4d 76 74 33 70 71 59 50 74 30 4d 42 35 68 43 2d 58 43 77 74 49 44 6e 34 6c 35 2d 64 35 71 73 34 64 74 79 4c 6d 5a 67 7a 51 38 22 2c 20 22 61 22 3a 22 30 30 30 22 2c 20 22 62 22 3a 5b 22 22 5d 20 7d Data Ascii: { "fabrickId" : "E1:NMn0P5N4y8bjlTimw55qs6MCFPcDHgjMjKiv1bnclcU_we1ANieMWvtlzotqJsqIRMvt3pqYPt0MB5hC-XCwtIDn4l5-d5qs4dtyLmZgzQ8", "a":"000", "b":[""] }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50430	99.84.208.48	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	506	OUT	GET /pixel/8597/?che=0.22429841700412045&omid=03604370663548075242715929808033793837 HTTP/1.1 Host: d.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy; u=C\|0CAAAAAAALWATYQAAAAAEAS1dAAAAAA
2024-02-15 00:12:18 UTC	717	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 15 Feb 2024 00:12:17 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A6O3ixMYTu2%2FYjz3kPxKiMmOwj1n%2BqcGy;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0CAAAAAAALWATYgAAAAAFAS1dAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 bad43b7a5f64a218c0ba43b47a8d182e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 X-Amz-Cf-Id: UWzLTsdl_nBvoEE5ySmtg5Tv0qgkxEbNzq8xCbtjEPOk2C_RQuEGnw==
2024-02-15 00:12:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50428	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	524	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fsites%2Faccessibility&t=1707955923581&v=1707955935538&H=d656cd65d4f0ecc3a3612e62&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=61545&N=65&P=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50426	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:17 UTC	566	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fupperfunnel%2F1.0.58%2Fstyles%2Fmain.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	339	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50433	74.125.138.103	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	2322	OUT	GET /pagead/1p-conversion/1049001539/?random=1839698835&cv=11&fst=1707955935313&bg=ffffff&guid=ON&async=1&gtm=45be42c0v886860920za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&label=JsbSCKHm2_0BEMP8mfQD&hn=www.googleadservices.com&frm=0&tiba=Your%20Choices%20and%20Controls&gtm_ee=1&npa=0&pscdl=noapi&auid=772933313.1707955906&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uap=Windows&uapv=10.0.0&uaw=0&ec_m=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)A%3Atrue%3A21%3Afalse1&ec_sel=%23contact%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(1)%3E%3Anth-child(3)%3E%3Anth-child(1)%3E%3Anth-child(1)&ec_meta=A%3Atrue%3A21%3Afalse&ec_lat=11&ec_s=1&capi=1&data=event%3Dconversion%3BloggedIn%3D(not%20set)%3BcustomerType%3D%3BpageType-hit%3D%3BpageType-session%3D%3BflowCode%3D%3Bliabilitytype%3D%3Bcustomerproducts%3D%3Bproductsincart%3D%3Bfriendlypagename%3D&fmt=3&ct_cookie_present=false&sscte=1&crd=COy7sQIiAQFAAUondHJpZ2dlciwgZXZlbnQtc291cmNlO25hdmlnYXRpb24tc291cmNlYgQKAgID&pscrd=CIy-6Mfumeun8AESTENoQUlnT2F4cmdZUXpMbmI4YkdNaVA5a0VpVUF3UkV1bmJ6cmctcjRNLV80X0NudGNMTlB1czEycWtUNXozRWJrV01pcVBveEU0UFEaWENoRUlnT2F4cmdZUXB0R2JfODNPejdiQUFSSXRBTVBfUmE4MkU0M1dkU01ycVphSXhHNjV4SURmdFRvYmpxVzRlcTJsWFhxWHFoc2hOQzFrMW1XWDRCY3MiEwiV2ILXh6yEAxXmhcsBHSTPB28yAggDMgIIBDICCAcyAggIMgIICTICCAoyAggC&is_vtc=1&ocp_id=4FbNZZXoFOaLrr4PpJ6f-AY&cid=CAQSKQAvHhf_NYnvPxhrFy89bONMnW8oP1EEEe1zOTsZ_nbhCt2F5c29qK-P&random=2721844903 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:18 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 15 Feb 2024 00:12:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50431	54.156.103.28	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	642	OUT	POST /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive Content-Length: 1104 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	1104	OUT	Data Raw: 7b 22 77 68 65 6e 22 3a 31 37 30 37 39 35 35 39 33 37 32 36 37 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 Data Ascii: {"when":1707955937267,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1
2024-02-15 00:12:18 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:18 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:18 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50432	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	783	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955937254&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 471 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	471	OUT	Data Raw: 78 01 95 92 5b 8f 9a 50 14 85 ff cb 79 85 ca b9 c1 01 92 79 50 11 14 46 19 50 74 a0 e9 83 28 57 a9 a2 30 e0 25 fe f7 21 33 a6 c9 b4 69 93 3e ed 97 ef cb 5a 2b d9 37 10 ed a2 0b 50 6f 8f 0b 1a ac 96 68 38 de 9c d2 d0 16 59 56 15 b3 a4 d6 17 b6 29 6b 5b 3d 6c 91 79 a4 e3 61 63 17 46 25 e8 cc a8 d8 21 1b 86 72 30 a8 fa 5e c2 cc ec e2 4e ad 64 5a 1e 15 19 97 66 95 e6 a8 92 d3 d7 91 2d 70 d7 b5 7f f1 b8 74 1b 71 8b a5 dc f7 a4 fe e2 50 9b 8d 44 1d 6b 46 90 69 e6 76 46 b4 98 8e 36 ee 09 4e 4c 7f 85 d2 38 78 71 72 ba e4 bc 7d 9a 31 f6 ec 2e c7 a8 15 62 72 cd 6b ba 3e a4 de 4a 0b f1 ee 22 d4 63 3d 99 24 d6 5c 9c a3 f8 20 db b1 1f ac b6 a3 e7 c2 9f 05 c3 d6 38 bb 24 48 74 bc 36 2c 0b 92 bd 16 a5 e5 39 ad bc 9c 3a d4 16 4d d9 28 b4 e4 2c 47 95 37 8b ad 86 3b ae b7 Data Ascii: x[PyyPFPt(W0%!3i>Z+7Poh8YV)k[=lyacF%!r0^NdZf-ptqPDkFivF6NL8xqr}1.brk>J"c=$\ 8$Ht6,9:M(,G7;
2024-02-15 00:12:18 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50434	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	541	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936413&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50435	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	536	OUT	GET /?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955936421&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=42b21ce1b57d44f61c32abe076faba0a HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:18 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50439	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:18 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:18 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50438	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	586	OUT	GET /att?QUANTUM_WARNING=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&CORS_LINK=https%3A%2F%2Fwww.att.com%2Fui%2Fframeworks%2Fcss%2Fv2.1.0%2Fcore-global-styles-fonts.min.css&hit=undefined&s=2f0772e2e946694acf73c98d1ebdd4af HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	339	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: * access-control-allow-methods: GET, OPTIONS, PATCH, POST, PUT access-control-allow-credentials: true access-control-max-age: 31536000 date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50440	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	568	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955937254&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:18 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:18 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50441	54.147.224.12	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:18 UTC	387	OUT	GET /state/att/9474b3ec-4b13-4eb3-b073-af1a8bce407a HTTP/1.1 Host: brain.foresee.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:19 UTC	460	IN	HTTP/1.1 200 OK Date: Thu, 15 Feb 2024 00:12:19 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1087 Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 App-Info: brain 1.16.0 Cache-Control: private, no-cache, no-store, must-revalidate Expires: -1 Pragma: no-cache Brain-Server-Version: 1.16.0 User-Hash: 91964f55afb71e18d1f4f89cb9a51c5a5115dbe3 Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-02-15 00:12:19 UTC	1087	IN	Data Raw: 7b 22 77 68 65 6e 22 3a 30 2c 22 6b 65 79 73 22 3a 7b 22 72 69 64 22 3a 7b 22 76 22 3a 22 39 34 37 34 62 33 65 63 2d 34 62 31 33 2d 34 65 62 33 2d 62 30 37 33 2d 61 66 31 61 38 62 63 65 34 30 37 61 22 2c 22 78 22 3a 31 37 31 35 37 33 31 39 32 36 30 31 33 2c 22 74 22 3a 31 37 30 37 39 35 35 39 32 36 30 31 33 7d 2c 22 63 70 22 3a 7b 22 76 22 3a 7b 22 63 6f 64 65 22 3a 22 31 39 2e 32 32 2e 30 2d 66 73 22 2c 22 74 7a 22 3a 22 36 30 22 2c 22 70 72 6f 64 75 63 74 5f 74 79 70 65 22 3a 22 77 65 62 20 73 64 6b 22 2c 22 64 65 76 69 63 65 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 64 65 76 69 63 65 5f 68 65 69 67 68 74 22 3a 22 31 30 32 34 22 2c 22 64 70 72 22 3a 22 31 22 2c 22 77 69 6e 64 6f 77 5f 77 69 64 74 68 22 3a 22 31 32 38 30 22 2c 22 77 69 6e 64 6f 77 Data Ascii: {"when":0,"keys":{"rid":{"v":"9474b3ec-4b13-4eb3-b073-af1a8bce407a","x":1715731926013,"t":1707955926013},"cp":{"v":{"code":"19.22.0-fs","tz":"60","product_type":"web sdk","device_width":"1280","device_height":"1024","dpr":"1","window_width":"1280","window

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50443	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:19 UTC	2043	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938280&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 1069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:19 UTC	1069	OUT	Data Raw: 78 01 ed 56 6b 6f e2 3a 10 fd 2f 96 5a 69 05 85 24 4e 48 82 54 5d 01 29 6d d8 42 79 f5 41 af ae 50 48 0c 18 42 12 12 87 d7 6a ff fb 3d 0e d0 dd 2f f7 fe 82 95 90 3d 1e cf cc 19 8f 27 c7 fc fd 83 08 52 27 19 29 93 98 d4 d5 32 d9 63 d4 2c a5 4c 96 a4 6e 2b 66 99 1c ae 8a 23 04 45 d3 cb e4 1b 1c 68 60 1b ea 4c d7 6b da cc d0 f5 99 3a b7 7d 5a b3 e6 3e 33 b4 9a c9 e6 26 e2 65 a4 6e 19 d2 3e 91 08 8d f1 ed 18 ca 3c 0d b1 58 0a 91 64 f5 6a 95 07 2c 12 5c 1c 2b 9e 10 15 3f de 7c 29 ee 72 5e 9d 27 fb a0 1a 7a 51 c0 d2 bf bc 24 e9 79 1b 76 bf 31 54 aa d0 db 38 e5 0b 1e 79 82 c7 d1 34 89 79 24 ee c5 22 f7 d2 e0 76 c8 44 9e 46 d3 d7 e1 f3 7d 81 71 43 1b 37 5a 1b bf 98 07 7e 85 07 49 c5 0f 63 b8 5e 01 b1 b3 59 78 18 b3 24 93 56 5e 2e 96 d7 59 53 20 49 05 d0 4e ec 86 Data Ascii: xVko:/Zi$NHT])mByAPHBj=/='R')2c,Ln+f#Eh`Lk:}Z>3&en><Xdj,\+?\|)r^'zQ$yv1T8y4y$"vDF}qC7Z~Ic^Yx$V^.YS IN
2024-02-15 00:12:19 UTC	267	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:19 GMT content-length: 90 strict-transport-security: max-age=31536000 connection: close
2024-02-15 00:12:19 UTC	90	IN	Data Raw: 32 66 30 37 37 32 65 32 65 39 34 36 36 39 34 61 63 66 37 33 63 39 38 64 31 65 62 64 64 34 61 66 2f 63 61 61 61 39 63 62 36 35 66 61 64 63 38 34 63 37 34 39 31 37 37 65 38 35 38 39 38 31 63 30 34 2f 65 33 35 36 63 64 36 35 34 33 36 38 63 34 35 30 34 34 32 38 35 34 30 39 Data Ascii: 2f0772e2e946694acf73c98d1ebdd4af/caaa9cb65fadc84c749177e858981c04/e356cd654368c45044285409

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50444	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:19 UTC	1824	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938280&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&S=0&N=0&P=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:19 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:19 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50445	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:19 UTC	2069	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938877&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 386 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:19 UTC	386	OUT	Data Raw: 78 01 65 cb c9 6e 9b 40 00 00 d0 7f 99 2b 34 ec 81 41 ca c1 66 f3 10 83 c1 2c 36 54 3d c4 40 cc 32 c1 ec 60 2c ff 7b a4 b6 ea a5 a7 77 7a 0f 90 55 d9 1d c8 8f bf 82 89 95 d3 94 1f a4 b0 35 0f 2a c7 1d 1d a3 ad 76 c5 6d 3e 5d cf b1 42 a0 b4 c4 a2 06 df c5 81 66 37 3e d5 37 da 48 11 1c 54 12 d6 c3 21 51 9e dd 91 73 bb dd b1 69 db d2 a4 8a c2 f7 05 43 49 50 da af 45 83 db c9 3e 7e 66 fb 3a 89 98 c3 c2 dd 04 e3 16 2b 6a ef 6e 89 83 61 aa 42 4e f5 d4 87 d3 d7 f5 fb 49 41 52 9e b8 bc 5d 7a c3 47 64 6d ef c4 64 b5 e6 b6 3b 87 97 aa 86 93 af 23 2a e1 a3 0c 9a dc a8 af 1d 83 91 3a 60 fb 55 1c 23 3e 99 2f 52 42 8f b4 da ad 25 57 8a 5f 19 c2 65 b0 f7 6a 55 2d 5a 44 60 c9 d0 63 f8 ea 0c 5a 92 2c 5e 17 2d f9 a0 c3 5d 9a d1 2c c1 4c 27 e1 3a 35 b3 b3 ba 5e 63 27 bd 6f Data Ascii: xen@+4Af,6T=@2`,{wzU5vm>]Bf7>7HT!QsiCIPE>~f:+jnaBNIAR]zGdmd;#:`U#>/RB%W_ejU-ZD`cZ,^-],L':5^c'o
2024-02-15 00:12:19 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:19 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50446	104.22.52.252	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:19 UTC	744	OUT	GET /helpers/blank HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://about.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
2024-02-15 00:12:19 UTC	334	IN	HTTP/1.1 304 Not Modified Date: Thu, 15 Feb 2024 00:12:19 GMT Connection: close Last-Modified: Thu, 15 Feb 2024 00:08:11 GMT vary: Accept-Encoding strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 248 Server: cloudflare CF-RAY: 855956b058af454b-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50447	35.188.81.186	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:20 UTC	2065	OUT	POST /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955939231&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=3d951b4462b544b1f9c368fce5267ef7 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive Content-Length: 2072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:20 UTC	2072	OUT	Data Raw: 78 01 c5 5a 6b 77 db 36 12 fd 2b ac 3e 34 1f 6a 58 b1 ec 34 ad 6a 67 8f 2c 29 b6 6a c9 d2 4a 74 b3 c9 ba c7 07 22 21 11 35 49 30 04 24 db ed c9 fe f6 1d 90 14 04 82 d0 23 b5 db e6 38 b2 48 02 83 99 3b 77 2e 1e f4 e9 37 9d 61 db fd 38 ea 3a 81 88 c2 77 a7 c5 27 c1 fe bb d3 7a 90 fd 9a 32 ff e9 dd e9 37 08 fd 7b f0 f3 64 78 7d e9 0e fa cd 3f 6a 47 35 f8 88 6b cd 9a bc ae 1d d4 70 ad f9 df 3f 6a 8d d5 dd 10 c7 73 b8 bb 84 06 24 ae 7d f9 f2 eb 41 ad 9d b5 58 f7 eb b6 3a 45 3f f5 f0 58 76 97 7d 6e 63 c7 81 5e 07 da 38 93 f6 b8 37 72 37 f6 90 cd 7f cd 7a ec 6f 64 db 00 3b 9f 7d e5 30 db 9a 0f ba 6e ab 0a a1 17 e0 94 13 51 a0 b8 10 33 f4 c3 5e 31 da ad 05 42 24 88 7c 5e d0 65 61 f0 3f e8 a6 85 da 2c 4a b0 a0 d3 90 e4 68 ab fc 79 2c 16 24 5e 0d de eb 9e 11 7f 2e Data Ascii: xZkw6+>4jX4jg,)jJt"!5I0$#8H;w.7a8:w'z27{dx}?jG5kp?js$}AX:E?Xv}nc^87r7zod;}0nQ3^1B$\|^ea?,Jhy,$^.
2024-02-15 00:12:20 UTC	964	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:20 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://identity.att.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50448	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:20 UTC	1851	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955938877&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&U=caaa9cb65fadc84c749177e858981c04&z=1&Q=2&S=0&N=0 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:20 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:20 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50449	34.135.199.11	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:20 UTC	1846	OUT	GET /?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955939231&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=1&Y=1&X=3d951b4462b544b1f9c368fce5267ef7 HTTP/1.1 Host: att-sync.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:21 UTC	892	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 15 Feb 2024 00:12:20 GMT Content-Type: application/json Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; Content-Security-Policy: default-src 'self' .quantummetric.com; connect-src ws:; frame-src * data: blob:; font-src * data: blob:; img-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: .quantummetric.com https://app.getbeamer.com https://backend.getbeamer.com https://realtime.getbeamer.com https://static.getbeamer.com https://ajax.googleapis.com https://static.zdassets.com https://.appcues.com https://.appcues.net https://.qualtrics.com; style-src 'self' 'unsafe-inline' .quantummetric.com https://fonts.googleapis.com https://app.getbeamer.com https://.appcues.com https://.appcues.net; frame-ancestors 'self' .quantummetric.com; X-Robots-Tag: noindex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50450	104.22.52.252	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:21 UTC	747	OUT	GET /helpers/blank HTTP/1.1 Host: cdn.quantummetric.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://identity.att.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 15 Feb 2024 00:08:11 GMT
2024-02-15 00:12:22 UTC	334	IN	HTTP/1.1 304 Not Modified Date: Thu, 15 Feb 2024 00:12:22 GMT Connection: close Last-Modified: Thu, 15 Feb 2024 00:08:11 GMT vary: Accept-Encoding strict-transport-security: max-age=31536000 x-robots-tag: noindex CF-Cache-Status: HIT Age: 251 Server: cloudflare CF-RAY: 855956bebc5e4521-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50451	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:22 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955941224&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34142&N=97&P=6 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 99 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:22 UTC	99	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 4a 54 d2 51 2a 00 d2 36 1e ae 8e 2e 40 76 a6 92 95 91 b1 99 8e 52 96 92 55 74 b5 92 a1 92 55 b5 52 1e 50 3a d8 39 c8 33 20 04 28 9f 08 14 8f ad ad 8d d5 51 4a 51 b2 32 b4 34 31 d6 51 0a f6 53 b2 b2 34 af d5 81 18 58 84 69 60 34 d0 44 a8 06 0b 53 83 da 58 00 4e 84 1e 29 Data Ascii: xVQRJTQ6.@vRUtURP:93 (QJQ241QS4Xi`4DSXN)
2024-02-15 00:12:22 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:22 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50452	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:22 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955941421&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2175&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 10014 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:22 UTC	10014	OUT	Data Raw: 78 01 ed 7c d9 92 db 48 92 e0 af a4 69 ad eb 85 9d c2 7d 95 36 77 0c 00 01 92 20 01 92 20 ee b1 b1 36 dc f7 7d 73 6c e6 db 37 98 99 52 a9 54 6a b5 aa 76 1f f6 61 33 25 22 08 44 78 b8 7b f8 1d 81 fc f7 ff fc 30 7c f8 f5 c3 ec 7e f8 fb 87 09 34 fe 17 b8 1e c0 f5 7f 72 e7 ad fd 04 83 5f 84 78 c2 9e 10 d0 40 c1 27 02 da 8f 6f 18 e8 d6 80 6e 51 5d 0d cf 7d 7a 0f c1 f7 f4 c3 af c8 df 3f 04 af 9f 37 e5 c3 af c4 7f fd fd 1b e0 8f 49 de 7a 3d c6 fa 63 d7 85 d5 a0 a5 e5 63 74 f5 e1 57 8c a2 3e c2 34 c2 7c fe a1 de a0 7d 06 d3 bd cf f9 3f f7 02 bb 7d 83 f4 ef 08 cd fc c7 5f e9 f5 c0 e4 81 c3 2b 99 6f b0 50 fa ef 1f b2 0f bf fe fb 7f 7e 40 3e fc fa 9f 0f 7c 3e 1c 44 95 95 05 f0 d8 7d bd 8f 7e be 9f 84 69 9c 0c e0 fe 83 63 f0 87 ff 7a 60 f8 e5 e1 9c 06 43 f2 4f 9e f5 Data Ascii: x\|Hi}6w 6}sl7RTjva3%"Dx{0\|~4r_x@'onQ]}z?7Iz=cctW>4\|}?}_+oP~@>\|>D}~icz`CO
2024-02-15 00:12:22 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:22 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50453	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:22 UTC	541	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955941224&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34142&N=97&P=6 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:23 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:23 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50454	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:23 UTC	2016	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955942230&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1201&N=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 15 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:23 UTC	15	OUT	Data Raw: 78 01 ab 56 2a 50 b2 32 ac 05 00 08 75 02 18 Data Ascii: xV*P2u
2024-02-15 00:12:23 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:23 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50455	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:23 UTC	750	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955942405&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=730&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:23 UTC	118	OUT	Data Raw: 78 01 55 cc bb 0e 02 21 14 84 e1 77 99 1a 12 6e c3 01 7a 9f c2 58 b8 ec 6e a2 b6 c6 86 f0 ee 1e e9 ec fe 29 e6 1b b8 a0 5d 07 1e 68 3e d0 e0 44 73 06 1f 34 64 f6 9d 79 4f b6 78 49 f6 ce 92 ed 11 b8 d9 e8 b7 d4 63 38 0f 29 84 c1 5b 8f e2 a4 92 35 a6 2a 75 9a 85 29 a2 54 26 63 5e dc 40 47 ab 21 e9 7a ae 10 83 d7 2f e8 e6 3f 22 0a cd db fc 02 f3 69 24 4d Data Ascii: xU!wnzXn)]h>Ds4dyOxIc8)[5*u)T&c^@G!z/?"i$M
2024-02-15 00:12:23 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:23 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50456	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:23 UTC	536	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955941421&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2175&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:23 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:23 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50457	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:24 UTC	1799	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffid%2Flander%3Forigination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955896971&v=1707955942230&H=ba56cd657e85c422e3aea5a4&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=1201&N=3 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:24 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:24 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50458	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:24 UTC	535	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955942405&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=730&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:24 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:24 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50459	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:24 UTC	2038	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955943485&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2197&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 6496 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:24 UTC	6496	OUT	Data Raw: 78 01 35 5a c7 0e ac 48 96 fd 97 b7 a5 24 5c e2 4a ea 05 de 43 e2 cd 68 34 82 c4 7b ef 5a fd ef 43 69 34 3b 36 44 66 dc b8 71 ee 31 fc d7 bf ff 6c 7f fe fe d3 6f 7f fe fa 73 fc f9 fb df 7f ce 3f 7f 0f 7b d7 fd f5 e7 fa ff 87 fb ff 1e fe f3 d7 9f ec cf df 14 86 fc f5 c7 31 fe fc 8d fd e7 af ff 7b f5 f7 be 99 0f bf e5 9e b6 3c fb 9f df 38 b6 75 be be 4b 46 9f cf 63 4c 38 c7 24 be 2f df bc 92 1b bb 44 1b 7a 52 7e bc 7c b6 a0 d5 20 bf 3f b9 22 09 4d 8b a5 93 17 e0 cf a7 5b a9 46 4e 2a 09 52 e9 de c1 4a 88 fc 36 96 2a b3 b6 91 8a b8 ba 73 8a 52 1c 00 53 11 4d f2 99 87 7d 77 69 73 1b 6d 16 0f 82 6b c3 c6 be 4d 6a 99 4d f3 3b 6a cc b0 59 29 48 16 0f 15 9b 83 cc 84 c4 65 b7 fa a2 4e 82 58 9e 92 ed 59 98 6d af 40 9e 9f 2f fd 39 9f 22 de 0c 4e 8a d5 a6 c9 bf ce 62 Data Ascii: x5ZH$\JCh4{ZCi4;6Dfq1los?{1{<8uKFcL8$/DzR~\| ?"M[FNRJ6sRSM}wismkMjM;jY)HeNXYm@/9"Nb
2024-02-15 00:12:24 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:24 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50461	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:24 UTC	1819	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955943485&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=2197&N=5&P=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:25 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:25 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50460	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:24 UTC	2035	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955944108&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=473&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 73 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:24 UTC	73	OUT	Data Raw: 78 01 ab 56 72 55 b2 8a ae 56 ca 54 b2 32 d0 51 4a 53 b2 32 33 35 35 36 d3 51 2a 53 b2 aa 56 2a 57 b2 ca 2b cd c9 d1 51 aa 80 31 2a 21 8c 5a 1d a5 12 25 2b 43 73 03 73 4b 53 53 4b 63 4b 23 63 a3 da d8 5a 00 13 44 14 eb Data Ascii: xVrUVT2QJS23556QSVW+Q1*!Z%+CssKSSKcK#cZD
2024-02-15 00:12:25 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:25 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50462	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:25 UTC	1818	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955944108&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=473&N=1 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:25 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:25 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50463	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:25 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955945200&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34265&N=99&P=7 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 81 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:25 UTC	81	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 72 53 d2 51 f2 04 d2 36 4e fe 2e 91 0a 86 0a 06 60 6c 00 a4 61 10 28 06 54 93 a2 64 65 68 68 66 66 a2 a3 14 ec a7 64 65 69 59 ab 03 d1 ef 44 bc 7e 03 98 9e f2 34 88 81 16 e8 02 08 15 49 10 15 06 b5 b1 00 8c a4 24 ff Data Ascii: xV*QRrSQ6N.`la(TdehhffdeiYD~4I$
2024-02-15 00:12:26 UTC	261	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://www.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:26 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50464	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:26 UTC	541	OUT	GET /att?T=B&u=https%3A%2F%2Fwww.att.com%2Facctmgmt%2Fregistration%2Fopr%2FchooseID&t=1707955915946&v=1707955945200&H=cd56cd65f2d0b55c3e9d0142&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=34265&N=99&P=7 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:26 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:26 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50465	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:27 UTC	753	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955946433&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=20252&N=36&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 136 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:27 UTC	136	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 8a 50 d2 51 f2 04 d2 36 4e fe 2e 91 0a 06 40 68 68 aa 60 ae 60 a8 60 aa 60 04 24 0d 15 8c 81 d8 12 a8 a8 42 c9 ca cc c4 52 47 a9 52 c9 ca c4 c4 44 47 29 45 c9 ca d8 c8 c0 54 47 29 d8 0f c8 32 ab d5 81 98 e7 4f 81 79 46 30 43 72 b1 db 67 00 93 2f 4f 02 2a 00 3a c0 14 2e 90 06 11 80 ab a0 c4 5b 26 70 53 60 f6 20 04 a0 f6 58 c0 45 28 f1 af 21 cc f9 38 fc 6b 58 1b 0b 00 82 0f 5c c0 Data Ascii: xVQRPQ6N.@hh````$BRGRDG)ETG)2OyF0Crg/O:.[&pS` XE(!8kX\
2024-02-15 00:12:27 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:27 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50466	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:27 UTC	749	OUT	POST /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955947022&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=883&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 23 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://about.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:27 UTC	23	OUT	Data Raw: 78 01 ab 56 4a 55 b2 b2 d4 51 aa 28 56 b2 32 32 a8 05 00 20 2c 04 0c Data Ascii: xVJUQ(V22 ,
2024-02-15 00:12:28 UTC	263	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://about.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:28 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50467	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:27 UTC	538	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955946433&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=20252&N=36&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:28 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:28 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50468	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:28 UTC	535	OUT	GET /att?T=B&u=https%3A%2F%2Fabout.att.com%2Fprivacy%2Fchoices-and-controls.html&t=1707955934979&v=1707955947022&H=e156cd65716fe1e0b5cb19bf&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=883&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:28 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:28 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50469	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:29 UTC	2038	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949201&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=10706&N=7&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:29 UTC	118	OUT	Data Raw: 78 01 8b ae 56 2a 51 b2 52 72 53 d2 51 f2 04 d2 36 4e fe 2e 91 0a 86 40 68 00 86 86 40 f1 14 25 2b 63 23 0b 63 1d a5 60 3f 25 2b f3 5a 1d 88 8e f2 34 88 94 01 4e 01 7f ec 66 02 45 2b 94 ac cc 4c 2c 75 94 2a 95 ac 4c 4c 4c c0 36 18 9a c2 cc c9 c5 a1 00 26 ef 84 dd 58 05 a8 53 2d 2d 60 0a 23 b0 2b c4 6e 3c c2 1b 49 40 05 40 2f 1b d5 c6 02 00 a2 43 40 12 Data Ascii: xVQRrSQ6N.@h@%+c#c`?%+Z4NfE+L,uLLL6&XS--`#+n<I@@/C@
2024-02-15 00:12:30 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50470	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:30 UTC	1820	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949201&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&S=10706&N=7&P=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:30 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50471	146.148.37.220	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:30 UTC	2035	OUT	POST /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949780&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=549&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive Content-Length: 23 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://identity.att.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:30 UTC	23	OUT	Data Raw: 78 01 ab 56 4a 55 b2 32 34 d3 51 aa 28 06 d2 06 06 b5 00 27 a1 04 69 Data Ascii: xVJU24Q('i
2024-02-15 00:12:30 UTC	266	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: https://identity.att.com access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:30 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50472	35.238.147.169	443	5328	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:31 UTC	1818	OUT	GET /att?T=B&u=https%3A%2F%2Fidentity.att.com%2Fidentity-ui%2Ffpwd%2Flander%3FappName%3Dm51303%26origination_point%3Dtguard%26Return_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842%26Cancel_URL%3Dhttps%253A%252F%252Foidc.idp.clogin.att.com%252Fmga%252Fsps%252Foauth%252Foauth20%252Fauthorize%253Fnonce%253DhdxB1zEBap%2526redirect_uri%253Dhttps%25253A%25252F%25252Fatt-yahoo.att.net%25252Fisam%25252Fsps%25252Foidc%25252Frp%25252FATT-HBO-RP%25252Fredirect%25252FYahoo%2526response_mode%253Dform_post%2526alt_dest%253Dhttps%2525253A%2525252F%2525252Fatt-yahoo.att.net%2525252FFIM%2525252Fsps%2525252Fauth%2525253FPartnerId%2525253Dhttps%252525253A%252525252F%252525252Flogin.yahoo.com%252525252Fsaml2%2526scope%253Dopenid%2526response_type%253Did_token%2526state%253DiRIFbIIb5r%2526client_id%253Dm40842&t=1707955927215&v=1707955949780&H=e356cd654368c45044285409&s=2f0772e2e946694acf73c98d1ebdd4af&z=1&Q=2&S=549&N=2 HTTP/1.1 Host: ingest.quantummetric.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:31 UTC	242	IN	HTTP/1.1 200 OK content-type: application/json access-control-allow-origin: access-control-allow-credentials: true date: Thu, 15 Feb 2024 00:12:31 GMT content-length: 0 strict-transport-security: max-age=31536000 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
347	192.168.2.4	50473	74.125.138.138	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:35 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-15 00:12:35 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 15 Feb 2024 00:12:35 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
348	192.168.2.4	50474	74.125.138.138	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:35 UTC	974	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1329 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:35 UTC	1329	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 31 38 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 35 34 2c 5b 5b 22 31 37 30 37 39 35 35 39 35 34 32 31 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"18",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1654,[["1707955954216",null,null,null
2024-02-15 00:12:35 UTC	934	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=511=Zs8vUR_B5xCUNGZa4f2m8bmv8abKQev04QNi5wDabq9g3xJtZodvRQ6GlOFoMxtu5zNCFJL0ecgt5onH3_BI2rqqBkLeJFgKX7QEmDS4lmOLckZSUBM_dU9uV7dCbZYu6orWqDOttSBvqgJ-PF1puI0USuXZZX7N5u8kvq-QajMcgbUqtIdNBZhH; expires=Fri, 16-Aug-2024 00:12:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 15 Feb 2024 00:12:35 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 15 Feb 2024 00:12:35 GMT Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:35 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-02-15 00:12:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
349	192.168.2.4	50475	74.125.138.138	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:35 UTC	973	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 804 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-02-15 00:12:35 UTC	804	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 30 37 39 35 35 39 35 35 32 31 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1707955955213",null,null,null
2024-02-15 00:12:36 UTC	934	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=511=sKSQ2nRimLqYD0ZBSssKhn8IDDvrdjZ32LF9c31r-DVOkzfzBnHGdwDF20GPTnex0Qv2DwtHfHjoH8MvtoZMF3hqwZP64mUNNgUDBv5GRlE3Haf9jKx8jNDWoK1UgW0JzlsXy_Qs3xRcjU5jnNO91QB7ULLy0YU6VO7iuFxENBFAEk7G_n1UlQFC; expires=Fri, 16-Aug-2024 00:12:36 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 15 Feb 2024 00:12:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 15 Feb 2024 00:12:36 GMT Connection: close Transfer-Encoding: chunked
2024-02-15 00:12:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-02-15 00:12:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
350	192.168.2.4	50476	142.251.15.100	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:36 UTC	677	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Zs8vUR_B5xCUNGZa4f2m8bmv8abKQev04QNi5wDabq9g3xJtZodvRQ6GlOFoMxtu5zNCFJL0ecgt5onH3_BI2rqqBkLeJFgKX7QEmDS4lmOLckZSUBM_dU9uV7dCbZYu6orWqDOttSBvqgJ-PF1puI0USuXZZX7N5u8kvq-QajMcgbUqtIdNBZhH
2024-02-15 00:12:36 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 15 Feb 2024 00:12:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:36 UTC	982	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-02-15 00:12:36 UTC	573	IN	Data Raw: 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d Data Ascii: der-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-

Session ID	Source IP	Source Port	Destination IP	Destination Port
351	192.168.2.4	50477	142.251.15.100	443

Timestamp	Bytes transferred	Direction	Data
2024-02-15 00:12:36 UTC	677	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=sKSQ2nRimLqYD0ZBSssKhn8IDDvrdjZ32LF9c31r-DVOkzfzBnHGdwDF20GPTnex0Qv2DwtHfHjoH8MvtoZMF3hqwZP64mUNNgUDBv5GRlE3Haf9jKx8jNDWoK1UgW0JzlsXy_Qs3xRcjU5jnNO91QB7ULLy0YU6VO7iuFxENBFAEk7G_n1UlQFC
2024-02-15 00:12:36 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 15 Feb 2024 00:12:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-02-15 00:12:36 UTC	982	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-02-15 00:12:36 UTC	573	IN	Data Raw: 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d Data Ascii: der-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-

Target ID:	0
Start time:	01:11:08
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	01:11:09
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:11:11
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	01:12:05
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7304 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	01:12:05
Start date:	15/02/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	true
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7440 --field-trial-handle=1972,i,15420799884912788525,15270036618111231393,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x800000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 230

Chrome Cache Entry: 231

Chrome Cache Entry: 232

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Windows Analysis Report
http://suez.fromthemachine.org/ipfs/QmcuHLEArw8ZmMQ9DY7MM1aAUzgxHyfMdAi7MJP6X8hoqL/index.html